$ rpki-client -vvf rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.mft File: 94BE3C088C5997DF6AA8B56878A0239FF601A352.mft (raw, json) Hash identifier: o9ZVBZs1tswxV/BZ6aajjmgQP7eqtU9G9M9euy2hPMc= Subject key identifier: DC:43:66:0E:D2:72:32:D5:98:AB:8F:7B:E5:81:E3:F7:00:31:D0:05 Authority key identifier: 94:BE:3C:08:8C:59:97:DF:6A:A8:B5:68:78:A0:23:9F:F6:01:A3:52 Certificate issuer: /CN=94BE3C088C5997DF6AA8B56878A0239FF601A352 Certificate serial: 2AB9FB820FFCA02E4A7C69FAD355A88AB447B053 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.cer Subject info access: rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.mft Manifest number: 030A Signing time: Mon 03 Nov 2025 22:18:41 +0000 Manifest this update: Mon 03 Nov 2025 22:13:41 +0000 Manifest next update: Wed 05 Nov 2025 01:20:41 +0000 Files and hashes: 1: 94BE3C088C5997DF6AA8B56878A0239FF601A352.crl (hash: DEJM+3Vb4DM9XHaJiU06ZoM6SZElXuvq8TO/ENzJP7k=) 2: 323830343a353834633a3a2f33322d3438203d3e20323638313230.roa (hash: +YuNei4e9YVTDzdglTwj9Hy8aB64hAtXJ2D4u9DeM0w=) 3: 34352e3136392e35362e302f32322d3234203d3e20323638313230.roa (hash: c0a70ZW/HXztkzAdglauONsyURi6bUPGDcHSgrGQNBo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.crl rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 00:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b9:fb:82:0f:fc:a0:2e:4a:7c:69:fa:d3:55:a8:8a:b4:47:b0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94BE3C088C5997DF6AA8B56878A0239FF601A352 Validity Not Before: Nov 3 22:13:41 2025 GMT Not After : Nov 5 01:20:41 2025 GMT Subject: CN=DC43660ED27232D598AB8F7BE581E3F70031D005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:21:33:4b:e2:e7:6c:1e:44:a0:2d:4c:99: 53:21:39:72:5d:30:a7:67:22:75:b1:06:8e:71:f2: fc:f8:64:b0:1a:84:ea:c9:fd:9a:cd:83:4f:71:41: f5:49:a9:19:82:c4:1f:15:03:61:51:b2:54:62:24: b5:dd:2d:0c:ae:9a:78:f1:3a:6a:f5:25:1b:76:ad: f8:57:bb:9e:24:2d:6e:89:66:66:2f:f4:4a:a7:00: 8f:fd:06:73:80:53:5b:c7:e2:0d:af:da:a3:78:0a: b7:51:44:cb:1a:99:58:b2:33:f1:31:a0:c7:0a:6f: f5:a4:8e:69:8f:0f:88:79:65:f6:5f:2b:42:51:2b: ae:4b:31:5f:66:c6:d6:ce:3d:2a:8f:b8:1a:3e:2e: 07:08:36:1e:fe:20:2c:ae:2c:40:24:f2:2f:f1:3d: 63:01:53:c2:0f:22:7f:ef:5a:94:bf:d7:96:3e:20: 6c:cc:ab:89:73:24:98:6b:0b:bd:a9:d8:d5:d2:3e: 34:8e:ef:ea:98:10:5e:d0:07:6c:c4:00:1f:e1:cb: 2f:d9:28:8b:a2:bf:47:e5:e7:cb:2c:25:f0:e4:34: db:06:14:04:0f:5b:16:dd:c1:4d:ed:86:d8:80:f9: a0:b2:33:ef:a8:7f:f2:f1:ee:c5:40:65:21:f3:88: 41:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:43:66:0E:D2:72:32:D5:98:AB:8F:7B:E5:81:E3:F7:00:31:D0:05 X509v3 Authority Key Identifier: keyid:94:BE:3C:08:8C:59:97:DF:6A:A8:B5:68:78:A0:23:9F:F6:01:A3:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:0e:d9:c3:c1:be:2a:75:2e:01:ec:26:ae:c3:c8:84:ac:68: 95:6a:1e:ea:8b:fe:16:c2:80:09:e8:81:a8:47:c9:38:91:1b: 80:61:46:c3:89:71:12:c3:39:ce:75:13:f6:15:41:48:ff:7f: e6:ef:56:b6:f8:8f:70:08:46:13:8e:4c:41:21:ff:bc:4a:0b: a9:2d:70:d6:b9:db:0f:37:d0:1a:3b:03:39:50:31:f3:45:e6: de:91:63:2f:ac:0f:e4:d8:23:d4:f0:c1:50:2f:9e:4d:54:cd: a2:d9:1b:f4:df:8d:e1:2e:37:93:06:a0:ec:bf:82:a4:73:24: 84:49:9a:77:ef:15:43:f8:b2:e8:b5:1d:76:ed:73:35:5a:58: 05:44:ae:94:40:a0:84:7e:d0:81:6c:0f:27:fa:63:15:ff:34: 09:49:72:f0:e5:af:b3:2e:fc:8b:b3:37:79:c6:69:08:d9:0a: dc:3a:ff:fb:d4:cb:d8:58:7e:d5:0e:41:53:aa:45:4f:63:79: ab:c7:74:0f:f0:00:2c:e1:0c:69:2b:86:54:4e:e5:01:b2:50: da:e2:f1:ad:52:ae:56:5c:39:7f:fb:ce:d3:31:fa:bf:15:32: ec:93:b5:71:4a:5d:ed:99:27:54:c2:97:12:80:c1:fc:2d:13: f8:c7:c8:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKrn7gg/8oC5KfGn601WoirRHsFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRCRTNDMDg4QzU5OTdERjZBQThCNTY4NzhBMDIzOUZG NjAxQTM1MjAeFw0yNTExMDMyMjEzNDFaFw0yNTExMDUwMTIwNDFaMDMxMTAvBgNV BAMTKERDNDM2NjBFRDI3MjMyRDU5OEFCOEY3QkU1ODFFM0Y3MDAzMUQwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/CEzS+LnbB5EoC1MmVMhOXJd MKdnInWxBo5x8vz4ZLAahOrJ/ZrNg09xQfVJqRmCxB8VA2FRslRiJLXdLQyumnjx Omr1JRt2rfhXu54kLW6JZmYv9EqnAI/9BnOAU1vH4g2v2qN4CrdRRMsamViyM/Ex oMcKb/WkjmmPD4h5ZfZfK0JRK65LMV9mxtbOPSqPuBo+LgcINh7+ICyuLEAk8i/x PWMBU8IPIn/vWpS/15Y+IGzMq4lzJJhrC72p2NXSPjSO7+qYEF7QB2zEAB/hyy/Z KIuiv0fl58ssJfDkNNsGFAQPWxbdwU3thtiA+aCyM++of/Lx7sVAZSHziEG5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3ENmDtJyMtWYq4975YHj9wAx0AUwHwYDVR0j BBgwFoAUlL48CIxZl99qqLVoeKAjn/YBo1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnZrZGQ1MmJEZGRyamJGbXE4Q1h3cE1ONEpkWHJ0N1hTMlRqUGV0R1VU SFovMS85NEJFM0MwODhDNTk5N0RGNkFBOEI1Njg3OEEwMjM5RkY2MDFBMzUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0QkUzQzA4OEM1OTk3REY2 QUE4QjU2ODc4QTAyMzlGRjYwMUEzNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnZrZGQ1MmJEZGRyamJGbXE4Q1h3cE1ONEpkWHJ0N1hTMlRqUGV0R1VUSFovMS85 NEJFM0MwODhDNTk5N0RGNkFBOEI1Njg3OEEwMjM5RkY2MDFBMzUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMA7Zw8G+KnUuAewmrsPIhKxolWoe6ov+FsKACeiBqEfJOJEbgGFGw4lxEsM5 znUT9hVBSP9/5u9WtviPcAhGE45MQSH/vEoLqS1w1rnbDzfQGjsDOVAx80Xm3pFj L6wP5Ngj1PDBUC+eTVTNotkb9N+N4S43kwag7L+CpHMkhEmad+8VQ/iy6LUddu1z NVpYBUSulECghH7QgWwPJ/pjFf80CUly8OWvsy78i7M3ecZpCNkK3Dr/+9TL2Fh+ 1Q5BU6pFT2N5q8d0D/AALOEMaSuGVE7lAbJQ2uLxrVKuVlw5f/vO0zH6vxUy7JO1 cUpd7ZknVMKXEoDB/C0T+MfIYg== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:24 2025 by rpki-client