$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft File: D95738A14AD98B305087E048FD2E4821E5E2299A.mft (raw, json) Hash identifier: U7+QtcUq7vbtF79Xkg9CdHhPpUusQo//vqCUqksNTk4= Subject key identifier: 40:8D:50:E2:4E:44:94:83:E2:FE:36:FB:3E:BB:6C:5B:34:7C:FC:DB Authority key identifier: D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A Certificate issuer: /CN=D95738A14AD98B305087E048FD2E4821E5E2299A Certificate serial: 72344E66A138EC27E3EB5FD23B8933479FB29DD8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft Manifest number: 0114 Signing time: Mon 03 Nov 2025 07:48:12 +0000 Manifest this update: Mon 03 Nov 2025 07:43:12 +0000 Manifest next update: Tue 04 Nov 2025 11:33:12 +0000 Files and hashes: 1: D95738A14AD98B305087E048FD2E4821E5E2299A.crl (hash: 9OB4piMEWVmDgL0WG0F/0yJor0RyidIbuhXdxfCvarI=) 2: 323830343a313235343a3a2f33322d3332203d3e20323633343730.roa (hash: ELWb7rC3fgvn1sa3PxipINIruhW615Gy+69ajKYPWzI=) 3: 3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa (hash: 3dEyGzKHFOd9LeZVxU1UzcBmIS+t2RbJviuI4dC12Lk=) 4: 3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa (hash: g6mPrnM05WB2yDxH6Zlq8hbCsk4V+orsbGR3GF+AKT8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:34:4e:66:a1:38:ec:27:e3:eb:5f:d2:3b:89:33:47:9f:b2:9d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D95738A14AD98B305087E048FD2E4821E5E2299A Validity Not Before: Nov 3 07:43:12 2025 GMT Not After : Nov 4 11:33:12 2025 GMT Subject: CN=408D50E24E449483E2FE36FB3EBB6C5B347CFCDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:a1:33:7a:60:9b:11:4b:a9:45:ba:d8:17: a6:fb:aa:92:d4:3e:95:16:aa:db:a1:3f:43:f2:0d: 1f:67:0d:83:a0:1c:da:7f:c0:29:67:9d:5e:06:b7: 1e:28:f0:1c:42:09:fb:30:b0:0f:65:2e:f2:50:1a: 57:25:23:68:9d:ab:a8:3a:33:26:bf:5d:c9:91:ba: 50:2d:56:6e:d2:ce:6d:f0:d2:4d:7a:3d:6b:a3:87: c6:a5:61:15:8c:06:57:d8:4e:84:de:8d:98:d6:08: 49:92:c7:0c:62:2a:85:c1:ee:c9:7b:8a:78:fd:52: 60:77:1f:9a:a3:7f:65:02:87:ea:07:07:0d:68:5b: e5:4a:94:c3:ad:e7:b9:7c:8a:7a:7e:fc:a1:c6:b0: 0b:16:ac:06:46:df:5f:32:a1:36:f3:c3:5e:21:33: 1f:b0:6c:28:7f:ae:37:d3:1a:43:82:1e:0c:04:09: 32:40:58:35:c8:a8:5a:6f:16:17:16:32:93:ca:b1: 8a:bc:62:01:98:7a:cf:82:19:5e:10:86:6b:8b:08: 8e:7a:1c:f3:58:7a:c9:f4:eb:f1:b2:70:db:ab:b3: 3a:a7:8a:26:68:4c:50:6e:44:50:66:a9:8d:c9:b9: fd:bb:ba:d6:d2:56:04:45:0b:04:c8:40:84:70:0e: 30:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8D:50:E2:4E:44:94:83:E2:FE:36:FB:3E:BB:6C:5B:34:7C:FC:DB X509v3 Authority Key Identifier: keyid:D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:0d:5f:0f:a6:69:a4:83:40:33:02:ed:ad:e6:8e:2b:b7:97: df:b2:82:89:83:7a:70:33:d4:c3:26:b5:04:2f:d8:79:ae:fe: c7:ec:73:99:b7:54:07:72:32:59:58:83:ea:40:75:cf:90:0c: 25:94:d3:19:16:a9:e5:72:eb:d5:e2:85:1d:b2:3b:15:56:77: 75:f1:21:f4:28:dd:08:49:03:d0:04:7c:4b:82:4a:90:d9:10: 7e:fb:de:b7:ad:9f:56:e0:fc:3e:4c:9a:3b:18:5f:45:5f:d6: 06:4c:0b:71:c7:29:fd:1d:d7:52:87:0f:9f:fe:4f:08:89:a7: 65:d1:d4:91:0e:36:03:4d:ae:0b:c5:a9:55:63:4b:5a:b5:3c: 2f:f8:79:cd:e1:f1:ad:88:4a:91:b7:48:66:28:25:68:c9:0d: 46:f3:e5:30:30:5b:d5:82:f1:69:96:10:4a:54:d8:08:75:f9: 51:1c:ed:e1:76:59:7b:56:19:2c:f1:ea:7c:7d:d9:a8:cf:a2: b3:43:41:2c:84:72:5f:2f:b3:86:62:48:65:18:9b:ba:b4:4a: 8f:30:4a:88:b9:a2:2f:eb:e9:18:c3:3f:cd:4c:9b:ce:c7:7b: bb:b2:91:59:fd:a7:9b:63:15:fa:32:c6:a7:cd:62:d1:e1:32: be:9e:91:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcjROZqE47Cfj61/SO4kzR5+yndgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk1NzM4QTE0QUQ5OEIzMDUwODdFMDQ4RkQyRTQ4MjFF NUUyMjk5QTAeFw0yNTExMDMwNzQzMTJaFw0yNTExMDQxMTMzMTJaMDMxMTAvBgNV BAMTKDQwOEQ1MEUyNEU0NDk0ODNFMkZFMzZGQjNFQkI2QzVCMzQ3Q0ZDREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0b6EzemCbEUupRbrYF6b7qpLU PpUWqtuhP0PyDR9nDYOgHNp/wClnnV4Gtx4o8BxCCfswsA9lLvJQGlclI2idq6g6 Mya/XcmRulAtVm7Szm3w0k16PWujh8alYRWMBlfYToTejZjWCEmSxwxiKoXB7sl7 inj9UmB3H5qjf2UCh+oHBw1oW+VKlMOt57l8inp+/KHGsAsWrAZG318yoTbzw14h Mx+wbCh/rjfTGkOCHgwECTJAWDXIqFpvFhcWMpPKsYq8YgGYes+CGV4QhmuLCI56 HPNYesn06/GycNurszqniiZoTFBuRFBmqY3Juf27utbSVgRFCwTIQIRwDjCRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQI1Q4k5ElIPi/jb7PrtsWzR8/NswHwYDVR0j BBgwFoAU2Vc4oUrZizBQh+BI/S5IIeXiKZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2 UFkvMC9EOTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NTczOEExNEFEOThCMzA1 MDg3RTA0OEZEMkU0ODIxRTVFMjI5OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2UFkvMC9E OTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVQ1fD6ZppINAMwLtreaOK7eX37KCiYN6cDPUwya1BC/Yea7+x+xzmbdUB3Iy WViD6kB1z5AMJZTTGRap5XLr1eKFHbI7FVZ3dfEh9CjdCEkD0AR8S4JKkNkQfvve t62fVuD8PkyaOxhfRV/WBkwLcccp/R3XUocPn/5PCImnZdHUkQ42A02uC8WpVWNL WrU8L/h5zeHxrYhKkbdIZiglaMkNRvPlMDBb1YLxaZYQSlTYCHX5URzt4XZZe1YZ LPHqfH3ZqM+is0NBLIRyXy+zhmJIZRiburRKjzBKiLmiL+vpGMM/zUybzsd7u7KR Wf2nm2MV+jLGp81i0eEyvp6R7g== -----END CERTIFICATE-----Generated at Mon Nov 3 12:08:48 2025 by rpki-client