$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft File: EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft (raw, json) Hash identifier: UjTF+Bt+S0acrKAsP43DdTcoA1o0pFU54qnGvkJcmkQ= Subject key identifier: 43:A2:4B:9C:99:9F:31:AF:83:E3:58:F2:90:6B:62:74:62:7D:83:2E Authority key identifier: EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73 Certificate issuer: /CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73 Certificate serial: 2F4A2A64E702A5B2F3D7DFE59FA9843230AD97E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer Subject info access: rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft Manifest number: 02FF Signing time: Mon 03 Nov 2025 10:30:00 +0000 Manifest this update: Mon 03 Nov 2025 10:25:00 +0000 Manifest next update: Tue 04 Nov 2025 11:05:00 +0000 Files and hashes: 1: 323830343a6438303a3a2f33322d3438203d3e203532363335.roa (hash: h5ZbShRyf6a9djvBfVUYZNDwI63lUNghsgSzyARdb0k=) 2: EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl (hash: QXBKuMIigJI/s8yaIt9P1C2vy1qrdtsakS4CF3DlFFE=) 3: 3137372e3132352e32302e302f32322d3234203d3e203532363335.roa (hash: zB3RAYBJ5ds+DR9vGHFVJDE/Fhcry/mu8n6ADfs/cdI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:4a:2a:64:e7:02:a5:b2:f3:d7:df:e5:9f:a9:84:32:30:ad:97:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73 Validity Not Before: Nov 3 10:25:00 2025 GMT Not After : Nov 4 11:05:00 2025 GMT Subject: CN=43A24B9C999F31AF83E358F2906B6274627D832E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2f:b2:cc:f2:02:68:82:79:dc:75:cb:8b:94: f4:a1:89:14:66:b1:bf:6d:00:c8:5b:5f:87:02:20: 85:2e:14:3f:54:37:e0:99:a8:19:81:ed:f6:34:21: fc:ea:93:b2:f8:1f:fc:bf:2f:45:51:01:53:f6:ab: 3a:cb:c9:12:4d:f6:f3:89:dc:36:cd:d0:18:79:7a: 1b:c3:57:7d:87:45:1e:1a:6b:fb:96:92:89:9d:2e: 00:b5:bf:e8:3c:8f:56:2b:3f:91:30:b2:e8:cc:97: bc:57:4e:43:b1:76:9f:9f:b5:36:bb:ed:07:75:4f: 57:ab:76:84:df:64:dd:aa:45:f1:3e:82:6e:03:18: 48:b2:cf:01:d4:d9:50:e5:84:29:1f:43:c7:64:16: 1a:32:d3:49:df:64:9e:57:4b:bd:3c:19:c4:1a:1b: 95:02:03:54:25:25:1a:8d:21:ab:d8:d0:14:f0:04: de:d5:d8:8c:6d:06:6f:92:ee:53:b6:a0:a4:ef:20: d4:11:74:b1:9b:be:f4:3d:c5:83:40:e7:7e:d8:e1: 3a:7f:8b:5c:85:4e:86:90:de:88:6b:32:ac:c6:34: da:9b:43:36:06:7f:ae:16:19:e9:93:a9:0f:c5:7e: fa:79:46:8b:6a:69:92:cb:6c:79:71:f6:96:f5:c7: 76:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A2:4B:9C:99:9F:31:AF:83:E3:58:F2:90:6B:62:74:62:7D:83:2E X509v3 Authority Key Identifier: keyid:EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:44:b6:6b:8d:ee:1a:5a:27:8b:b2:05:9d:be:5b:97:83:8a: ba:a1:58:84:dd:01:74:06:9c:e8:49:57:c1:22:c5:f4:cd:32: 9e:09:fb:13:4c:f7:ba:2f:f4:e9:33:9b:27:83:7b:1f:d7:56: 2f:f0:78:3e:1c:ff:a3:83:3d:18:44:43:ca:78:0b:74:b7:7a: 26:98:a6:f7:e1:ba:49:10:3f:ea:06:82:e1:bd:27:11:78:94: da:17:a5:5c:a9:a5:d5:c2:bb:e8:a1:63:44:78:30:f7:89:04: 36:66:c4:42:d0:fc:cb:00:4e:2a:b3:46:12:34:07:ce:6a:89: 78:6d:9c:d2:21:d3:e0:7d:87:57:18:c9:f5:16:30:77:1f:36: d3:8e:3d:09:88:ea:d5:c0:cf:1f:6e:ca:df:c4:0c:16:28:1a: a0:7c:f3:e8:6b:1e:d5:bb:1d:49:63:f8:a6:94:35:61:f1:d8: d5:c9:67:1a:83:cf:a6:fd:8d:8e:0d:4d:c4:fa:67:75:71:1f: f2:84:a0:ac:d4:61:3d:4e:32:53:28:7b:91:f3:81:13:3e:3e: c0:fd:3c:74:c7:d7:52:20:32:0b:cd:74:59:9e:bf:43:cf:d9: 98:02:46:69:a6:f4:c3:6e:81:a6:ca:eb:e5:97:16:ea:c6:27: ab:58:1c:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL0oqZOcCpbLz19/ln6mEMjCtl+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMwODY1NTgyMTU4NUEwQTVCN0Q2QTBFNTJGQzc0RUY1 MUY5MEU3MzAeFw0yNTExMDMxMDI1MDBaFw0yNTExMDQxMTA1MDBaMDMxMTAvBgNV BAMTKDQzQTI0QjlDOTk5RjMxQUY4M0UzNThGMjkwNkI2Mjc0NjI3RDgzMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHL7LM8gJognncdcuLlPShiRRm sb9tAMhbX4cCIIUuFD9UN+CZqBmB7fY0Ifzqk7L4H/y/L0VRAVP2qzrLyRJN9vOJ 3DbN0Bh5ehvDV32HRR4aa/uWkomdLgC1v+g8j1YrP5EwsujMl7xXTkOxdp+ftTa7 7Qd1T1erdoTfZN2qRfE+gm4DGEiyzwHU2VDlhCkfQ8dkFhoy00nfZJ5XS708GcQa G5UCA1QlJRqNIavY0BTwBN7V2IxtBm+S7lO2oKTvINQRdLGbvvQ9xYNA537Y4Tp/ i1yFToaQ3ohrMqzGNNqbQzYGf64WGemTqQ/Ffvp5RotqaZLLbHlx9pb1x3b5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQ6JLnJmfMa+D41jykGtidGJ9gy4wHwYDVR0j BBgwFoAU7AhlWCFYWgpbfWoOUvx071H5DnMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3RKR2p2cjZ1ZVZxU1NiRnV2Z1NIbnpORXlSMlZrSkh3TWN1OVRBOW1h bUUvMS9FQzA4NjU1ODIxNTg1QTBBNUI3RDZBMEU1MkZDNzRFRjUxRjkwRTczLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDMDg2NTU4MjE1ODVBMEE1 QjdENkEwRTUyRkM3NEVGNTFGOTBFNzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3RKR2p2cjZ1ZVZxU1NiRnV2Z1NIbnpORXlSMlZrSkh3TWN1OVRBOW1hbUUvMS9F QzA4NjU1ODIxNTg1QTBBNUI3RDZBMEU1MkZDNzRFRjUxRjkwRTczLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQUS2a43uGloni7IFnb5bl4OKuqFYhN0BdAac6ElXwSLF9M0yngn7E0z3ui/0 6TObJ4N7H9dWL/B4Phz/o4M9GERDyngLdLd6Jpim9+G6SRA/6gaC4b0nEXiU2hel XKml1cK76KFjRHgw94kENmbEQtD8ywBOKrNGEjQHzmqJeG2c0iHT4H2HVxjJ9RYw dx820449CYjq1cDPH27K38QMFigaoHzz6Gse1bsdSWP4ppQ1YfHY1clnGoPPpv2N jg1NxPpndXEf8oSgrNRhPU4yUyh7kfOBEz4+wP08dMfXUiAyC810WZ6/Q8/ZmAJG aab0w26Bpsrr5ZcW6sYnq1gcIg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:35:07 2025 by rpki-client