$ rpki-client -vvf rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft File: 154E883FCB52E91706C17788E2199491DC6E45F7.mft (raw, json) Hash identifier: I+BzprSEL/nGTErQjh8kBskaOxxoeT+RAlG9FiPcQmw= Subject key identifier: B4:38:BC:98:7B:E0:3C:E3:C2:A0:D8:62:1C:76:8A:CF:AF:46:2B:ED Authority key identifier: 15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7 Certificate issuer: /CN=154E883FCB52E91706C17788E2199491DC6E45F7 Certificate serial: 3FA20438BC088A6537B2E7BCAA6CC91E1885C070 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer Subject info access: rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft Manifest number: 01AA Signing time: Mon 03 Nov 2025 00:13:58 +0000 Manifest this update: Mon 03 Nov 2025 00:08:58 +0000 Manifest next update: Tue 04 Nov 2025 00:59:58 +0000 Files and hashes: 1: 154E883FCB52E91706C17788E2199491DC6E45F7.crl (hash: XbQEqzp5SoxCKoHu2Ayqp4rHtcHqwcfX5LJeUrMRa8k=) 2: 323830343a323264633a3a2f33322d3438203d3e20323634313237.roa (hash: orUpteGth+JTOjLIpkDk5D2ZHYpZbmhzL1wAvYz4Wnc=) 3: 3133382e35392e3232302e302f32322d3234203d3e20323634313237.roa (hash: pNbhPDxda7jRgPzU04Q9/bS8qQcdhfwJ71v1pPX72ss=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.crl rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a2:04:38:bc:08:8a:65:37:b2:e7:bc:aa:6c:c9:1e:18:85:c0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154E883FCB52E91706C17788E2199491DC6E45F7 Validity Not Before: Nov 3 00:08:58 2025 GMT Not After : Nov 4 00:59:58 2025 GMT Subject: CN=B438BC987BE03CE3C2A0D8621C768ACFAF462BED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:76:cf:35:40:48:52:7d:31:10:6b:f0:81:1f: a5:54:60:f7:ae:b0:b3:7b:c7:7b:da:3a:ab:b9:f1: ba:e9:60:78:d3:58:3c:02:29:83:d6:81:02:5f:f7: bc:2a:44:f1:a0:d1:b5:e9:3a:31:c4:9f:c5:80:f1: b9:31:0f:90:6f:6d:25:43:18:88:a9:85:f9:ae:87: b7:3f:c0:26:1e:e4:e7:48:78:38:20:27:5e:82:20: b5:3e:8a:8b:a2:5a:ba:7f:1c:cd:1c:f0:37:e7:b0: 8b:ce:e6:8b:83:ad:10:b9:6d:9a:72:4f:03:bd:77: 06:26:b3:78:24:e8:ee:f2:2b:4e:af:68:62:99:ca: 78:78:6a:f3:f6:f2:3c:00:46:a7:0e:ae:02:38:50: 51:41:2a:db:e9:e3:f8:04:b4:00:66:f9:87:95:4e: 29:be:91:89:62:09:8f:d4:85:84:f9:0f:a0:cd:5a: 9b:87:cc:d1:fa:51:07:cf:d0:b6:6f:85:94:d6:78: 08:00:ad:60:de:86:99:b2:1f:5a:e7:05:2e:34:5e: b6:c3:52:9e:59:d1:88:2a:30:ea:1f:9c:78:ca:c3: d5:ee:23:88:ca:e1:89:de:77:35:47:43:29:d2:78: c9:f5:6a:84:6b:73:07:de:43:26:62:4c:b7:d4:bb: 5d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:38:BC:98:7B:E0:3C:E3:C2:A0:D8:62:1C:76:8A:CF:AF:46:2B:ED X509v3 Authority Key Identifier: keyid:15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0a:9f:af:ca:b0:1a:99:10:1e:4e:5e:db:82:e2:81:ec:11: 90:33:9e:91:b8:b1:c4:f9:d8:32:65:2e:51:e3:21:02:22:5a: fb:e5:36:84:56:12:6f:6e:d0:26:8b:cb:e1:25:93:8f:43:13: 9a:17:4b:13:ab:a0:7a:88:3a:f6:a7:07:1c:11:28:59:81:6e: 7b:bf:89:5d:b7:16:ac:3d:8c:c4:0d:e3:6f:81:39:db:47:0c: 1e:fa:b0:cf:f8:6e:63:8c:b1:98:57:fd:a2:f6:71:bb:28:ee: 27:df:02:50:b8:d3:0c:e5:45:28:28:76:d9:64:95:4f:6d:13: 97:07:da:ea:0c:0c:cd:7f:48:89:a5:60:fc:70:13:47:b5:b0: 8a:97:8f:06:a7:42:32:f6:6f:8e:14:3d:74:9b:35:41:41:1a: f0:54:2d:92:a4:ae:e3:80:04:8e:d3:a2:6f:b5:44:d5:b9:b3: d6:8f:18:ad:27:61:5e:95:21:30:9b:f8:93:57:bf:19:d6:d4: 7e:ec:30:7f:07:bb:fa:62:e6:2e:18:74:2b:68:61:16:fe:c3: 9c:20:62:ba:7d:7d:a7:49:29:61:63:2a:1c:20:ed:29:0a:e5: 53:31:9f:b5:92:83:16:1a:d9:d5:65:97:06:29:cf:ae:42:97: db:f6:06:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP6IEOLwIimU3sue8qmzJHhiFwHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0RTg4M0ZDQjUyRTkxNzA2QzE3Nzg4RTIxOTk0OTFE QzZFNDVGNzAeFw0yNTExMDMwMDA4NThaFw0yNTExMDQwMDU5NThaMDMxMTAvBgNV BAMTKEI0MzhCQzk4N0JFMDNDRTNDMkEwRDg2MjFDNzY4QUNGQUY0NjJCRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYds81QEhSfTEQa/CBH6VUYPeu sLN7x3vaOqu58brpYHjTWDwCKYPWgQJf97wqRPGg0bXpOjHEn8WA8bkxD5BvbSVD GIiphfmuh7c/wCYe5OdIeDggJ16CILU+iouiWrp/HM0c8DfnsIvO5ouDrRC5bZpy TwO9dwYms3gk6O7yK06vaGKZynh4avP28jwARqcOrgI4UFFBKtvp4/gEtABm+YeV Tim+kYliCY/UhYT5D6DNWpuHzNH6UQfP0LZvhZTWeAgArWDehpmyH1rnBS40XrbD Up5Z0YgqMOofnHjKw9XuI4jK4YnedzVHQynSeMn1aoRrcwfeQyZiTLfUu10JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtDi8mHvgPOPCoNhiHHaKz69GK+0wHwYDVR0j BBgwFoAUFU6IP8tS6RcGwXeI4hmUkdxuRfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3dLSkJqNVUza05XNGhaQktNWTRwam5oSjhIRWpvNkRhdThKUU1GYWcx VTYvMC8xNTRFODgzRkNCNTJFOTE3MDZDMTc3ODhFMjE5OTQ5MURDNkU0NUY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1NEU4ODNGQ0I1MkU5MTcw NkMxNzc4OEUyMTk5NDkxREM2RTQ1RjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3dLSkJqNVUza05XNGhaQktNWTRwam5oSjhIRWpvNkRhdThKUU1GYWcxVTYvMC8x NTRFODgzRkNCNTJFOTE3MDZDMTc3ODhFMjE5OTQ5MURDNkU0NUY3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbgqfr8qwGpkQHk5e24LigewRkDOekbixxPnYMmUuUeMhAiJa++U2hFYSb27Q JovL4SWTj0MTmhdLE6ugeog69qcHHBEoWYFue7+JXbcWrD2MxA3jb4E520cMHvqw z/huY4yxmFf9ovZxuyjuJ98CULjTDOVFKCh22WSVT20Tlwfa6gwMzX9IiaVg/HAT R7WwipePBqdCMvZvjhQ9dJs1QUEa8FQtkqSu44AEjtOib7VE1bmz1o8YrSdhXpUh MJv4k1e/GdbUfuwwfwe7+mLmLhh0K2hhFv7DnCBiun19p0kpYWMqHCDtKQrlUzGf tZKDFhrZ1WWXBinPrkKX2/YGfg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:07 2025 by rpki-client