$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft File: 00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft (raw, json) Hash identifier: pAtW31DTqg/9ekc0Nw+enpIRBtm5Z66iH/8Fd5Bt++4= Subject key identifier: 7B:12:CF:7B:68:55:B6:D3:2A:0E:8C:0A:77:23:D3:B3:BA:23:D0:5C Authority key identifier: 00:AA:5B:85:77:C0:69:7C:84:43:75:D4:EF:44:00:A3:7F:A7:FA:18 Certificate issuer: /CN=00AA5B8577C0697C844375D4EF4400A37FA7FA18 Certificate serial: 6940B10F32B00690F6EE4462566CB262C752C40D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft Manifest number: 4A Signing time: Mon 03 Nov 2025 14:12:02 +0000 Manifest this update: Mon 03 Nov 2025 14:07:02 +0000 Manifest next update: Tue 04 Nov 2025 16:17:02 +0000 Files and hashes: 1: 3133382e39342e382e302f32322d3332203d3e203238333630.roa (hash: qVFu16WURJiIjC5/CAUBfP8XkesupOfzx1EfYvhtmoU=) 2: 00AA5B8577C0697C844375D4EF4400A37FA7FA18.crl (hash: 8sLggXxyPbc1M0Y/3dsRcU6Tsp2aWtd9EfbB2jcauo8=) 3: 3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa (hash: BMY+x9x6EPiDqvs4O5YjGOp4Ob0vxL21fEmA76rw7CE=) 4: 3138392e37362e3230382e302f32302d3332203d3e203238333630.roa (hash: EcLvYJ5xXNXY5gIzb1pkz+/2vmLJCwdKtVpNSXjcukQ=) 5: 3138392e37362e3232342e302f32302d3332203d3e203238333630.roa (hash: R1Zal9MMCa3HpUf3nNLECiokSOkKFmvMggF0dTHKrfU=) 6: 3137372e382e302e302f31392d3332203d3e203238333630.roa (hash: q2MM6gW+szcX2JkOtewWGLVXtIPye4Uedtw9vSocUTw=) 7: 323830343a31343a3a2f33322d313238203d3e203238333630.roa (hash: Y6yxr1t2ucquhWthqdIZlHIrK+C1q9ZqzNpWy5p7+84=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.crl rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 16:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:40:b1:0f:32:b0:06:90:f6:ee:44:62:56:6c:b2:62:c7:52:c4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AA5B8577C0697C844375D4EF4400A37FA7FA18 Validity Not Before: Nov 3 14:07:02 2025 GMT Not After : Nov 4 16:17:02 2025 GMT Subject: CN=7B12CF7B6855B6D32A0E8C0A7723D3B3BA23D05C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:53:59:12:b1:7f:cd:3a:9d:3b:cc:e1:ca: 54:60:13:dc:bb:a0:c1:a9:b5:06:e7:9b:2c:a9:7d: 71:3c:52:e5:30:df:91:c4:75:76:3a:83:95:ca:37: 4d:ac:2b:4e:6e:4d:0b:ac:0e:69:40:72:9a:13:f9: 04:86:9a:8a:eb:f7:9e:91:df:35:d2:e3:dc:f4:9e: 61:f0:81:08:3c:09:eb:a2:88:f7:44:9a:02:78:ae: 1e:62:85:26:4d:8a:60:19:69:3a:ab:c3:65:83:73: f6:3f:73:bc:07:fd:1e:5c:91:bd:33:e8:ee:9a:5e: 9a:d0:ae:63:1a:29:0a:09:29:a1:a0:fa:59:86:e5: 00:0c:48:96:aa:6c:64:fc:b4:69:94:2a:4a:31:fd: 6f:5c:02:e2:a7:b8:d6:0c:ac:ee:c0:b3:64:33:6f: 6d:8b:5c:01:e4:45:ec:6e:0e:e6:12:bb:a2:3f:b5: e4:07:5a:1f:48:d8:b0:10:3b:24:3b:c0:69:7e:1f: 9a:db:af:cc:e7:e4:38:7e:17:78:94:70:42:48:04: c0:ab:d1:be:f3:80:db:12:d2:50:74:65:08:9b:38: 48:9f:ef:04:9d:43:d5:b6:b2:fc:66:1a:05:02:6d: 32:d5:4c:74:4b:b7:e0:7c:4c:6b:46:e5:ee:c4:f0: 5d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:12:CF:7B:68:55:B6:D3:2A:0E:8C:0A:77:23:D3:B3:BA:23:D0:5C X509v3 Authority Key Identifier: keyid:00:AA:5B:85:77:C0:69:7C:84:43:75:D4:EF:44:00:A3:7F:A7:FA:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:96:d8:b3:d1:0f:7c:a8:81:8a:43:56:6e:34:d7:09:d3:1e: 38:cc:b3:58:d7:ee:65:f4:b0:38:b8:d8:a0:6a:ba:3b:33:f7: 62:a2:2e:bb:0a:36:97:b0:04:87:de:64:67:9f:46:1a:e7:9d: 1b:b8:4e:ed:5a:95:bc:c6:d9:a1:5b:79:04:b2:4e:f1:81:d0: b4:99:32:fb:2d:8e:67:e7:b7:e2:4d:8f:4a:5a:c7:6e:75:f9: ad:85:db:a6:32:08:0b:54:1d:cd:fc:2f:ad:ce:c9:9b:a2:70: 41:72:7f:7e:db:84:8c:60:3d:1b:30:40:ba:e5:71:d6:75:99: 26:43:dd:db:ff:0e:42:77:22:95:4c:00:d6:64:e4:46:9d:b0: 99:d7:39:e6:4e:2f:a2:93:1b:1f:ac:8f:b9:ff:33:28:bf:16: 86:fe:17:a7:c9:28:74:60:a3:1b:e7:7e:96:fd:03:a8:67:44: cf:1a:da:34:b2:14:7e:44:c0:43:8b:b2:04:18:18:e7:95:d8: 66:a7:19:60:39:6f:c1:a8:e8:d6:13:c7:c5:6e:66:18:e4:27: e0:8b:3c:5d:36:c3:ed:32:51:a0:94:2e:00:a7:e3:07:03:ec: 1d:92:5c:f4:e5:3e:2d:3b:79:f6:3f:3d:b8:1f:a0:8c:22:d3: 67:66:eb:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaUCxDzKwBpD27kRiVmyyYsdSxA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQTVCODU3N0MwNjk3Qzg0NDM3NUQ0RUY0NDAwQTM3 RkE3RkExODAeFw0yNTExMDMxNDA3MDJaFw0yNTExMDQxNjE3MDJaMDMxMTAvBgNV BAMTKDdCMTJDRjdCNjg1NUI2RDMyQTBFOEMwQTc3MjNEM0IzQkEyM0QwNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmAVNZErF/zTqdO8zhylRgE9y7 oMGptQbnmyypfXE8UuUw35HEdXY6g5XKN02sK05uTQusDmlAcpoT+QSGmorr956R 3zXS49z0nmHwgQg8CeuiiPdEmgJ4rh5ihSZNimAZaTqrw2WDc/Y/c7wH/R5ckb0z 6O6aXprQrmMaKQoJKaGg+lmG5QAMSJaqbGT8tGmUKkox/W9cAuKnuNYMrO7As2Qz b22LXAHkRexuDuYSu6I/teQHWh9I2LAQOyQ7wGl+H5rbr8zn5Dh+F3iUcEJIBMCr 0b7zgNsS0lB0ZQibOEif7wSdQ9W2svxmGgUCbTLVTHRLt+B8TGtG5e7E8F2RAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUexLPe2hVttMqDowKdyPTs7oj0FwwHwYDVR0j BBgwFoAUAKpbhXfAaXyEQ3XU70QAo3+n+hgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz UDIvMC8wMEFBNUI4NTc3QzA2OTdDODQ0Mzc1RDRFRjQ0MDBBMzdGQTdGQTE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwQUE1Qjg1NzdDMDY5N0M4 NDQzNzVENEVGNDQwMEEzN0ZBN0ZBMTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkozUDIvMC8w MEFBNUI4NTc3QzA2OTdDODQ0Mzc1RDRFRjQ0MDBBMzdGQTdGQTE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWJbYs9EPfKiBikNWbjTXCdMeOMyzWNfuZfSwOLjYoGq6OzP3YqIuuwo2l7AE h95kZ59GGuedG7hO7VqVvMbZoVt5BLJO8YHQtJky+y2OZ+e34k2PSlrHbnX5rYXb pjIIC1Qdzfwvrc7Jm6JwQXJ/ftuEjGA9GzBAuuVx1nWZJkPd2/8OQncilUwA1mTk Rp2wmdc55k4vopMbH6yPuf8zKL8Whv4Xp8kodGCjG+d+lv0DqGdEzxraNLIUfkTA Q4uyBBgY55XYZqcZYDlvwajo1hPHxW5mGOQn4Is8XTbD7TJRoJQuAKfjBwPsHZJc 9OU+LTt59j89uB+gjCLTZ2braA== -----END CERTIFICATE-----Generated at Tue Nov 4 06:21:19 2025 by rpki-client