$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft File: 041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft (raw, json) Hash identifier: qwLRDPvu/5W7hXWdE3M1hRf42nD2eLVVAc651WT+gJs= Subject key identifier: A1:85:36:58:49:75:DD:84:CE:05:B5:52:BF:88:B8:94:C6:CE:52:8F Authority key identifier: 04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3 Certificate issuer: /CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3 Certificate serial: 22D13CB2B5336CB1A2438D6A7FC9299765BD8280 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer Subject info access: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft Manifest number: 39 Signing time: Tue 04 Nov 2025 08:55:43 +0000 Manifest this update: Tue 04 Nov 2025 08:50:43 +0000 Manifest next update: Wed 05 Nov 2025 09:42:43 +0000 Files and hashes: 1: 323830343a316265383a3a2f33322d313238203d3e203631373536.roa (hash: pqgsM2ASUBh1TC0/RYOz8T+lL73SNCUA6ljQ57Xb+SQ=) 2: 041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl (hash: KZaOmm3LHIkreiH7pfwIgNJ18I0554qqYVo2ZjNObs0=) 3: 3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (hash: ff5fnWNx341MgcrmBHedmB9h7orSMUG+v/FPbvSdt9w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 09:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d1:3c:b2:b5:33:6c:b1:a2:43:8d:6a:7f:c9:29:97:65:bd:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3 Validity Not Before: Nov 4 08:50:43 2025 GMT Not After : Nov 5 09:42:43 2025 GMT Subject: CN=A18536584975DD84CE05B552BF88B894C6CE528F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6b:47:7e:d0:bd:54:9e:2a:50:00:7e:0f:d3: bb:4c:94:31:ff:3b:4d:6e:22:e8:78:4b:3d:78:2d: 00:4b:c0:07:4a:b3:5b:83:6b:21:80:86:de:4f:21: a4:7c:84:59:99:cc:ca:2e:1f:9b:63:6b:1f:4d:b9: 3e:b2:a3:4a:c0:d8:72:e4:f7:fc:50:e6:3a:d6:f2: 5f:d1:a9:cc:72:6e:2a:08:b1:0e:97:d0:6b:e9:2f: 78:49:32:e0:d6:fb:9a:3d:eb:48:b7:e0:9c:00:6a: 6a:f4:74:9a:5c:04:fe:6b:7a:35:ac:3d:51:a7:72: d4:62:da:84:8a:d8:00:8c:bc:41:36:5b:99:5e:c0: 8d:95:e7:28:a8:13:32:ea:b4:c6:16:12:14:be:b3: 30:99:eb:0d:55:db:2b:ca:bc:1d:c1:0e:f0:30:c2: c1:9d:9e:9b:c0:6a:c0:7f:8c:82:ed:5d:72:e8:0c: c1:3a:42:4d:0a:1a:82:bc:20:d5:29:9e:83:bc:6d: 6e:52:1c:78:6d:a1:c6:95:1b:88:4e:ba:15:8b:3d: 5f:44:04:ac:3e:0d:9a:c3:c3:1b:5b:13:8b:a8:53: 41:5c:91:20:fb:57:8e:cd:e6:df:70:2b:12:69:8d: bb:c1:f0:b0:dc:93:5f:8c:13:6f:3a:1a:82:65:ec: 8d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:85:36:58:49:75:DD:84:CE:05:B5:52:BF:88:B8:94:C6:CE:52:8F X509v3 Authority Key Identifier: keyid:04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:86:22:c4:aa:41:bc:58:f8:28:0e:1c:7b:e2:58:ee:e0:0a: 61:31:8f:78:08:b9:42:f6:52:18:51:9e:37:54:4d:ba:d6:da: 3b:5d:ac:7b:66:8d:19:72:a6:14:ab:ad:53:27:01:7d:63:91: d8:f1:67:f2:ce:1d:68:de:65:e1:b5:ef:20:17:b2:69:9e:86: bd:e2:9b:e6:85:7d:af:2b:8c:c0:6c:11:7c:07:51:08:0c:7f: d7:72:8d:40:31:14:bf:d7:32:8e:72:66:bc:c4:61:f1:37:69: c8:8a:ac:ef:44:b3:04:00:29:00:5a:df:02:65:6f:13:62:c2: 9a:e4:ba:1a:4d:f8:61:33:b9:29:4c:fd:9f:8b:b4:36:24:e1: 11:90:5e:41:6b:7e:52:5b:c7:24:66:c4:ab:18:d8:39:11:a5: ed:7c:6d:ac:0e:1f:7c:49:d4:2f:53:cd:8a:77:de:58:53:c9: ba:f7:58:09:7b:5c:71:7d:5f:f9:7d:0b:b1:d9:09:97:bf:0a: 19:c4:36:d6:3d:72:ec:0b:ff:15:92:1f:37:1b:43:bc:c1:cd: 1f:47:71:9f:cd:31:f1:b1:78:b1:a8:bb:54:3e:22:07:11:41: 78:6a:5f:14:b9:eb:8a:b5:3a:8d:6f:cb:c3:0c:0c:a9:13:58: 8b:01:02:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUItE8srUzbLGiQ41qf8kpl2W9goAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQxRkEwQTQwOEFENTdFOTM4NERBMzMxQjMwNDBCOTFG REUwMEJFMzAeFw0yNTExMDQwODUwNDNaFw0yNTExMDUwOTQyNDNaMDMxMTAvBgNV BAMTKEExODUzNjU4NDk3NUREODRDRTA1QjU1MkJGODhCODk0QzZDRTUyOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVa0d+0L1UnipQAH4P07tMlDH/ O01uIuh4Sz14LQBLwAdKs1uDayGAht5PIaR8hFmZzMouH5tjax9NuT6yo0rA2HLk 9/xQ5jrW8l/RqcxybioIsQ6X0GvpL3hJMuDW+5o960i34JwAamr0dJpcBP5rejWs PVGnctRi2oSK2ACMvEE2W5lewI2V5yioEzLqtMYWEhS+szCZ6w1V2yvKvB3BDvAw wsGdnpvAasB/jILtXXLoDME6Qk0KGoK8INUpnoO8bW5SHHhtocaVG4hOuhWLPV9E BKw+DZrDwxtbE4uoU0FckSD7V47N5t9wKxJpjbvB8LDck1+ME286GoJl7I2rAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoYU2WEl13YTOBbVSv4i4lMbOUo8wHwYDVR0j BBgwFoAUBB+gpAitV+k4TaMxswQLkf3gC+MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVv QTkvMC8wNDFGQTBBNDA4QUQ1N0U5Mzg0REEzMzFCMzA0MEI5MUZERTAwQkUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0MUZBMEE0MDhBRDU3RTkz ODREQTMzMUIzMDQwQjkxRkRFMDBCRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVvQTkvMC8w NDFGQTBBNDA4QUQ1N0U5Mzg0REEzMzFCMzA0MEI5MUZERTAwQkUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX4YixKpBvFj4KA4ce+JY7uAKYTGPeAi5QvZSGFGeN1RNutbaO12se2aNGXKm FKutUycBfWOR2PFn8s4daN5l4bXvIBeyaZ6GveKb5oV9ryuMwGwRfAdRCAx/13KN QDEUv9cyjnJmvMRh8TdpyIqs70SzBAApAFrfAmVvE2LCmuS6Gk34YTO5KUz9n4u0 NiThEZBeQWt+UlvHJGbEqxjYORGl7XxtrA4ffEnUL1PNinfeWFPJuvdYCXtccX1f +X0LsdkJl78KGcQ21j1y7Av/FZIfNxtDvMHNH0dxn80x8bF4sai7VD4iBxFBeGpf FLnrirU6jW/LwwwMqRNYiwECpQ== -----END CERTIFICATE-----Generated at Tue Nov 4 10:05:36 2025 by rpki-client