$ rpki-client -vvf rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.mft File: 949059A6CFC6D8D4784BD4699906DA66C2271CD9.mft (raw, json) Hash identifier: tGBTyTOjHAO0zWjDEpovWz/Y2ppM9DkcnMtTR8o3R7E= Subject key identifier: 4E:59:9B:A5:D3:32:57:C9:C0:DC:FF:8A:E2:DD:BF:77:5E:08:51:CD Authority key identifier: 94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9 Certificate issuer: /CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9 Certificate serial: 1EBB4F014E16EE909E4B67ADC7B94E435BA1945D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer Subject info access: rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.mft Manifest number: 01AF Signing time: Mon 03 Nov 2025 10:53:50 +0000 Manifest this update: Mon 03 Nov 2025 10:48:50 +0000 Manifest next update: Tue 04 Nov 2025 12:00:50 +0000 Files and hashes: 1: 323830343a393038303a383030303a3a2f33342d3334203d3e20323733353536.roa (hash: JqKfEcl0aG5/ylHLR9xU/QXkkpHPM8PQuO0aVC5VnxA=) 2: AS273556.asa (hash: 6rN17yzT3nWsesFj4i04gVEusg9FrAGlLIGqk3DFqDE=) 3: 323830343a393038303a633030303a3a2f33342d3334203d3e20323733353536.roa (hash: lJut7sXxWBRa9HIYr+NJVZsIUQUIPmuWbX7RypmHs9M=) 4: 949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl (hash: OAzWG0CmvlGPcfz4zMuYi7esOuAN31VuOYaGQFa1O6g=) 5: 323830343a393038303a383030303a3a2f33332d3333203d3e20323733353536.roa (hash: pf/yO7z3g5mvrGa61U+NDMdoT5GxUbMQ76duUJoVubc=) 6: 323830343a393038303a3a2f33342d3334203d3e20323733353536.roa (hash: H1zO7rm6U/D17J/5DyB/LfpRhilhALG9LI7Y9Wq6WGw=) 7: 323830343a393038303a343030303a3a2f33342d3334203d3e20323733353536.roa (hash: wJx8ODQ4aPO/eJGtY1Cg79qT8oGr3MSYC4z4fKDKt0Q=) 8: 323830343a393038303a3a2f33322d3332203d3e20323733353536.roa (hash: q+eS8tIc80c5DXZBQuZC/Yven5VPCm2U9Gc0HKmEgK0=) 9: 323830343a393038303a3a2f33332d3333203d3e20323733353536.roa (hash: OcL00AMzFZjyfry4Uyg7Q1vcYrxdcMsYys8E++ACVeA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:bb:4f:01:4e:16:ee:90:9e:4b:67:ad:c7:b9:4e:43:5b:a1:94:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9 Validity Not Before: Nov 3 10:48:50 2025 GMT Not After : Nov 4 12:00:50 2025 GMT Subject: CN=4E599BA5D33257C9C0DCFF8AE2DDBF775E0851CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c8:1f:77:c5:d6:d9:5f:01:b3:82:9c:25:77: 19:c4:88:32:be:80:9e:ca:5c:d3:4e:a9:cb:a3:71: e5:bb:62:89:49:ea:c2:1f:d6:83:91:39:94:65:51: c5:f3:13:bc:d0:83:b3:a0:18:e3:98:24:77:78:5a: 2b:d7:be:e8:a6:30:15:eb:12:73:72:1f:f3:41:a0: 93:d2:53:9b:e2:59:57:13:e7:02:2e:8d:02:8e:59: 1e:92:09:ba:8f:5d:76:02:f9:5b:6f:dd:f3:06:4d: 2b:c1:d5:cf:2c:08:f1:a7:e8:e2:07:02:fa:0e:43: d1:87:a9:04:8c:59:97:85:1c:ea:a5:d8:6c:12:f6: 5b:87:0f:87:68:e9:1f:8f:f0:48:e3:25:ff:63:d6: 88:f0:40:3c:9b:54:a3:71:a8:0c:94:83:3f:dd:dc: dd:41:e1:f7:3e:e0:e5:ca:26:80:ec:99:89:e8:cc: cd:07:ab:3c:60:65:8c:da:4b:58:28:ec:ff:eb:b1: 71:63:e8:89:1e:ee:c9:b6:15:93:36:83:b4:04:37: f5:89:d1:60:74:80:a3:64:89:e0:30:46:c2:c3:48: 82:e5:b8:e5:2a:1d:86:08:3b:e8:9f:aa:85:32:3d: 97:11:b3:d6:df:6c:31:c5:ce:47:85:fa:7f:2c:e4: 07:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:59:9B:A5:D3:32:57:C9:C0:DC:FF:8A:E2:DD:BF:77:5E:08:51:CD X509v3 Authority Key Identifier: keyid:94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:cf:d9:da:50:00:45:0f:50:6e:ed:d8:c8:7f:c5:0c:72:89: db:14:85:00:b2:b1:a4:a7:92:98:9b:44:16:af:9c:c8:bf:d5: f5:1d:13:30:7e:d5:35:f0:da:4b:b0:13:b6:f2:b7:29:6f:65: ee:52:72:f0:e1:86:c9:52:c7:53:45:f8:dc:7b:05:3c:9a:dc: f2:e7:1f:f5:8b:48:97:5e:55:b5:50:73:ce:93:2a:73:28:cf: 93:75:80:4b:a1:98:82:f0:cb:6f:0f:d2:55:07:f1:0a:0d:79: 0c:e2:42:69:04:0e:53:1c:e9:15:44:5f:b6:5d:92:eb:ad:85: 3b:ea:c3:50:45:34:0d:46:54:c3:ba:28:34:b1:bc:93:84:36: b7:eb:34:e3:fe:a1:53:fb:78:e8:bf:d2:59:93:eb:35:db:77: 00:af:9f:78:87:cf:f2:00:6a:c7:48:49:94:c4:db:92:ab:fd: 8f:49:11:56:59:61:3f:86:7f:2e:a2:78:b9:76:08:af:ea:66: cd:4d:0f:94:55:bc:0a:87:c6:85:27:62:b4:84:76:59:a3:66: 70:f1:c8:36:df:f5:2e:43:1a:a8:18:bd:b4:65:50:a1:ea:ef: 2e:a2:8a:4f:08:53:52:e8:01:f3:21:2b:63:ac:c9:d7:2d:6d: bd:fa:55:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHrtPAU4W7pCeS2etx7lOQ1uhlF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ5MDU5QTZDRkM2RDhENDc4NEJENDY5OTkwNkRBNjZD MjI3MUNEOTAeFw0yNTExMDMxMDQ4NTBaFw0yNTExMDQxMjAwNTBaMDMxMTAvBgNV BAMTKDRFNTk5QkE1RDMzMjU3QzlDMERDRkY4QUUyRERCRjc3NUUwODUxQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcyB93xdbZXwGzgpwldxnEiDK+ gJ7KXNNOqcujceW7YolJ6sIf1oOROZRlUcXzE7zQg7OgGOOYJHd4WivXvuimMBXr EnNyH/NBoJPSU5viWVcT5wIujQKOWR6SCbqPXXYC+Vtv3fMGTSvB1c8sCPGn6OIH AvoOQ9GHqQSMWZeFHOql2GwS9luHD4do6R+P8EjjJf9j1ojwQDybVKNxqAyUgz/d 3N1B4fc+4OXKJoDsmYnozM0HqzxgZYzaS1go7P/rsXFj6Ike7sm2FZM2g7QEN/WJ 0WB0gKNkieAwRsLDSILluOUqHYYIO+ifqoUyPZcRs9bfbDHFzkeF+n8s5Af/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTlmbpdMyV8nA3P+K4t2/d14IUc0wHwYDVR0j BBgwFoAUlJBZps/G2NR4S9RpmQbaZsInHNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHBaTVdYQ2tFWjduTFJIbkpNbWEza1I4VHdXOXlLYVQ0Y1Ryb0JoRG1E ZzUvMC85NDkwNTlBNkNGQzZEOEQ0Nzg0QkQ0Njk5OTA2REE2NkMyMjcxQ0Q5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0OTA1OUE2Q0ZDNkQ4RDQ3 ODRCRDQ2OTk5MDZEQTY2QzIyNzFDRDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHBaTVdYQ2tFWjduTFJIbkpNbWEza1I4VHdXOXlLYVQ0Y1Ryb0JoRG1EZzUvMC85 NDkwNTlBNkNGQzZEOEQ0Nzg0QkQ0Njk5OTA2REE2NkMyMjcxQ0Q5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIc/Z2lAARQ9Qbu3YyH/FDHKJ2xSFALKxpKeSmJtEFq+cyL/V9R0TMH7VNfDa S7ATtvK3KW9l7lJy8OGGyVLHU0X43HsFPJrc8ucf9YtIl15VtVBzzpMqcyjPk3WA S6GYgvDLbw/SVQfxCg15DOJCaQQOUxzpFURftl2S662FO+rDUEU0DUZUw7ooNLG8 k4Q2t+s04/6hU/t46L/SWZPrNdt3AK+feIfP8gBqx0hJlMTbkqv9j0kRVllhP4Z/ LqJ4uXYIr+pmzU0PlFW8CofGhSditIR2WaNmcPHINt/1LkMaqBi9tGVQoervLqKK TwhTUugB8yErY6zJ1y1tvfpVMQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:39:46 2025 by rpki-client