$ rpki-client -vvf rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft File: 43230BA37049255C04E85C87D9F4BDD3B9313605.mft (raw, json) Hash identifier: tPXObSyXwdKSL6oIIJBnj2aN8x68gUdBc8KGmaG20Sw= Subject key identifier: 01:71:D5:29:1B:52:98:84:17:A9:2A:EE:CE:8D:52:C6:43:BD:F9:1C Authority key identifier: 43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05 Certificate issuer: /CN=43230BA37049255C04E85C87D9F4BDD3B9313605 Certificate serial: 540C99FB85CC64F31FB2B28CF48249DCEDBE22B9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer Subject info access: rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft Manifest number: 02EE Signing time: Sun 19 Oct 2025 20:51:00 +0000 Manifest this update: Sun 19 Oct 2025 20:46:00 +0000 Manifest next update: Mon 20 Oct 2025 20:52:00 +0000 Files and hashes: 1: 3139312e372e3136382e302f32312d3234203d3e20323632383631.roa (hash: 3UlOIp1JXcdTOtyXGjmZSygtLX1mH1cA31Z6zmF/6yE=) 2: 3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa (hash: yDvjRXifxWYJIZTut8sX9MAq2K/UFlRpCJxUt7efohI=) 3: 323830343a313435303a3a2f33322d3438203d3e20323632383631.roa (hash: 5Q9tiHGVOVDCj3G898IWOLh8INUElXpH3eiyHIywpQs=) 4: 43230BA37049255C04E85C87D9F4BDD3B9313605.crl (hash: lqRzt9oDJgk+K65MxcSlpWFp4sJoGyg9FeCmrJphlpE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 20:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:0c:99:fb:85:cc:64:f3:1f:b2:b2:8c:f4:82:49:dc:ed:be:22:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43230BA37049255C04E85C87D9F4BDD3B9313605 Validity Not Before: Oct 19 20:46:00 2025 GMT Not After : Oct 20 20:52:00 2025 GMT Subject: CN=0171D5291B52988417A92AEECE8D52C643BDF91C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1f:87:f0:a8:23:e5:fb:5e:bc:20:c0:fe:13: d7:9a:60:80:1d:d4:39:04:1b:14:52:6c:3c:81:e2: 12:97:a1:42:90:39:3b:c8:60:0a:40:ab:c3:b2:a0: fd:14:c7:f9:1c:46:6e:85:1a:4e:a7:8d:bf:d3:99: fc:e3:f9:f2:6e:17:6d:eb:f4:d9:89:0f:82:11:77: 48:e8:77:95:c4:9c:c4:6f:8e:7a:96:05:1f:47:4c: 3b:ba:59:dc:f9:be:15:27:2c:80:69:8f:17:13:27: b1:8b:93:d0:1f:f8:8e:ca:e7:71:95:7b:67:ba:70: 13:66:9d:c1:a3:50:ac:02:04:72:77:be:f7:34:d6: a9:79:db:ba:3e:7f:62:23:ec:6f:0a:82:d4:98:bf: e3:86:ff:73:9b:de:93:32:05:12:65:6a:e4:3e:9f: 67:e9:77:91:ac:18:e0:3b:43:42:5d:2a:ed:03:80: a5:91:fe:e6:c5:f2:87:3a:73:d9:b8:2a:73:23:83: d4:8f:3c:2d:9f:48:78:55:08:6f:a0:76:a9:01:91: ba:e2:b0:54:5a:9b:ef:c9:f4:26:38:7b:98:08:6f: d2:0c:eb:8a:5c:ea:ca:c0:35:11:6f:76:dd:d0:aa: 8b:a0:c4:fc:eb:57:1d:f7:5c:81:e2:1e:08:b4:20: 2f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:71:D5:29:1B:52:98:84:17:A9:2A:EE:CE:8D:52:C6:43:BD:F9:1C X509v3 Authority Key Identifier: keyid:43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:5b:e1:06:ac:8c:20:ac:08:51:0b:99:c6:07:24:a2:2d:84: 11:e5:a8:07:2b:c3:11:a0:f2:02:5e:cb:1f:27:52:95:dd:ad: 7b:24:63:de:e7:6a:6e:43:32:df:1e:f0:c7:49:1d:1f:d2:05: 17:2a:8a:96:1b:c9:7b:5d:74:f9:b2:9e:0b:a1:55:3d:15:16: 2a:52:49:f4:36:27:48:e6:b7:37:67:f9:28:dc:67:fa:9a:0e: e0:17:fa:9e:06:0c:62:de:52:e3:55:fa:f3:56:15:a0:8e:4a: 1c:d6:7f:a5:33:0c:62:c3:d6:66:ba:42:33:43:eb:92:c2:2b: 2d:85:e6:c6:fe:9e:94:c1:d1:cc:d9:d1:0f:72:8f:d1:63:1a: 16:71:32:d2:89:2d:ee:a6:88:d4:b8:b3:65:b4:1a:17:55:19: 95:4a:2f:7c:64:20:9c:82:ef:12:e5:59:7c:b5:3e:89:16:2d: 84:33:a1:69:04:63:04:34:be:df:64:96:bd:32:ca:12:f4:4e: 0c:e3:80:2c:0b:09:81:cd:87:fd:af:fc:61:93:c0:3f:e0:ce: a9:6c:af:d1:b0:99:8c:04:4a:80:c7:57:65:1f:e1:a1:06:56: 9b:7e:20:bf:9b:8e:56:7b:63:ae:39:50:2a:5f:75:c8:e6:11: 1f:81:6e:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVAyZ+4XMZPMfsrKM9IJJ3O2+IrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyMzBCQTM3MDQ5MjU1QzA0RTg1Qzg3RDlGNEJERDNC OTMxMzYwNTAeFw0yNTEwMTkyMDQ2MDBaFw0yNTEwMjAyMDUyMDBaMDMxMTAvBgNV BAMTKDAxNzFENTI5MUI1Mjk4ODQxN0E5MkFFRUNFOEQ1MkM2NDNCREY5MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjH4fwqCPl+168IMD+E9eaYIAd 1DkEGxRSbDyB4hKXoUKQOTvIYApAq8OyoP0Ux/kcRm6FGk6njb/Tmfzj+fJuF23r 9NmJD4IRd0jod5XEnMRvjnqWBR9HTDu6Wdz5vhUnLIBpjxcTJ7GLk9Af+I7K53GV e2e6cBNmncGjUKwCBHJ3vvc01ql527o+f2Ij7G8KgtSYv+OG/3Ob3pMyBRJlauQ+ n2fpd5GsGOA7Q0JdKu0DgKWR/ubF8oc6c9m4KnMjg9SPPC2fSHhVCG+gdqkBkbri sFRam+/J9CY4e5gIb9IM64pc6srANRFvdt3QqougxPzrVx33XIHiHgi0IC+PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAXHVKRtSmIQXqSruzo1SxkO9+RwwHwYDVR0j BBgwFoAUQyMLo3BJJVwE6FyH2fS907kxNgUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHR3V0Rpa2R2UjFZWWpVTExCemtFMkJCQlFadVdITGdQdHgxTGgyWUpz cWcvMS80MzIzMEJBMzcwNDkyNTVDMDRFODVDODdEOUY0QkREM0I5MzEzNjA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzMjMwQkEzNzA0OTI1NUMw NEU4NUM4N0Q5RjRCREQzQjkzMTM2MDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHR3V0Rpa2R2UjFZWWpVTExCemtFMkJCQlFadVdITGdQdHgxTGgyWUpzcWcvMS80 MzIzMEJBMzcwNDkyNTVDMDRFODVDODdEOUY0QkREM0I5MzEzNjA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArVvhBqyMIKwIUQuZxgckoi2EEeWoByvDEaDyAl7LHydSld2teyRj3udqbkMy 3x7wx0kdH9IFFyqKlhvJe110+bKeC6FVPRUWKlJJ9DYnSOa3N2f5KNxn+poO4Bf6 ngYMYt5S41X681YVoI5KHNZ/pTMMYsPWZrpCM0PrksIrLYXmxv6elMHRzNnRD3KP 0WMaFnEy0okt7qaI1LizZbQaF1UZlUovfGQgnILvEuVZfLU+iRYthDOhaQRjBDS+ 32SWvTLKEvRODOOALAsJgc2H/a/8YZPAP+DOqWyv0bCZjARKgMdXZR/hoQZWm34g v5uOVntjrjlQKl91yOYRH4FuYQ== -----END CERTIFICATE-----Generated at Mon Oct 20 08:23:12 2025 by rpki-client