$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft File: C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft (raw, json) Hash identifier: g2u43rZtGOYy9VBESUMMBWkcazw8RxqCjRJOgcWGI64= Subject key identifier: 49:2A:4E:76:12:19:6D:73:AD:A6:2B:1B:3C:70:E8:03:77:CD:16:4E Authority key identifier: C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43 Certificate issuer: /CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43 Certificate serial: 2E721596BF517C12A10199579F417FBF58EA221A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer Subject info access: rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft Manifest number: 02FB Signing time: Mon 03 Nov 2025 21:34:08 +0000 Manifest this update: Mon 03 Nov 2025 21:29:08 +0000 Manifest next update: Tue 04 Nov 2025 22:17:08 +0000 Files and hashes: 1: C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl (hash: V8PfYJZJ2FY476KK71nia91J6C87PeeUAhswSHeiCNs=) 2: 3133382e3230342e3232342e302f32322d3234203d3e20323633393135.roa (hash: cYRnXeUL77tbZZROt3Wn+JGjwSu2QmTDm/qcgCbUuRs=) 3: 323830343a323761383a3a2f33322d3334203d3e20323633393135.roa (hash: UhTWnyVMbYu8EHBAglnDBIow7lLgfSvBg43ee63dnW4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 22:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:72:15:96:bf:51:7c:12:a1:01:99:57:9f:41:7f:bf:58:ea:22:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43 Validity Not Before: Nov 3 21:29:08 2025 GMT Not After : Nov 4 22:17:08 2025 GMT Subject: CN=492A4E7612196D73ADA62B1B3C70E80377CD164E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:62:e4:96:06:a5:52:7d:c2:37:5e:5e:40:30: 7a:77:b6:1b:f6:42:f6:80:5c:0f:17:96:f2:02:69: fa:e7:ff:6b:e8:e4:ba:d1:c7:1b:f4:7a:80:d2:4d: 99:8f:c1:a8:8c:52:24:f7:c6:9b:b8:48:d0:78:b7: 42:8f:f2:03:8d:25:fd:5c:30:22:5b:2b:d5:cc:57: 02:d9:62:9e:35:78:bc:1d:44:21:33:d3:e6:62:3b: 88:77:3e:96:a9:7d:3f:80:86:79:54:6b:6f:0c:da: 8c:b6:60:c1:21:24:fd:61:19:32:6e:31:98:3a:8c: cc:48:1d:03:c3:29:04:0f:4d:75:bf:f9:3b:ac:c0: e4:f9:c0:99:49:8d:ec:4a:10:d8:25:60:49:f6:dd: ee:f2:d3:dd:bf:43:25:3c:2a:d2:d5:bd:f5:cf:4f: ff:94:4e:b1:6f:d6:2d:aa:81:aa:3c:3c:2f:fd:5c: d0:76:33:1f:38:46:f1:37:fe:01:3a:ec:97:1c:5b: 28:70:dc:bd:21:a3:24:19:e6:42:e4:21:af:51:73: 94:b2:b5:4e:5b:3a:a0:d0:3a:1c:ce:84:85:af:6c: 17:c6:30:92:87:83:87:6f:e2:d8:76:88:ac:e9:97: 1e:f9:2c:59:68:51:0e:56:30:33:5b:1d:a6:34:c1: ff:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2A:4E:76:12:19:6D:73:AD:A6:2B:1B:3C:70:E8:03:77:CD:16:4E X509v3 Authority Key Identifier: keyid:C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:46:f4:49:c9:1f:84:22:aa:6d:f5:90:6c:96:1f:4b:32:fe: 52:9c:83:e0:50:b2:e3:b2:d8:63:0e:6a:cc:1b:2e:19:dc:5a: 0b:9a:ef:5b:b0:89:f0:2f:ce:e6:80:c0:a1:b4:c8:90:4e:9e: 84:3f:1b:15:11:41:b0:23:76:51:ed:f9:0c:11:b1:b7:ed:04: 63:e2:30:a8:64:43:81:a3:d0:50:76:52:c0:ed:74:e1:5c:cd: 19:57:13:22:d3:34:de:c0:9e:a0:b5:37:95:fd:b7:77:19:b1: 12:ea:66:cc:2d:30:b7:f8:32:00:37:ae:f0:a6:cb:6d:8e:87: 9a:d2:41:0b:75:40:1b:0a:de:78:02:ae:3c:db:6b:91:52:ba: 4f:9f:0e:35:b2:f0:a9:e7:37:b2:41:39:3c:4f:cc:8e:d5:06: 21:99:a7:9e:d1:e9:94:e3:6f:86:cb:f0:00:6d:93:fb:ee:cc: 73:f2:1e:69:eb:0e:e3:1b:bb:0a:31:b0:5e:59:cd:b0:b0:f5: 56:f8:ac:ea:3b:96:ef:e6:86:db:d5:0b:1a:13:05:5a:ab:7a: 85:5a:22:28:0f:b8:ba:4e:a8:45:3e:b2:c3:b7:19:fa:1d:41: c0:24:ae:4f:2b:e0:18:71:50:79:73:3f:8b:1d:dc:95:5a:f1: e0:19:31:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULnIVlr9RfBKhAZlXn0F/v1jqIhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAyOEE5NUZCNkY3RTlCMzA0QUI3QjE1QkE5Q0YzN0M3 NDIwRUU0MzAeFw0yNTExMDMyMTI5MDhaFw0yNTExMDQyMjE3MDhaMDMxMTAvBgNV BAMTKDQ5MkE0RTc2MTIxOTZENzNBREE2MkIxQjNDNzBFODAzNzdDRDE2NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFYuSWBqVSfcI3Xl5AMHp3thv2 QvaAXA8XlvICafrn/2vo5LrRxxv0eoDSTZmPwaiMUiT3xpu4SNB4t0KP8gONJf1c MCJbK9XMVwLZYp41eLwdRCEz0+ZiO4h3PpapfT+AhnlUa28M2oy2YMEhJP1hGTJu MZg6jMxIHQPDKQQPTXW/+TuswOT5wJlJjexKENglYEn23e7y092/QyU8KtLVvfXP T/+UTrFv1i2qgao8PC/9XNB2Mx84RvE3/gE67JccWyhw3L0hoyQZ5kLkIa9Rc5Sy tU5bOqDQOhzOhIWvbBfGMJKHg4dv4th2iKzplx75LFloUQ5WMDNbHaY0wf8tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSSpOdhIZbXOtpisbPHDoA3fNFk4wHwYDVR0j BBgwFoAUwCipX7b36bMEq3sVupzzfHQg7kMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2J0aXdGWmNhbXg4enJBbXlxVWVwaDZ4ZERWWnVIWHN4ZTY4dVFMZnhF R3gvMS9DMDI4QTk1RkI2RjdFOUIzMDRBQjdCMTVCQTlDRjM3Qzc0MjBFRTQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwMjhBOTVGQjZGN0U5QjMw NEFCN0IxNUJBOUNGMzdDNzQyMEVFNDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2J0aXdGWmNhbXg4enJBbXlxVWVwaDZ4ZERWWnVIWHN4ZTY4dVFMZnhFR3gvMS9D MDI4QTk1RkI2RjdFOUIzMDRBQjdCMTVCQTlDRjM3Qzc0MjBFRTQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASkb0SckfhCKqbfWQbJYfSzL+UpyD4FCy47LYYw5qzBsuGdxaC5rvW7CJ8C/O 5oDAobTIkE6ehD8bFRFBsCN2Ue35DBGxt+0EY+IwqGRDgaPQUHZSwO104VzNGVcT ItM03sCeoLU3lf23dxmxEupmzC0wt/gyADeu8KbLbY6HmtJBC3VAGwreeAKuPNtr kVK6T58ONbLwqec3skE5PE/MjtUGIZmnntHplONvhsvwAG2T++7Mc/IeaesO4xu7 CjGwXlnNsLD1Vvis6juW7+aG29ULGhMFWqt6hVoiKA+4uk6oRT6yw7cZ+h1BwCSu TyvgGHFQeXM/ix3clVrx4Bkx/w== -----END CERTIFICATE-----Generated at Tue Nov 4 06:47:49 2025 by rpki-client