$ rpki-client -vvf rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.mft File: AE4918B47F20CB240F597D2AFBC73EF5DA714C09.mft (raw, json) Hash identifier: QRe9Okr0HSzUeP1ArMrmFUpYguq/Mzi8i2bs0xHsRsg= Subject key identifier: DF:45:71:9F:B6:2B:8F:2F:CA:33:58:69:9E:50:DF:72:BB:99:90:6E Authority key identifier: AE:49:18:B4:7F:20:CB:24:0F:59:7D:2A:FB:C7:3E:F5:DA:71:4C:09 Certificate issuer: /CN=AE4918B47F20CB240F597D2AFBC73EF5DA714C09 Certificate serial: 42053943CD4D1B6E86A01DD76A435C2319087916 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.cer Subject info access: rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.mft Manifest number: 0112 Signing time: Sun 02 Nov 2025 23:19:19 +0000 Manifest this update: Sun 02 Nov 2025 23:14:19 +0000 Manifest next update: Tue 04 Nov 2025 02:26:19 +0000 Files and hashes: 1: 3136372e3234392e3132312e302f32342d3234203d3e20323635313730.roa (hash: NPfh8u8RVDUIAohXlRx+4N15yDYs+Ev+gvVWRaJZcaQ=) 2: 3136372e3234392e3132322e302f32342d3234203d3e20323635313730.roa (hash: uzzB7+YWS7F2Hjk+J6P50hWSoLAEmY3w4AXj2ZVKrsE=) 3: 3136372e3234392e3132332e302f32342d3234203d3e20323635313730.roa (hash: +cKQoYs5LyyWb4gOhSol6PefKtjBQmJwRnh0NAcBq34=) 4: AE4918B47F20CB240F597D2AFBC73EF5DA714C09.crl (hash: WKzAThyhvUmPlvCexjUyAYE7jVcWRCvTM84EyH0z8kw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.crl rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 02:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:05:39:43:cd:4d:1b:6e:86:a0:1d:d7:6a:43:5c:23:19:08:79:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4918B47F20CB240F597D2AFBC73EF5DA714C09 Validity Not Before: Nov 2 23:14:19 2025 GMT Not After : Nov 4 02:26:19 2025 GMT Subject: CN=DF45719FB62B8F2FCA3358699E50DF72BB99906E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:8d:ed:46:54:e2:25:82:79:f7:88:f0:c1: fc:2d:08:2e:44:10:41:78:19:cb:1b:b8:93:dd:1d: 0b:02:fe:b5:84:78:43:43:a0:4c:2e:c4:cd:b8:08: 1a:a2:88:5b:13:6c:3d:73:ab:06:5a:f4:87:82:12: c7:41:1d:ba:05:70:ac:87:40:41:a4:ba:0f:b3:0d: d2:1a:e7:34:7a:ad:ad:f3:9b:3a:9c:c2:60:b0:08: 2f:a0:3c:c5:f3:8d:02:f8:0f:58:95:79:1b:6a:ae: d6:f7:ff:c8:59:b4:b9:90:f8:96:31:4c:41:31:05: c7:00:90:0a:19:34:96:4e:c1:84:8f:cc:c9:79:c1: 45:b0:a8:64:3e:54:89:4a:2d:a6:d8:61:2b:12:84: f9:4d:73:46:71:e3:cb:c2:4c:5e:92:61:c0:f7:a6: 5e:2d:0c:d3:c5:fb:58:e0:eb:55:4e:2a:05:21:b4: 7c:c7:e5:0a:34:38:ad:49:85:41:1d:71:0d:5c:3d: 5b:97:21:07:73:db:fa:ac:8e:f7:88:56:0f:1d:f4: ea:dc:13:d9:17:8e:53:7e:e0:15:d8:75:e2:09:b8: e2:eb:06:b3:ba:e3:06:61:b7:14:28:39:d2:4b:cc: 64:9f:2f:ff:df:e3:c4:60:11:48:76:58:62:8c:9d: 20:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:45:71:9F:B6:2B:8F:2F:CA:33:58:69:9E:50:DF:72:BB:99:90:6E X509v3 Authority Key Identifier: keyid:AE:49:18:B4:7F:20:CB:24:0F:59:7D:2A:FB:C7:3E:F5:DA:71:4C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:98:d5:2c:d4:b9:8e:66:aa:ab:a3:c6:13:4c:b1:59:c7:ba: 16:15:ed:02:92:b9:5b:63:d4:e3:b7:04:fb:fd:07:1a:0c:f1: c0:6d:ea:f6:aa:72:06:37:ba:e0:65:81:ab:c2:3c:30:24:a3: d5:73:8a:38:f0:fe:3c:33:bc:9c:11:2d:3c:c5:4c:f6:77:c5: 81:6b:ff:6a:1f:17:19:78:57:38:e3:b8:8f:99:77:cf:2e:40: ae:4c:a3:8a:bd:4f:19:26:bb:da:bb:e5:ff:39:c4:70:96:95: 8b:fa:fd:58:da:ed:73:30:38:ac:22:81:ae:80:9d:2e:0f:04: 2c:06:2c:1d:76:b4:8f:5c:f3:9a:10:a8:fd:7a:c8:4b:bc:24: 2a:bf:fe:be:c7:e0:fe:36:4a:ab:b7:3e:c2:a0:9a:15:3d:a3: bf:79:6e:48:0b:78:d8:63:5b:11:c7:5e:af:ed:d4:ad:52:e6: ee:d0:ae:b5:a5:86:f6:78:e3:8c:55:f8:d3:6f:53:75:dd:b9: 9e:c2:69:24:ae:0e:f4:18:42:04:a2:44:fe:8f:4d:3e:c2:e0: a5:11:23:cf:48:cd:c3:7a:ce:c7:7c:92:6a:5f:10:13:9a:06: 0b:70:b9:fe:ab:52:8c:7d:20:6c:98:0d:fb:31:df:4a:85:0c: fb:6e:a2:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQgU5Q81NG26GoB3XakNcIxkIeRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0OTE4QjQ3RjIwQ0IyNDBGNTk3RDJBRkJDNzNFRjVE QTcxNEMwOTAeFw0yNTExMDIyMzE0MTlaFw0yNTExMDQwMjI2MTlaMDMxMTAvBgNV BAMTKERGNDU3MTlGQjYyQjhGMkZDQTMzNTg2OTlFNTBERjcyQkI5OTkwNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGH43tRlTiJYJ594jwwfwtCC5E EEF4GcsbuJPdHQsC/rWEeENDoEwuxM24CBqiiFsTbD1zqwZa9IeCEsdBHboFcKyH QEGkug+zDdIa5zR6ra3zmzqcwmCwCC+gPMXzjQL4D1iVeRtqrtb3/8hZtLmQ+JYx TEExBccAkAoZNJZOwYSPzMl5wUWwqGQ+VIlKLabYYSsShPlNc0Zx48vCTF6SYcD3 pl4tDNPF+1jg61VOKgUhtHzH5Qo0OK1JhUEdcQ1cPVuXIQdz2/qsjveIVg8d9Orc E9kXjlN+4BXYdeIJuOLrBrO64wZhtxQoOdJLzGSfL//f48RgEUh2WGKMnSBvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU30Vxn7Yrjy/KM1hpnlDfcruZkG4wHwYDVR0j BBgwFoAUrkkYtH8gyyQPWX0q+8c+9dpxTAkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzNVS3ZFcDR3WXJKUkhid1NLZ2R1ODhjVUZpTVZtMUdyVmZXdTFRem1D TVovMC9BRTQ5MThCNDdGMjBDQjI0MEY1OTdEMkFGQkM3M0VGNURBNzE0QzA5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFNDkxOEI0N0YyMENCMjQw RjU5N0QyQUZCQzczRUY1REE3MTRDMDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzNVS3ZFcDR3WXJKUkhid1NLZ2R1ODhjVUZpTVZtMUdyVmZXdTFRem1DTVovMC9B RTQ5MThCNDdGMjBDQjI0MEY1OTdEMkFGQkM3M0VGNURBNzE0QzA5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOJjVLNS5jmaqq6PGE0yxWce6FhXtApK5W2PU47cE+/0HGgzxwG3q9qpyBje6 4GWBq8I8MCSj1XOKOPD+PDO8nBEtPMVM9nfFgWv/ah8XGXhXOOO4j5l3zy5Arkyj ir1PGSa72rvl/znEcJaVi/r9WNrtczA4rCKBroCdLg8ELAYsHXa0j1zzmhCo/XrI S7wkKr/+vsfg/jZKq7c+wqCaFT2jv3luSAt42GNbEcder+3UrVLm7tCutaWG9njj jFX4029Tdd25nsJpJK4O9BhCBKJE/o9NPsLgpREjz0jNw3rOx3ySal8QE5oGC3C5 /qtSjH0gbJgN+zHfSoUM+26iJQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:11 2025 by rpki-client