$ rpki-client -vvf rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft File: 640539F45452C2299C340AFF511D40CB7EEAA212.mft (raw, json) Hash identifier: gdvpMLwGeo05greV1++NeEIV5hYBm+Sd5akjHsNUP10= Subject key identifier: B6:AD:DA:10:1F:48:0D:D1:95:B4:7E:DD:F5:94:07:F9:3A:18:09:8B Authority key identifier: 64:05:39:F4:54:52:C2:29:9C:34:0A:FF:51:1D:40:CB:7E:EA:A2:12 Certificate issuer: /CN=640539F45452C2299C340AFF511D40CB7EEAA212 Certificate serial: 02C18690785C3955F9CB1157D1EE4B1FC085E950 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/640539F45452C2299C340AFF511D40CB7EEAA212.cer Subject info access: rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft Manifest number: 0256 Signing time: Mon 03 Nov 2025 20:21:33 +0000 Manifest this update: Mon 03 Nov 2025 20:16:33 +0000 Manifest next update: Tue 04 Nov 2025 20:23:33 +0000 Files and hashes: 1: 640539F45452C2299C340AFF511D40CB7EEAA212.crl (hash: xT2qMZmkDAJomwwVynx+LMdbiFjvuBKnyxChC6MeY/0=) 2: 323830343a3230303a3a2f33322d3438203d3e203238313837.roa (hash: +AmSumNSe3jEfgO/zgnDArEQVyEKrrgM+a3326FiUeE=) 3: 3133382e3138352e3136382e302f32322d3234203d3e203238313837.roa (hash: rD7F5xK9cR4/pIN8ctsOCA9ZeSAJs1T9SIFaWOA5R3U=) 4: 3138392e38392e3230382e302f32302d3234203d3e203238313837.roa (hash: Ml245kH2H3yLOKcjLG5bMV/jbocL+TBO+YTq3SCbAcg=) 5: 3138372e36302e3132382e302f32302d3234203d3e203238313837.roa (hash: hP3SbN5WFhu7M5qdmCPlBLAeFnVA62R4iLUfEyYsfhU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.crl rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/640539F45452C2299C340AFF511D40CB7EEAA212.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 20:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:c1:86:90:78:5c:39:55:f9:cb:11:57:d1:ee:4b:1f:c0:85:e9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=640539F45452C2299C340AFF511D40CB7EEAA212 Validity Not Before: Nov 3 20:16:33 2025 GMT Not After : Nov 4 20:23:33 2025 GMT Subject: CN=B6ADDA101F480DD195B47EDDF59407F93A18098B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7e:26:ec:23:d5:a2:89:7c:4d:6c:8b:2d:9b: 71:29:84:bf:7c:ec:79:90:6f:d3:86:13:90:39:88: b6:d2:49:3e:81:fe:fb:62:12:19:2d:e6:1d:36:e3: e9:12:c8:8f:f3:ad:e3:6f:f1:1e:92:aa:0c:bf:62: 20:4c:f7:28:80:e6:65:9b:b7:56:55:40:7d:07:8c: 42:00:2c:05:19:5c:d3:38:91:e7:c3:f3:7d:dc:df: 4f:fc:9a:96:a2:e1:46:9e:12:02:8e:70:d8:db:2a: 27:f4:b0:7c:d5:37:5f:83:65:7e:e3:70:aa:c0:67: e9:91:d7:b5:d7:f8:26:03:90:0c:73:7a:c6:c2:a5: 63:6a:92:8c:39:fe:b2:a1:3e:9d:4d:70:eb:d8:f1: 17:4c:09:8c:48:f9:af:33:33:2d:19:25:f0:13:1d: 76:f3:65:52:0f:64:48:2b:48:2d:55:81:16:c2:af: 75:50:de:d6:cc:a5:01:ca:49:94:d9:02:20:fe:4b: eb:d3:7f:0d:25:e5:77:7f:2b:79:c8:fb:df:57:34: c7:17:e5:65:7e:0d:9a:ba:65:4d:a5:c4:83:53:da: 6f:37:a7:66:92:15:1d:84:69:ea:a2:68:1a:a5:b0: be:d1:c3:e2:48:77:43:d4:5f:b2:ed:42:14:1c:6f: 2d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AD:DA:10:1F:48:0D:D1:95:B4:7E:DD:F5:94:07:F9:3A:18:09:8B X509v3 Authority Key Identifier: keyid:64:05:39:F4:54:52:C2:29:9C:34:0A:FF:51:1D:40:CB:7E:EA:A2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/640539F45452C2299C340AFF511D40CB7EEAA212.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:f7:9a:94:0c:3b:98:86:ec:fb:57:4e:b5:71:5f:9f:96:f9: 7b:3b:60:42:1e:25:11:1b:05:39:e7:d0:d6:f2:5f:eb:b3:4c: 51:c7:fe:4d:d7:a5:e0:91:31:ec:80:66:aa:e4:4b:6c:9f:e8: 85:30:b3:b1:1b:7d:41:59:32:62:45:b1:39:82:e7:12:af:de: 01:38:87:1d:f7:16:6e:53:d0:af:44:27:1c:05:70:34:a9:09: 5d:c5:6d:28:3d:18:23:68:43:2c:d6:c9:0c:d4:15:0e:45:67: 84:e6:01:bf:46:3f:cc:f4:35:6e:a2:e8:f5:33:6c:32:91:e3: 04:93:99:ca:ac:e5:4b:7f:ee:b8:dd:df:15:81:c9:f4:3e:97: 8e:b1:08:bf:9a:88:d6:09:f2:5b:a6:3c:37:30:1c:5b:69:11: b6:05:95:b5:bb:f1:59:ab:cf:5e:96:2e:12:04:cf:cc:c9:88: a6:bb:2c:db:4f:84:08:1e:5e:f1:70:48:9c:6e:cb:f1:01:c4: 1a:07:28:d3:42:00:b4:67:e6:03:e4:a1:4f:7e:37:4d:52:11: 06:54:44:64:c4:2e:d4:15:19:71:50:88:7c:c0:3e:74:e6:4e: 4d:0e:f8:0d:1c:14:b9:da:d9:50:df:39:bf:16:d8:c8:48:16: 2e:56:3f:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAsGGkHhcOVX5yxFX0e5LH8CF6VAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQwNTM5RjQ1NDUyQzIyOTlDMzQwQUZGNTExRDQwQ0I3 RUVBQTIxMjAeFw0yNTExMDMyMDE2MzNaFw0yNTExMDQyMDIzMzNaMDMxMTAvBgNV BAMTKEI2QUREQTEwMUY0ODBERDE5NUI0N0VEREY1OTQwN0Y5M0ExODA5OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZfibsI9WiiXxNbIstm3EphL98 7HmQb9OGE5A5iLbSST6B/vtiEhkt5h024+kSyI/zreNv8R6Sqgy/YiBM9yiA5mWb t1ZVQH0HjEIALAUZXNM4kefD833c30/8mpai4UaeEgKOcNjbKif0sHzVN1+DZX7j cKrAZ+mR17XX+CYDkAxzesbCpWNqkow5/rKhPp1NcOvY8RdMCYxI+a8zMy0ZJfAT HXbzZVIPZEgrSC1VgRbCr3VQ3tbMpQHKSZTZAiD+S+vTfw0l5Xd/K3nI+99XNMcX 5WV+DZq6ZU2lxINT2m83p2aSFR2EaeqiaBqlsL7Rw+JId0PUX7LtQhQcby1LAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtq3aEB9IDdGVtH7d9ZQH+ToYCYswHwYDVR0j BBgwFoAUZAU59FRSwimcNAr/UR1Ay37qohIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRENOdmVqMWE4cjJSUTNrWjVwV1dDc29iMlJuNE1xWXVCSEtkN0FQOThi RDYvMC82NDA1MzlGNDU0NTJDMjI5OUMzNDBBRkY1MTFENDBDQjdFRUFBMjEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0MDUzOUY0NTQ1MkMyMjk5 QzM0MEFGRjUxMUQ0MENCN0VFQUEyMTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RENOdmVqMWE4cjJSUTNrWjVwV1dDc29iMlJuNE1xWXVCSEtkN0FQOThiRDYvMC82 NDA1MzlGNDU0NTJDMjI5OUMzNDBBRkY1MTFENDBDQjdFRUFBMjEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsvealAw7mIbs+1dOtXFfn5b5eztgQh4lERsFOefQ1vJf67NMUcf+Tdel4JEx 7IBmquRLbJ/ohTCzsRt9QVkyYkWxOYLnEq/eATiHHfcWblPQr0QnHAVwNKkJXcVt KD0YI2hDLNbJDNQVDkVnhOYBv0Y/zPQ1bqLo9TNsMpHjBJOZyqzlS3/uuN3fFYHJ 9D6XjrEIv5qI1gnyW6Y8NzAcW2kRtgWVtbvxWavPXpYuEgTPzMmIprss20+ECB5e 8XBInG7L8QHEGgco00IAtGfmA+ShT343TVIRBlREZMQu1BUZcVCIfMA+dOZOTQ74 DRwUudrZUN85vxbYyEgWLlY/GA== -----END CERTIFICATE-----Generated at Tue Nov 4 06:21:21 2025 by rpki-client