$ rpki-client -vvf rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft File: 166002DF14C56775A516493F63DE105DB90809F3.mft (raw, json) Hash identifier: qzinRjGJ47S2mPNN+2zhjb9IPgzbT7fQBvagIY+UFQY= Subject key identifier: 80:B2:4B:67:3E:07:09:8D:35:31:32:89:2C:BA:EB:E8:45:69:4A:50 Authority key identifier: 16:60:02:DF:14:C5:67:75:A5:16:49:3F:63:DE:10:5D:B9:08:09:F3 Certificate issuer: /CN=166002DF14C56775A516493F63DE105DB90809F3 Certificate serial: 7E1AB0739524A626BD36684DAB18B17D0507D7FC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft Manifest number: 0116 Signing time: Mon 03 Nov 2025 14:40:23 +0000 Manifest this update: Mon 03 Nov 2025 14:35:23 +0000 Manifest next update: Tue 04 Nov 2025 15:11:23 +0000 Files and hashes: 1: 3137302e3233392e3137362e302f32322d3332203d3e20323635323339.roa (hash: mUHah8NtMU4Mwl/oVJwau4tBwzo8P/nJRcYyoHkAOes=) 2: 3136372e3235302e3235322e302f32322d3332203d3e20323635323339.roa (hash: iQm1N7IdGlMcbLJXDQpyRNEhSnB/X9hAFXnkCV0tsnw=) 3: 323830343a326362383a3a2f33322d313238203d3e20323635323339.roa (hash: PHSDjfnBHkB9HmZhbGZ5q3XuKfWc/d8jLBkmMXoaauc=) 4: 166002DF14C56775A516493F63DE105DB90809F3.crl (hash: vKYNSCV9cNgY7zjhty1hFfB2Xad+k/oMZoSPsjM4WMM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.crl rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 15:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:1a:b0:73:95:24:a6:26:bd:36:68:4d:ab:18:b1:7d:05:07:d7:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166002DF14C56775A516493F63DE105DB90809F3 Validity Not Before: Nov 3 14:35:23 2025 GMT Not After : Nov 4 15:11:23 2025 GMT Subject: CN=80B24B673E07098D353132892CBAEBE845694A50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:56:0b:0e:ac:a2:1e:51:0e:1b:25:51:52:48: 44:46:03:43:2b:4a:0e:a6:cc:2b:fd:69:fd:c4:d2: be:1a:71:88:60:ca:5d:e0:58:d8:5c:df:d7:71:f0: df:2d:ac:22:ed:16:f7:47:5a:22:bc:18:b8:f0:c4: 06:4b:cf:44:51:ef:b2:9c:92:74:17:65:c6:84:aa: 44:7c:df:4c:bf:72:60:91:42:95:40:df:1d:d3:3c: 30:18:6f:fc:b6:82:01:ba:21:31:ce:ce:3e:d7:5a: 0f:fa:b3:43:19:8f:14:8a:b4:3a:a4:ab:ad:66:be: 4f:53:fb:1f:c6:7f:b0:4d:2a:cf:5b:96:29:67:b3: d5:74:8e:f4:35:c4:cf:d4:86:77:bf:71:a3:ae:10: 23:b8:5c:27:85:57:56:bd:24:9d:ab:f5:67:07:aa: d1:59:43:e5:fb:ca:85:9a:d4:c1:5b:41:0a:e9:11: ed:82:01:6a:de:36:9c:99:cb:9a:88:20:c1:d1:8d: 98:df:a7:19:ab:2d:94:ed:f6:23:24:a9:3d:5e:fe: 12:22:4d:aa:da:7f:bc:c1:dd:74:ab:b3:c8:7b:c7: 23:66:b1:e9:8c:bb:b8:f7:ef:45:ec:36:4e:c8:40: 73:23:db:ce:5b:ba:d8:f5:ad:7f:33:2a:c8:59:bf: f0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B2:4B:67:3E:07:09:8D:35:31:32:89:2C:BA:EB:E8:45:69:4A:50 X509v3 Authority Key Identifier: keyid:16:60:02:DF:14:C5:67:75:A5:16:49:3F:63:DE:10:5D:B9:08:09:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2e:d2:b2:fc:4c:b4:03:55:36:44:02:9b:e0:99:d0:a3:a3: 7f:d4:1a:86:5f:26:35:71:32:62:23:11:27:74:7f:4c:8f:89: 57:ba:3b:e1:1b:43:43:ec:3d:a5:f2:c4:fa:f3:a0:1f:d0:78: 36:ae:9f:89:e9:86:cb:8b:55:4f:c8:06:45:27:4d:8c:19:0a: 9c:9c:41:b3:9d:b7:ad:be:94:82:73:8e:13:33:97:34:52:92: e6:5e:fb:d7:35:0f:93:1e:37:67:fb:95:fa:7b:ee:22:77:87: 3f:9f:d4:48:66:6e:4a:c9:92:49:99:16:e5:7c:2d:5c:06:1a: b1:6a:e2:37:35:3b:b7:19:e7:70:ca:96:39:69:3b:7e:a8:a9: 1b:77:b1:34:af:3b:29:e9:7d:b4:e1:ee:08:c8:93:45:33:42: b9:35:f9:52:ef:71:07:03:3d:cf:6f:84:09:07:ff:2e:15:12: d8:d4:6d:2e:2e:af:9e:fa:cc:02:cc:02:5b:39:f0:0b:16:79: ae:c6:0b:be:74:3d:73:5f:67:14:55:0b:d9:a7:89:ea:1f:e6: a2:79:f0:cb:40:64:db:3b:9b:74:35:44:c6:73:5b:de:1f:94: 99:4d:bc:fa:2a:7a:0c:a4:68:14:25:4b:29:16:62:99:2d:b4: 69:96:d6:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfhqwc5Ukpia9NmhNqxixfQUH1/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2MDAyREYxNEM1Njc3NUE1MTY0OTNGNjNERTEwNURC OTA4MDlGMzAeFw0yNTExMDMxNDM1MjNaFw0yNTExMDQxNTExMjNaMDMxMTAvBgNV BAMTKDgwQjI0QjY3M0UwNzA5OEQzNTMxMzI4OTJDQkFFQkU4NDU2OTRBNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVgsOrKIeUQ4bJVFSSERGA0Mr Sg6mzCv9af3E0r4acYhgyl3gWNhc39dx8N8trCLtFvdHWiK8GLjwxAZLz0RR77Kc knQXZcaEqkR830y/cmCRQpVA3x3TPDAYb/y2ggG6ITHOzj7XWg/6s0MZjxSKtDqk q61mvk9T+x/Gf7BNKs9blilns9V0jvQ1xM/Uhne/caOuECO4XCeFV1a9JJ2r9WcH qtFZQ+X7yoWa1MFbQQrpEe2CAWreNpyZy5qIIMHRjZjfpxmrLZTt9iMkqT1e/hIi Taraf7zB3XSrs8h7xyNmsemMu7j370XsNk7IQHMj285butj1rX8zKshZv/ABAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgLJLZz4HCY01MTKJLLrr6EVpSlAwHwYDVR0j BBgwFoAUFmAC3xTFZ3WlFkk/Y94QXbkICfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFZLTEFmY05GNkdCazVxRUVzUGUzRENEb1BIdXNOb2k0VTY4NDJkQ2k0 d0MvMC8xNjYwMDJERjE0QzU2Nzc1QTUxNjQ5M0Y2M0RFMTA1REI5MDgwOUYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2NjAwMkRGMTRDNTY3NzVB NTE2NDkzRjYzREUxMDVEQjkwODA5RjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFZLTEFmY05GNkdCazVxRUVzUGUzRENEb1BIdXNOb2k0VTY4NDJkQ2k0d0MvMC8x NjYwMDJERjE0QzU2Nzc1QTUxNjQ5M0Y2M0RFMTA1REI5MDgwOUYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAey7SsvxMtANVNkQCm+CZ0KOjf9Qahl8mNXEyYiMRJ3R/TI+JV7o74RtDQ+w9 pfLE+vOgH9B4Nq6fiemGy4tVT8gGRSdNjBkKnJxBs523rb6UgnOOEzOXNFKS5l77 1zUPkx43Z/uV+nvuIneHP5/USGZuSsmSSZkW5XwtXAYasWriNzU7txnncMqWOWk7 fqipG3exNK87Kel9tOHuCMiTRTNCuTX5Uu9xBwM9z2+ECQf/LhUS2NRtLi6vnvrM AswCWznwCxZ5rsYLvnQ9c19nFFUL2aeJ6h/monnwy0Bk2zubdDVExnNb3h+UmU28 +ip6DKRoFCVLKRZimS20aZbWdg== -----END CERTIFICATE-----Generated at Tue Nov 4 02:02:19 2025 by rpki-client