$ rpki-client -vvf rpki-repo.registro.br/repo/Bcr59rxbbUZhP85KdecKqN4fAay9Fkk3xrCyA2LXE9fr/0/A4D35C4FB329FDEB5ECED1B0633AAC822979E5B2.mft File: A4D35C4FB329FDEB5ECED1B0633AAC822979E5B2.mft (raw, json) Hash identifier: OJZLdYGVjCn5vUG++RPtJ45vjOAbBj2icfZgWNpM1mM= Subject key identifier: 84:4A:75:97:A8:F5:93:60:FF:38:9C:C3:90:EE:D5:02:E6:BE:F3:A5 Authority key identifier: A4:D3:5C:4F:B3:29:FD:EB:5E:CE:D1:B0:63:3A:AC:82:29:79:E5:B2 Certificate issuer: /CN=A4D35C4FB329FDEB5ECED1B0633AAC822979E5B2 Certificate serial: 751D171E603D539FD27148A563E700946AACFD07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4D35C4FB329FDEB5ECED1B0633AAC822979E5B2.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bcr59rxbbUZhP85KdecKqN4fAay9Fkk3xrCyA2LXE9fr/0/A4D35C4FB329FDEB5ECED1B0633AAC822979E5B2.mft Manifest number: 1E Signing time: Mon 03 Nov 2025 07:15:38 +0000 Manifest this update: Mon 03 Nov 2025 07:10:38 +0000 Manifest next update: Tue 04 Nov 2025 08:01:38 +0000 Files and hashes: 1: 3133382e3131372e3233362e302f32322d3234203d3e20323730363631.roa (hash: uyjcBdaNPE8Rtra3MjeK+jYQDcWUa1BX0kbYDuY5Nqk=) 2: A4D35C4FB329FDEB5ECED1B0633AAC822979E5B2.crl (hash: an5BfiAsrmI9Ck67w1RnPBIOu20ECJa3IV2NkxbJmtY=) 3: 323830343a366637343a3a2f33322d3438203d3e20323730363631.roa (hash: oFfSLmGtBWp+ytRzKBIIrr5MwqvijUmoSoaeBqiUGvI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bcr59rxbbUZhP85KdecKqN4fAay9Fkk3xrCyA2LXE9fr/0/A4D35C4FB329FDEB5ECED1B0633AAC822979E5B2.crl rsync://rpki-repo.registro.br/repo/Bcr59rxbbUZhP85KdecKqN4fAay9Fkk3xrCyA2LXE9fr/0/A4D35C4FB329FDEB5ECED1B0633AAC822979E5B2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4D35C4FB329FDEB5ECED1B0633AAC822979E5B2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 08:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:1d:17:1e:60:3d:53:9f:d2:71:48:a5:63:e7:00:94:6a:ac:fd:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4D35C4FB329FDEB5ECED1B0633AAC822979E5B2 Validity Not Before: Nov 3 07:10:38 2025 GMT Not After : Nov 4 08:01:38 2025 GMT Subject: CN=844A7597A8F59360FF389CC390EED502E6BEF3A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:01:14:cd:3d:81:cf:12:67:2d:06:2d:3a:f3: a9:f8:69:4e:03:fc:88:1b:75:50:ea:f1:14:d0:55: bd:70:9d:fb:ea:0e:e9:41:92:24:a0:81:5c:28:93: fc:6d:34:ce:a0:ff:42:ea:90:18:fa:83:9c:6c:1c: e4:b1:a6:99:dc:e9:22:14:07:20:70:99:f8:84:ec: f4:45:df:1b:c5:0a:95:c5:5b:da:99:d1:b0:be:b0: 2f:1b:35:ab:e7:f4:a0:d7:dc:96:63:23:0e:1e:4f: ef:05:b0:ff:90:cd:5f:12:03:16:c5:58:c3:4c:ab: 91:91:63:77:96:2c:29:55:d6:a3:cb:15:e9:49:c1: f1:61:bc:31:a6:c4:00:0a:e8:5f:fb:01:ce:24:eb: c7:f3:8e:40:ff:d2:74:c4:88:3e:e9:ea:c8:87:55: 56:53:8a:86:56:c9:f5:38:1e:43:7d:36:d6:7b:18: 40:71:d9:aa:9e:9e:a0:d0:9a:31:a6:16:49:8d:9d: d1:0a:c6:24:24:0a:19:f4:f8:cf:c1:a9:c5:78:8b: 15:20:9b:e0:3b:c5:73:b5:48:7b:40:80:2a:bc:3b: 93:fe:53:8c:24:2e:23:ea:18:72:bb:3e:36:d7:d6: 40:f9:e4:fe:81:c4:77:7f:c3:0f:99:d5:dd:64:69: 48:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4A:75:97:A8:F5:93:60:FF:38:9C:C3:90:EE:D5:02:E6:BE:F3:A5 X509v3 Authority Key Identifier: keyid:A4:D3:5C:4F:B3:29:FD:EB:5E:CE:D1:B0:63:3A:AC:82:29:79:E5:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bcr59rxbbUZhP85KdecKqN4fAay9Fkk3xrCyA2LXE9fr/0/A4D35C4FB329FDEB5ECED1B0633AAC822979E5B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4D35C4FB329FDEB5ECED1B0633AAC822979E5B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bcr59rxbbUZhP85KdecKqN4fAay9Fkk3xrCyA2LXE9fr/0/A4D35C4FB329FDEB5ECED1B0633AAC822979E5B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:82:24:38:b7:4b:e7:1c:5c:98:ac:a2:5b:e8:79:6d:91:af: c3:5b:da:68:35:75:79:77:90:87:55:e0:b0:d5:70:08:0e:6b: 86:00:d2:37:2c:93:31:e4:51:c5:0d:ed:67:cf:35:99:4c:22: 27:3f:b3:24:11:7d:81:b7:d7:55:04:56:48:8b:51:30:4a:83: db:b3:77:88:3b:17:c0:37:4d:28:e1:e1:d7:48:66:4f:26:92: 9b:3e:63:c5:4b:06:4f:bc:8c:f7:ad:d0:d2:4e:cc:21:69:d0: 90:c8:85:8c:4c:ba:8e:d8:7b:20:ab:57:bb:1a:66:8e:3b:ca: 2d:0b:c3:c1:0f:5a:44:08:b8:12:80:6d:f4:9c:05:08:8d:15: 6a:c8:1e:c6:1e:57:34:a5:2e:f1:bc:96:2f:ae:35:1d:8b:d6: b7:d5:f9:78:84:cd:61:20:22:67:7d:8e:eb:62:41:76:1b:8f: a1:e2:d9:78:75:87:74:10:2a:01:81:d8:f8:17:28:0b:1a:56: ba:76:d5:c1:f2:51:a7:29:b2:9f:0d:e8:12:a0:bf:6d:72:c4: da:ae:72:4d:48:6f:b0:f1:a1:0e:4f:4a:f1:31:5f:67:27:a2: 6b:74:8b:0b:6b:ef:3f:f9:10:57:4c:c9:5b:0e:98:31:41:00: bf:03:51:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdR0XHmA9U5/ScUilY+cAlGqs/QcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTREMzVDNEZCMzI5RkRFQjVFQ0VEMUIwNjMzQUFDODIy OTc5RTVCMjAeFw0yNTExMDMwNzEwMzhaFw0yNTExMDQwODAxMzhaMDMxMTAvBgNV BAMTKDg0NEE3NTk3QThGNTkzNjBGRjM4OUNDMzkwRUVENTAyRTZCRUYzQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdARTNPYHPEmctBi0686n4aU4D /IgbdVDq8RTQVb1wnfvqDulBkiSggVwok/xtNM6g/0LqkBj6g5xsHOSxppnc6SIU ByBwmfiE7PRF3xvFCpXFW9qZ0bC+sC8bNavn9KDX3JZjIw4eT+8FsP+QzV8SAxbF WMNMq5GRY3eWLClV1qPLFelJwfFhvDGmxAAK6F/7Ac4k68fzjkD/0nTEiD7p6siH VVZTioZWyfU4HkN9NtZ7GEBx2aqenqDQmjGmFkmNndEKxiQkChn0+M/BqcV4ixUg m+A7xXO1SHtAgCq8O5P+U4wkLiPqGHK7PjbX1kD55P6BxHd/ww+Z1d1kaUilAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhEp1l6j1k2D/OJzDkO7VAua+86UwHwYDVR0j BBgwFoAUpNNcT7Mp/eteztGwYzqsgil55bIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmNyNTlyeGJiVVpoUDg1S2RlY0txTjRmQWF5OUZrazN4ckN5QTJMWEU5 ZnIvMC9BNEQzNUM0RkIzMjlGREVCNUVDRUQxQjA2MzNBQUM4MjI5NzlFNUIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0RDM1QzRGQjMyOUZERUI1 RUNFRDFCMDYzM0FBQzgyMjk3OUU1QjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmNyNTlyeGJiVVpoUDg1S2RlY0txTjRmQWF5OUZrazN4ckN5QTJMWEU5ZnIvMC9B NEQzNUM0RkIzMjlGREVCNUVDRUQxQjA2MzNBQUM4MjI5NzlFNUIyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn4IkOLdL5xxcmKyiW+h5bZGvw1vaaDV1eXeQh1XgsNVwCA5rhgDSNyyTMeRR xQ3tZ881mUwiJz+zJBF9gbfXVQRWSItRMEqD27N3iDsXwDdNKOHh10hmTyaSmz5j xUsGT7yM963Q0k7MIWnQkMiFjEy6jth7IKtXuxpmjjvKLQvDwQ9aRAi4EoBt9JwF CI0Vasgexh5XNKUu8byWL641HYvWt9X5eITNYSAiZ32O62JBdhuPoeLZeHWHdBAq AYHY+BcoCxpWunbVwfJRpymynw3oEqC/bXLE2q5yTUhvsPGhDk9K8TFfZyeia3SL C2vvP/kQV0zJWw6YMUEAvwNR1g== -----END CERTIFICATE-----Generated at Mon Nov 3 12:35:51 2025 by rpki-client