$ rpki-client -vvf rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft File: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft (raw, json) Hash identifier: WB+jHrz9kBIpEIwNXXDzIVJ8DIESXIGHVSfkPiXt/Lc= Subject key identifier: 03:9A:AE:1E:44:75:A0:F5:7C:92:58:30:C7:0B:A0:A9:9D:40:DE:B0 Authority key identifier: 00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 Certificate issuer: /CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Certificate serial: 213E415A248A71CF23A1C04BA36523273DF16817 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft Manifest number: 0307 Signing time: Wed 05 Nov 2025 19:36:28 +0000 Manifest this update: Wed 05 Nov 2025 19:31:28 +0000 Manifest next update: Thu 06 Nov 2025 20:56:28 +0000 Files and hashes: 1: 34352e3138302e3134342e302f32322d3332203d3e20323639313337.roa (hash: CQkxTLpB0h8sw9f6HinJ/zgqW1tumRLs+pW63/RGxSA=) 2: 323830343a356666383a3a2f33322d3438203d3e20323639313337.roa (hash: x6rW9jCCge7pgSikdO+N6Nk7UH7lwIZA6/UkvStSYRc=) 3: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl (hash: sPRwMSZ4jZ4SY5V2hgTyw+L2FZXkppGsWrbFletpOWU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 20:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:3e:41:5a:24:8a:71:cf:23:a1:c0:4b:a3:65:23:27:3d:f1:68:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Validity Not Before: Nov 5 19:31:28 2025 GMT Not After : Nov 6 20:56:28 2025 GMT Subject: CN=039AAE1E4475A0F57C925830C70BA0A99D40DEB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:08:73:e8:c8:a1:96:80:59:08:2b:35:58:09: ad:49:59:d0:cb:06:b3:86:e9:16:e6:40:cc:8e:41: 74:24:cc:0b:aa:9a:c2:dc:9a:2a:56:88:21:cb:b7: 08:2a:4a:ce:33:84:65:18:c2:18:4a:96:b5:3f:6e: 15:d6:f0:09:b3:47:57:2e:b4:7d:cf:32:3f:68:24: f6:0c:16:98:b2:61:54:4b:98:05:1d:8e:e2:e9:84: 2d:df:c8:af:4f:35:4f:3c:c1:ec:25:29:18:08:e6: 47:36:70:da:8a:66:5a:35:09:48:b3:9e:db:ad:60: d8:ee:13:4a:eb:be:af:2d:e6:d7:f4:19:88:b1:31: ef:83:fb:6d:e5:b4:e0:6c:46:bb:95:79:ee:64:58: be:54:26:64:cf:dc:de:7e:02:77:81:25:f5:cd:ca: c1:84:4a:53:2a:48:fe:92:7d:ae:b6:2e:e2:fb:0c: 62:fb:c9:f4:c5:5d:24:35:25:20:ea:6c:f5:a7:d9: 32:41:d3:f5:07:ef:fe:f0:5a:55:49:c1:d5:4e:a4: ff:51:f1:09:36:00:fb:30:78:94:63:68:18:b5:e1: c6:27:c8:f0:8b:e8:11:e4:52:63:16:a5:68:c5:0f: c5:11:a1:9a:ce:99:d6:0b:cb:1b:fe:f7:cc:e9:57: 5b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9A:AE:1E:44:75:A0:F5:7C:92:58:30:C7:0B:A0:A9:9D:40:DE:B0 X509v3 Authority Key Identifier: keyid:00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d3:56:c2:d1:d2:ac:c4:b3:42:cc:f4:9e:3f:f6:be:3c:dc: 60:e9:5a:3c:b7:02:15:b5:2b:29:39:7d:ca:25:31:80:ef:7a: 9b:16:fc:28:43:a7:f1:e9:6a:be:f8:2c:67:ee:95:57:ef:1d: 65:ec:7b:26:fa:1f:32:71:6e:2e:9f:c4:50:0b:04:6e:a0:4f: fe:32:14:24:60:46:6c:cc:42:28:0b:fd:8b:ec:01:61:73:0d: 70:44:c1:13:a3:bb:e8:27:d4:04:73:08:42:d8:4b:49:a0:28: 67:b4:27:39:18:7f:82:2b:d9:af:86:52:31:b3:f1:b4:27:ab: df:f2:0e:e0:10:7e:e1:f8:fb:37:d0:f0:a4:5c:87:e1:cf:9f: ed:72:6a:a2:a6:66:ae:dc:e2:02:43:41:02:0d:8b:72:4d:42: bf:98:4e:d6:23:d5:35:00:80:84:1d:69:2d:5c:72:2b:c9:fd: f0:60:15:27:d0:a4:4d:65:1d:e6:19:ea:e6:63:78:7e:f9:bd: f2:ee:c3:03:eb:7c:26:07:c9:ed:21:57:f8:65:3c:91:0f:83: d9:8c:50:bb:b5:b6:bc:81:11:db:c6:ff:64:16:52:c2:e9:e4: 0f:e6:77:86:89:54:67:5b:ff:55:a5:aa:a3:7f:4b:52:85:97: 40:e8:81:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIT5BWiSKcc8jocBLo2UjJz3xaBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBEOTVBQUI0M0UwMzZEN0E2REUyMjI4RTlEQjEzRkZB Qjc5QkU3NDAeFw0yNTExMDUxOTMxMjhaFw0yNTExMDYyMDU2MjhaMDMxMTAvBgNV BAMTKDAzOUFBRTFFNDQ3NUEwRjU3QzkyNTgzMEM3MEJBMEE5OUQ0MERFQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCHPoyKGWgFkIKzVYCa1JWdDL BrOG6RbmQMyOQXQkzAuqmsLcmipWiCHLtwgqSs4zhGUYwhhKlrU/bhXW8AmzR1cu tH3PMj9oJPYMFpiyYVRLmAUdjuLphC3fyK9PNU88wewlKRgI5kc2cNqKZlo1CUiz ntutYNjuE0rrvq8t5tf0GYixMe+D+23ltOBsRruVee5kWL5UJmTP3N5+AneBJfXN ysGESlMqSP6Sfa62LuL7DGL7yfTFXSQ1JSDqbPWn2TJB0/UH7/7wWlVJwdVOpP9R 8Qk2APsweJRjaBi14cYnyPCL6BHkUmMWpWjFD8URoZrOmdYLyxv+98zpV1vbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUA5quHkR1oPV8klgwxwugqZ1A3rAwHwYDVR0j BBgwFoAUANlaq0PgNtem3iIo6dsT/6t5vnQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5 Q0svMS8wMEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwRDk1QUFCNDNFMDM2RDdB NkRFMjIyOEU5REIxM0ZGQUI3OUJFNzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5Q0svMS8w MEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAitNWwtHSrMSzQsz0nj/2vjzcYOlaPLcCFbUrKTl9yiUxgO96mxb8KEOn8elq vvgsZ+6VV+8dZex7JvofMnFuLp/EUAsEbqBP/jIUJGBGbMxCKAv9i+wBYXMNcETB E6O76CfUBHMIQthLSaAoZ7QnORh/givZr4ZSMbPxtCer3/IO4BB+4fj7N9DwpFyH 4c+f7XJqoqZmrtziAkNBAg2Lck1Cv5hO1iPVNQCAhB1pLVxyK8n98GAVJ9CkTWUd 5hnq5mN4fvm98u7DA+t8JgfJ7SFX+GU8kQ+D2YxQu7W2vIER28b/ZBZSwunkD+Z3 holUZ1v/VaWqo39LUoWXQOiBBw== -----END CERTIFICATE-----Generated at Thu Nov 6 06:21:03 2025 by rpki-client