$ rpki-client -vvf rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.mft File: B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.mft (raw, json) Hash identifier: sLnF2L3Qx3ROzg7pTijV6M8QOKGAsITDr/QhpiKrKv0= Subject key identifier: 8B:6E:F1:2E:0F:2C:0C:66:C2:BE:07:F5:A7:10:52:3D:EA:06:F0:B1 Authority key identifier: B9:9B:DA:72:41:B9:BF:DF:2B:43:2F:5E:95:92:DA:5F:69:1D:CA:8F Certificate issuer: /CN=B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F Certificate serial: 3E96FFFD25B2BE1EB0864D68297796BDA6BFE769 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.cer Subject info access: rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.mft Manifest number: 02AC Signing time: Sun 02 Nov 2025 19:07:12 +0000 Manifest this update: Sun 02 Nov 2025 19:02:12 +0000 Manifest next update: Mon 03 Nov 2025 20:53:12 +0000 Files and hashes: 1: 3230302e3131352e3130382e302f32322d3332203d3e20323730323837.roa (hash: MahrU5RGiFko266FfGsh7jw0RjbYyagB5t7jrfGobxw=) 2: B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.crl (hash: w8T25CUY+iY9XaGMRWy7OF16cds+KHFNrsG36zcU4Ss=) 3: 323830343a363962383a3a2f33322d313238203d3e20323730323837.roa (hash: qC33EsLaSMKqs9WjVMptH9ihM4Y+3iguki8RVIHr+i0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.crl rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 20:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:96:ff:fd:25:b2:be:1e:b0:86:4d:68:29:77:96:bd:a6:bf:e7:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F Validity Not Before: Nov 2 19:02:12 2025 GMT Not After : Nov 3 20:53:12 2025 GMT Subject: CN=8B6EF12E0F2C0C66C2BE07F5A710523DEA06F0B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:13:1e:2b:0f:73:3f:8a:bd:c5:37:e1:5c:39: 13:09:50:50:92:13:70:1d:f1:d6:df:d0:e8:34:56: ac:68:32:52:ea:cc:3e:3b:08:ae:fe:68:95:3e:f7: bc:84:fb:0c:03:53:0d:92:62:b9:41:11:f0:fe:98: 39:6c:bc:10:81:40:41:b1:c4:f7:72:c9:61:c8:0d: b3:06:54:48:c8:7f:f3:47:cd:89:21:44:bf:74:c6: 85:d5:c4:5d:72:0f:2e:61:5e:ff:68:7b:3a:7b:89: 53:14:f5:4a:cc:9a:c9:85:1e:e6:3a:9b:76:10:72: 60:15:d7:4d:65:d7:2b:5a:96:e8:2f:b0:11:85:93: f5:44:12:e5:88:c9:bf:5f:e9:75:f2:d1:7b:f2:02: e7:17:51:46:7a:38:8b:35:9f:b7:90:0c:97:86:cc: 2f:9e:3b:b4:ec:cb:0f:30:7d:c1:d5:af:89:b3:25: aa:86:55:17:0b:57:1d:f2:24:e3:ad:c0:45:63:46: a1:e8:2c:94:bf:4d:1a:ab:21:e0:89:72:ab:f2:48: 49:2c:a4:32:19:c1:97:95:d0:30:29:7c:02:a9:72: 10:17:69:24:c4:24:01:e4:02:cc:77:7d:89:a6:56: 06:56:ee:b1:0e:f4:96:35:62:50:b5:28:d1:10:b6: 79:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6E:F1:2E:0F:2C:0C:66:C2:BE:07:F5:A7:10:52:3D:EA:06:F0:B1 X509v3 Authority Key Identifier: keyid:B9:9B:DA:72:41:B9:BF:DF:2B:43:2F:5E:95:92:DA:5F:69:1D:CA:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f9:14:8b:3a:b9:cb:0e:b1:34:7b:be:8e:de:c8:b7:11:c5: 6b:b7:0e:e5:90:d7:ea:eb:2d:2f:13:3c:d0:cf:2d:3d:d5:08: 30:8b:46:93:ff:25:ff:4e:07:b1:b0:06:46:7a:bf:01:21:b9: 34:08:3c:a0:80:57:09:ec:38:51:c5:7a:fa:f5:68:f8:c0:38: 1a:8b:f0:43:8a:30:43:54:df:6f:47:21:a1:ba:fa:46:3f:af: 07:45:6d:1a:55:88:c0:6a:6d:53:75:28:3e:ee:02:83:30:0f: 36:73:f6:00:1d:0d:12:35:21:89:83:45:be:f2:f4:2a:8a:42: 62:e1:57:60:cd:10:f7:71:64:cf:b7:91:c3:3e:6d:25:26:9e: 8e:28:bf:ba:0c:ec:8f:57:4a:31:b0:1e:c8:e4:af:6c:fd:07: 8d:82:af:4b:8d:e7:aa:5a:1d:62:d9:89:d7:8c:02:df:67:ef: 8b:98:2f:72:8e:85:81:c8:f7:ba:98:ae:ae:fe:e1:67:93:e7: 75:a3:f3:70:b6:30:49:8c:5d:f6:cb:51:f4:9a:4c:cc:5a:13: 25:50:51:70:77:ad:a3:17:f1:dc:14:a8:63:5a:85:1b:53:bc: 90:67:b8:01:7c:d5:47:36:42:49:b3:89:79:c9:65:8e:12:63: 97:c6:42:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPpb//SWyvh6whk1oKXeWvaa/52kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk5QkRBNzI0MUI5QkZERjJCNDMyRjVFOTU5MkRBNUY2 OTFEQ0E4RjAeFw0yNTExMDIxOTAyMTJaFw0yNTExMDMyMDUzMTJaMDMxMTAvBgNV BAMTKDhCNkVGMTJFMEYyQzBDNjZDMkJFMDdGNUE3MTA1MjNERUEwNkYwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiEx4rD3M/ir3FN+FcORMJUFCS E3Ad8dbf0Og0VqxoMlLqzD47CK7+aJU+97yE+wwDUw2SYrlBEfD+mDlsvBCBQEGx xPdyyWHIDbMGVEjIf/NHzYkhRL90xoXVxF1yDy5hXv9oezp7iVMU9UrMmsmFHuY6 m3YQcmAV101l1ytalugvsBGFk/VEEuWIyb9f6XXy0XvyAucXUUZ6OIs1n7eQDJeG zC+eO7Tsyw8wfcHVr4mzJaqGVRcLVx3yJOOtwEVjRqHoLJS/TRqrIeCJcqvySEks pDIZwZeV0DApfAKpchAXaSTEJAHkAsx3fYmmVgZW7rEO9JY1YlC1KNEQtnlZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUi27xLg8sDGbCvgf1pxBSPeoG8LEwHwYDVR0j BBgwFoAUuZvackG5v98rQy9elZLaX2kdyo8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkN4ZkcxdTM4QVNkcUFEMVVEWkFhejdDaUp3N3pBM0JISEx5WHdMcnB2 c1QvMS9COTlCREE3MjQxQjlCRkRGMkI0MzJGNUU5NTkyREE1RjY5MURDQThGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5OUJEQTcyNDFCOUJGREYy QjQzMkY1RTk1OTJEQTVGNjkxRENBOEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NkN4ZkcxdTM4QVNkcUFEMVVEWkFhejdDaUp3N3pBM0JISEx5WHdMcnB2c1QvMS9C OTlCREE3MjQxQjlCRkRGMkI0MzJGNUU5NTkyREE1RjY5MURDQThGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN/kUizq5yw6xNHu+jt7ItxHFa7cO5ZDX6ustLxM80M8tPdUIMItGk/8l/04H sbAGRnq/ASG5NAg8oIBXCew4UcV6+vVo+MA4GovwQ4owQ1Tfb0chobr6Rj+vB0Vt GlWIwGptU3UoPu4CgzAPNnP2AB0NEjUhiYNFvvL0KopCYuFXYM0Q93Fkz7eRwz5t JSaejii/ugzsj1dKMbAeyOSvbP0HjYKvS43nqlodYtmJ14wC32fvi5gvco6Fgcj3 upiurv7hZ5PndaPzcLYwSYxd9stR9JpMzFoTJVBRcHetoxfx3BSoY1qFG1O8kGe4 AXzVRzZCSbOJeclljhJjl8ZCaQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:25:02 2025 by rpki-client