$ rpki-client -vvf rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft File: 43897DFF118E56C31A35958D9EA818504B130E11.mft (raw, json) Hash identifier: cztKDfAePcRJO0gmKFXW5JBPigauF50RBomKxf3KFNk= Subject key identifier: A9:F7:B1:99:AA:C8:D5:B9:98:54:F5:AE:79:9E:BA:AC:11:CF:3A:54 Authority key identifier: 43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11 Certificate issuer: /CN=43897DFF118E56C31A35958D9EA818504B130E11 Certificate serial: 7A139268FC38F467A6031E9EFA6CC8D1EBEEB886 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer Subject info access: rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft Manifest number: 02A5 Signing time: Wed 17 Sep 2025 12:41:04 +0000 Manifest this update: Wed 17 Sep 2025 12:36:04 +0000 Manifest next update: Thu 18 Sep 2025 15:21:04 +0000 Files and hashes: 1: 3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa (hash: /O80p7I/BsID3L+7Tx/zgFUSWMrzsJTiDGJmySOhPvQ=) 2: 323830343a363935633a3a2f33322d3430203d3e20323730323635.roa (hash: 7dYPTrKAi61IYALwp4StVtHMzIcECDDN9J/7R5yuyAg=) 3: 43897DFF118E56C31A35958D9EA818504B130E11.crl (hash: ItITwhQCqhe4OVLl4DIn9nKyZXCfW2Gfh89YTd0hsck=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Sep 2025 15:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:13:92:68:fc:38:f4:67:a6:03:1e:9e:fa:6c:c8:d1:eb:ee:b8:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43897DFF118E56C31A35958D9EA818504B130E11 Validity Not Before: Sep 17 12:36:04 2025 GMT Not After : Sep 18 15:21:04 2025 GMT Subject: CN=A9F7B199AAC8D5B99854F5AE799EBAAC11CF3A54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:11:50:a1:48:3e:63:df:61:ca:c0:a5:a3:e1: 23:24:8d:da:6c:77:ff:0f:e0:9e:23:c4:3c:47:db: d1:71:d9:91:aa:b5:d1:d2:cf:bf:ef:1d:33:fa:ed: 6b:c3:cb:d1:2d:84:8d:9e:bd:37:4f:17:7b:6e:36: e9:c3:fc:c4:e2:2c:4c:53:64:85:bf:5f:51:ad:8e: c3:aa:55:e7:29:60:41:04:07:2c:de:95:c3:02:d4: 61:14:cb:d8:71:6d:5a:e0:49:27:82:ad:a3:fd:8d: 62:bf:c3:a3:f2:05:64:1b:96:54:e4:bc:78:62:bb: 87:12:63:0b:11:0d:3c:97:14:1e:23:af:8c:c3:a1: 17:39:2b:bb:eb:01:43:f7:cc:de:bd:61:d6:44:ef: 2e:a2:a2:02:69:ba:75:0f:2d:d5:2c:b4:c4:c3:27: af:d5:06:af:84:98:0b:87:9e:e4:a3:4d:64:5e:d5: d2:2e:34:7e:50:9f:77:f6:8b:e5:a7:1c:24:b3:4d: 60:8c:d6:70:9d:aa:52:c0:71:b7:54:32:7b:6c:76: bc:7f:8e:56:46:a1:e3:53:f3:6f:d7:f2:9d:79:67: 52:fb:0c:18:27:c3:dc:9b:eb:86:68:29:e3:ef:64: 13:f3:16:e8:94:58:d5:21:6e:72:7a:cb:d3:ec:fe: 7a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F7:B1:99:AA:C8:D5:B9:98:54:F5:AE:79:9E:BA:AC:11:CF:3A:54 X509v3 Authority Key Identifier: keyid:43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:30:6a:e9:64:36:cc:2e:bd:85:4b:3b:02:77:b6:22:07:c9: f1:e1:e5:f1:50:be:ae:6b:2b:dc:3b:cf:cd:a0:13:70:11:3b: 4f:80:37:30:ec:2f:66:b6:bd:53:7e:8a:be:b5:8f:91:69:60: af:7e:d4:8f:90:27:e8:9d:af:b0:c5:eb:1c:7e:c6:51:6e:45: a1:5e:69:7c:8b:28:26:22:67:3d:1d:a7:5c:21:f5:bb:5b:aa: 93:68:ed:b7:5e:dd:85:d4:ec:cf:be:fa:3b:d8:6e:eb:7a:57: ab:95:f0:1e:61:a9:d8:19:e5:10:ef:2c:20:20:43:d0:2c:1d: 74:bc:05:e4:47:a6:1b:31:b1:1a:bb:6e:ec:5f:8d:9d:b3:09: 92:26:4d:00:32:e5:a8:bb:b6:fc:fe:3b:9f:2e:44:ea:f8:2b: 7b:2c:8e:7b:40:ac:bb:d7:01:80:30:7f:7b:9c:f7:9e:96:6f: 31:80:d8:7e:2d:38:c7:31:a7:e5:a4:3c:be:64:02:a3:4c:df: 30:41:50:5d:65:53:af:25:3d:fe:8f:01:24:2f:f6:74:aa:e3: 1e:4b:76:bf:b1:5b:da:1f:4d:c9:70:d6:c7:ec:1b:89:58:81: 4b:5f:1a:c1:69:e0:ed:f9:6c:eb:31:37:69:cf:bb:15:1d:47: b8:bd:e1:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUehOSaPw49GemAx6e+mzI0evuuIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM4OTdERkYxMThFNTZDMzFBMzU5NThEOUVBODE4NTA0 QjEzMEUxMTAeFw0yNTA5MTcxMjM2MDRaFw0yNTA5MTgxNTIxMDRaMDMxMTAvBgNV BAMTKEE5RjdCMTk5QUFDOEQ1Qjk5ODU0RjVBRTc5OUVCQUFDMTFDRjNBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfEVChSD5j32HKwKWj4SMkjdps d/8P4J4jxDxH29Fx2ZGqtdHSz7/vHTP67WvDy9EthI2evTdPF3tuNunD/MTiLExT ZIW/X1GtjsOqVecpYEEEByzelcMC1GEUy9hxbVrgSSeCraP9jWK/w6PyBWQbllTk vHhiu4cSYwsRDTyXFB4jr4zDoRc5K7vrAUP3zN69YdZE7y6iogJpunUPLdUstMTD J6/VBq+EmAuHnuSjTWRe1dIuNH5Qn3f2i+WnHCSzTWCM1nCdqlLAcbdUMntsdrx/ jlZGoeNT82/X8p15Z1L7DBgnw9yb64ZoKePvZBPzFuiUWNUhbnJ6y9Ps/nr7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqfexmarI1bmYVPWueZ66rBHPOlQwHwYDVR0j BBgwFoAUQ4l9/xGOVsMaNZWNnqgYUEsTDhEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzlSM0NWdEVxZUdRRkRLM1I3QjVIZVZMajRhSFRxUXRVTTVyOFNWb2tp ZTIvMC80Mzg5N0RGRjExOEU1NkMzMUEzNTk1OEQ5RUE4MTg1MDRCMTMwRTExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzODk3REZGMTE4RTU2QzMx QTM1OTU4RDlFQTgxODUwNEIxMzBFMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzlSM0NWdEVxZUdRRkRLM1I3QjVIZVZMajRhSFRxUXRVTTVyOFNWb2tpZTIvMC80 Mzg5N0RGRjExOEU1NkMzMUEzNTk1OEQ5RUE4MTg1MDRCMTMwRTExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAjBq6WQ2zC69hUs7Ane2IgfJ8eHl8VC+rmsr3DvPzaATcBE7T4A3MOwvZra9 U36KvrWPkWlgr37Uj5An6J2vsMXrHH7GUW5FoV5pfIsoJiJnPR2nXCH1u1uqk2jt t17dhdTsz776O9hu63pXq5XwHmGp2BnlEO8sICBD0CwddLwF5EemGzGxGrtu7F+N nbMJkiZNADLlqLu2/P47ny5E6vgreyyOe0Csu9cBgDB/e5z3npZvMYDYfi04xzGn 5aQ8vmQCo0zfMEFQXWVTryU9/o8BJC/2dKrjHkt2v7Fb2h9NyXDWx+wbiViBS18a wWng7fls6zE3ac+7FR1HuL3hFA== -----END CERTIFICATE-----Generated at Thu Sep 18 07:42:25 2025 by rpki-client