$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft File: 2987D670913962CF69181F73C94FE8C279E038DA.mft (raw, json) Hash identifier: L05URwnQPr4oclWXwtH8pfI9eNdAOY86jkdDgVZr6sY= Subject key identifier: 49:82:77:F6:52:CC:52:BD:2B:E8:F1:A2:0A:55:D1:D9:A2:6F:E0:E1 Authority key identifier: 29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA Certificate issuer: /CN=2987D670913962CF69181F73C94FE8C279E038DA Certificate serial: 5CE3FA399B37DB765A7E73E9661319F69332667B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft Manifest number: 1E Signing time: Mon 03 Nov 2025 09:57:43 +0000 Manifest this update: Mon 03 Nov 2025 09:52:43 +0000 Manifest next update: Tue 04 Nov 2025 10:02:43 +0000 Files and hashes: 1: 3137302e38302e36382e302f32322d3234203d3e20323633393035.roa (hash: 7NSu1PMWeoZCELaEl8OW9YbMtDkl2sNpkyCrwdD6WJA=) 2: 2987D670913962CF69181F73C94FE8C279E038DA.crl (hash: gakSlkg0a9AO3bIIDEFPugng8bAQ97SgaRbOclUrbzA=) 3: 3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa (hash: bQcV36xReQ/IDV5gVRSjwtVDmMEnos4N2zSYcbzUSh8=) 4: 323830343a323738303a3a2f33322d3334203d3e20323633393035.roa (hash: 56hiDQJz7DPztx5lZlqeTXai+RNb2R69Hh8Nu7xk9pI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e3:fa:39:9b:37:db:76:5a:7e:73:e9:66:13:19:f6:93:32:66:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2987D670913962CF69181F73C94FE8C279E038DA Validity Not Before: Nov 3 09:52:43 2025 GMT Not After : Nov 4 10:02:43 2025 GMT Subject: CN=498277F652CC52BD2BE8F1A20A55D1D9A26FE0E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:75:69:f8:c9:f4:11:3e:57:08:30:78:7b: 3e:41:45:29:8f:40:71:41:f4:4c:e5:41:fb:7f:03: 3b:32:92:bd:3c:02:db:b6:65:87:14:81:e4:48:e5: 78:ab:22:c4:41:c6:7c:8d:6d:be:52:9f:64:30:d4: 19:1b:19:3b:b2:37:ba:76:f6:e6:6d:39:ca:b5:10: 61:21:92:ff:92:20:ad:78:41:4e:5e:8e:ee:7b:58: fb:15:9a:64:cc:81:33:7c:b7:e9:c0:b1:cd:86:72: df:f8:fa:ba:3f:64:8a:e0:03:a8:c8:7c:f7:71:2a: 69:4d:5f:59:8c:d1:d9:84:fd:b1:75:4b:09:fc:06: 6d:34:11:bd:57:c3:fd:09:06:e6:71:84:f8:01:3f: 24:06:5b:67:97:1a:34:40:1e:d9:88:9c:4c:33:5f: aa:db:9a:90:7a:23:52:d6:31:81:a1:32:5f:0a:d2: cb:3b:a2:b6:b6:50:bc:5b:8a:6b:ba:8c:e8:aa:e3: 11:c9:95:fe:1d:a6:f0:1c:53:bf:0e:3d:77:06:78: 60:65:9c:51:92:7d:d5:11:bb:5c:53:9c:92:c6:71: 66:e7:e5:c2:35:76:c3:d8:cb:ce:0a:e1:ed:8c:ff: 52:56:9a:e9:1f:77:14:28:48:5e:b0:39:56:37:f6: 5c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:82:77:F6:52:CC:52:BD:2B:E8:F1:A2:0A:55:D1:D9:A2:6F:E0:E1 X509v3 Authority Key Identifier: keyid:29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:86:54:74:54:8b:5f:23:de:30:52:40:28:45:15:72:98:ec: 2c:c0:ca:1f:46:3a:b3:a1:97:22:0b:b6:c5:7f:c8:e2:0f:73: cf:a0:4a:8d:62:23:66:34:d8:26:5a:c6:1b:c3:b4:4d:be:3a: c1:29:6a:a1:bf:1c:4e:7a:4a:f7:f9:9b:01:2c:4b:d2:eb:83: c2:b2:74:36:b6:17:e1:00:70:f0:24:5f:75:2a:26:4a:3c:b5: e7:d4:c3:74:7f:dc:b5:ea:f8:ab:e4:78:ea:e6:56:85:4d:4c: 86:8d:bd:a9:07:7f:b3:04:77:4f:56:4d:e8:26:4e:cc:6f:21: 34:2f:ba:8b:7b:a0:44:8b:4e:73:6a:26:f9:af:6f:ee:26:94: d5:95:5b:f9:e6:86:5b:5a:82:b7:81:a5:7a:d8:52:b5:c7:26: 90:aa:fd:f9:9b:05:bd:f3:a2:ec:05:49:aa:24:de:bf:7c:b6: 10:7d:ce:4b:fb:24:c9:14:19:66:26:ad:8a:9c:b5:a8:82:db: 34:41:30:2a:ff:3a:d7:39:46:76:2f:54:b9:79:25:9b:5f:31: c0:6b:00:7f:f0:b8:bc:d5:ee:c5:df:49:65:88:04:95:03:3a: 40:12:33:95:ac:f2:2f:30:ad:8b:ac:1e:bf:9d:07:1e:31:79: f0:2d:01:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXOP6OZs323ZafnPpZhMZ9pMyZnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4N0Q2NzA5MTM5NjJDRjY5MTgxRjczQzk0RkU4QzI3 OUUwMzhEQTAeFw0yNTExMDMwOTUyNDNaFw0yNTExMDQxMDAyNDNaMDMxMTAvBgNV BAMTKDQ5ODI3N0Y2NTJDQzUyQkQyQkU4RjFBMjBBNTVEMUQ5QTI2RkUwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+vXVp+Mn0ET5XCDB4ez5BRSmP QHFB9EzlQft/Azsykr08Atu2ZYcUgeRI5XirIsRBxnyNbb5Sn2Qw1BkbGTuyN7p2 9uZtOcq1EGEhkv+SIK14QU5eju57WPsVmmTMgTN8t+nAsc2Gct/4+ro/ZIrgA6jI fPdxKmlNX1mM0dmE/bF1Swn8Bm00Eb1Xw/0JBuZxhPgBPyQGW2eXGjRAHtmInEwz X6rbmpB6I1LWMYGhMl8K0ss7ora2ULxbimu6jOiq4xHJlf4dpvAcU78OPXcGeGBl nFGSfdURu1xTnJLGcWbn5cI1dsPYy84K4e2M/1JWmukfdxQoSF6wOVY39lxtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSYJ39lLMUr0r6PGiClXR2aJv4OEwHwYDVR0j BBgwFoAUKYfWcJE5Ys9pGB9zyU/ownngONowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBj eUYvMC8yOTg3RDY3MDkxMzk2MkNGNjkxODFGNzNDOTRGRThDMjc5RTAzOERBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5ODdENjcwOTEzOTYyQ0Y2 OTE4MUY3M0M5NEZFOEMyNzlFMDM4REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBjeUYvMC8y OTg3RDY3MDkxMzk2MkNGNjkxODFGNzNDOTRGRThDMjc5RTAzOERBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlIZUdFSLXyPeMFJAKEUVcpjsLMDKH0Y6s6GXIgu2xX/I4g9zz6BKjWIjZjTY JlrGG8O0Tb46wSlqob8cTnpK9/mbASxL0uuDwrJ0NrYX4QBw8CRfdSomSjy159TD dH/cter4q+R46uZWhU1Mho29qQd/swR3T1ZN6CZOzG8hNC+6i3ugRItOc2om+a9v 7iaU1ZVb+eaGW1qCt4GlethStccmkKr9+ZsFvfOi7AVJqiTev3y2EH3OS/skyRQZ Ziatipy1qILbNEEwKv861zlGdi9UuXklm18xwGsAf/C4vNXuxd9JZYgElQM6QBIz lazyLzCti6wev50HHjF58C0BKw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:01:24 2025 by rpki-client