$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft File: 433BC56DE61BF5759F79705E437131F09597AF13.mft (raw, json) Hash identifier: K1RVHSvAHaCONdix79z+H154cpb0XVnDeK/ihU9Ymxo= Subject key identifier: 7C:D9:7C:1A:7E:3E:0E:EF:16:D1:6D:77:E4:4D:48:0B:E2:DB:65:AE Authority key identifier: 43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13 Certificate issuer: /CN=433BC56DE61BF5759F79705E437131F09597AF13 Certificate serial: 795EDEBFDCED2D1488E291AB418D36D3AE699900 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer Subject info access: rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft Manifest number: 011B Signing time: Mon 03 Nov 2025 02:42:00 +0000 Manifest this update: Mon 03 Nov 2025 02:37:00 +0000 Manifest next update: Tue 04 Nov 2025 03:43:00 +0000 Files and hashes: 1: 433BC56DE61BF5759F79705E437131F09597AF13.crl (hash: DRxVtcPIMCOGdHAZyE5eBoUG7u7IfKC45TjK8hcU5s8=) 2: 323830343a356632343a3a2f33322d3332203d3e20323639303739.roa (hash: EZAq029zsCtQXRzu/J/8xnnemD6RLViOIikO8FPSvqE=) 3: 34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa (hash: lSHjL4SYeuodW0xgVpynxr5uWpWZiUN+/cxrqS2wpvk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:5e:de:bf:dc:ed:2d:14:88:e2:91:ab:41:8d:36:d3:ae:69:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=433BC56DE61BF5759F79705E437131F09597AF13 Validity Not Before: Nov 3 02:37:00 2025 GMT Not After : Nov 4 03:43:00 2025 GMT Subject: CN=7CD97C1A7E3E0EEF16D16D77E44D480BE2DB65AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7c:21:65:93:f9:21:dc:c5:55:4c:08:51:99: 07:ab:e4:9a:85:b5:2b:9b:f8:eb:5e:ac:de:18:19: 47:92:8b:d2:90:bb:ca:53:d8:97:d9:06:00:ad:84: 72:58:db:70:da:37:b6:b7:be:73:4f:2b:6f:89:92: 97:37:af:5c:97:12:e4:1b:3e:03:53:9e:32:9a:9d: 99:cd:4e:12:8b:1d:e0:a9:23:04:00:6e:b4:ee:ba: 4e:cb:0c:26:ef:7d:b6:e1:84:65:39:6f:74:cd:b5: f7:d8:d0:d5:d5:e2:83:18:9a:fa:78:51:dc:c5:11: f4:bc:98:c5:46:09:0a:b2:3d:42:42:69:b3:50:cd: 4c:6a:5d:8d:1b:9f:66:63:18:c6:84:8f:19:2b:66: f1:a2:9c:e1:3b:95:80:60:19:10:59:83:b3:02:67: 3d:53:fa:69:10:0c:0d:ed:6b:82:35:b1:bb:43:1b: a2:ab:93:3f:6e:fe:1f:1a:7a:e7:b6:5e:92:3a:e1: c4:2a:97:35:72:24:8e:1d:6c:3c:5c:b8:29:ef:e0: 02:e1:11:e1:b7:f5:06:f6:d0:dd:a9:62:7e:5f:e3: 49:ed:f9:af:e0:2b:00:b5:fc:77:fd:1b:21:18:10: 9c:79:ab:85:84:ff:83:f7:ad:85:03:cc:87:a7:43: 86:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D9:7C:1A:7E:3E:0E:EF:16:D1:6D:77:E4:4D:48:0B:E2:DB:65:AE X509v3 Authority Key Identifier: keyid:43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d7:40:06:70:1d:ed:8f:fb:02:60:03:67:02:41:da:88:bb: 15:3b:cb:ba:4c:3a:de:c5:fe:ea:e0:43:26:1c:8a:dc:68:ae: 3d:b6:ad:ef:ec:86:ff:6b:3b:86:bc:9d:25:f6:fe:f8:0b:69: e6:de:fd:7a:62:ba:08:96:89:01:aa:65:11:b1:1f:1b:a2:55: 67:23:15:81:fb:b6:19:20:0d:68:39:ab:d5:6a:45:fe:4e:f2: bd:78:1d:d9:ed:fb:24:37:4f:3d:79:7d:ea:e9:a5:83:56:a7: 31:d1:8c:0a:e7:f6:02:cb:e8:b8:41:f1:d1:66:e0:47:24:fe: 93:b7:c5:70:e2:16:59:27:0f:ad:f4:01:a8:e5:94:7e:b6:0b: 47:b9:0e:ce:3d:f3:90:2a:50:51:66:93:e3:82:4d:1e:6b:a9: 9a:62:2f:a2:0b:58:70:56:76:df:89:74:0c:a5:07:fd:34:6c: cb:33:9f:13:c1:67:80:32:76:5b:f7:0d:5b:7d:5a:f8:74:a3: e0:da:ce:00:ec:7d:c4:da:0a:46:22:89:a0:c6:12:a5:a2:9c: 2f:6c:b1:81:ba:0c:d4:91:7e:73:04:ea:3c:6a:b0:00:9b:1a: be:3b:b1:19:90:57:f3:a8:af:5b:bf:b6:a1:81:1b:bf:13:2b: e8:83:75:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeV7ev9ztLRSI4pGrQY02065pmQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzQkM1NkRFNjFCRjU3NTlGNzk3MDVFNDM3MTMxRjA5 NTk3QUYxMzAeFw0yNTExMDMwMjM3MDBaFw0yNTExMDQwMzQzMDBaMDMxMTAvBgNV BAMTKDdDRDk3QzFBN0UzRTBFRUYxNkQxNkQ3N0U0NEQ0ODBCRTJEQjY1QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfCFlk/kh3MVVTAhRmQer5JqF tSub+OterN4YGUeSi9KQu8pT2JfZBgCthHJY23DaN7a3vnNPK2+Jkpc3r1yXEuQb PgNTnjKanZnNThKLHeCpIwQAbrTuuk7LDCbvfbbhhGU5b3TNtffY0NXV4oMYmvp4 UdzFEfS8mMVGCQqyPUJCabNQzUxqXY0bn2ZjGMaEjxkrZvGinOE7lYBgGRBZg7MC Zz1T+mkQDA3ta4I1sbtDG6Krkz9u/h8aeue2XpI64cQqlzVyJI4dbDxcuCnv4ALh EeG39Qb20N2pYn5f40nt+a/gKwC1/Hf9GyEYEJx5q4WE/4P3rYUDzIenQ4YxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfNl8Gn4+Du8W0W135E1IC+LbZa4wHwYDVR0j BBgwFoAUQzvFbeYb9XWfeXBeQ3Ex8JWXrxMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmp3TkZuWWMzQms1RmhyVFJVMUhBZXZjQUdUcURxTnlLam1YajlnRVBn cEQvMC80MzNCQzU2REU2MUJGNTc1OUY3OTcwNUU0MzcxMzFGMDk1OTdBRjEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzM0JDNTZERTYxQkY1NzU5 Rjc5NzA1RTQzNzEzMUYwOTU5N0FGMTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rmp3TkZuWWMzQms1RmhyVFJVMUhBZXZjQUdUcURxTnlLam1YajlnRVBncEQvMC80 MzNCQzU2REU2MUJGNTc1OUY3OTcwNUU0MzcxMzFGMDk1OTdBRjEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARNdABnAd7Y/7AmADZwJB2oi7FTvLukw63sX+6uBDJhyK3GiuPbat7+yG/2s7 hrydJfb++Atp5t79emK6CJaJAaplEbEfG6JVZyMVgfu2GSANaDmr1WpF/k7yvXgd 2e37JDdPPXl96umlg1anMdGMCuf2AsvouEHx0WbgRyT+k7fFcOIWWScPrfQBqOWU frYLR7kOzj3zkCpQUWaT44JNHmupmmIvogtYcFZ234l0DKUH/TRsyzOfE8FngDJ2 W/cNW31a+HSj4NrOAOx9xNoKRiKJoMYSpaKcL2yxgboM1JF+cwTqPGqwAJsavjux GZBX86ivW7+2oYEbvxMr6IN1vA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:32:18 2025 by rpki-client