$ rpki-client -vvf rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft File: 3D10000E40C545C40D0B40A419954E6B6B94E80F.mft (raw, json) Hash identifier: 0OwfJjmVD7sALNs1q1SPv2F9t75EshtzF/cNDNA3x1E= Subject key identifier: 6B:7C:12:90:65:59:A6:F1:E7:48:95:9F:1A:A3:14:C0:BE:17:02:4F Authority key identifier: 3D:10:00:0E:40:C5:45:C4:0D:0B:40:A4:19:95:4E:6B:6B:94:E8:0F Certificate issuer: /CN=3D10000E40C545C40D0B40A419954E6B6B94E80F Certificate serial: 088A5464C1722BD0B46E6F29D2DF064AD39CEB8C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft Manifest number: 02CE Signing time: Mon 20 Oct 2025 01:08:42 +0000 Manifest this update: Mon 20 Oct 2025 01:03:42 +0000 Manifest next update: Tue 21 Oct 2025 01:36:42 +0000 Files and hashes: 1: 3137372e38342e3135362e302f32322d3234203d3e20323633353531.roa (hash: hOarYccXAAG/SirinUShOfvyMPiIxns5fD4Nagfcr+E=) 2: 323830343a313363383a3a2f33322d3438203d3e20323633353531.roa (hash: /hIpNtuEzhiojgRNiztWaFYPpbFP5H++w4j3J6l6unA=) 3: 3D10000E40C545C40D0B40A419954E6B6B94E80F.crl (hash: GJUO10s2ylsLaDyJjkY0IlF7OYdhjhaE6mp3y2SnPMs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.crl rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 01:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:8a:54:64:c1:72:2b:d0:b4:6e:6f:29:d2:df:06:4a:d3:9c:eb:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D10000E40C545C40D0B40A419954E6B6B94E80F Validity Not Before: Oct 20 01:03:42 2025 GMT Not After : Oct 21 01:36:42 2025 GMT Subject: CN=6B7C12906559A6F1E748959F1AA314C0BE17024F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:89:b3:5d:a0:ff:01:93:f7:46:c6:b9:4e:a3: 41:3b:60:11:11:60:a7:6e:c9:39:a9:25:6d:5f:6c: 87:92:0b:68:38:fb:55:57:69:58:f1:02:d7:a3:86: aa:52:5e:09:12:0a:df:7b:e0:3b:83:5d:fb:75:d7: dc:f6:08:a4:da:46:08:2c:43:fb:e3:00:41:02:27: 25:da:c3:f9:6a:d4:41:18:9a:20:28:bc:d0:de:9e: 26:e0:ec:e7:b6:a1:c3:0a:3d:62:c7:bb:4c:03:57: f6:7a:76:d5:99:e6:3f:6d:99:0d:37:d3:3c:af:c8: 40:fa:a7:5b:7e:1b:82:2b:18:d9:ec:02:c1:e0:6f: ec:a8:ac:81:18:8c:7d:53:f7:1a:2c:af:90:64:9b: c7:64:83:f6:59:39:5f:43:f6:80:95:c9:63:5b:d6: b6:5a:97:95:f2:11:4a:e3:6e:89:dc:32:1c:67:f2: 1c:74:70:91:b3:6b:24:b4:0a:4e:40:e8:92:f0:a4: af:b8:53:cb:10:16:44:1e:90:c1:84:2a:06:c8:be: de:4e:1b:a5:b9:39:e2:ea:97:92:94:ef:68:2b:c6: bc:6d:d9:a8:82:99:1c:c8:22:2f:be:59:73:08:f6: 93:52:82:87:54:bb:15:7f:94:82:99:1a:11:0d:81: a7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7C:12:90:65:59:A6:F1:E7:48:95:9F:1A:A3:14:C0:BE:17:02:4F X509v3 Authority Key Identifier: keyid:3D:10:00:0E:40:C5:45:C4:0D:0B:40:A4:19:95:4E:6B:6B:94:E8:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:2d:2a:5f:9f:c7:79:db:13:41:c9:a3:3d:3a:d9:1b:f3:ee: 79:56:3a:fa:0c:71:cd:da:7d:75:77:30:52:f8:d8:84:c4:9e: 49:fb:1c:ba:52:1a:06:c1:a4:6a:ed:2d:d1:b2:2c:f8:40:2f: 2a:9d:36:52:88:67:a8:38:f4:c8:8b:86:35:2a:53:38:a7:7b: c6:de:c6:d7:e3:27:15:26:c0:11:1d:e5:18:ed:78:4a:31:a8: ec:9e:83:22:ea:53:e5:f5:4e:eb:0c:da:6e:67:62:a0:0b:35: 7a:79:09:30:b2:7f:d6:ab:a9:54:a2:56:9b:01:f0:cd:24:80: be:f4:ce:55:79:b2:be:48:4d:ca:92:da:da:20:7b:61:8a:48: 78:4e:16:41:31:74:59:5a:91:b9:a0:05:f1:a5:17:d1:3e:b6: 30:a9:fa:98:20:6d:6f:da:31:aa:ab:e8:da:79:66:ab:bf:1a: cc:50:dd:24:6e:24:4c:30:1e:15:0c:a3:7d:db:e2:3a:2e:4a: 5d:db:e4:4b:b9:cc:67:ac:be:e5:3f:d6:60:e0:ba:d4:b5:39: 0f:96:f9:13:34:32:49:28:0a:aa:fd:06:1f:9f:d4:8a:8c:ef: f1:21:9c:2f:b7:4a:f0:a1:f0:76:b8:9d:d9:69:7b:28:50:96: c6:1c:22:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCIpUZMFyK9C0bm8p0t8GStOc64wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QxMDAwMEU0MEM1NDVDNDBEMEI0MEE0MTk5NTRFNkI2 Qjk0RTgwRjAeFw0yNTEwMjAwMTAzNDJaFw0yNTEwMjEwMTM2NDJaMDMxMTAvBgNV BAMTKDZCN0MxMjkwNjU1OUE2RjFFNzQ4OTU5RjFBQTMxNEMwQkUxNzAyNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRibNdoP8Bk/dGxrlOo0E7YBER YKduyTmpJW1fbIeSC2g4+1VXaVjxAtejhqpSXgkSCt974DuDXft119z2CKTaRggs Q/vjAEECJyXaw/lq1EEYmiAovNDenibg7Oe2ocMKPWLHu0wDV/Z6dtWZ5j9tmQ03 0zyvyED6p1t+G4IrGNnsAsHgb+yorIEYjH1T9xosr5Bkm8dkg/ZZOV9D9oCVyWNb 1rZal5XyEUrjboncMhxn8hx0cJGzayS0Ck5A6JLwpK+4U8sQFkQekMGEKgbIvt5O G6W5OeLql5KU72grxrxt2aiCmRzIIi++WXMI9pNSgodUuxV/lIKZGhENgacNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUa3wSkGVZpvHnSJWfGqMUwL4XAk8wHwYDVR0j BBgwFoAUPRAADkDFRcQNC0CkGZVOa2uU6A8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGMxZUI4OW4xbWJ1b3Zacno3RnBmWnNXNnF6QUVKYzRMc0xSRHpwem5H RWcvMC8zRDEwMDAwRTQwQzU0NUM0MEQwQjQwQTQxOTk1NEU2QjZCOTRFODBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEMTAwMDBFNDBDNTQ1QzQw RDBCNDBBNDE5OTU0RTZCNkI5NEU4MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGMxZUI4OW4xbWJ1b3Zacno3RnBmWnNXNnF6QUVKYzRMc0xSRHpwem5HRWcvMC8z RDEwMDAwRTQwQzU0NUM0MEQwQjQwQTQxOTk1NEU2QjZCOTRFODBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxS0qX5/HedsTQcmjPTrZG/PueVY6+gxxzdp9dXcwUvjYhMSeSfsculIaBsGk au0t0bIs+EAvKp02UohnqDj0yIuGNSpTOKd7xt7G1+MnFSbAER3lGO14SjGo7J6D IupT5fVO6wzabmdioAs1enkJMLJ/1qupVKJWmwHwzSSAvvTOVXmyvkhNypLa2iB7 YYpIeE4WQTF0WVqRuaAF8aUX0T62MKn6mCBtb9oxqqvo2nlmq78azFDdJG4kTDAe FQyjfdviOi5KXdvkS7nMZ6y+5T/WYOC61LU5D5b5EzQySSgKqv0GH5/Uiozv8SGc L7dK8KHwdrid2Wl7KFCWxhwiVw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:35 2025 by rpki-client