$ rpki-client -vvf rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft File: 2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft (raw, json) Hash identifier: NA96hLRb1iCROGOgnmUsMzySoawxIqCUYVgmpTfTC0w= Subject key identifier: 07:F1:DE:5B:19:C1:EC:59:FA:EB:FC:BC:75:0E:00:A3:57:46:25:96 Authority key identifier: 2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C Certificate issuer: /CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C Certificate serial: 02B79A54E73DB29AE49B224A5B6D2206D78892DC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer Subject info access: rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft Manifest number: 0303 Signing time: Mon 03 Nov 2025 10:13:04 +0000 Manifest this update: Mon 03 Nov 2025 10:08:04 +0000 Manifest next update: Tue 04 Nov 2025 10:24:04 +0000 Files and hashes: 1: 2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl (hash: Azdq+mbAM5KQwAfMbHqcUwbwHOIZgzdgQz24R9IGtFw=) 2: 3133382e3230342e33362e302f32322d3332203d3e203631373735.roa (hash: i42Zf9JlK4N1mmLBTa9TWccNagKQVyNdUEy5+83Gmck=) 3: 323830343a313932383a3a2f33322d313238203d3e203631373735.roa (hash: nuyhgAzX27qSeSVno+9wZ9X/49ZgMdBWxUwbjgZnHk0=) 4: 3133382e3230342e33372e302f32342d3332203d3e203631373735.roa (hash: bHsfgx5bc+iOPbuSRSP7Bx9qmbPdlwgcPx8SooF5nOw=) 5: 3230302e3232392e38342e302f32322d3332203d3e203631373735.roa (hash: HUgjgoMoXy/HcsuPu+XEO8HJHVpykWC6LHcx5p1rb50=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b7:9a:54:e7:3d:b2:9a:e4:9b:22:4a:5b:6d:22:06:d7:88:92:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C Validity Not Before: Nov 3 10:08:04 2025 GMT Not After : Nov 4 10:24:04 2025 GMT Subject: CN=07F1DE5B19C1EC59FAEBFCBC750E00A357462596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cc:6f:d5:b4:6e:db:ee:70:b5:d9:a9:57:1e: b4:25:42:04:cb:59:ce:c3:e3:88:2b:2c:24:dc:9c: 05:3b:29:1a:20:9a:48:b6:05:08:ff:d3:f0:64:fc: 85:71:a8:a5:74:de:79:e2:87:f4:68:f6:5a:e9:0c: 52:5b:06:6f:70:ac:7d:eb:cd:53:23:90:15:8a:a8: 36:90:00:cf:11:61:44:31:d2:05:49:8d:e0:de:fe: 25:f8:a4:ca:79:77:50:27:0d:3c:f0:03:38:a0:05: 91:b3:eb:2d:ed:f3:2a:ed:62:ca:9e:80:c1:c0:b4: 9f:1b:a7:a4:7c:f9:41:04:11:16:80:52:13:57:22: d0:e5:ce:e1:8e:95:1c:33:df:47:a4:6b:59:52:f6: 1b:7d:75:0b:88:39:c4:26:5d:15:2f:89:3a:0f:4d: 34:81:a6:a8:03:b4:03:51:ad:fc:0d:9d:0d:42:d7: 19:d0:50:64:20:6a:69:53:5a:30:6b:7d:4c:59:9b: 9b:c8:28:25:bf:14:d7:02:52:b0:9a:d2:ef:d2:7c: b6:cb:cc:14:be:d3:ec:04:c5:9b:36:fe:03:be:e8: 4e:ca:02:59:e7:dc:43:af:23:3b:ae:12:90:77:d6: fb:55:36:f5:2d:5b:cf:ca:35:b3:1f:bf:43:96:6f: e2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F1:DE:5B:19:C1:EC:59:FA:EB:FC:BC:75:0E:00:A3:57:46:25:96 X509v3 Authority Key Identifier: keyid:2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:78:a4:98:24:35:ee:c1:90:26:76:16:d7:21:4e:64:10:e9: 5a:57:84:59:ab:36:b3:9c:9f:83:0b:b9:1e:e6:6f:96:9e:0d: af:80:ae:5e:73:ca:15:7b:37:f6:df:f5:02:29:42:2a:43:1d: ca:0f:67:98:80:c3:01:0c:57:ea:ab:ae:c2:5f:6c:9e:fe:7b: 91:e9:7d:4c:c9:53:45:44:10:56:38:9d:7e:af:80:f3:63:a9: 1b:5b:4c:93:1b:39:f4:85:93:ba:bf:8f:38:3f:74:9f:af:aa: 47:3d:73:eb:cd:d2:8d:cc:50:6b:97:ab:d7:26:43:01:da:93: b7:11:35:ee:3b:91:73:85:c3:ba:56:67:a3:09:c2:d3:e1:93: 83:0b:e1:05:76:3a:74:6b:74:11:5b:82:f0:75:02:1a:f8:80: fb:b9:af:98:cc:04:fe:d6:ec:8c:1c:42:82:ff:c5:b1:fb:11: 07:41:40:d9:32:da:f4:cd:92:e9:ea:90:be:36:8b:82:a7:fa: 93:4a:7a:e8:7e:c5:64:a3:8a:44:a8:19:59:64:a9:7a:21:43: 9c:68:a7:cf:41:69:d9:3c:e0:67:34:7f:47:e8:b8:c8:90:df: e9:fd:3e:c7:8f:8e:bf:1d:25:78:3a:69:15:da:c3:66:f5:29: 7b:44:cc:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAreaVOc9sprkmyJKW20iBteIktwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE0REY5MDk3Rjk3NjY0QTAwQTMxOEVGQUUyMkRDMTAz NkU5MUI1QzAeFw0yNTExMDMxMDA4MDRaFw0yNTExMDQxMDI0MDRaMDMxMTAvBgNV BAMTKDA3RjFERTVCMTlDMUVDNTlGQUVCRkNCQzc1MEUwMEEzNTc0NjI1OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNzG/VtG7b7nC12alXHrQlQgTL Wc7D44grLCTcnAU7KRogmki2BQj/0/Bk/IVxqKV03nnih/Ro9lrpDFJbBm9wrH3r zVMjkBWKqDaQAM8RYUQx0gVJjeDe/iX4pMp5d1AnDTzwAzigBZGz6y3t8yrtYsqe gMHAtJ8bp6R8+UEEERaAUhNXItDlzuGOlRwz30eka1lS9ht9dQuIOcQmXRUviToP TTSBpqgDtANRrfwNnQ1C1xnQUGQgamlTWjBrfUxZm5vIKCW/FNcCUrCa0u/SfLbL zBS+0+wExZs2/gO+6E7KAlnn3EOvIzuuEpB31vtVNvUtW8/KNbMfv0OWb+LxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUB/HeWxnB7Fn66/y8dQ4Ao1dGJZYwHwYDVR0j BBgwFoAUKk35CX+XZkoAoxjvriLcEDbpG1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFZScFF6VTd3aG1LSkh0YUZxd3drSktyN2h6WVgzdkVEemU1MXJ2czZp WDIvMS8yQTRERjkwOTdGOTc2NjRBMDBBMzE4RUZBRTIyREMxMDM2RTkxQjVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNERGOTA5N0Y5NzY2NEEw MEEzMThFRkFFMjJEQzEwMzZFOTFCNUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFZScFF6VTd3aG1LSkh0YUZxd3drSktyN2h6WVgzdkVEemU1MXJ2czZpWDIvMS8y QTRERjkwOTdGOTc2NjRBMDBBMzE4RUZBRTIyREMxMDM2RTkxQjVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGXikmCQ17sGQJnYW1yFOZBDpWleEWas2s5yfgwu5HuZvlp4Nr4CuXnPKFXs3 9t/1AilCKkMdyg9nmIDDAQxX6quuwl9snv57kel9TMlTRUQQVjidfq+A82OpG1tM kxs59IWTur+POD90n6+qRz1z683SjcxQa5er1yZDAdqTtxE17juRc4XDulZnownC 0+GTgwvhBXY6dGt0EVuC8HUCGviA+7mvmMwE/tbsjBxCgv/FsfsRB0FA2TLa9M2S 6eqQvjaLgqf6k0p66H7FZKOKRKgZWWSpeiFDnGinz0Fp2TzgZzR/R+i4yJDf6f0+ x4+Ovx0leDppFdrDZvUpe0TMSw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:24:27 2025 by rpki-client