$ rpki-client -vvf rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft File: D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft (raw, json) Hash identifier: tYRkLmfH5okod8HOaD6Rq8w1xYxCnH7WJdkMoaNCXlY= Subject key identifier: BD:AE:D0:4E:BA:B6:8F:52:9E:09:EA:77:B1:2B:46:B1:B8:E9:52:AC Authority key identifier: D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11 Certificate issuer: /CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211 Certificate serial: 667074E2BE2BE4B0A4C43698F5A96F955835FFEB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer Subject info access: rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft Manifest number: CA Signing time: Sun 02 Nov 2025 20:00:14 +0000 Manifest this update: Sun 02 Nov 2025 19:55:14 +0000 Manifest next update: Mon 03 Nov 2025 20:48:14 +0000 Files and hashes: 1: D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl (hash: fPi1Xs6b0EUXoAHCdPPQxW9pvgrfj/eLgLm84GeLSLg=) 2: 323830343a386262633a3a2f33322d313238203d3e20323733373535.roa (hash: 3uQTnhhz7H1wtPzniSKTigXw3gRffdvQaJmnZ+hmrrA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 20:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:70:74:e2:be:2b:e4:b0:a4:c4:36:98:f5:a9:6f:95:58:35:ff:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211 Validity Not Before: Nov 2 19:55:14 2025 GMT Not After : Nov 3 20:48:14 2025 GMT Subject: CN=BDAED04EBAB68F529E09EA77B12B46B1B8E952AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:a2:fd:c9:7d:a3:38:c1:86:e8:59:ee:54: 57:21:eb:57:69:7a:fc:8e:fc:57:23:eb:5a:6f:22: e5:f4:b8:38:40:e2:fb:8c:48:6a:86:bc:6f:c2:0f: ee:d1:1d:62:6f:37:3a:f2:4a:c5:cd:29:6a:ab:d4: a7:ac:ec:ca:4e:25:ba:51:62:bf:12:ca:de:8a:c2: 54:1c:cb:55:40:74:c1:da:fd:60:f4:71:8b:70:2f: 6e:8a:ce:8b:66:8e:52:bd:35:ae:2a:1f:90:ad:dc: 59:ac:41:7b:82:a0:e0:29:c9:7d:e1:82:5e:14:f5: 49:12:a9:83:12:f8:94:4d:78:79:93:8b:eb:18:06: 5b:94:a3:07:cc:ac:c1:2e:f8:bc:79:86:3c:32:e5: 9f:e7:0e:af:61:0f:58:19:59:d8:75:bc:52:55:a0: a0:b2:fc:05:ad:d9:e8:12:5e:07:61:d1:9b:9a:86: 5c:bc:cd:dc:1e:7b:39:fc:33:2e:c2:da:ce:6e:c7: 12:47:67:09:7b:01:af:fe:50:fb:54:a1:69:ab:58: e0:ce:c3:50:e8:e8:25:fd:45:6b:26:95:93:12:d5: db:cc:4d:88:17:b6:9d:6c:f3:21:f5:a6:62:93:9f: f5:03:c8:ef:84:7b:d6:36:26:4d:79:e0:6b:81:f4: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AE:D0:4E:BA:B6:8F:52:9E:09:EA:77:B1:2B:46:B1:B8:E9:52:AC X509v3 Authority Key Identifier: keyid:D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:a3:ce:ba:af:3d:cf:6f:bb:c6:bd:52:f2:57:2b:7f:08:d4: 60:e9:03:95:88:0f:7f:6c:a5:6b:86:0f:14:e0:60:35:31:85: 22:bc:db:2b:6f:31:06:79:78:18:95:8b:ad:ef:cc:6b:9c:28: 48:51:1e:1d:88:29:96:fd:e9:41:c3:5e:91:33:98:57:e7:c6: 95:27:54:01:d1:ec:47:2b:86:4e:c4:fa:08:cb:be:04:67:2f: 06:64:01:50:a6:96:76:65:9f:d4:15:55:1d:cd:2e:d5:a1:a7: ea:e8:3c:30:c3:6c:ef:67:71:27:d9:06:f7:ac:ea:e2:f0:72: 57:cb:2e:c5:62:5d:2b:f5:c8:1d:c7:82:b1:86:ef:96:fa:ff: be:eb:23:8a:b0:46:f2:e0:1e:d0:7d:b3:e0:6f:a8:66:cb:db: ed:36:e0:7f:58:ba:f2:d7:ab:be:f2:55:8e:9a:26:58:48:5c: 18:b6:62:d0:88:ab:02:69:c1:35:8f:8b:21:11:3d:e8:0f:57: 5f:3f:3d:eb:9c:2b:a6:b5:e2:a8:93:e6:6d:e0:34:ae:77:1c: 21:b6:da:fa:8b:5c:9d:ba:89:32:13:9d:8c:66:a3:4b:92:b2: 7d:86:1a:74:ca:27:7c:d9:78:ad:7f:aa:f2:a7:29:68:79:d0: 3c:58:a8:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZnB04r4r5LCkxDaY9alvlVg1/+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3RDNFQUM3RDYwQ0FCN0JFODQxQUY1MkZFNUJEM0JF NzhEQjIxMTAeFw0yNTExMDIxOTU1MTRaFw0yNTExMDMyMDQ4MTRaMDMxMTAvBgNV BAMTKEJEQUVEMDRFQkFCNjhGNTI5RTA5RUE3N0IxMkI0NkIxQjhFOTUyQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0cqL9yX2jOMGG6FnuVFch61dp evyO/Fcj61pvIuX0uDhA4vuMSGqGvG/CD+7RHWJvNzrySsXNKWqr1Kes7MpOJbpR Yr8Syt6KwlQcy1VAdMHa/WD0cYtwL26KzotmjlK9Na4qH5Ct3FmsQXuCoOApyX3h gl4U9UkSqYMS+JRNeHmTi+sYBluUowfMrMEu+Lx5hjwy5Z/nDq9hD1gZWdh1vFJV oKCy/AWt2egSXgdh0Zuahly8zdweezn8My7C2s5uxxJHZwl7Aa/+UPtUoWmrWODO w1Do6CX9RWsmlZMS1dvMTYgXtp1s8yH1pmKTn/UDyO+Ee9Y2Jk154GuB9O2ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUva7QTrq2j1KeCep3sStGsbjpUqwwHwYDVR0j BBgwFoAU0H0+rH1gyre+hBr1L+W9O+eNshEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODZoa2llbWhEd2VQMUwxcGtQNzhMdUIyVVRUWWZFNnIzRVpQTGJ3M2ZR eDMvMC9EMDdEM0VBQzdENjBDQUI3QkU4NDFBRjUyRkU1QkQzQkU3OERCMjExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwN0QzRUFDN0Q2MENBQjdC RTg0MUFGNTJGRTVCRDNCRTc4REIyMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODZoa2llbWhEd2VQMUwxcGtQNzhMdUIyVVRUWWZFNnIzRVpQTGJ3M2ZReDMvMC9E MDdEM0VBQzdENjBDQUI3QkU4NDFBRjUyRkU1QkQzQkU3OERCMjExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE6POuq89z2+7xr1S8lcrfwjUYOkDlYgPf2yla4YPFOBgNTGFIrzbK28xBnl4 GJWLre/Ma5woSFEeHYgplv3pQcNekTOYV+fGlSdUAdHsRyuGTsT6CMu+BGcvBmQB UKaWdmWf1BVVHc0u1aGn6ug8MMNs72dxJ9kG96zq4vByV8suxWJdK/XIHceCsYbv lvr/vusjirBG8uAe0H2z4G+oZsvb7Tbgf1i68tervvJVjpomWEhcGLZi0IirAmnB NY+LIRE96A9XXz8965wrprXiqJPmbeA0rnccIbba+otcnbqJMhOdjGajS5KyfYYa dMonfNl4rX+q8qcpaHnQPFioAQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:43 2025 by rpki-client