$ rpki-client -vvf rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft File: D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft (raw, json) Hash identifier: rMFQfKj9AxZpKwDh7g74uILrWsxJrXY2ng7cHkT9e50= Subject key identifier: 7C:B1:18:DE:3B:8A:86:9F:18:44:BA:4E:E1:64:0B:0C:E3:B5:BE:F6 Authority key identifier: D4:5D:43:F1:B6:0A:DF:D2:FE:33:99:6A:90:BB:B6:2E:F5:5A:1D:02 Certificate issuer: /CN=D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02 Certificate serial: 503F51F376CF28D351C2BE6340F01ED041F82453 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer Subject info access: rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft Manifest number: 33 Signing time: Mon 03 Nov 2025 10:18:59 +0000 Manifest this update: Mon 03 Nov 2025 10:13:59 +0000 Manifest next update: Tue 04 Nov 2025 14:06:59 +0000 Files and hashes: 1: 3139322e3134312e37362e302f32322d3233203d3e20323637343731.roa (hash: BAIjoYlkoz30iWzjTTZ7rECmmuGLwYnw0gEYlRfBtXA=) 2: D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.crl (hash: Naod9g5kKzTEKYipcreOpY1Rz3u7Pn5c4nmw6D6lw8k=) 3: 323830343a343230303a3a2f33322d3333203d3e20323637343731.roa (hash: ENOTPp+Zx/+E9r3MsBtUJ8AK0ZmsIRTEgOgOR3Mab9k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.crl rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 14:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:3f:51:f3:76:cf:28:d3:51:c2:be:63:40:f0:1e:d0:41:f8:24:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02 Validity Not Before: Nov 3 10:13:59 2025 GMT Not After : Nov 4 14:06:59 2025 GMT Subject: CN=7CB118DE3B8A869F1844BA4EE1640B0CE3B5BEF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:cd:ad:b8:3e:4f:1e:7d:88:19:9f:2c:e4: 9d:e0:97:09:4a:d0:3e:5e:8e:b5:28:78:1f:29:d2: fe:af:1d:18:49:d6:9e:9d:aa:69:21:11:c3:26:cb: 95:99:66:1b:8f:02:0c:4d:59:ca:92:01:a4:ca:98: 30:9b:27:2c:3e:1a:d1:28:05:e9:e7:47:42:50:b4: 8d:70:15:8c:5d:e4:d2:49:02:93:04:09:62:1a:ac: 9f:bd:a7:5f:1f:e3:e3:57:f4:79:80:a8:49:d9:03: be:6f:4c:f7:13:f8:fe:42:c4:73:be:5f:ce:62:a0: 9b:61:d8:26:68:a7:43:48:93:c7:4b:cc:7a:78:33: 32:fb:bf:49:f9:38:66:aa:8e:3d:b7:2d:42:9e:f8: 61:5b:e6:30:9f:a3:1e:93:e1:97:6f:d5:24:a9:10: b9:1b:60:a7:65:84:20:0a:74:02:87:9d:3c:cb:a1: 97:c3:c9:eb:2a:8a:a9:85:bd:0e:d4:8d:f4:b8:97: 55:92:7a:70:4f:0b:22:6f:db:58:60:39:e0:a4:49: d6:10:e5:86:17:60:56:21:a9:26:ef:8f:be:db:ca: d6:cd:59:8d:a7:8a:bb:c1:33:78:91:07:24:61:bf: 5b:e0:d0:c5:83:dd:ea:06:8d:8a:0e:55:5d:27:bf: ec:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B1:18:DE:3B:8A:86:9F:18:44:BA:4E:E1:64:0B:0C:E3:B5:BE:F6 X509v3 Authority Key Identifier: keyid:D4:5D:43:F1:B6:0A:DF:D2:FE:33:99:6A:90:BB:B6:2E:F5:5A:1D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c1:a5:84:fa:b9:41:29:a6:3e:7f:3a:59:f3:88:ee:62:db: 4b:93:4e:77:6d:2a:2d:4d:dd:16:a3:e2:30:23:ff:5f:2b:2a: 53:13:ac:79:4e:c5:fc:31:52:42:5b:ab:7c:83:98:a6:23:33: 7e:90:31:da:14:f2:97:e4:10:29:f1:30:1e:e4:50:8f:32:da: 2d:cd:36:9d:32:61:c4:bd:06:00:6e:cb:9c:9c:a1:85:e8:72: 5b:7b:17:a6:e5:90:d4:f1:58:b4:2a:b3:21:ee:f3:ee:f2:26: a5:81:82:a7:99:c3:44:7a:3b:98:eb:a7:d0:d2:a7:fb:3d:48: 81:eb:fb:31:8d:eb:07:a7:ee:96:21:3a:2a:e5:b6:9f:43:62: 62:07:dc:36:2f:80:2f:5e:c5:c5:34:0e:cf:dc:eb:a2:32:7f: df:54:d9:ac:4c:1d:3a:ea:a5:c7:37:ba:a0:75:59:d5:0b:24: 34:a0:61:b6:34:57:1c:9f:e6:b6:02:ee:86:0e:fa:59:dc:7b: f7:42:d1:ec:3f:e5:88:52:79:e0:df:b1:ed:22:06:eb:2e:7c: 94:71:ee:92:54:0f:25:db:03:35:af:d0:f6:16:44:73:0c:48: 5c:d2:f8:c2:d8:ed:6c:1e:07:31:d6:22:09:68:46:f5:2a:d1: bf:fe:51:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUD9R83bPKNNRwr5jQPAe0EH4JFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1RDQzRjFCNjBBREZEMkZFMzM5OTZBOTBCQkI2MkVG NTVBMUQwMjAeFw0yNTExMDMxMDEzNTlaFw0yNTExMDQxNDA2NTlaMDMxMTAvBgNV BAMTKDdDQjExOERFM0I4QTg2OUYxODQ0QkE0RUUxNjQwQjBDRTNCNUJFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8M2tuD5PHn2IGZ8s5J3glwlK 0D5ejrUoeB8p0v6vHRhJ1p6dqmkhEcMmy5WZZhuPAgxNWcqSAaTKmDCbJyw+GtEo BennR0JQtI1wFYxd5NJJApMECWIarJ+9p18f4+NX9HmAqEnZA75vTPcT+P5CxHO+ X85ioJth2CZop0NIk8dLzHp4MzL7v0n5OGaqjj23LUKe+GFb5jCfox6T4Zdv1SSp ELkbYKdlhCAKdAKHnTzLoZfDyesqiqmFvQ7UjfS4l1WSenBPCyJv21hgOeCkSdYQ 5YYXYFYhqSbvj77bytbNWY2nirvBM3iRByRhv1vg0MWD3eoGjYoOVV0nv+yPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfLEY3juKhp8YRLpO4WQLDOO1vvYwHwYDVR0j BBgwFoAU1F1D8bYK39L+M5lqkLu2LvVaHQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1lTYmRnMmRmVTl6S3FmbnN4U3BpYzhuRHB5RmJBN3R6N2VVRDhmUzV4 RHAvMC9ENDVENDNGMUI2MEFERkQyRkUzMzk5NkE5MEJCQjYyRUY1NUExRDAyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NUQ0M0YxQjYwQURGRDJG RTMzOTk2QTkwQkJCNjJFRjU1QTFEMDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1lTYmRnMmRmVTl6S3FmbnN4U3BpYzhuRHB5RmJBN3R6N2VVRDhmUzV4RHAvMC9E NDVENDNGMUI2MEFERkQyRkUzMzk5NkE5MEJCQjYyRUY1NUExRDAyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAesGlhPq5QSmmPn86WfOI7mLbS5NOd20qLU3dFqPiMCP/XysqUxOseU7F/DFS QlurfIOYpiMzfpAx2hTyl+QQKfEwHuRQjzLaLc02nTJhxL0GAG7LnJyhhehyW3sX puWQ1PFYtCqzIe7z7vImpYGCp5nDRHo7mOun0NKn+z1Igev7MY3rB6fuliE6KuW2 n0NiYgfcNi+AL17FxTQOz9zrojJ/31TZrEwdOuqlxze6oHVZ1QskNKBhtjRXHJ/m tgLuhg76Wdx790LR7D/liFJ54N+x7SIG6y58lHHuklQPJdsDNa/Q9hZEcwxIXNL4 wtjtbB4HMdYiCWhG9SrRv/5RIw== -----END CERTIFICATE-----Generated at Mon Nov 3 18:52:59 2025 by rpki-client