$ rpki-client -vvf rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.mft File: 608E3468464471A407DA37B93E7EAA2E8A3F6EE4.mft (raw, json) Hash identifier: w4Kb33AH1ElAqyMtbzehQxFSOAQw1WdAUQzH4cA2Kw4= Subject key identifier: 70:FA:7B:22:66:89:05:9A:E0:7F:59:D7:A7:28:18:1D:75:05:AB:4E Authority key identifier: 60:8E:34:68:46:44:71:A4:07:DA:37:B9:3E:7E:AA:2E:8A:3F:6E:E4 Certificate issuer: /CN=608E3468464471A407DA37B93E7EAA2E8A3F6EE4 Certificate serial: 55DE98475CB2B96D7CCEF9C5DB8236C04F6C1F7B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.cer Subject info access: rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.mft Manifest number: D0 Signing time: Mon 03 Nov 2025 09:22:02 +0000 Manifest this update: Mon 03 Nov 2025 09:17:02 +0000 Manifest next update: Tue 04 Nov 2025 11:38:02 +0000 Files and hashes: 1: 3133382e3131382e3138342e302f32322d3234203d3e20323634303637.roa (hash: JegZlSc5Dn8mTlmuObQ1tMRC7FzKBH+2Ic5xnWDfXN8=) 2: 608E3468464471A407DA37B93E7EAA2E8A3F6EE4.crl (hash: Zf0dWGuDEceUkRMt+1sLw/Ffyl2uShJbTMAmgr/nUBM=) 3: 3134332e3230322e38302e302f32322d3234203d3e20323634303637.roa (hash: 8fKWUXz88EE4FdGimDW8PmZu7e3/wVnFNr79jS1k7hU=) 4: 323830343a326134303a3a2f33322d3332203d3e20323634303637.roa (hash: 0+MSOrTWTJTXHqpTIRscOq/wFmB+HvUBUPggdZH9MS8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.crl rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:de:98:47:5c:b2:b9:6d:7c:ce:f9:c5:db:82:36:c0:4f:6c:1f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=608E3468464471A407DA37B93E7EAA2E8A3F6EE4 Validity Not Before: Nov 3 09:17:02 2025 GMT Not After : Nov 4 11:38:02 2025 GMT Subject: CN=70FA7B226689059AE07F59D7A728181D7505AB4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:be:f3:9b:3a:98:04:32:fa:b3:9d:0b:ca:2c: 8d:fa:fb:ee:0d:8a:64:b8:1c:ae:19:13:6f:ae:a9: 91:77:84:dc:57:fa:79:90:12:0f:f2:12:45:c7:25: 99:ae:76:ff:1b:d4:24:01:90:ec:8d:7e:68:55:49: a2:5f:76:82:81:4b:68:3f:b8:c5:ec:e6:0e:16:62: 8b:49:99:17:92:52:fe:a7:09:54:9b:64:35:e6:14: b1:82:65:64:f2:2a:f4:75:a9:79:7c:ab:1c:2b:ef: 27:f7:15:24:e6:9e:02:73:8f:b0:3f:80:ef:85:95: e1:86:16:91:85:6e:d6:22:58:b8:02:e4:cd:92:ca: 31:d5:c2:ce:15:36:fd:2d:bb:0f:40:ba:48:64:82: 7f:47:45:97:34:61:ba:2f:c2:cf:9b:98:68:94:20: 32:6e:20:48:77:2d:d2:4d:f6:57:09:fa:1c:11:6d: bf:82:24:21:66:63:a2:1b:ce:9e:a7:82:7b:40:53: b3:12:f4:b1:a3:ab:6b:ea:75:2a:18:b9:1e:36:ad: 5f:b8:73:e9:01:03:41:bf:1b:81:a2:5f:51:99:03: d4:88:da:18:53:4e:49:da:d3:1c:78:c7:f2:6c:69: 45:47:7e:cb:14:92:35:eb:b4:55:7f:a7:f6:fe:20: da:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FA:7B:22:66:89:05:9A:E0:7F:59:D7:A7:28:18:1D:75:05:AB:4E X509v3 Authority Key Identifier: keyid:60:8E:34:68:46:44:71:A4:07:DA:37:B9:3E:7E:AA:2E:8A:3F:6E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:9a:af:4e:9b:e7:28:2c:de:91:e4:e1:ce:08:9a:92:d0:29: 8a:7c:cb:94:36:79:c9:f7:24:5e:71:5e:1d:6a:8d:ba:38:12: e6:9e:f5:0e:02:d2:fe:a9:08:33:82:15:02:fa:e8:74:61:ab: 3a:42:25:d4:a5:e9:b4:13:4e:e7:a6:71:71:06:78:6a:6b:a5: a8:94:7e:91:78:54:aa:02:25:09:87:93:68:c1:60:f6:2b:16: b2:d7:01:0e:77:05:3a:61:e3:3e:24:b7:19:9d:88:79:9b:ed: 05:fb:03:74:cb:dd:f4:e1:cd:a1:d5:0a:20:5d:fa:53:06:b5: 98:7c:3c:82:bd:c5:30:c3:93:d5:cc:6c:68:1a:fe:0d:13:14: 13:7b:f3:7d:84:fc:dc:32:a9:b3:4d:19:13:51:8f:f7:63:ee: 56:c0:d6:b9:82:39:f8:d4:14:dd:63:b2:fa:23:0d:1b:9e:b8: a8:49:16:65:08:32:ae:4f:a5:a4:8c:27:b8:d4:c7:47:a6:eb: 1f:f6:07:8f:d9:5e:eb:02:de:73:22:7a:07:eb:f2:a5:b9:83: 3a:4d:5e:5e:24:2f:66:18:b5:e0:b0:46:4b:e9:6b:01:13:85: 87:b4:f9:2b:a6:24:0e:f3:5c:99:9a:42:f6:0e:e4:62:37:fd: 4a:02:be:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVd6YR1yyuW18zvnF24I2wE9sH3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA4RTM0Njg0NjQ0NzFBNDA3REEzN0I5M0U3RUFBMkU4 QTNGNkVFNDAeFw0yNTExMDMwOTE3MDJaFw0yNTExMDQxMTM4MDJaMDMxMTAvBgNV BAMTKDcwRkE3QjIyNjY4OTA1OUFFMDdGNTlEN0E3MjgxODFENzUwNUFCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmvvObOpgEMvqznQvKLI36++4N imS4HK4ZE2+uqZF3hNxX+nmQEg/yEkXHJZmudv8b1CQBkOyNfmhVSaJfdoKBS2g/ uMXs5g4WYotJmReSUv6nCVSbZDXmFLGCZWTyKvR1qXl8qxwr7yf3FSTmngJzj7A/ gO+FleGGFpGFbtYiWLgC5M2SyjHVws4VNv0tuw9Aukhkgn9HRZc0Ybovws+bmGiU IDJuIEh3LdJN9lcJ+hwRbb+CJCFmY6Ibzp6ngntAU7MS9LGjq2vqdSoYuR42rV+4 c+kBA0G/G4GiX1GZA9SI2hhTTkna0xx4x/JsaUVHfssUkjXrtFV/p/b+INrXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcPp7ImaJBZrgf1nXpygYHXUFq04wHwYDVR0j BBgwFoAUYI40aEZEcaQH2je5Pn6qLoo/buQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkZKR2JuV1lwZHF0allzaFdCeUVxY3lUWWU2QnhXUHlvNTJITWV1WlFx aHcvMC82MDhFMzQ2ODQ2NDQ3MUE0MDdEQTM3QjkzRTdFQUEyRThBM0Y2RUU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwOEUzNDY4NDY0NDcxQTQw N0RBMzdCOTNFN0VBQTJFOEEzRjZFRTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkZKR2JuV1lwZHF0allzaFdCeUVxY3lUWWU2QnhXUHlvNTJITWV1WlFxaHcvMC82 MDhFMzQ2ODQ2NDQ3MUE0MDdEQTM3QjkzRTdFQUEyRThBM0Y2RUU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg5qvTpvnKCzekeThzgiaktApinzLlDZ5yfckXnFeHWqNujgS5p71DgLS/qkI M4IVAvrodGGrOkIl1KXptBNO56ZxcQZ4amulqJR+kXhUqgIlCYeTaMFg9isWstcB DncFOmHjPiS3GZ2IeZvtBfsDdMvd9OHNodUKIF36Uwa1mHw8gr3FMMOT1cxsaBr+ DRMUE3vzfYT83DKps00ZE1GP92PuVsDWuYI5+NQU3WOy+iMNG564qEkWZQgyrk+l pIwnuNTHR6brH/YHj9le6wLecyJ6B+vypbmDOk1eXiQvZhi14LBGS+lrAROFh7T5 K6YkDvNcmZpC9g7kYjf9SgK+kA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:14:37 2025 by rpki-client