$ rpki-client -vvf rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.mft File: 6517ED7C130BCBAC13709ADF76E878D88CD96DD4.mft (raw, json) Hash identifier: Q3gcRWm28u1U5huwOln1Y9kJiiKNJUhejvbQBWmJBj4= Subject key identifier: 6F:C0:29:51:DE:2C:20:23:E7:B1:2A:89:BA:C5:8F:52:1A:66:0E:2C Authority key identifier: 65:17:ED:7C:13:0B:CB:AC:13:70:9A:DF:76:E8:78:D8:8C:D9:6D:D4 Certificate issuer: /CN=6517ED7C130BCBAC13709ADF76E878D88CD96DD4 Certificate serial: 261BEF5D0D2DAEC0BB96B6C6E039A8E75AA2954E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.cer Subject info access: rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.mft Manifest number: 0288 Signing time: Sun 02 Nov 2025 22:07:17 +0000 Manifest this update: Sun 02 Nov 2025 22:02:17 +0000 Manifest next update: Tue 04 Nov 2025 00:45:17 +0000 Files and hashes: 1: 6517ED7C130BCBAC13709ADF76E878D88CD96DD4.crl (hash: zfWsPC2pkYDnIVU406Nx4C/pNLse6sfWT9hA/TJkKr8=) 2: 323830343a383435303a3a2f33322d3332203d3e20323732323533.roa (hash: lDDAJXlFggEms8anwmSRiGrpB1qh7gNpRefy/CSvcrk=) 3: 323830343a383435303a383030303a3a2f33332d3333203d3e20323732323533.roa (hash: Zh0f7PXpynQdF+LNUpLMkXKVuF2YwleFw3gZncRMMOw=) 4: 323830343a383435303a3a2f33332d3333203d3e20323732323533.roa (hash: TUBtfUjQGZ0MpFjE+janMDkl8U/B1QT7bTczIhOC6qA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.crl rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:1b:ef:5d:0d:2d:ae:c0:bb:96:b6:c6:e0:39:a8:e7:5a:a2:95:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6517ED7C130BCBAC13709ADF76E878D88CD96DD4 Validity Not Before: Nov 2 22:02:17 2025 GMT Not After : Nov 4 00:45:17 2025 GMT Subject: CN=6FC02951DE2C2023E7B12A89BAC58F521A660E2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:21:8f:2b:b6:d4:f2:c6:7e:d7:41:b8:f7:76: ae:1f:06:2a:7c:57:b7:1b:97:8f:d1:ca:3b:50:11: 65:84:5a:87:60:f2:ce:b6:d5:7f:e7:bd:3b:f8:bb: 66:e4:92:90:63:31:48:c6:b1:2d:c7:47:dd:22:c9: b7:ac:88:26:5a:0b:68:16:93:38:74:79:07:0f:bb: 34:22:74:ce:f9:68:df:db:aa:88:38:a9:7d:e0:af: 47:bd:75:3b:9a:9b:94:30:35:a3:2a:29:67:f1:98: 9b:23:d4:cf:60:b1:1d:1c:19:77:17:ad:84:e4:b9: 52:f7:91:27:65:1e:f1:ef:76:eb:28:b7:ab:55:24: 1e:56:e9:d6:00:a2:1d:5f:d1:35:b0:f6:1f:ac:50: 33:1c:e8:20:8a:2f:08:ab:f1:af:c0:3c:85:f7:5a: 2b:68:2a:c3:07:9e:f4:f5:cc:b9:4f:a0:e7:03:ff: ca:95:2e:23:fc:bc:c4:60:47:f6:69:b1:40:47:e2: 62:35:78:c9:b6:7a:e0:e4:1b:0a:89:6c:d4:57:ba: 37:8c:08:21:e6:ff:92:ed:9e:9c:06:e1:7e:b2:d7: 37:ac:56:83:28:08:1c:25:49:a9:b8:98:1d:2a:7d: 39:17:10:6a:0b:14:25:1d:15:f7:e0:fa:82:ac:f0: f9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C0:29:51:DE:2C:20:23:E7:B1:2A:89:BA:C5:8F:52:1A:66:0E:2C X509v3 Authority Key Identifier: keyid:65:17:ED:7C:13:0B:CB:AC:13:70:9A:DF:76:E8:78:D8:8C:D9:6D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:7a:ca:d5:7f:23:5b:10:d9:18:7d:6a:86:a0:06:6e:65:e0: 96:70:1e:da:1b:40:10:32:e4:9b:d5:2b:ae:bd:3a:a1:cd:98: e4:46:dc:08:8c:70:c3:64:8e:8d:22:8e:61:ba:22:ea:60:5e: 93:dc:32:04:de:f6:7d:4d:36:3d:d7:2f:9f:4e:2a:58:2d:94: a4:1c:3e:78:ff:03:71:2f:0b:c0:97:e0:e2:6b:7b:3d:b6:b8: 47:81:b3:02:da:4d:9a:61:95:81:8b:88:66:dc:15:e5:da:11: 8c:3d:29:b3:8d:de:a5:64:ce:f9:22:21:58:30:d0:d3:9b:06: 9f:f7:62:af:6e:f3:b5:66:04:10:59:2b:69:fd:c8:2e:09:b5: 84:81:8c:3b:6c:04:fc:8a:02:03:cb:b2:17:84:df:dd:72:1b: 71:8e:ec:18:5e:01:f6:d5:2e:e2:29:08:ee:57:4d:30:95:1f: d4:59:3f:f7:63:78:b5:63:6f:2f:fc:b7:a7:98:ab:eb:29:80: 63:b3:5e:79:c7:d6:1f:d6:24:39:ce:d7:79:d4:3b:9d:76:48: 30:27:a0:ed:1a:a3:b5:68:40:32:a2:d8:5c:d8:d5:20:54:4c: 70:64:4b:02:8b:da:ec:b4:2a:d2:c2:36:c5:36:51:3f:03:86: b4:13:19:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJhvvXQ0trsC7lrbG4Dmo51qilU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUxN0VEN0MxMzBCQ0JBQzEzNzA5QURGNzZFODc4RDg4 Q0Q5NkRENDAeFw0yNTExMDIyMjAyMTdaFw0yNTExMDQwMDQ1MTdaMDMxMTAvBgNV BAMTKDZGQzAyOTUxREUyQzIwMjNFN0IxMkE4OUJBQzU4RjUyMUE2NjBFMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaIY8rttTyxn7XQbj3dq4fBip8 V7cbl4/RyjtQEWWEWodg8s621X/nvTv4u2bkkpBjMUjGsS3HR90iybesiCZaC2gW kzh0eQcPuzQidM75aN/bqog4qX3gr0e9dTuam5QwNaMqKWfxmJsj1M9gsR0cGXcX rYTkuVL3kSdlHvHvdusot6tVJB5W6dYAoh1f0TWw9h+sUDMc6CCKLwir8a/APIX3 WitoKsMHnvT1zLlPoOcD/8qVLiP8vMRgR/ZpsUBH4mI1eMm2euDkGwqJbNRXujeM CCHm/5LtnpwG4X6y1zesVoMoCBwlSam4mB0qfTkXEGoLFCUdFffg+oKs8PmbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUb8ApUd4sICPnsSqJusWPUhpmDiwwHwYDVR0j BBgwFoAUZRftfBMLy6wTcJrfduh42IzZbdQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1V3TXNWQjhLQmtKZjRuYjdpaHo3WlJjV05wWjRuc290YlN6TmlkdExj ZjEvMC82NTE3RUQ3QzEzMEJDQkFDMTM3MDlBREY3NkU4NzhEODhDRDk2REQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MTdFRDdDMTMwQkNCQUMx MzcwOUFERjc2RTg3OEQ4OENEOTZERDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1V3TXNWQjhLQmtKZjRuYjdpaHo3WlJjV05wWjRuc290YlN6TmlkdExjZjEvMC82 NTE3RUQ3QzEzMEJDQkFDMTM3MDlBREY3NkU4NzhEODhDRDk2REQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmHrK1X8jWxDZGH1qhqAGbmXglnAe2htAEDLkm9Urrr06oc2Y5EbcCIxww2SO jSKOYboi6mBek9wyBN72fU02Pdcvn04qWC2UpBw+eP8DcS8LwJfg4mt7Pba4R4Gz AtpNmmGVgYuIZtwV5doRjD0ps43epWTO+SIhWDDQ05sGn/dir27ztWYEEFkraf3I Lgm1hIGMO2wE/IoCA8uyF4Tf3XIbcY7sGF4B9tUu4ikI7ldNMJUf1Fk/92N4tWNv L/y3p5ir6ymAY7NeecfWH9YkOc7XedQ7nXZIMCeg7RqjtWhAMqLYXNjVIFRMcGRL Aova7LQq0sI2xTZRPwOGtBMZyw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:04 2025 by rpki-client