$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft File: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft (raw, json) Hash identifier: 1yLwZeohKoSNDHdBzrlTzLEP/oEeSP1iuUQ6nQQGLLo= Subject key identifier: 57:F9:D1:D3:D7:78:77:0C:C6:74:87:B1:52:7E:0F:C9:03:42:C9:20 Authority key identifier: D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC Certificate issuer: /CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC Certificate serial: 403E8AB55F6902D5AB600741DD91E2BB0CC81A24 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer Subject info access: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft Manifest number: 0168 Signing time: Mon 03 Nov 2025 11:28:26 +0000 Manifest this update: Mon 03 Nov 2025 11:23:26 +0000 Manifest next update: Tue 04 Nov 2025 11:39:26 +0000 Files and hashes: 1: 3137302e3233332e32302e302f32322d3234203d3e20323638323839.roa (hash: 5XwCvfaoU64ymtIslXprTesI7aefy6dxcTH7KYUOQ3U=) 2: 34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa (hash: dGr5cTxS6sHO6LIXh/H72qtLHlSDxdG5hFZ+7Zrlor0=) 3: 323830343a346565343a3a2f33322d3438203d3e20323638323839.roa (hash: 8QVrrPvDESPyLlcybwCmEcTLp6Hw5J3De08ADxJOVDg=) 4: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl (hash: DTpfVw+4ZTH/NI8j8ggX+2CTA/l0izg4u8MwCqsyKVg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:3e:8a:b5:5f:69:02:d5:ab:60:07:41:dd:91:e2:bb:0c:c8:1a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC Validity Not Before: Nov 3 11:23:26 2025 GMT Not After : Nov 4 11:39:26 2025 GMT Subject: CN=57F9D1D3D778770CC67487B1527E0FC90342C920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e0:20:2a:58:49:d7:f2:ba:32:50:9c:00:96: c6:14:0a:49:ba:b8:84:0e:2f:6f:cc:2b:55:b0:5c: 2d:18:aa:46:31:06:2c:d3:ed:49:b5:c0:72:5e:8a: 1c:03:1a:a4:c0:71:08:b1:f1:64:6d:4e:5c:74:76: 34:fb:d4:84:b7:a9:7f:57:d0:72:72:0f:ef:ae:7e: 6a:07:cf:5d:f6:d5:29:6d:15:f5:b1:8e:c3:b7:8d: 1a:1f:8d:39:82:f7:2c:72:0f:6a:fd:70:cf:32:9e: e5:a6:bc:10:99:17:25:81:af:63:f6:bd:77:fe:81: 25:65:a7:bc:6b:7b:1f:78:76:f9:5e:54:1f:14:34: 03:e8:40:5b:4f:a7:86:1b:34:b5:a6:9a:f1:14:eb: 06:41:a5:3e:fe:8b:55:d7:4c:db:f4:22:60:a8:f6: 7d:00:05:ea:06:98:74:32:b2:ac:d8:3d:a4:d1:37: c4:df:ee:87:42:84:71:1a:d9:69:9d:a6:4d:9b:1b: f1:ab:3f:9a:f1:31:8d:ea:6e:d5:d0:b0:45:a3:68: d0:a2:64:1b:5f:76:f0:74:17:0f:eb:cf:b1:b1:ec: d8:c2:c0:04:04:a7:80:29:b7:cb:74:df:72:90:a6: 01:3a:79:33:f7:b1:5d:35:2b:47:64:8f:40:39:45: 65:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F9:D1:D3:D7:78:77:0C:C6:74:87:B1:52:7E:0F:C9:03:42:C9:20 X509v3 Authority Key Identifier: keyid:D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:55:19:79:af:9f:9e:92:4e:18:74:f0:f0:75:89:12:a3:04: cb:ae:d6:a7:04:bc:78:33:a0:20:42:c4:05:2d:71:db:4f:ba: f5:ea:64:92:1a:a5:2c:1b:e0:46:9d:d9:6a:80:d7:e3:8c:e9: 3d:d1:ff:be:38:79:b0:ce:f0:9c:37:84:b6:8d:e5:dd:c3:0e: c2:9e:6e:fb:03:98:e5:17:78:26:8c:f4:5e:e9:c8:6b:81:ea: 4a:0c:e7:78:0d:be:1c:fc:9f:55:d2:b0:5c:fe:29:f0:1d:7f: 5f:07:b2:53:95:e2:0f:8b:2a:cb:5a:d5:ac:70:d0:fb:f8:f6: 39:e2:7f:44:86:07:e1:63:57:a3:97:c3:2c:47:43:c6:35:aa: a8:5c:f0:d3:d1:51:b8:e8:18:96:59:3c:8b:bd:e8:a7:04:15: c4:76:88:e7:4f:93:a8:15:5c:74:1a:24:9d:65:4e:7a:e4:bb: 16:d8:82:43:f6:c3:bd:37:96:87:e5:dd:6c:86:74:cf:2e:0d: a5:93:dd:77:21:99:14:4f:d8:58:fc:e8:e2:c1:4a:03:5e:2f: 40:63:3b:a6:c4:f6:0c:3d:9c:cc:78:c7:c8:9a:61:87:96:86: e0:82:13:4d:56:66:48:81:87:20:4b:26:14:70:34:d9:94:1c: 58:02:35:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQD6KtV9pAtWrYAdB3ZHiuwzIGiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCQTdDMzVBNUMyNDIwNTg5QjMwQzMzRDlDRjEzNzQ1 MDVGM0RCQzAeFw0yNTExMDMxMTIzMjZaFw0yNTExMDQxMTM5MjZaMDMxMTAvBgNV BAMTKDU3RjlEMUQzRDc3ODc3MENDNjc0ODdCMTUyN0UwRkM5MDM0MkM5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14CAqWEnX8royUJwAlsYUCkm6 uIQOL2/MK1WwXC0YqkYxBizT7Um1wHJeihwDGqTAcQix8WRtTlx0djT71IS3qX9X 0HJyD++ufmoHz1321SltFfWxjsO3jRofjTmC9yxyD2r9cM8ynuWmvBCZFyWBr2P2 vXf+gSVlp7xrex94dvleVB8UNAPoQFtPp4YbNLWmmvEU6wZBpT7+i1XXTNv0ImCo 9n0ABeoGmHQysqzYPaTRN8Tf7odChHEa2Wmdpk2bG/GrP5rxMY3qbtXQsEWjaNCi ZBtfdvB0Fw/rz7Gx7NjCwAQEp4Apt8t033KQpgE6eTP3sV01K0dkj0A5RWXLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUV/nR09d4dwzGdIexUn4PyQNCySAwHwYDVR0j BBgwFoAU2Lp8NaXCQgWJswwz2c8TdFBfPbwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6 VnQvMC9EOEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4QkE3QzM1QTVDMjQyMDU4 OUIzMEMzM0Q5Q0YxMzc0NTA1RjNEQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6VnQvMC9E OEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn1UZea+fnpJOGHTw8HWJEqMEy67WpwS8eDOgIELEBS1x20+69epkkhqlLBvg Rp3ZaoDX44zpPdH/vjh5sM7wnDeEto3l3cMOwp5u+wOY5Rd4Joz0XunIa4HqSgzn eA2+HPyfVdKwXP4p8B1/XweyU5XiD4sqy1rVrHDQ+/j2OeJ/RIYH4WNXo5fDLEdD xjWqqFzw09FRuOgYllk8i73opwQVxHaI50+TqBVcdBoknWVOeuS7FtiCQ/bDvTeW h+XdbIZ0zy4NpZPddyGZFE/YWPzo4sFKA14vQGM7psT2DD2czHjHyJphh5aG4IIT TVZmSIGHIEsmFHA02ZQcWAI1mQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:26:30 2025 by rpki-client