$ rpki-client -vvf rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.mft File: 070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.mft (raw, json) Hash identifier: BP49JG081KawzTNDBtJCfqZphx4y3DvondDciAzBlgE= Subject key identifier: EA:A5:88:32:A1:DA:9D:73:B4:8E:D8:88:10:CB:CF:5C:41:E8:54:80 Authority key identifier: 07:08:45:DA:CC:1D:F7:8A:B0:DB:0A:E9:1C:C8:CF:8F:64:FF:A0:38 Certificate issuer: /CN=070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038 Certificate serial: 5F0FCCA790621331D80D7278159F50049660DA74 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.cer Subject info access: rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.mft Manifest number: 46 Signing time: Tue 04 Nov 2025 07:30:51 +0000 Manifest this update: Tue 04 Nov 2025 07:25:51 +0000 Manifest next update: Wed 05 Nov 2025 10:56:51 +0000 Files and hashes: 1: 323830343a356639303a3a2f33322d313238203d3e20323639313039.roa (hash: gIHjJOToIbaIEN7HcuK340pC1HYXWvwb6Nzx/LOfIk8=) 2: 070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.crl (hash: vYjfHXXLPfUWPIjiBHbKrB92D2kF5ZYKGPH80fcMLVQ=) 3: 34352e3137392e36382e302f32322d3332203d3e20323639313039.roa (hash: IyZcDTXDvP2kF3jftamqMhb06YANOArcauWrWN5LViw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.crl rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 10:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:0f:cc:a7:90:62:13:31:d8:0d:72:78:15:9f:50:04:96:60:da:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038 Validity Not Before: Nov 4 07:25:51 2025 GMT Not After : Nov 5 10:56:51 2025 GMT Subject: CN=EAA58832A1DA9D73B48ED88810CBCF5C41E85480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:85:c4:a1:56:f3:22:5c:11:31:d2:66:05:8f: 85:75:00:2d:4b:0d:2e:95:a4:77:ff:54:d3:d4:64: b9:28:56:40:69:75:96:1f:e1:66:97:44:80:3a:6a: da:d9:42:b6:c7:c2:45:1b:ee:f5:90:ac:3b:36:b9: dd:30:a4:74:24:33:7c:b9:d6:c0:d7:df:8e:c6:49: cb:d2:2f:a3:9a:31:19:41:34:77:1b:9b:87:4d:60: a4:70:1f:21:d7:da:db:08:3c:e1:6f:ff:5f:59:e1: 50:2c:55:58:82:14:01:36:48:98:a1:57:4f:a4:ff: 76:a3:81:b1:bf:c6:84:e2:96:75:e3:c2:41:56:c2: a3:3f:36:ec:5b:83:0b:2f:88:3f:78:8f:bb:89:41: be:26:dd:ab:66:d3:f2:0b:a4:9b:34:09:a3:c7:36: 3e:bb:14:8d:be:db:16:b8:06:47:81:92:e4:d1:a8: d6:0c:e9:90:c0:8c:f2:39:7b:99:51:7b:a9:36:4f: 64:a1:37:57:fa:05:ff:38:11:27:8d:ac:31:1f:2b: 53:c3:99:8c:22:16:9f:58:8a:f1:fa:b6:4b:87:07: f5:cb:1e:fd:c4:6e:3e:64:7f:88:b1:7d:e3:68:d4: 58:88:69:1b:8a:cc:2e:98:d2:9f:46:5b:8e:6e:d5: e5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A5:88:32:A1:DA:9D:73:B4:8E:D8:88:10:CB:CF:5C:41:E8:54:80 X509v3 Authority Key Identifier: keyid:07:08:45:DA:CC:1D:F7:8A:B0:DB:0A:E9:1C:C8:CF:8F:64:FF:A0:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:87:9d:91:d9:58:35:47:f6:59:80:11:d1:07:01:52:ee:e3: 29:5d:f6:de:f4:af:c2:07:d7:92:f2:7d:ed:8d:77:b0:eb:28: 38:5a:5a:3c:57:7b:33:7a:b1:ad:de:31:ca:d1:d9:00:61:c1: 41:2c:47:f9:7c:44:51:9e:db:0d:15:a8:f3:3e:2c:94:79:a9: 95:80:7a:3f:ca:44:f7:ed:f0:43:93:f3:74:9d:51:b4:fd:c9: 40:55:9a:2b:52:64:85:50:b7:a0:a5:ff:a9:4b:fc:18:32:ff: bd:92:a1:a4:2b:8f:7b:23:53:4f:1d:37:d1:e0:74:b2:ae:ba: 1f:a9:e8:44:b7:8e:da:94:30:55:8f:99:4b:da:f4:06:56:bd: c2:48:5f:a8:fd:5c:68:99:16:dc:e9:3a:57:67:2e:8d:48:87: 85:8e:b0:76:ea:ff:d9:96:fb:7d:3f:97:da:6c:f7:79:2c:32: d2:1d:73:5e:a9:ae:83:46:5c:90:2f:73:7d:3e:e9:16:f6:30: 87:f9:03:6a:ca:1c:8d:39:26:0d:8e:a4:d0:86:5a:ca:8d:38: 28:2f:68:03:4f:d6:ed:20:cb:5b:17:cb:a4:fb:25:35:f5:87: 6f:e7:67:09:ec:13:18:c3:8a:e5:fe:f9:17:44:46:1f:c5:e4: 50:40:a5:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXw/Mp5BiEzHYDXJ4FZ9QBJZg2nQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwODQ1REFDQzFERjc4QUIwREIwQUU5MUNDOENGOEY2 NEZGQTAzODAeFw0yNTExMDQwNzI1NTFaFw0yNTExMDUxMDU2NTFaMDMxMTAvBgNV BAMTKEVBQTU4ODMyQTFEQTlENzNCNDhFRDg4ODEwQ0JDRjVDNDFFODU0ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvhcShVvMiXBEx0mYFj4V1AC1L DS6VpHf/VNPUZLkoVkBpdZYf4WaXRIA6atrZQrbHwkUb7vWQrDs2ud0wpHQkM3y5 1sDX347GScvSL6OaMRlBNHcbm4dNYKRwHyHX2tsIPOFv/19Z4VAsVViCFAE2SJih V0+k/3ajgbG/xoTilnXjwkFWwqM/NuxbgwsviD94j7uJQb4m3atm0/ILpJs0CaPH Nj67FI2+2xa4BkeBkuTRqNYM6ZDAjPI5e5lRe6k2T2ShN1f6Bf84ESeNrDEfK1PD mYwiFp9YivH6tkuHB/XLHv3Ebj5kf4ixfeNo1FiIaRuKzC6Y0p9GW45u1eVRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6qWIMqHanXO0jtiIEMvPXEHoVIAwHwYDVR0j BBgwFoAUBwhF2swd94qw2wrpHMjPj2T/oDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREFYS1doNW11elZDZkFxUFRzYnRDTGpYYmlZZmU5ODFZVUVWejE3Rnox ZFQvMC8wNzA4NDVEQUNDMURGNzhBQjBEQjBBRTkxQ0M4Q0Y4RjY0RkZBMDM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA3MDg0NURBQ0MxREY3OEFC MERCMEFFOTFDQzhDRjhGNjRGRkEwMzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REFYS1doNW11elZDZkFxUFRzYnRDTGpYYmlZZmU5ODFZVUVWejE3RnoxZFQvMC8w NzA4NDVEQUNDMURGNzhBQjBEQjBBRTkxQ0M4Q0Y4RjY0RkZBMDM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKYedkdlYNUf2WYAR0QcBUu7jKV323vSvwgfXkvJ97Y13sOsoOFpaPFd7M3qx rd4xytHZAGHBQSxH+XxEUZ7bDRWo8z4slHmplYB6P8pE9+3wQ5PzdJ1RtP3JQFWa K1JkhVC3oKX/qUv8GDL/vZKhpCuPeyNTTx030eB0sq66H6noRLeO2pQwVY+ZS9r0 Bla9wkhfqP1caJkW3Ok6V2cujUiHhY6wdur/2Zb7fT+X2mz3eSwy0h1zXqmug0Zc kC9zfT7pFvYwh/kDasocjTkmDY6k0IZayo04KC9oA0/W7SDLWxfLpPslNfWHb+dn CewTGMOK5f75F0RGH8XkUEClZA== -----END CERTIFICATE-----Generated at Tue Nov 4 10:26:38 2025 by rpki-client