$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/342097A4083A2B31789F16928A1E82F5C9CDA419.mft File: 342097A4083A2B31789F16928A1E82F5C9CDA419.mft (raw, json) Hash identifier: zjMD/j55zikHNiGYPti8kajL9y5hOTDZSc1VSzsdWRQ= Subject key identifier: 53:07:8D:9B:74:AF:63:7F:14:04:DC:98:F4:B2:4C:08:15:46:F3:AF Authority key identifier: 34:20:97:A4:08:3A:2B:31:78:9F:16:92:8A:1E:82:F5:C9:CD:A4:19 Certificate issuer: /CN=342097A4083A2B31789F16928A1E82F5C9CDA419 Certificate serial: 68C42EE78EC7F21EBE0E5ECB5E0BB15A633E4EB4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342097A4083A2B31789F16928A1E82F5C9CDA419.cer Subject info access: rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/342097A4083A2B31789F16928A1E82F5C9CDA419.mft Manifest number: 53 Signing time: Mon 03 Nov 2025 08:08:27 +0000 Manifest this update: Mon 03 Nov 2025 08:03:27 +0000 Manifest next update: Tue 04 Nov 2025 08:32:27 +0000 Files and hashes: 1: 323830343a6633383a3a2f33322d313238203d3e20323633353731.roa (hash: sfJHevmglWdz2enj6dv4R3C7J4wUw0YXOArNIRW+jQ8=) 2: 342097A4083A2B31789F16928A1E82F5C9CDA419.crl (hash: dRKqn/nsHjWHWlTaalaW9XWkDquKvc2ZjUq/aqCRUIU=) 3: 3137372e35352e38382e302f32322d3332203d3e20323633353731.roa (hash: DGttXf45KzZryqybNaUukZoMHdluRMfGLx4eBVsxaDk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/342097A4083A2B31789F16928A1E82F5C9CDA419.crl rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/342097A4083A2B31789F16928A1E82F5C9CDA419.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342097A4083A2B31789F16928A1E82F5C9CDA419.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 08:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c4:2e:e7:8e:c7:f2:1e:be:0e:5e:cb:5e:0b:b1:5a:63:3e:4e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342097A4083A2B31789F16928A1E82F5C9CDA419 Validity Not Before: Nov 3 08:03:27 2025 GMT Not After : Nov 4 08:32:27 2025 GMT Subject: CN=53078D9B74AF637F1404DC98F4B24C081546F3AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fc:89:a2:71:49:af:e4:84:92:2c:30:85:70: 36:48:5c:fe:19:73:2d:1c:1f:c8:e1:85:d8:74:16: a5:2b:bb:c6:f3:9a:c2:08:a7:31:e9:cb:fb:da:87: bc:67:05:2a:8f:63:6a:46:1c:38:83:cd:fd:d0:ec: f9:93:19:11:bd:f8:9d:36:a5:f4:1c:a4:00:e5:47: 58:fb:c4:59:75:5f:25:62:4f:e9:bc:92:bf:97:89: 20:f6:7c:a0:24:22:b7:df:e3:ff:99:6a:46:0a:ea: f9:0e:3d:58:4c:84:35:ce:71:80:74:55:30:05:fc: cb:34:65:f8:4b:8d:78:10:58:2c:2c:ba:af:ca:15: b4:a7:9a:dc:a2:1a:19:41:84:e5:41:60:9a:3d:f1: 63:3b:65:a6:32:00:e7:a4:50:32:51:7b:a3:09:b1: 3b:74:af:d6:86:b5:9a:2b:7d:f3:af:5c:a1:ac:eb: c4:2f:95:ae:2b:90:d9:e1:a7:a3:57:dc:f5:67:b4: 93:8d:5b:89:b4:40:5c:58:12:54:47:ba:89:57:74: 8f:5b:09:73:e5:52:44:8f:05:36:ce:98:53:ce:f3: cd:f0:46:3c:c0:5e:98:fe:6e:98:6e:53:ab:97:1b: 5f:37:4b:1b:db:00:91:de:98:9c:2f:7c:bd:b3:bf: 30:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:07:8D:9B:74:AF:63:7F:14:04:DC:98:F4:B2:4C:08:15:46:F3:AF X509v3 Authority Key Identifier: keyid:34:20:97:A4:08:3A:2B:31:78:9F:16:92:8A:1E:82:F5:C9:CD:A4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/342097A4083A2B31789F16928A1E82F5C9CDA419.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342097A4083A2B31789F16928A1E82F5C9CDA419.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/342097A4083A2B31789F16928A1E82F5C9CDA419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f1:e1:90:b8:75:f0:8b:03:3a:8f:cf:bb:8d:72:e3:da:a7: 1c:28:61:a2:8c:58:6f:65:8d:ec:54:51:ca:da:b4:14:df:4a: a1:99:cd:96:cc:a3:3b:f8:12:67:44:9d:85:b7:af:8c:a9:3a: eb:ea:18:24:b1:29:ad:95:3a:99:4e:b7:42:70:4c:99:57:d3: 54:56:6c:0f:e7:e8:3c:27:3a:87:01:65:9e:bf:eb:8f:d1:ec: a2:c8:2a:8d:f3:28:7a:7e:b3:7c:d1:18:33:1c:98:81:6e:41: 2b:c8:2a:e7:18:a1:f8:51:a7:25:a4:3e:3e:ac:3c:e7:96:70: af:d4:b2:ba:f2:28:fb:51:6e:4f:67:bb:cd:62:c3:62:a2:5a: af:50:ce:20:1a:85:b9:1c:9c:eb:21:06:ba:f5:24:20:87:7a: f4:8e:78:28:5c:37:b4:a9:2f:69:22:7b:a8:a0:a8:af:7b:a5: 25:95:b8:8d:43:10:1a:d6:f7:7f:6f:74:d6:3b:63:97:11:05: 83:1c:f7:30:d4:f3:45:9a:ca:61:4f:2b:66:f6:93:a0:f3:98: d9:e7:1a:d8:60:c1:97:70:d5:b5:40:a2:6b:da:cf:c0:49:eb: 0e:95:1a:6d:67:bc:86:d2:cd:7f:ec:22:4e:6e:e9:72:14:39: db:52:d3:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaMQu547H8h6+Dl7LXguxWmM+TrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDk3QTQwODNBMkIzMTc4OUYxNjkyOEExRTgyRjVD OUNEQTQxOTAeFw0yNTExMDMwODAzMjdaFw0yNTExMDQwODMyMjdaMDMxMTAvBgNV BAMTKDUzMDc4RDlCNzRBRjYzN0YxNDA0REM5OEY0QjI0QzA4MTU0NkYzQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX/ImicUmv5ISSLDCFcDZIXP4Z cy0cH8jhhdh0FqUru8bzmsIIpzHpy/vah7xnBSqPY2pGHDiDzf3Q7PmTGRG9+J02 pfQcpADlR1j7xFl1XyViT+m8kr+XiSD2fKAkIrff4/+ZakYK6vkOPVhMhDXOcYB0 VTAF/Ms0ZfhLjXgQWCwsuq/KFbSnmtyiGhlBhOVBYJo98WM7ZaYyAOekUDJRe6MJ sTt0r9aGtZorffOvXKGs68Qvla4rkNnhp6NX3PVntJONW4m0QFxYElRHuolXdI9b CXPlUkSPBTbOmFPO883wRjzAXpj+bphuU6uXG183SxvbAJHemJwvfL2zvzDRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUweNm3SvY38UBNyY9LJMCBVG868wHwYDVR0j BBgwFoAUNCCXpAg6KzF4nxaSih6C9cnNpBkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXI2UGJ5d0tVWDZ4U2txN3ZSZTlHWkNhNzFLMUtKakpjR25CVWlzM3J5 SEEvMC8zNDIwOTdBNDA4M0EyQjMxNzg5RjE2OTI4QTFFODJGNUM5Q0RBNDE5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0MjA5N0E0MDgzQTJCMzE3 ODlGMTY5MjhBMUU4MkY1QzlDREE0MTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXI2UGJ5d0tVWDZ4U2txN3ZSZTlHWkNhNzFLMUtKakpjR25CVWlzM3J5SEEvMC8z NDIwOTdBNDA4M0EyQjMxNzg5RjE2OTI4QTFFODJGNUM5Q0RBNDE5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVfHhkLh18IsDOo/Pu41y49qnHChhooxYb2WN7FRRytq0FN9KoZnNlsyjO/gS Z0SdhbevjKk66+oYJLEprZU6mU63QnBMmVfTVFZsD+foPCc6hwFlnr/rj9Hsosgq jfMoen6zfNEYMxyYgW5BK8gq5xih+FGnJaQ+Pqw855Zwr9SyuvIo+1FuT2e7zWLD YqJar1DOIBqFuRyc6yEGuvUkIId69I54KFw3tKkvaSJ7qKCor3ulJZW4jUMQGtb3 f2901jtjlxEFgxz3MNTzRZrKYU8rZvaToPOY2eca2GDBl3DVtUCia9rPwEnrDpUa bWe8htLNf+wiTm7pchQ521LT2Q== -----END CERTIFICATE-----Generated at Mon Nov 3 12:27:57 2025 by rpki-client