$ rpki-client -vvf rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.mft File: 1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.mft (raw, json) Hash identifier: 4GDZe+8sABIM/1o66outsCspacJ6QuNdZ1T4VyEUhQM= Subject key identifier: BE:DF:97:1F:C8:05:35:0B:11:5D:A5:B1:1A:55:5A:E1:BE:18:C3:A8 Authority key identifier: 1C:C1:EE:9A:E9:7E:45:FC:6B:92:8D:D7:2B:A1:6A:D8:B8:92:AD:C6 Certificate issuer: /CN=1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6 Certificate serial: 761233DC74F19B46DF8BE4DD8D24F14863678B1B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.cer Subject info access: rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.mft Manifest number: 0304 Signing time: Sun 02 Nov 2025 22:40:35 +0000 Manifest this update: Sun 02 Nov 2025 22:35:35 +0000 Manifest next update: Tue 04 Nov 2025 02:03:35 +0000 Files and hashes: 1: 323830343a343364383a3a2f33322d3438203d3e20323637353934.roa (hash: 9dw1P4mbmEh9eiI/qRY7PyjRICfeldRL0b0EJC1f5d4=) 2: 34352e37302e3138382e302f32322d3234203d3e20323637353934.roa (hash: 8KGD29xRsd42BhjTRqOqw+rhPWHDy9AvYDvr1nBL0fA=) 3: 1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.crl (hash: 8X4RodGggozBghB+0FXl9o+STUbMGMbFcdP/ObPaNXM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.crl rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 02:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:12:33:dc:74:f1:9b:46:df:8b:e4:dd:8d:24:f1:48:63:67:8b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6 Validity Not Before: Nov 2 22:35:35 2025 GMT Not After : Nov 4 02:03:35 2025 GMT Subject: CN=BEDF971FC805350B115DA5B11A555AE1BE18C3A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:96:4c:c1:b0:37:58:66:05:32:5a:c3:ce:91: c1:58:c4:3d:19:15:fd:65:91:4e:59:4f:cd:89:68: d4:a6:a7:fb:4a:c1:81:44:65:1f:a0:b5:17:48:df: 0e:5d:85:67:ca:d4:63:16:dc:94:6d:6b:dc:05:a9: 22:8b:53:95:29:56:07:6a:bd:83:6a:c3:9b:1e:27: be:e3:00:c9:43:f1:dd:f9:1a:89:08:33:9f:a4:72: 2a:90:ff:03:29:c5:0e:32:d8:ca:49:b2:b1:a3:0b: 44:6c:bf:27:6c:5c:a0:fe:17:2b:59:97:13:b5:02: 70:a8:11:f7:98:53:e4:ec:f1:e1:15:e6:e5:8f:68: ad:f1:90:21:e0:ac:e9:14:73:3f:d2:11:92:56:b5: 0d:6b:1d:50:b3:8a:5f:72:0d:25:53:0f:7f:18:73: a8:4b:85:7b:c3:6e:f7:a3:b9:ec:16:bf:00:b2:e4: 54:b0:c8:07:a5:69:3e:4f:9b:b2:19:0a:be:5f:50: f2:05:09:cd:a6:d2:33:0f:0b:fa:3e:c1:ec:42:51: ca:d4:53:ea:52:3e:86:74:54:43:93:ec:a1:68:2c: 77:ca:17:74:01:0a:fa:6b:15:09:bf:3d:d8:17:a4: 97:af:1e:9f:96:14:75:a6:c9:82:6a:3c:7b:d9:13: 05:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DF:97:1F:C8:05:35:0B:11:5D:A5:B1:1A:55:5A:E1:BE:18:C3:A8 X509v3 Authority Key Identifier: keyid:1C:C1:EE:9A:E9:7E:45:FC:6B:92:8D:D7:2B:A1:6A:D8:B8:92:AD:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:1e:8f:bd:fe:c2:ce:16:45:8e:9c:9f:c3:f7:1f:39:e3:16: c9:53:2f:2e:57:79:d9:a5:de:02:6e:8b:a5:ea:4e:0c:68:9c: 80:e4:28:11:a6:ce:40:5e:48:ce:91:32:5b:7c:ae:86:05:ad: 96:d8:68:89:e7:2c:91:80:8b:a9:46:a4:51:24:31:54:0b:b7: b2:01:f8:e1:ef:bf:7a:8c:e1:77:9b:2b:a5:a6:b8:5f:35:2f: c9:13:c5:0f:4e:4a:e0:18:79:5d:2f:3b:31:2f:13:75:14:ae: 26:12:39:92:02:89:d7:41:2f:8e:7d:9d:cf:78:d8:b6:92:3a: f1:fc:a3:fc:4c:2c:70:51:6e:45:56:6c:83:50:f6:ba:76:20: 1a:4a:a4:d3:24:44:af:1f:b0:70:34:ee:73:a6:87:b3:71:bc: f2:78:5b:85:b9:80:de:58:fb:dd:88:4e:06:84:88:75:06:b6: 63:a2:03:b5:56:fa:88:3d:44:85:66:c4:a1:3e:94:a5:7f:5c: 2a:08:4c:e8:c9:c3:06:f3:fc:4f:36:3e:a4:f8:d9:36:15:e1: 0b:d0:18:7f:8c:59:fb:84:67:8f:70:7c:dc:ac:66:eb:cd:b0: 79:04:e5:c8:3b:c1:84:ed:31:c1:da:f0:11:25:df:5e:23:68: b9:97:23:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdhIz3HTxm0bfi+TdjSTxSGNnixswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDMUVFOUFFOTdFNDVGQzZCOTI4REQ3MkJBMTZBRDhC ODkyQURDNjAeFw0yNTExMDIyMjM1MzVaFw0yNTExMDQwMjAzMzVaMDMxMTAvBgNV BAMTKEJFREY5NzFGQzgwNTM1MEIxMTVEQTVCMTFBNTU1QUUxQkUxOEMzQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWlkzBsDdYZgUyWsPOkcFYxD0Z Ff1lkU5ZT82JaNSmp/tKwYFEZR+gtRdI3w5dhWfK1GMW3JRta9wFqSKLU5UpVgdq vYNqw5seJ77jAMlD8d35GokIM5+kciqQ/wMpxQ4y2MpJsrGjC0RsvydsXKD+FytZ lxO1AnCoEfeYU+Ts8eEV5uWPaK3xkCHgrOkUcz/SEZJWtQ1rHVCzil9yDSVTD38Y c6hLhXvDbvejuewWvwCy5FSwyAelaT5Pm7IZCr5fUPIFCc2m0jMPC/o+wexCUcrU U+pSPoZ0VEOT7KFoLHfKF3QBCvprFQm/PdgXpJevHp+WFHWmyYJqPHvZEwUdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvt+XH8gFNQsRXaWxGlVa4b4Yw6gwHwYDVR0j BBgwFoAUHMHumul+Rfxrko3XK6Fq2LiSrcYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR1hxRzVZUE5CYUFCRkJkTmdjVndKN2piZGVpSnpCZHpFY3pKTk1zdTRN UHIvMS8xQ0MxRUU5QUU5N0U0NUZDNkI5MjhERDcyQkExNkFEOEI4OTJBREM2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDQzFFRTlBRTk3RTQ1RkM2 QjkyOERENzJCQTE2QUQ4Qjg5MkFEQzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R1hxRzVZUE5CYUFCRkJkTmdjVndKN2piZGVpSnpCZHpFY3pKTk1zdTRNUHIvMS8x Q0MxRUU5QUU5N0U0NUZDNkI5MjhERDcyQkExNkFEOEI4OTJBREM2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASB6Pvf7CzhZFjpyfw/cfOeMWyVMvLld52aXeAm6LpepODGicgOQoEabOQF5I zpEyW3yuhgWtlthoiecskYCLqUakUSQxVAu3sgH44e+/eozhd5srpaa4XzUvyRPF D05K4Bh5XS87MS8TdRSuJhI5kgKJ10Evjn2dz3jYtpI68fyj/EwscFFuRVZsg1D2 unYgGkqk0yRErx+wcDTuc6aHs3G88nhbhbmA3lj73YhOBoSIdQa2Y6IDtVb6iD1E hWbEoT6UpX9cKghM6MnDBvP8TzY+pPjZNhXhC9AYf4xZ+4Rnj3B83Kxm682weQTl yDvBhO0xwdrwESXfXiNouZcjHw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:18:46 2025 by rpki-client