$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft File: CA9F7609986EAF1A517249B9120F2B69069A604A.mft (raw, json) Hash identifier: EBqGIcUfCUG5shFwgPJqDyfsXmVPu+q7Vj9dsSJMqZQ= Subject key identifier: 08:70:A9:35:86:0A:92:49:12:EF:1F:9D:17:F6:B1:12:57:7F:A6:9C Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A Certificate issuer: /CN=CA9F7609986EAF1A517249B9120F2B69069A604A Certificate serial: 0AD61B0E2F37003BE368157B54F665527FB1636A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer Subject info access: rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft Manifest number: 0305 Signing time: Sun 02 Nov 2025 23:30:00 +0000 Manifest this update: Sun 02 Nov 2025 23:25:00 +0000 Manifest next update: Tue 04 Nov 2025 03:09:00 +0000 Files and hashes: 1: 3137302e3234342e37382e302f32342d3234203d3e20323636353035.roa (hash: P2xrOWpHLY6EnnxO2vbmZAQg+LiKo7wZq6AG1cS/2u4=) 2: 3137302e3234342e37372e302f32342d3234203d3e20323636353035.roa (hash: eJBkgue2M5PeX7HA+TZbr9kyv+9Hqw6VsgHSqBR6XUE=) 3: 3137302e3234342e37362e302f32322d3232203d3e20323636353035.roa (hash: smiarjDG+OGsbjcVsk86Au5AndvkklCegjiEmQy0Xdw=) 4: 3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa (hash: YF8aSn8ZrakqqHsGkJ+aJMpg3UM2WIjA8ryfsST1/NQ=) 5: 323830343a333864383a3a2f33322d3334203d3e20323636353035.roa (hash: t4980+rUmsxpFvMPiI7I8jUd83zOqWinNqdfWWIlnEA=) 6: 3137302e3234342e37362e302f32342d3234203d3e20323636353035.roa (hash: amplB2JLDJJAckH9IaBBkn+qJzqilzpjHxaNCTaCWYQ=) 7: 3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa (hash: PVZgZ80ec1MnnTWZFJhH3Pekch5EzlVCo00ByHvruS8=) 8: CA9F7609986EAF1A517249B9120F2B69069A604A.crl (hash: Y3WOzOTgNWyKDMkA9bW4dWIr+F3UsANd5v+2kVPjKfM=) 9: 3137302e3234342e37382e302f32332d3233203d3e20323636353035.roa (hash: zYfkxrKkqL3tYrhKgo7C4mfgls0J10QOQdD+qfnFkqw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d6:1b:0e:2f:37:00:3b:e3:68:15:7b:54:f6:65:52:7f:b1:63:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A Validity Not Before: Nov 2 23:25:00 2025 GMT Not After : Nov 4 03:09:00 2025 GMT Subject: CN=0870A935860A924912EF1F9D17F6B112577FA69C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:dd:48:7d:0c:2d:f0:0f:38:64:78:c3:59:81: 63:c8:5e:d8:38:d8:1b:42:a9:d0:31:f1:8a:ad:30: ec:3c:0d:20:c5:d3:34:eb:8c:d0:8b:87:7c:36:89: 1e:af:6b:d5:7c:ad:23:1a:0f:17:ee:c5:a7:5f:8a: 28:29:b3:d1:dc:97:9c:2e:62:29:d7:52:dd:91:d0: 4a:34:dc:8a:e5:d2:46:f2:75:4d:6b:f2:5f:77:b7: b9:bd:27:b3:a0:2c:ca:f2:1b:d0:20:50:16:55:a9: 88:a4:4b:4d:aa:0c:33:19:b0:37:f3:ff:d1:d9:5e: 54:3e:5f:ad:71:fd:2e:54:81:98:26:e5:0a:27:14: bb:9f:25:f8:bd:b0:57:50:51:78:2b:21:98:41:b3: 29:b1:85:96:cb:8f:16:f2:c4:cd:e2:94:ae:c4:08: 73:5c:b1:c9:7f:2a:26:bc:60:d1:6e:1b:64:dc:b9: 6b:f9:7a:1a:e1:3f:89:b0:7a:f3:15:21:61:85:a5: 0f:80:bb:1f:18:32:46:c8:b6:1f:4c:68:bb:57:a8: 19:bd:67:13:b0:b7:f9:ab:64:25:77:61:10:01:78: 03:78:52:3f:4d:ba:01:c1:1f:6e:7e:a9:6c:c9:07: 39:c3:0f:6d:20:f9:33:8c:e3:e7:b6:28:30:50:33: cb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:70:A9:35:86:0A:92:49:12:EF:1F:9D:17:F6:B1:12:57:7F:A6:9C X509v3 Authority Key Identifier: keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:1a:d6:be:e0:a7:72:1c:18:be:0c:eb:b5:c6:b9:41:ee:c0: 6c:b2:eb:5f:1e:d5:9e:b1:41:e7:8b:f2:28:89:ef:5e:0d:66: 2b:b0:61:f3:11:44:73:26:63:42:24:c1:21:93:95:13:45:23: ac:35:2f:ef:90:10:82:6f:d3:02:a5:0a:2c:66:4f:f5:b8:41: 37:0c:b9:c1:ef:33:5c:65:99:3c:59:44:1d:53:60:2a:ff:99: a9:78:0f:05:e9:a8:a7:4c:a3:af:af:15:83:a5:cd:e5:00:67: a2:fe:6c:91:3e:da:8e:f7:65:8e:a8:5d:15:d3:0e:c5:2e:ba: a1:84:c5:ae:7d:36:f8:ed:e6:13:b5:9d:36:65:31:34:a4:38: 8e:42:c6:6f:aa:30:f9:7b:80:b3:29:b3:a5:32:4e:2c:86:e4: ed:75:c8:4e:47:84:d4:13:41:02:44:59:db:48:40:2e:82:d8: a2:a3:4d:39:81:56:c5:46:6b:4b:e5:92:8b:8b:bb:a5:90:89: 5a:39:56:ad:20:f4:17:8e:d0:62:05:2c:9a:25:b6:af:e8:41: 6d:0e:d2:e8:fb:c7:da:be:11:2f:31:0b:f2:06:d3:42:7d:f4: ba:e6:66:ae:0d:f7:61:1f:f7:3a:1a:39:2e:c7:98:70:7e:30: e0:62:c4:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCtYbDi83ADvjaBV7VPZlUn+xY2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5Rjc2MDk5ODZFQUYxQTUxNzI0OUI5MTIwRjJCNjkw NjlBNjA0QTAeFw0yNTExMDIyMzI1MDBaFw0yNTExMDQwMzA5MDBaMDMxMTAvBgNV BAMTKDA4NzBBOTM1ODYwQTkyNDkxMkVGMUY5RDE3RjZCMTEyNTc3RkE2OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa3Uh9DC3wDzhkeMNZgWPIXtg4 2BtCqdAx8YqtMOw8DSDF0zTrjNCLh3w2iR6va9V8rSMaDxfuxadfiigps9Hcl5wu YinXUt2R0Eo03Irl0kbydU1r8l93t7m9J7OgLMryG9AgUBZVqYikS02qDDMZsDfz /9HZXlQ+X61x/S5UgZgm5QonFLufJfi9sFdQUXgrIZhBsymxhZbLjxbyxM3ilK7E CHNcscl/Kia8YNFuG2TcuWv5ehrhP4mwevMVIWGFpQ+Aux8YMkbIth9MaLtXqBm9 ZxOwt/mrZCV3YRABeAN4Uj9NugHBH25+qWzJBznDD20g+TOM4+e2KDBQM8sBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCHCpNYYKkkkS7x+dF/axEld/ppwwHwYDVR0j BBgwFoAUyp92CZhurxpRckm5Eg8raQaaYEowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTdBVFVlNFJENTFZcUx5dkNHdUhTdlM2M2lBdHJyWGFFeEpqUmpydjk2 RGIvMS9DQTlGNzYwOTk4NkVBRjFBNTE3MjQ5QjkxMjBGMkI2OTA2OUE2MDRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBOUY3NjA5OTg2RUFGMUE1 MTcyNDlCOTEyMEYyQjY5MDY5QTYwNEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTdBVFVlNFJENTFZcUx5dkNHdUhTdlM2M2lBdHJyWGFFeEpqUmpydjk2RGIvMS9D QTlGNzYwOTk4NkVBRjFBNTE3MjQ5QjkxMjBGMkI2OTA2OUE2MDRBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlxrWvuCnchwYvgzrtca5Qe7AbLLrXx7VnrFB54vyKInvXg1mK7Bh8xFEcyZj QiTBIZOVE0UjrDUv75AQgm/TAqUKLGZP9bhBNwy5we8zXGWZPFlEHVNgKv+ZqXgP Bemop0yjr68Vg6XN5QBnov5skT7ajvdljqhdFdMOxS66oYTFrn02+O3mE7WdNmUx NKQ4jkLGb6ow+XuAsymzpTJOLIbk7XXITkeE1BNBAkRZ20hALoLYoqNNOYFWxUZr S+WSi4u7pZCJWjlWrSD0F47QYgUsmiW2r+hBbQ7S6PvH2r4RLzEL8gbTQn30uuZm rg33YR/3Oho5LseYcH4w4GLEMA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:21:22 2025 by rpki-client