$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft File: 42361EAB494B759A64EFEB313189F9E2DF6603C8.mft (raw, json) Hash identifier: Cy8T0TareqG0rcpcCJcWj0pNnnuoFLMJ6pdVYNTUs5Y= Subject key identifier: 89:B6:D8:00:9F:CF:C5:99:27:F7:95:B3:82:B5:F0:F4:9E:D5:95:B5 Authority key identifier: 42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8 Certificate issuer: /CN=42361EAB494B759A64EFEB313189F9E2DF6603C8 Certificate serial: 74A58BC04B3152E64EF1C4A9CF8A71C8F8F7EC51 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft Manifest number: 02F3 Signing time: Mon 20 Oct 2025 13:06:25 +0000 Manifest this update: Mon 20 Oct 2025 13:01:25 +0000 Manifest next update: Tue 21 Oct 2025 15:39:25 +0000 Files and hashes: 1: 42361EAB494B759A64EFEB313189F9E2DF6603C8.crl (hash: bu52ISTzrYjapcahVn/MLPRMLPYjjUg0KhBNzdDafCI=) 2: 3133382e39372e3230342e302f32322d3234203d3e20323634313936.roa (hash: IYklB/U3RfE/oKJVLy/Xsr2JbD+zmVsGt59LebpV5y4=) 3: 323830343a323366633a3a2f33322d3438203d3e20323634313936.roa (hash: ENkngCJgmku9h/YUGevS0xZQjyUztj3jNjafQ8PFgic=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a5:8b:c0:4b:31:52:e6:4e:f1:c4:a9:cf:8a:71:c8:f8:f7:ec:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42361EAB494B759A64EFEB313189F9E2DF6603C8 Validity Not Before: Oct 20 13:01:25 2025 GMT Not After : Oct 21 15:39:25 2025 GMT Subject: CN=89B6D8009FCFC59927F795B382B5F0F49ED595B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:17:06:7a:1d:4d:48:f2:cb:3d:4b:39:03:95: 1e:f5:1d:6b:b5:1e:5a:4b:6f:da:4e:5a:b7:7d:d4: 4a:0f:61:85:b7:83:f1:18:2c:65:1b:38:9c:20:8f: 1a:3f:66:b8:19:17:fe:e6:94:fc:2d:66:10:06:03: 51:67:75:b5:23:5f:83:74:ee:65:88:84:10:a9:53: bb:11:c4:ec:e2:68:88:71:41:01:74:47:76:e9:7c: b2:7c:89:e9:9c:aa:61:fa:c2:ba:1c:38:fa:6d:ea: 18:ff:74:32:38:ad:5d:08:23:35:3d:69:bc:aa:1c: 72:b2:60:0d:a2:28:74:d5:2c:c3:03:80:1d:18:f5: 1b:42:2c:dd:20:a0:12:63:b5:87:92:39:8d:24:51: 33:c0:56:5b:98:9a:ec:63:b8:7a:f3:4f:67:68:af: c8:c2:e8:2f:9b:60:cc:37:3f:83:ea:4e:91:14:35: ca:51:9f:ec:29:21:b2:5f:24:1f:45:d5:34:16:ee: 4e:ad:7c:89:70:6d:c8:76:c9:63:dd:3d:bb:f3:fe: d3:07:1e:fd:35:29:3c:9c:c3:00:a5:3d:da:0d:0f: 69:fd:b4:ee:4c:0a:44:18:9b:39:51:34:e7:98:0e: 3f:a5:5d:03:95:d8:5f:56:be:6d:0e:4d:86:dc:ae: c2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B6:D8:00:9F:CF:C5:99:27:F7:95:B3:82:B5:F0:F4:9E:D5:95:B5 X509v3 Authority Key Identifier: keyid:42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:71:9d:09:50:b9:2a:a9:aa:1a:3b:86:11:6c:c0:02:f8:1a: 2e:5b:2e:de:9d:02:12:46:cc:83:80:b3:98:8a:39:16:de:31: 47:47:94:1c:d6:ac:93:01:58:e0:03:9a:1e:e2:6b:cd:7d:ba: ba:83:b9:e7:bb:6e:0c:31:59:a3:7f:1f:09:32:ba:a2:e1:fa: 93:e2:79:94:84:06:84:0d:73:06:e0:42:ce:66:b3:ad:d2:07: ea:c0:b9:ee:ef:19:de:e6:61:fc:eb:0f:10:76:94:d8:67:12: 34:c7:91:da:13:5a:b3:39:9e:cc:30:5a:3c:f1:cf:29:0c:11: c6:12:75:a8:5d:05:c6:7b:32:6c:b4:73:45:2a:03:8b:0d:71: 7e:23:d2:95:9d:e6:af:94:5f:c4:03:f5:5a:a1:33:88:c6:02: 08:dd:48:10:b6:d4:b3:2f:2d:c8:cb:ca:79:a6:b5:f9:71:4f: 6d:52:ad:0d:47:7e:04:a2:47:23:ae:4c:15:cc:bc:13:3b:04: ea:e9:17:b2:c4:c4:90:29:b7:63:00:19:6a:78:55:45:13:03: 68:43:54:44:57:dc:e9:13:a1:05:c3:33:64:af:c8:b6:67:89: c5:e2:1c:c2:ba:44:dc:f1:0a:1d:ac:4b:d3:d5:35:b8:9c:6b: d6:03:fd:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdKWLwEsxUuZO8cSpz4pxyPj37FEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIzNjFFQUI0OTRCNzU5QTY0RUZFQjMxMzE4OUY5RTJE RjY2MDNDODAeFw0yNTEwMjAxMzAxMjVaFw0yNTEwMjExNTM5MjVaMDMxMTAvBgNV BAMTKDg5QjZEODAwOUZDRkM1OTkyN0Y3OTVCMzgyQjVGMEY0OUVENTk1QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXFwZ6HU1I8ss9SzkDlR71HWu1 HlpLb9pOWrd91EoPYYW3g/EYLGUbOJwgjxo/ZrgZF/7mlPwtZhAGA1FndbUjX4N0 7mWIhBCpU7sRxOziaIhxQQF0R3bpfLJ8iemcqmH6wrocOPpt6hj/dDI4rV0IIzU9 abyqHHKyYA2iKHTVLMMDgB0Y9RtCLN0goBJjtYeSOY0kUTPAVluYmuxjuHrzT2do r8jC6C+bYMw3P4PqTpEUNcpRn+wpIbJfJB9F1TQW7k6tfIlwbch2yWPdPbvz/tMH Hv01KTycwwClPdoND2n9tO5MCkQYmzlRNOeYDj+lXQOV2F9Wvm0OTYbcrsJdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUibbYAJ/PxZkn95WzgrXw9J7VlbUwHwYDVR0j BBgwFoAUQjYeq0lLdZpk7+sxMYn54t9mA8gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGg4TEs4Rlpxa0ZNbndhVGE5aGd2RkpRTmNIOGhRRXhQamViazR4ZVpD a2cvMS80MjM2MUVBQjQ5NEI3NTlBNjRFRkVCMzEzMTg5RjlFMkRGNjYwM0M4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyMzYxRUFCNDk0Qjc1OUE2 NEVGRUIzMTMxODlGOUUyREY2NjAzQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGg4TEs4Rlpxa0ZNbndhVGE5aGd2RkpRTmNIOGhRRXhQamViazR4ZVpDa2cvMS80 MjM2MUVBQjQ5NEI3NTlBNjRFRkVCMzEzMTg5RjlFMkRGNjYwM0M4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO3GdCVC5KqmqGjuGEWzAAvgaLlsu3p0CEkbMg4CzmIo5Ft4xR0eUHNaskwFY 4AOaHuJrzX26uoO557tuDDFZo38fCTK6ouH6k+J5lIQGhA1zBuBCzmazrdIH6sC5 7u8Z3uZh/OsPEHaU2GcSNMeR2hNaszmezDBaPPHPKQwRxhJ1qF0FxnsybLRzRSoD iw1xfiPSlZ3mr5RfxAP1WqEziMYCCN1IELbUsy8tyMvKeaa1+XFPbVKtDUd+BKJH I65MFcy8EzsE6ukXssTEkCm3YwAZanhVRRMDaENURFfc6ROhBcMzZK/ItmeJxeIc wrpE3PEKHaxL09U1uJxr1gP9OQ== -----END CERTIFICATE-----Generated at Mon Oct 20 15:23:41 2025 by rpki-client