$ rpki-client -vvf rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.mft File: 9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.mft (raw, json) Hash identifier: i5X7ncsGaB2wpeXgkkkziGe59ALdSN+CD7ik+xiRtOQ= Subject key identifier: 81:52:8E:4C:DA:40:16:3B:4C:8B:71:10:8D:D4:A6:9A:80:7B:1D:B2 Authority key identifier: 97:07:BE:0C:EE:64:AF:76:C0:9A:5D:93:BC:E5:A8:EB:45:CD:42:06 Certificate issuer: /CN=9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206 Certificate serial: 521D4B42A1965361065C1E6BC371BD634647926E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.cer Subject info access: rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.mft Manifest number: 0309 Signing time: Mon 03 Nov 2025 11:13:08 +0000 Manifest this update: Mon 03 Nov 2025 11:08:08 +0000 Manifest next update: Tue 04 Nov 2025 14:36:08 +0000 Files and hashes: 1: 323830343a6437633a3a2f33322d3438203d3e203532363334.roa (hash: FG0ELN+qQ4LDNywvUxeoWmKWREX27gGFDJ5LwaXJ+04=) 2: 9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.crl (hash: Hjgzs1kXt7czd/+MXhpDKpdtGzKnUHrXlUg06gey35Q=) 3: 3137372e3132342e3138382e302f32322d3234203d3e203532363334.roa (hash: k7FUUt1hHS1+wJfqeoAV8UTznJsYp2fk7y09VIgPCoc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.crl rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:1d:4b:42:a1:96:53:61:06:5c:1e:6b:c3:71:bd:63:46:47:92:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206 Validity Not Before: Nov 3 11:08:08 2025 GMT Not After : Nov 4 14:36:08 2025 GMT Subject: CN=81528E4CDA40163B4C8B71108DD4A69A807B1DB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:48:e7:9f:67:97:b1:40:2b:27:44:e0:47:cb: ca:bb:fd:ce:11:08:f4:48:99:b0:ee:a9:b9:d1:4b: 64:8c:c9:b1:20:3e:a7:68:40:60:61:b4:a9:0c:ea: 33:2d:85:c0:d7:7c:a6:63:45:2c:1c:ac:0a:fe:6f: db:97:ff:99:41:c7:35:a6:af:9e:46:9b:c3:80:a2: 03:ab:63:f7:76:12:f7:7b:6c:6e:72:54:73:0d:0d: f3:46:c6:9d:1b:76:91:6b:0f:ac:e7:92:76:10:51: 61:cd:55:da:2b:8f:05:98:e8:8c:69:4b:30:19:18: 79:7e:d6:77:91:09:9c:7a:7d:ec:5a:4c:7e:21:30: 8f:11:19:3d:cc:bd:f7:1c:64:f4:32:e9:56:bb:d4: 9f:fd:93:94:8b:1f:2a:20:98:02:cc:34:20:89:d3: 67:a8:88:d2:b3:ba:8e:f5:c3:a6:3e:37:56:de:3a: a8:0d:1c:52:5e:6f:3a:23:38:b9:6d:58:85:3c:cc: 8f:84:f4:66:ab:ea:fc:d8:fa:1c:c8:87:fd:5a:ee: 5e:4f:d3:7c:1c:90:f3:83:5f:70:28:d0:d3:75:db: 51:f3:83:e6:ea:bc:fa:64:e1:ba:e1:c5:1e:da:84: 26:ad:f6:31:e6:52:30:b5:7f:60:b8:92:63:8a:cc: 3c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:52:8E:4C:DA:40:16:3B:4C:8B:71:10:8D:D4:A6:9A:80:7B:1D:B2 X509v3 Authority Key Identifier: keyid:97:07:BE:0C:EE:64:AF:76:C0:9A:5D:93:BC:E5:A8:EB:45:CD:42:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:71:78:33:58:cc:07:07:72:fd:b4:9a:27:db:cd:63:eb:e4: 09:0a:19:26:73:c3:80:cf:f3:76:37:e7:da:23:78:89:b6:73: 3f:b4:99:46:6d:49:dc:e4:6d:ba:cd:dd:c2:95:33:06:c1:c7: b9:b9:cb:63:bd:32:2d:11:39:1d:9e:4f:34:00:8c:1f:d6:f4: 7a:30:8f:c4:b4:f5:24:87:84:a9:63:9b:c7:21:5e:25:fe:2e: e4:f2:2a:c6:ee:17:ed:be:0b:16:c4:e2:fb:84:d6:43:aa:be: 79:aa:a2:ec:17:76:e7:1e:8b:c8:23:ac:b0:d8:ad:a6:96:9a: bc:6a:0c:ad:6d:49:23:e0:9c:2a:e1:d2:6c:04:43:1f:ca:8a: db:a0:a3:f1:8c:e9:13:98:5e:c5:34:19:f5:03:e0:f4:33:7e: 56:42:f3:75:e5:f2:5d:27:fe:05:d0:d2:03:f0:eb:6d:7d:75: 5a:ec:1e:59:0a:1d:bf:c8:45:10:94:81:9f:0a:74:eb:2f:bf: 40:a6:90:7f:8b:11:88:a9:9c:2c:41:d5:57:e6:27:37:c2:8d: 63:f0:5a:f9:f1:3e:a0:3a:23:32:6a:8c:20:c1:ac:ba:a8:cc: 5e:3f:1e:06:e4:ca:f4:75:d5:8b:e0:5b:13:6b:2a:d3:5a:35: d7:80:cf:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUh1LQqGWU2EGXB5rw3G9Y0ZHkm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwN0JFMENFRTY0QUY3NkMwOUE1RDkzQkNFNUE4RUI0 NUNENDIwNjAeFw0yNTExMDMxMTA4MDhaFw0yNTExMDQxNDM2MDhaMDMxMTAvBgNV BAMTKDgxNTI4RTRDREE0MDE2M0I0QzhCNzExMDhERDRBNjlBODA3QjFEQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtSOefZ5exQCsnROBHy8q7/c4R CPRImbDuqbnRS2SMybEgPqdoQGBhtKkM6jMthcDXfKZjRSwcrAr+b9uX/5lBxzWm r55Gm8OAogOrY/d2Evd7bG5yVHMNDfNGxp0bdpFrD6znknYQUWHNVdorjwWY6Ixp SzAZGHl+1neRCZx6fexaTH4hMI8RGT3MvfccZPQy6Va71J/9k5SLHyogmALMNCCJ 02eoiNKzuo71w6Y+N1beOqgNHFJebzojOLltWIU8zI+E9Gar6vzY+hzIh/1a7l5P 03wckPODX3Ao0NN121Hzg+bqvPpk4brhxR7ahCat9jHmUjC1f2C4kmOKzDyzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgVKOTNpAFjtMi3EQjdSmmoB7HbIwHwYDVR0j BBgwFoAUlwe+DO5kr3bAml2TvOWo60XNQgYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDZzR3JFVDQxSnBxbUs3OGpuZGtjVndHZkFHa3J2SGFnbUxxdW9rRGla cWMvMS85NzA3QkUwQ0VFNjRBRjc2QzA5QTVEOTNCQ0U1QThFQjQ1Q0Q0MjA2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3MDdCRTBDRUU2NEFGNzZD MDlBNUQ5M0JDRTVBOEVCNDVDRDQyMDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDZzR3JFVDQxSnBxbUs3OGpuZGtjVndHZkFHa3J2SGFnbUxxdW9rRGlacWMvMS85 NzA3QkUwQ0VFNjRBRjc2QzA5QTVEOTNCQ0U1QThFQjQ1Q0Q0MjA2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfHF4M1jMBwdy/bSaJ9vNY+vkCQoZJnPDgM/zdjfn2iN4ibZzP7SZRm1J3ORt us3dwpUzBsHHubnLY70yLRE5HZ5PNACMH9b0ejCPxLT1JIeEqWObxyFeJf4u5PIq xu4X7b4LFsTi+4TWQ6q+eaqi7Bd25x6LyCOssNitppaavGoMrW1JI+CcKuHSbARD H8qK26Cj8YzpE5hexTQZ9QPg9DN+VkLzdeXyXSf+BdDSA/DrbX11WuweWQodv8hF EJSBnwp06y+/QKaQf4sRiKmcLEHVV+YnN8KNY/Ba+fE+oDojMmqMIMGsuqjMXj8e BuTK9HXVi+BbE2sq01o114DPEg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:25:01 2025 by rpki-client