$ rpki-client -vvf rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft File: D95EAB9296B47F53E06E1370749CCDB5566F072F.mft (raw, json) Hash identifier: 2Q85X/uNDDT+UPa7/rAVR0HDAOXf5hYO9bEAP8W5Tds= Subject key identifier: AC:86:EA:58:00:44:A3:1D:CA:61:C4:70:3A:FF:A5:67:5D:3E:F0:A3 Authority key identifier: D9:5E:AB:92:96:B4:7F:53:E0:6E:13:70:74:9C:CD:B5:56:6F:07:2F Certificate issuer: /CN=D95EAB9296B47F53E06E1370749CCDB5566F072F Certificate serial: 392B1EBAE59754114CE91B3C0E57F35A7EA83933 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95EAB9296B47F53E06E1370749CCDB5566F072F.cer Subject info access: rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft Manifest number: 0128 Signing time: Mon 03 Nov 2025 10:27:59 +0000 Manifest this update: Mon 03 Nov 2025 10:22:59 +0000 Manifest next update: Tue 04 Nov 2025 13:15:59 +0000 Files and hashes: 1: D95EAB9296B47F53E06E1370749CCDB5566F072F.crl (hash: yz3FzIlavsQCF3mfYPrhHdWb4KBziTO2432VTMeq+ME=) 2: 323830343a333465633a3a2f33322d3336203d3e20323635343838.roa (hash: EoIQWpAtn9W4dgL7mYd8yyBRPUlI0HBl+UrrQT4TK+c=) 3: 3136382e3139372e3137362e302f32322d3234203d3e20323635343838.roa (hash: jExsfog9IFzuMeux5ajiGsQ/P3fwEZzxI5InNQT4MkE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.crl rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95EAB9296B47F53E06E1370749CCDB5566F072F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2b:1e:ba:e5:97:54:11:4c:e9:1b:3c:0e:57:f3:5a:7e:a8:39:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D95EAB9296B47F53E06E1370749CCDB5566F072F Validity Not Before: Nov 3 10:22:59 2025 GMT Not After : Nov 4 13:15:59 2025 GMT Subject: CN=AC86EA580044A31DCA61C4703AFFA5675D3EF0A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:67:76:15:2a:e4:d2:45:16:5f:80:a5:3b: 09:39:e9:0f:66:d1:74:a8:a9:e6:b4:13:b2:9b:c2: d8:55:aa:02:dd:d3:51:3c:76:20:3c:95:5d:54:3d: 3b:35:f8:96:f1:1e:c5:d7:c9:1b:8d:3c:1e:5c:e3: d4:a3:c8:9c:2c:3e:28:c9:0d:06:56:0f:09:78:f3: 72:79:f3:ad:86:bf:be:a6:9b:4f:28:69:84:e2:58: 07:c1:d6:89:3d:37:bb:8d:75:3e:b1:ae:c9:7c:fe: bb:9c:07:8f:e6:e1:be:8a:00:86:84:c4:80:02:48: c0:a7:b2:c5:75:f9:45:33:27:50:77:a8:c7:15:f2: 77:b6:ff:6a:ab:2d:14:bd:07:e0:dc:3d:50:f3:26: 36:83:4f:74:aa:e0:b4:12:f7:d6:e1:19:09:66:3e: bf:bc:25:84:d7:3b:8d:dd:f3:cd:9d:99:19:52:46: 96:72:46:1a:bc:5a:84:be:9e:28:6c:d5:db:89:af: a8:bf:d1:7f:ee:85:c6:57:f7:ff:ad:c4:4f:3d:f1: 1a:1b:61:bc:73:c4:2a:4d:4d:1c:71:1e:b3:10:bd: b2:13:b1:5d:25:e4:2d:02:2f:12:a0:2f:5e:56:48: c7:97:18:15:c0:1b:01:7c:42:86:77:ce:58:58:ec: 74:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:86:EA:58:00:44:A3:1D:CA:61:C4:70:3A:FF:A5:67:5D:3E:F0:A3 X509v3 Authority Key Identifier: keyid:D9:5E:AB:92:96:B4:7F:53:E0:6E:13:70:74:9C:CD:B5:56:6F:07:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95EAB9296B47F53E06E1370749CCDB5566F072F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:d3:16:e4:18:0e:81:de:97:ba:ff:54:45:00:eb:d2:5b:89: f9:c2:3f:5a:a1:30:f2:95:65:61:c4:e8:ef:b4:3b:5e:47:6a: 6a:57:d1:58:b3:de:14:49:e7:0a:0a:99:59:2c:4c:7d:63:db: eb:d1:f4:33:28:51:7b:20:85:0b:67:73:54:1e:0b:c7:1a:ba: 71:cb:b2:b3:ad:b5:b9:75:12:01:e9:73:a6:8c:38:2b:ed:15: 68:6e:f6:bd:cb:f8:60:6a:ec:05:27:f8:c9:69:c7:4f:9a:68: bc:8b:a2:24:ad:57:15:ce:8c:e5:05:03:d9:42:f9:d4:fd:d3: cb:0e:a8:b1:14:7a:c8:20:7b:81:4f:02:b2:80:73:f1:2b:47: 7d:a9:f6:bf:d7:6a:0e:20:75:78:6d:f5:ab:cd:98:16:7f:a5: e1:d0:59:97:05:e4:24:28:49:d8:0f:7a:f3:43:12:63:8b:cb: 3a:7b:61:10:e3:83:96:c4:04:89:67:a4:1f:d2:da:3d:db:ed: 52:6a:77:91:4c:c7:1b:b8:36:8e:8b:76:ee:48:b5:f4:f6:1e: 8c:c4:c7:d3:64:e3:2e:cb:25:6e:c4:67:93:99:df:31:95:18: 54:dc:46:4a:db:43:ee:3e:39:16:cd:2f:80:d0:80:e6:72:c4: fb:94:87:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOSseuuWXVBFM6Rs8DlfzWn6oOTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk1RUFCOTI5NkI0N0Y1M0UwNkUxMzcwNzQ5Q0NEQjU1 NjZGMDcyRjAeFw0yNTExMDMxMDIyNTlaFw0yNTExMDQxMzE1NTlaMDMxMTAvBgNV BAMTKEFDODZFQTU4MDA0NEEzMURDQTYxQzQ3MDNBRkZBNTY3NUQzRUYwQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TWd2FSrk0kUWX4ClOwk56Q9m 0XSoqea0E7KbwthVqgLd01E8diA8lV1UPTs1+JbxHsXXyRuNPB5c49SjyJwsPijJ DQZWDwl483J5862Gv76mm08oaYTiWAfB1ok9N7uNdT6xrsl8/rucB4/m4b6KAIaE xIACSMCnssV1+UUzJ1B3qMcV8ne2/2qrLRS9B+DcPVDzJjaDT3Sq4LQS99bhGQlm Pr+8JYTXO43d882dmRlSRpZyRhq8WoS+nihs1duJr6i/0X/uhcZX9/+txE898Rob YbxzxCpNTRxxHrMQvbITsV0l5C0CLxKgL15WSMeXGBXAGwF8QoZ3zlhY7HSrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrIbqWABEox3KYcRwOv+lZ10+8KMwHwYDVR0j BBgwFoAU2V6rkpa0f1PgbhNwdJzNtVZvBy8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRTZYcThSRno4Y2RWcEJONk5WY0ZqOUpkMUdZb0RxdHVFenpSemZGcTVK QjUvMC9EOTVFQUI5Mjk2QjQ3RjUzRTA2RTEzNzA3NDlDQ0RCNTU2NkYwNzJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NUVBQjkyOTZCNDdGNTNF MDZFMTM3MDc0OUNDREI1NTY2RjA3MkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RTZYcThSRno4Y2RWcEJONk5WY0ZqOUpkMUdZb0RxdHVFenpSemZGcTVKQjUvMC9E OTVFQUI5Mjk2QjQ3RjUzRTA2RTEzNzA3NDlDQ0RCNTU2NkYwNzJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkNMW5BgOgd6Xuv9URQDr0luJ+cI/WqEw8pVlYcTo77Q7XkdqalfRWLPeFEnn CgqZWSxMfWPb69H0MyhReyCFC2dzVB4Lxxq6ccuys621uXUSAelzpow4K+0VaG72 vcv4YGrsBSf4yWnHT5povIuiJK1XFc6M5QUD2UL51P3Tyw6osRR6yCB7gU8CsoBz 8StHfan2v9dqDiB1eG31q82YFn+l4dBZlwXkJChJ2A9680MSY4vLOnthEOODlsQE iWekH9LaPdvtUmp3kUzHG7g2jot27ki19PYejMTH02TjLsslbsRnk5nfMZUYVNxG SttD7j45Fs0vgNCA5nLE+5SHGQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:33:51 2025 by rpki-client