$ rpki-client -vvf rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft File: 1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft (raw, json) Hash identifier: ehOy6pmYkk1h5Lc9uUpuSCltDzNCxESZ13FI6K9cczs= Subject key identifier: DA:DE:BB:9D:CF:BD:F7:04:A0:76:FC:8D:50:10:55:69:B5:77:CD:53 Authority key identifier: 1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD Certificate issuer: /CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD Certificate serial: 5E0DE796DE2E89C5313CA0B7811116DF88258D3A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer Subject info access: rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft Manifest number: 0264 Signing time: Mon 03 Nov 2025 02:34:01 +0000 Manifest this update: Mon 03 Nov 2025 02:29:01 +0000 Manifest next update: Tue 04 Nov 2025 02:37:01 +0000 Files and hashes: 1: 323830343a373538383a3a2f33322d3334203d3e20323731303533.roa (hash: nnZxddMxtPYXvLGrokRo727KDyxmpu+gR99v39ppU0Y=) 2: 3137372e37342e3136342e302f32322d3234203d3e20323731303533.roa (hash: PMpXdMUlCp4Q+HwwLd4ysJ8VQ/NQRUOFxlCc29bb4nI=) 3: 1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl (hash: iigoKOaBWJLp14upy7HrBoNlZcc4YqOSul2IR/9ScJA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 02:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0d:e7:96:de:2e:89:c5:31:3c:a0:b7:81:11:16:df:88:25:8d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD Validity Not Before: Nov 3 02:29:01 2025 GMT Not After : Nov 4 02:37:01 2025 GMT Subject: CN=DADEBB9DCFBDF704A076FC8D50105569B577CD53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b5:68:4e:c6:27:31:9f:50:ad:91:e1:3d:b5: 9a:ff:36:25:fa:29:2e:c5:b1:5f:50:31:24:3c:c3: 89:c6:af:1c:a2:39:02:d1:2d:3e:e8:fe:28:51:7a: fb:43:fa:e7:bc:47:6e:0b:f7:b6:39:fb:36:76:16: e6:24:83:61:9c:5e:25:56:7a:8d:07:0f:71:44:d9: ac:31:2b:dd:4d:f7:a7:20:53:17:6a:ba:44:56:61: 06:2f:b9:6c:39:0f:5c:09:b6:e1:dd:e0:e9:81:03: d3:6c:ae:46:b6:0f:56:55:e3:be:12:6d:e0:7d:97: 84:98:08:27:e1:5c:77:4d:57:13:04:22:17:88:4d: 4e:53:d1:33:57:ac:35:a5:ae:e7:33:7b:67:bb:6a: 54:b8:e5:b4:7d:2b:5b:9c:9a:93:a3:7d:24:87:59: 09:4d:8a:df:a5:a7:14:df:a7:7d:0c:29:8d:28:33: fb:46:02:95:be:b4:37:dc:5e:7a:89:e7:a7:c5:98: 72:a1:64:63:2d:99:f7:d1:4a:82:e1:2a:89:3b:7e: 3b:cd:f7:ba:42:da:b1:be:cf:75:59:1b:cf:a3:5f: c0:f3:b9:d8:66:2e:7f:74:87:7d:fc:09:bc:2f:99: 0a:a4:9f:a5:62:22:33:a0:10:f3:0c:93:98:ec:73: 3f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DE:BB:9D:CF:BD:F7:04:A0:76:FC:8D:50:10:55:69:B5:77:CD:53 X509v3 Authority Key Identifier: keyid:1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:29:03:ee:64:30:3c:db:e4:f8:a0:55:71:aa:3c:99:51:aa: 45:ba:40:a6:51:6b:70:0e:bc:10:df:fe:57:4e:0b:75:6c:97: 87:6e:8a:4d:8c:8c:40:d1:e5:bd:66:96:e3:6e:00:48:f5:37: 45:1d:97:31:9e:99:ea:db:0d:10:32:f1:65:31:66:35:0f:4f: a0:24:a8:64:50:85:e6:8c:b5:bb:47:fe:66:33:45:27:d5:ea: 30:51:aa:77:ec:8b:8f:31:f8:9a:d4:35:30:38:51:27:87:80: b6:21:88:08:e2:eb:fd:e5:43:af:71:e2:ba:60:25:43:78:98: 84:c5:ee:ef:2e:63:96:20:c8:ce:d3:34:ea:bf:88:11:43:be: e7:da:ed:5a:49:a0:98:b8:1b:23:0a:7e:81:fb:4f:7d:0e:dc: 90:d8:8b:12:45:f1:41:16:0d:d8:d7:71:5d:3c:f2:e8:7a:29: f6:e3:da:e2:00:9a:d4:c5:5f:09:44:7f:9d:22:e6:df:ae:45: 35:9c:ea:cb:cf:8d:05:bb:dd:e8:ba:7b:25:3c:28:92:85:7e: 4f:86:aa:61:e2:7b:c9:2c:31:67:d4:4b:94:b4:99:a9:b3:9a: b9:d9:94:eb:30:78:76:0c:8a:10:bc:9b:af:cc:84:01:90:68: 50:35:a5:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXg3nlt4uicUxPKC3gREW34gljTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGQTUzRkQ3OTI4QzE3NUM3NDMyRTczREQxNDcyOTU1 RTVBMzVGRDAeFw0yNTExMDMwMjI5MDFaFw0yNTExMDQwMjM3MDFaMDMxMTAvBgNV BAMTKERBREVCQjlEQ0ZCREY3MDRBMDc2RkM4RDUwMTA1NTY5QjU3N0NENTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFtWhOxicxn1CtkeE9tZr/NiX6 KS7FsV9QMSQ8w4nGrxyiOQLRLT7o/ihRevtD+ue8R24L97Y5+zZ2FuYkg2GcXiVW eo0HD3FE2awxK91N96cgUxdqukRWYQYvuWw5D1wJtuHd4OmBA9Nsrka2D1ZV474S beB9l4SYCCfhXHdNVxMEIheITU5T0TNXrDWlrucze2e7alS45bR9K1ucmpOjfSSH WQlNit+lpxTfp30MKY0oM/tGApW+tDfcXnqJ56fFmHKhZGMtmffRSoLhKok7fjvN 97pC2rG+z3VZG8+jX8DzudhmLn90h338CbwvmQqkn6ViIjOgEPMMk5jscz9hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2t67nc+99wSgdvyNUBBVabV3zVMwHwYDVR0j BBgwFoAUHPpT/XkowXXHQy5z3RRylV5aNf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmhnU2pLelRQUDN6eW16WWpEZzc0QXR0M2sxUzZpTUpia25zZHdDTnAx bVEvMC8xQ0ZBNTNGRDc5MjhDMTc1Qzc0MzJFNzNERDE0NzI5NTVFNUEzNUZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDRkE1M0ZENzkyOEMxNzVD NzQzMkU3M0REMTQ3Mjk1NUU1QTM1RkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RmhnU2pLelRQUDN6eW16WWpEZzc0QXR0M2sxUzZpTUpia25zZHdDTnAxbVEvMC8x Q0ZBNTNGRDc5MjhDMTc1Qzc0MzJFNzNERDE0NzI5NTVFNUEzNUZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZSkD7mQwPNvk+KBVcao8mVGqRbpAplFrcA68EN/+V04LdWyXh26KTYyMQNHl vWaW424ASPU3RR2XMZ6Z6tsNEDLxZTFmNQ9PoCSoZFCF5oy1u0f+ZjNFJ9XqMFGq d+yLjzH4mtQ1MDhRJ4eAtiGICOLr/eVDr3HiumAlQ3iYhMXu7y5jliDIztM06r+I EUO+59rtWkmgmLgbIwp+gftPfQ7ckNiLEkXxQRYN2NdxXTzy6Hop9uPa4gCa1MVf CUR/nSLm365FNZzqy8+NBbvd6Lp7JTwokoV+T4aqYeJ7ySwxZ9RLlLSZqbOaudmU 6zB4dgyKELybr8yEAZBoUDWlgA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:24:58 2025 by rpki-client