$ rpki-client -vvf rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft File: D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft (raw, json) Hash identifier: XyGE4b/RYuDQMq8HrI7CG6n7jkCK9IRB8sEsh4hKSqA= Subject key identifier: CB:32:A8:74:18:AE:5C:AA:3D:70:EA:84:B3:B9:2F:7A:E3:73:39:F6 Authority key identifier: D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC Certificate issuer: /CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC Certificate serial: 6B138BBE236CCA7577A3AF4EED737B12A52DA18B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer Subject info access: rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft Manifest number: 0304 Signing time: Mon 03 Nov 2025 19:03:34 +0000 Manifest this update: Mon 03 Nov 2025 18:58:34 +0000 Manifest next update: Tue 04 Nov 2025 19:14:34 +0000 Files and hashes: 1: D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl (hash: TGhDDUJzXT2VudQfEKgiBrhbmAtNlx/s0JmcfjBd+OI=) 2: 3137372e37332e35362e302f32322d3234203d3e20323633303731.roa (hash: 0DCCZJbrhxGS3fKPi1a5Yh23caoQ1m2nGZ+Ls0nr36Y=) 3: 323830343a3934633a3a2f33322d3438203d3e20323633303731.roa (hash: a+ZxC/aVIvRBiL+9b6UmCNXG86FPx17UdrDq464ohKI=) 4: 3139312e362e3134342e302f32312d3234203d3e20323633303731.roa (hash: 3z/seUfwbtY8VHvQVEp/hjesW7X+hzHuxNmo8T4n9yI=) 5: 3138362e3233322e3138382e302f32322d3234203d3e20323633303731.roa (hash: QZ++cLr6ePWgalsSJXAkh2lAerAWd1JhyTtP73I1+S8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 19:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:13:8b:be:23:6c:ca:75:77:a3:af:4e:ed:73:7b:12:a5:2d:a1:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC Validity Not Before: Nov 3 18:58:34 2025 GMT Not After : Nov 4 19:14:34 2025 GMT Subject: CN=CB32A87418AE5CAA3D70EA84B3B92F7AE37339F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:65:43:dc:29:8d:8f:6f:df:a7:b6:e8:7e: 8b:5e:ec:f8:8f:e8:d3:4a:3e:41:5d:b2:bb:7c:0d: e1:02:8b:ce:61:41:e5:99:96:e3:99:df:d0:db:ee: c4:6a:05:c2:e8:30:10:13:02:e4:10:1c:b0:fa:29: 88:35:5e:ea:8e:c2:8f:5d:97:e8:fb:0a:ca:e4:c8: e5:8f:c9:13:fd:c3:87:c0:71:4f:14:aa:70:ef:e6: 67:10:56:cd:66:63:19:17:2d:f0:e0:e0:ef:70:e3: a6:df:ea:ed:de:ca:30:ef:14:f8:a7:26:e5:2f:31: 7f:db:cf:23:90:66:c7:03:4b:ef:2f:59:77:37:30: 7d:37:6c:be:a4:27:c0:9c:8e:38:86:68:0d:1f:02: a8:82:ab:9f:5d:d8:17:5d:b7:86:19:ba:3c:a8:1a: 5b:d5:a3:00:d8:dd:11:6d:10:10:01:62:fe:14:6c: 72:26:e6:78:72:18:b3:d9:3c:ff:a0:07:1a:9e:d0: 67:41:af:6b:fe:0d:8c:08:6a:6f:ed:35:72:52:70: c0:20:64:e0:3e:d3:1a:b0:73:a7:61:bc:74:58:27: 44:ea:a6:d3:d4:7f:1c:a2:f3:46:e2:11:6f:0b:ef: 74:40:6f:b5:c1:63:ae:8c:af:1f:b4:41:7a:cc:38: d0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:32:A8:74:18:AE:5C:AA:3D:70:EA:84:B3:B9:2F:7A:E3:73:39:F6 X509v3 Authority Key Identifier: keyid:D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f4:a5:db:8c:fb:81:3b:3d:37:07:92:d9:17:53:75:61:83: 39:3e:6e:36:e2:8f:7a:e1:0c:fe:48:3a:a3:ac:66:20:b7:e6: 00:65:0c:a6:e7:58:2d:6e:9b:e6:59:6a:28:9a:a6:07:3f:a3: ac:2e:3a:a8:f6:34:c9:68:01:9c:1a:18:83:af:0d:12:b0:5b: a8:e0:b6:6d:b7:ed:0f:8f:fc:89:3e:cc:59:00:4e:ad:d3:39: 4d:a1:43:7f:e2:f2:14:5b:df:9a:2a:cb:72:37:6f:68:11:bd: 1f:46:53:7c:1b:f4:05:41:e3:61:73:1b:05:4c:29:4e:bf:7a: 23:31:b4:3b:e1:b0:db:b5:54:d2:e3:86:60:8c:a7:59:aa:6d: f9:22:10:1d:99:1c:3b:62:67:fe:78:2d:29:10:21:29:7a:3b: 5a:b3:7e:ad:94:96:e8:51:19:d9:ea:0a:81:79:11:7f:85:7d: 6b:5c:3c:45:56:61:a2:41:b9:7e:22:bd:54:26:1f:f8:ba:64: a9:c0:da:ee:1d:72:8b:23:f1:93:48:6c:71:7d:1e:86:66:ed: e6:8f:14:13:1b:34:3c:cd:2e:6f:d5:97:61:4e:7e:b1:fa:3d: 2b:84:a4:a7:e6:e8:29:15:4e:f6:3f:1f:93:e7:7f:05:f4:ed: bc:9d:75:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaxOLviNsynV3o69O7XN7EqUtoYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYzMDg2RTQyRTlCQUJBMDI4RENEOEQ2NUNGRjUwQ0VF RkJENzhEQzAeFw0yNTExMDMxODU4MzRaFw0yNTExMDQxOTE0MzRaMDMxMTAvBgNV BAMTKENCMzJBODc0MThBRTVDQUEzRDcwRUE4NEIzQjkyRjdBRTM3MzM5RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAjGVD3CmNj2/fp7bofote7PiP 6NNKPkFdsrt8DeECi85hQeWZluOZ39Db7sRqBcLoMBATAuQQHLD6KYg1XuqOwo9d l+j7CsrkyOWPyRP9w4fAcU8UqnDv5mcQVs1mYxkXLfDg4O9w46bf6u3eyjDvFPin JuUvMX/bzyOQZscDS+8vWXc3MH03bL6kJ8CcjjiGaA0fAqiCq59d2Bddt4YZujyo GlvVowDY3RFtEBABYv4UbHIm5nhyGLPZPP+gBxqe0GdBr2v+DYwIam/tNXJScMAg ZOA+0xqwc6dhvHRYJ0TqptPUfxyi80biEW8L73RAb7XBY66Mrx+0QXrMONBXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyzKodBiuXKo9cOqEs7kveuNzOfYwHwYDVR0j BBgwFoAU1jCG5C6bq6Ao3NjWXP9Qzu+9eNwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzJRclpiUUw4dm1EdnIyR2YxTk5xU1lEWEo4b0FxQ3dnQmExMjMxSG5l U00vMS9ENjMwODZFNDJFOUJBQkEwMjhEQ0Q4RDY1Q0ZGNTBDRUVGQkQ3OERDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2MzA4NkU0MkU5QkFCQTAy OERDRDhENjVDRkY1MENFRUZCRDc4REMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzJRclpiUUw4dm1EdnIyR2YxTk5xU1lEWEo4b0FxQ3dnQmExMjMxSG5lU00vMS9E NjMwODZFNDJFOUJBQkEwMjhEQ0Q4RDY1Q0ZGNTBDRUVGQkQ3OERDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnvSl24z7gTs9NweS2RdTdWGDOT5uNuKPeuEM/kg6o6xmILfmAGUMpudYLW6b 5llqKJqmBz+jrC46qPY0yWgBnBoYg68NErBbqOC2bbftD4/8iT7MWQBOrdM5TaFD f+LyFFvfmirLcjdvaBG9H0ZTfBv0BUHjYXMbBUwpTr96IzG0O+Gw27VU0uOGYIyn Wapt+SIQHZkcO2Jn/ngtKRAhKXo7WrN+rZSW6FEZ2eoKgXkRf4V9a1w8RVZhokG5 fiK9VCYf+LpkqcDa7h1yiyPxk0hscX0ehmbt5o8UExs0PM0ub9WXYU5+sfo9K4Sk p+boKRVO9j8fk+d/BfTtvJ11ZQ== -----END CERTIFICATE-----Generated at Tue Nov 4 05:02:36 2025 by rpki-client