$ rpki-client -vvf rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft File: FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft (raw, json) Hash identifier: H4rdaHaZSzv0Mqzh7/NAkY75Z392Mxo5Br8BEG71d38= Subject key identifier: 02:BD:8E:49:73:CF:6D:E9:08:D6:69:93:46:A0:5E:03:4C:58:C0:82 Authority key identifier: FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F Certificate issuer: /CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F Certificate serial: 28437FA33E37289271D75D5FEA53EC5E5679FFA1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft Manifest number: 55 Signing time: Mon 03 Nov 2025 12:08:16 +0000 Manifest this update: Mon 03 Nov 2025 12:03:16 +0000 Manifest next update: Tue 04 Nov 2025 14:44:16 +0000 Files and hashes: 1: FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl (hash: VO04TeQxdJKNTlgmFgJLx6uIQ++1g7kUu7GYSL8BweI=) 2: 3133382e3231392e3232302e302f32322d3332203d3e20323633393633.roa (hash: dgQenF0SOCgMjKxMC4O4DFcfxi1LaXIDVtj0og24Gxc=) 3: 3137302e3234362e3136382e302f32322d3332203d3e20323633393633.roa (hash: 3hBRIGCUqb3DIjYAKZm9OcITGyCs0TuU0X+4zHfoRVQ=) 4: 323830343a323837383a3a2f33322d313238203d3e20323633393633.roa (hash: hpg9sOEi3xaCO9v17zpfUf72FMO/U8MEML8fvgpIA8Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 14:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:43:7f:a3:3e:37:28:92:71:d7:5d:5f:ea:53:ec:5e:56:79:ff:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F Validity Not Before: Nov 3 12:03:16 2025 GMT Not After : Nov 4 14:44:16 2025 GMT Subject: CN=02BD8E4973CF6DE908D6699346A05E034C58C082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:9e:e0:60:86:14:d8:d4:98:cf:52:cc:bd: 90:43:cd:6a:6e:2a:bd:41:ca:d4:6c:5a:f4:08:b7: db:92:30:3c:3c:02:8f:ce:2c:02:4c:5c:2b:60:19: 7f:6b:26:6b:ba:7d:b7:e8:af:69:aa:c6:b8:ce:52: af:5e:df:a0:4f:b8:b3:7f:62:c1:d8:77:21:6c:57: c7:86:ed:68:90:31:8e:0a:fd:61:77:cf:d6:61:40: ba:01:9e:14:05:2b:6d:52:88:93:61:8b:56:5d:9d: a0:9f:bb:db:22:7f:c2:f5:fd:21:46:81:ba:6b:c3: 5c:1a:30:18:4c:37:e5:0e:0c:01:6f:92:09:14:1b: 1a:2b:36:eb:5f:96:d8:4c:b9:b8:cc:0e:65:de:4e: 83:7f:6a:c0:9d:f4:08:91:1a:9e:47:40:90:ae:0c: e0:6d:22:3e:95:ef:50:1f:13:a4:fb:ec:14:22:e1: 61:f3:8d:3c:55:59:4f:47:ba:02:94:65:2a:5c:da: f1:5f:98:dd:31:0a:cb:99:1b:5b:f6:14:2b:8a:49: a4:e8:53:15:c7:38:2d:f5:be:91:12:8e:f4:66:ae: c1:84:e0:67:bb:ec:2c:5f:29:2a:de:03:65:d8:7f: cb:5b:26:fb:d7:d6:9b:a5:b5:c9:03:88:eb:35:92: 82:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BD:8E:49:73:CF:6D:E9:08:D6:69:93:46:A0:5E:03:4C:58:C0:82 X509v3 Authority Key Identifier: keyid:FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:11:67:00:f2:55:e1:25:24:ff:a5:95:43:e6:31:85:5e:01: 07:ea:f2:22:73:18:aa:39:9e:b5:77:b7:4b:05:9a:bc:b1:86: e1:94:62:96:3c:38:b1:4c:58:20:83:c8:84:3f:ac:b3:f5:58: 91:e7:f6:88:2d:0c:bd:d9:79:d3:07:09:39:d4:c8:a8:d9:47: 3f:c7:57:4e:f6:12:85:b1:a7:5e:c8:67:00:6f:17:dd:7b:01: 4a:76:e7:ae:a9:5c:5d:81:36:02:46:0f:8b:42:dc:8a:1b:51: a6:b9:02:e6:cc:43:97:74:c6:a4:b2:d6:24:43:b8:c0:94:73: 9b:11:fe:60:2c:b5:60:b8:fe:89:d9:4e:91:8f:4f:cf:f1:02: 22:2c:e8:53:7f:e8:2d:84:0c:f6:c2:61:c1:fd:26:7f:65:67: c2:2d:86:da:87:c0:57:29:2f:4c:0c:df:f2:d9:18:f0:50:58: 2e:95:d8:11:91:ff:87:a1:63:77:a2:e2:70:b9:f3:65:bb:45: a9:5a:0a:12:18:7c:f1:c3:70:05:02:38:c9:38:f0:bf:01:7e: 6c:de:6d:05:24:42:af:74:88:db:1b:45:b8:35:7e:71:82:3c: b0:c3:85:7d:37:7e:3e:71:b7:17:54:4d:62:71:1e:5e:fc:c0: e8:b1:1a:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKEN/oz43KJJx111f6lPsXlZ5/6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFBMjBEMDE3NkE4RTA5OTNFQjYzQzdGNTEwNzE2M0JC RTVEQkE4RjAeFw0yNTExMDMxMjAzMTZaFw0yNTExMDQxNDQ0MTZaMDMxMTAvBgNV BAMTKDAyQkQ4RTQ5NzNDRjZERTkwOEQ2Njk5MzQ2QTA1RTAzNEM1OEMwODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXp7gYIYU2NSYz1LMvZBDzWpu Kr1BytRsWvQIt9uSMDw8Ao/OLAJMXCtgGX9rJmu6fbfor2mqxrjOUq9e36BPuLN/ YsHYdyFsV8eG7WiQMY4K/WF3z9ZhQLoBnhQFK21SiJNhi1ZdnaCfu9sif8L1/SFG gbprw1waMBhMN+UODAFvkgkUGxorNutflthMubjMDmXeToN/asCd9AiRGp5HQJCu DOBtIj6V71AfE6T77BQi4WHzjTxVWU9HugKUZSpc2vFfmN0xCsuZG1v2FCuKSaTo UxXHOC31vpESjvRmrsGE4Ge77CxfKSreA2XYf8tbJvvX1pultckDiOs1koKvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAr2OSXPPbekI1mmTRqBeA0xYwIIwHwYDVR0j BBgwFoAU+qINAXao4Jk+tjx/UQcWO75duo8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2FKQW5ENVBOS3B4S3hxOWRRSkdmMm5RTko1TXBUbnF3NVA3YTFYWHhI ZkcvMC9GQUEyMEQwMTc2QThFMDk5M0VCNjNDN0Y1MTA3MTYzQkJFNURCQThGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBQTIwRDAxNzZBOEUwOTkz RUI2M0M3RjUxMDcxNjNCQkU1REJBOEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2FKQW5ENVBOS3B4S3hxOWRRSkdmMm5RTko1TXBUbnF3NVA3YTFYWHhIZkcvMC9G QUEyMEQwMTc2QThFMDk5M0VCNjNDN0Y1MTA3MTYzQkJFNURCQThGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhxFnAPJV4SUk/6WVQ+YxhV4BB+ryInMYqjmetXe3SwWavLGG4ZRiljw4sUxY IIPIhD+ss/VYkef2iC0Mvdl50wcJOdTIqNlHP8dXTvYShbGnXshnAG8X3XsBSnbn rqlcXYE2AkYPi0LcihtRprkC5sxDl3TGpLLWJEO4wJRzmxH+YCy1YLj+idlOkY9P z/ECIizoU3/oLYQM9sJhwf0mf2Vnwi2G2ofAVykvTAzf8tkY8FBYLpXYEZH/h6Fj d6LicLnzZbtFqVoKEhh88cNwBQI4yTjwvwF+bN5tBSRCr3SI2xtFuDV+cYI8sMOF fTd+PnG3F1RNYnEeXvzA6LEaqA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:34 2025 by rpki-client