$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft File: 433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft (raw, json) Hash identifier: N+449YlEEcNuGdnJKurFo01Uf1E1kh7yActSS/vFrHk= Subject key identifier: 43:D3:27:C7:FA:A4:85:B0:07:E4:40:92:F7:CC:BC:4B:68:50:DF:6C Authority key identifier: 43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72 Certificate issuer: /CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72 Certificate serial: 0F53589B72414DBDB9BA5F931F8CA04216993B45 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer Subject info access: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft Manifest number: 02FD Signing time: Mon 03 Nov 2025 14:00:31 +0000 Manifest this update: Mon 03 Nov 2025 13:55:31 +0000 Manifest next update: Tue 04 Nov 2025 14:16:31 +0000 Files and hashes: 1: 34352e3232392e36382e302f32332d3233203d3e20323637323232.roa (hash: UifxwEG7vJxx646ArwKrEjuPH/DVz2naB23cASE80ZE=) 2: 433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl (hash: Dmh7EniBgZPu/fg+MdgcsPQ/6oOcEs5WcmuiQv07VfY=) 3: 34352e3232392e36382e302f32322d3232203d3e20323637323232.roa (hash: Nsf+Md4t/x2sYg0OO0lur7GyFGxQJtAf2WVPKyN2VSE=) 4: 323830343a346132633a3a2f33322d3438203d3e20323637323232.roa (hash: K65c6CQDYmeBQFWU/ufGUImXBQEHhvkmt5bgL91Dh7s=) 5: 34352e3232392e37302e302f32332d3233203d3e20323637323232.roa (hash: YImMQr+RMDsH/GDqY6kCVtep65OxcR2ekjIL8Y2gbew=) 6: 34352e3232392e37312e302f32342d3234203d3e20323637323232.roa (hash: uFzjyJPTQCmSwhW7HJ86POCK4QcKTF3sb1TVogNfEdw=) 7: 34352e3232392e36392e302f32342d3234203d3e20323637323232.roa (hash: KB81wjFs9ztD8dGkHE2D/VsScjjuO/L+1/K7dgHU48I=) 8: 34352e3232392e37302e302f32342d3234203d3e20323637323232.roa (hash: 2CIXDHlG3wiwLu0oPaWa0tJIZ6+F0sTe9D4EQaQ59wc=) 9: 34352e3232392e36382e302f32342d3234203d3e20323637323232.roa (hash: OqeJB+mozeDEhDovDsxXjuzpU5+h4/FmiYTzQoaLAFc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 14:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:53:58:9b:72:41:4d:bd:b9:ba:5f:93:1f:8c:a0:42:16:99:3b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72 Validity Not Before: Nov 3 13:55:31 2025 GMT Not After : Nov 4 14:16:31 2025 GMT Subject: CN=43D327C7FAA485B007E44092F7CCBC4B6850DF6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3b:be:d6:db:e7:67:f2:3f:aa:de:18:35:da: f1:cb:74:76:23:c9:6b:a5:1f:cf:f4:70:1e:46:53: 06:88:d8:63:7b:41:88:2a:c8:0c:a1:55:f7:ff:bf: c7:d8:79:2e:cf:cb:eb:22:e1:c2:bb:58:c9:93:d6: 76:af:f1:dc:dc:37:4b:65:61:c8:ab:48:6c:02:86: 86:96:7e:28:b6:a6:4b:52:83:b2:9e:e0:99:c9:6e: ba:31:4f:11:76:db:76:4f:5f:12:f3:9b:e7:e3:11: cd:8d:44:2f:21:8a:93:cc:1d:91:1e:a2:6d:03:d3: 7e:64:83:26:12:f8:46:f8:96:8e:50:7c:31:17:ba: 6e:6a:01:24:dc:f7:cd:a8:02:64:06:25:8c:dc:6a: 76:89:83:6c:4c:32:c6:74:6b:e1:2f:30:d6:96:5f: 18:06:ae:3b:29:29:e3:e3:70:35:db:fa:87:19:93: e6:91:80:5c:29:c2:eb:15:48:95:9b:74:e7:3b:d0: 6f:65:a7:5c:ee:d2:a6:1a:9c:b1:d1:46:c9:0c:47: ac:33:b2:ab:74:1e:71:09:df:0f:c6:eb:25:af:bb: 76:3e:40:7b:ac:1a:be:1e:25:4e:4c:5a:6e:80:73: 67:6c:44:c8:a1:e4:23:e6:a7:a5:1e:b3:7a:b7:19: 86:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D3:27:C7:FA:A4:85:B0:07:E4:40:92:F7:CC:BC:4B:68:50:DF:6C X509v3 Authority Key Identifier: keyid:43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:aa:2d:6f:61:0c:01:3c:47:67:33:ac:71:99:e9:c1:51:70: 42:a1:47:8e:a5:aa:74:91:e9:0d:a2:db:62:ec:f7:32:bb:1a: 8c:e1:ae:3b:08:d5:8b:a2:78:21:d5:84:ba:dc:41:57:e5:a3: 4e:02:23:b6:44:3f:4b:18:7a:b0:0e:af:57:96:37:c2:d1:7a: 48:3a:10:91:fe:1d:7a:f6:78:7a:8a:b5:8a:e3:6d:9e:20:65: 62:d2:dc:68:1d:25:6a:73:a4:08:74:9c:6f:2e:e9:06:0f:31: 1e:93:bb:5c:df:83:2a:74:e7:43:d3:2a:0a:4f:3e:64:ee:f7: c5:23:82:37:8d:b0:1a:e4:a5:e4:78:f9:3f:73:25:81:94:05: f4:f0:88:1f:09:05:2e:99:d6:f9:a6:ae:a7:69:51:6d:14:c3: 68:25:cf:b4:aa:dc:5a:38:96:eb:ed:3a:b5:91:66:d0:f3:72: ad:5c:75:41:bd:8c:9d:13:a1:c2:19:fd:79:e7:3c:43:98:32: 4a:38:d1:a4:00:cc:55:72:7b:d0:c2:ec:39:26:0a:75:d9:af: 2a:f0:ff:01:a4:9a:3a:d5:01:20:3c:f0:8d:16:25:97:06:f5: 18:72:8e:73:d2:2f:24:0e:dd:30:91:ed:8e:2b:c9:da:64:fc: b7:61:89:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD1NYm3JBTb25ul+TH4ygQhaZO0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzQkQ0Njk0ODQ1QkE2NUNBNEFFMUJGNjIyQTFDNTk5 Q0I1M0Y3MjAeFw0yNTExMDMxMzU1MzFaFw0yNTExMDQxNDE2MzFaMDMxMTAvBgNV BAMTKDQzRDMyN0M3RkFBNDg1QjAwN0U0NDA5MkY3Q0NCQzRCNjg1MERGNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgO77W2+dn8j+q3hg12vHLdHYj yWulH8/0cB5GUwaI2GN7QYgqyAyhVff/v8fYeS7Py+si4cK7WMmT1nav8dzcN0tl YcirSGwChoaWfii2pktSg7Ke4JnJbroxTxF223ZPXxLzm+fjEc2NRC8hipPMHZEe om0D035kgyYS+Eb4lo5QfDEXum5qASTc982oAmQGJYzcanaJg2xMMsZ0a+EvMNaW XxgGrjspKePjcDXb+ocZk+aRgFwpwusVSJWbdOc70G9lp1zu0qYanLHRRskMR6wz sqt0HnEJ3w/G6yWvu3Y+QHusGr4eJU5MWm6Ac2dsRMih5CPmp6Ues3q3GYYtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQ9Mnx/qkhbAH5ECS98y8S2hQ32wwHwYDVR0j BBgwFoAUQzvUaUhFumXKSuG/YiocWZy1P3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1o a2UvMS80MzNCRDQ2OTQ4NDVCQTY1Q0E0QUUxQkY2MjJBMUM1OTlDQjUzRjcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzM0JENDY5NDg0NUJBNjVD QTRBRTFCRjYyMkExQzU5OUNCNTNGNzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1oa2UvMS80 MzNCRDQ2OTQ4NDVCQTY1Q0E0QUUxQkY2MjJBMUM1OTlDQjUzRjcyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVaotb2EMATxHZzOscZnpwVFwQqFHjqWqdJHpDaLbYuz3MrsajOGuOwjVi6J4 IdWEutxBV+WjTgIjtkQ/Sxh6sA6vV5Y3wtF6SDoQkf4devZ4eoq1iuNtniBlYtLc aB0lanOkCHScby7pBg8xHpO7XN+DKnTnQ9MqCk8+ZO73xSOCN42wGuSl5Hj5P3Ml gZQF9PCIHwkFLpnW+aaup2lRbRTDaCXPtKrcWjiW6+06tZFm0PNyrVx1Qb2MnROh whn9eec8Q5gySjjRpADMVXJ70MLsOSYKddmvKvD/AaSaOtUBIDzwjRYllwb1GHKO c9IvJA7dMJHtjivJ2mT8t2GJqg== -----END CERTIFICATE-----Generated at Mon Nov 3 19:40:08 2025 by rpki-client