$ rpki-client -vvf rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.mft File: 71E169D36940CB71A5ADBB76D2764F1539336D84.mft (raw, json) Hash identifier: WqwjvwFizbBmdM0m8EEx2usuIaNOsF45g32aZ72Etm8= Subject key identifier: 7E:0B:2E:97:CC:CF:CC:A3:E3:95:65:5A:5B:48:1F:34:25:DA:36:3D Authority key identifier: 71:E1:69:D3:69:40:CB:71:A5:AD:BB:76:D2:76:4F:15:39:33:6D:84 Certificate issuer: /CN=71E169D36940CB71A5ADBB76D2764F1539336D84 Certificate serial: 0B9FFA1D1D3C13E5630A0B1F8D1E698F704F410D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E169D36940CB71A5ADBB76D2764F1539336D84.cer Subject info access: rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.mft Manifest number: 0302 Signing time: Sun 02 Nov 2025 20:23:03 +0000 Manifest this update: Sun 02 Nov 2025 20:18:03 +0000 Manifest next update: Mon 03 Nov 2025 23:24:03 +0000 Files and hashes: 1: 71E169D36940CB71A5ADBB76D2764F1539336D84.crl (hash: I7ikHxFHcw1DF1tewp/5DyYVpiNACJkAZW7fhWx8ylQ=) 2: 323830343a326536383a3a2f33322d3438203d3e20323635333434.roa (hash: bHFBloEfVs+bqeizWiYMoRScnZJIwlQ9LRbZNiJcxLQ=) 3: 3136382e3138312e3230302e302f32322d3234203d3e20323635333434.roa (hash: zMA1qZMtxdFHgVD1RtpPHbqRk0ZCBnEGX7PlSSdjefI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.crl rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E169D36940CB71A5ADBB76D2764F1539336D84.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 23:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:9f:fa:1d:1d:3c:13:e5:63:0a:0b:1f:8d:1e:69:8f:70:4f:41:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E169D36940CB71A5ADBB76D2764F1539336D84 Validity Not Before: Nov 2 20:18:03 2025 GMT Not After : Nov 3 23:24:03 2025 GMT Subject: CN=7E0B2E97CCCFCCA3E395655A5B481F3425DA363D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:fc:bb:5e:e0:8f:ef:67:09:ba:92:53:df: ca:bb:9d:b4:44:80:ea:8d:e6:05:a1:7b:6c:0c:1e: fb:19:f0:a1:37:fd:2b:c8:a8:17:7f:99:5f:ff:01: 14:6a:83:0b:44:fb:9f:0c:96:0f:c0:2f:04:93:40: 1f:63:97:de:2b:d4:ab:e3:fd:41:0a:91:8b:85:3b: b3:e3:e3:8e:9e:5c:d4:cc:99:89:c1:b9:12:b9:bc: 4d:02:f0:21:43:d0:dc:18:ba:e1:80:27:32:61:a8: cb:73:c6:ce:83:13:b9:99:41:8b:e1:95:d6:13:50: b9:5c:2a:1c:9c:33:e4:ce:8e:bb:93:57:b2:05:01: 56:83:99:06:58:d4:61:71:c0:85:06:98:9a:1b:4d: 46:d3:e4:67:d4:0b:85:ec:2f:80:77:db:bc:1f:d8: 82:3d:14:34:87:3c:cf:2e:5e:8d:73:01:9b:e5:6f: 0a:c6:b0:46:e3:4d:ee:31:17:08:79:55:8b:a1:bf: 06:43:84:d7:1d:54:0c:61:53:da:4f:37:8e:fb:d6: 00:d4:38:23:d4:99:6b:b1:80:e9:d0:78:2c:22:62: ca:8a:f0:95:ba:1d:20:bf:27:bb:10:02:f6:f3:ed: f4:ed:4c:30:4f:fd:85:f9:0d:87:94:3e:1e:71:ae: d7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0B:2E:97:CC:CF:CC:A3:E3:95:65:5A:5B:48:1F:34:25:DA:36:3D X509v3 Authority Key Identifier: keyid:71:E1:69:D3:69:40:CB:71:A5:AD:BB:76:D2:76:4F:15:39:33:6D:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E169D36940CB71A5ADBB76D2764F1539336D84.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:fd:0f:dc:cd:d1:3a:08:40:db:86:58:15:79:cc:ab:cb:34: 1e:b9:2b:85:9b:b2:16:4b:87:2b:22:42:4f:8d:bb:10:ca:ec: 58:e6:6e:9a:56:d2:f1:83:cc:d8:6b:ac:89:47:13:b6:fe:4b: 6b:4f:75:e5:60:c8:f6:39:a6:14:60:ee:57:bc:2f:fc:5d:6c: 80:3a:1e:03:2a:90:f6:a4:d9:31:f5:c5:36:bd:c9:00:f3:c3: a1:cc:b7:93:eb:61:5e:7b:c7:91:6d:fa:9c:9d:11:fd:5b:54: 5c:6f:58:2a:a0:72:30:af:01:b0:24:fb:df:fe:ae:eb:4f:9e: 21:5b:71:dc:82:ab:ad:af:9f:9b:47:79:0b:fb:12:aa:0e:21: 5a:f6:6a:a9:a1:a2:21:5a:84:59:15:12:39:0c:82:a0:01:27: d9:e1:60:eb:6b:fd:b1:79:ad:0b:33:58:1a:94:f4:8b:12:fd: 81:b1:e9:2d:65:76:71:85:e2:f0:34:52:92:e5:c9:93:35:af: 60:50:31:aa:47:18:6e:34:26:d7:37:76:f9:b5:dc:de:f8:d8: 74:47:1c:37:ad:45:f2:d0:13:01:f3:7d:57:f2:8d:89:6a:b2: b3:87:48:f5:79:02:e7:08:de:d8:39:8e:58:a8:78:de:30:0c: 26:40:6b:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUC5/6HR08E+VjCgsfjR5pj3BPQQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFMTY5RDM2OTQwQ0I3MUE1QURCQjc2RDI3NjRGMTUz OTMzNkQ4NDAeFw0yNTExMDIyMDE4MDNaFw0yNTExMDMyMzI0MDNaMDMxMTAvBgNV BAMTKDdFMEIyRTk3Q0NDRkNDQTNFMzk1NjU1QTVCNDgxRjM0MjVEQTM2M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsSvy7XuCP72cJupJT38q7nbRE gOqN5gWhe2wMHvsZ8KE3/SvIqBd/mV//ARRqgwtE+58Mlg/ALwSTQB9jl94r1Kvj /UEKkYuFO7Pj446eXNTMmYnBuRK5vE0C8CFD0NwYuuGAJzJhqMtzxs6DE7mZQYvh ldYTULlcKhycM+TOjruTV7IFAVaDmQZY1GFxwIUGmJobTUbT5GfUC4XsL4B327wf 2II9FDSHPM8uXo1zAZvlbwrGsEbjTe4xFwh5VYuhvwZDhNcdVAxhU9pPN4771gDU OCPUmWuxgOnQeCwiYsqK8JW6HSC/J7sQAvbz7fTtTDBP/YX5DYeUPh5xrtfLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfgsul8zPzKPjlWVaW0gfNCXaNj0wHwYDVR0j BBgwFoAUceFp02lAy3Glrbt20nZPFTkzbYQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2prZlVoYmhkeEh2S3FLaFcyd05EOEhtWTRzSlF6N3UyN0JFWXk4RVF3 TDUvMS83MUUxNjlEMzY5NDBDQjcxQTVBREJCNzZEMjc2NEYxNTM5MzM2RDg0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRTE2OUQzNjk0MENCNzFB NUFEQkI3NkQyNzY0RjE1MzkzMzZEODQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2prZlVoYmhkeEh2S3FLaFcyd05EOEhtWTRzSlF6N3UyN0JFWXk4RVF3TDUvMS83 MUUxNjlEMzY5NDBDQjcxQTVBREJCNzZEMjc2NEYxNTM5MzM2RDg0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGv0P3M3ROghA24ZYFXnMq8s0HrkrhZuyFkuHKyJCT427EMrsWOZumlbS8YPM 2GusiUcTtv5La0915WDI9jmmFGDuV7wv/F1sgDoeAyqQ9qTZMfXFNr3JAPPDocy3 k+thXnvHkW36nJ0R/VtUXG9YKqByMK8BsCT73/6u60+eIVtx3IKrra+fm0d5C/sS qg4hWvZqqaGiIVqEWRUSOQyCoAEn2eFg62v9sXmtCzNYGpT0ixL9gbHpLWV2cYXi 8DRSkuXJkzWvYFAxqkcYbjQm1zd2+bXc3vjYdEccN61F8tATAfN9V/KNiWqys4dI 9XkC5wje2DmOWKh43jAMJkBr0w== -----END CERTIFICATE-----Generated at Mon Nov 3 05:44:07 2025 by rpki-client