$ rpki-client -vvf rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft File: 0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft (raw, json) Hash identifier: 0cWp4dn98pi+1fDvZtWHTABTcNB6vO4YOeEAenfVoaM= Subject key identifier: B1:9B:9D:B9:67:E7:E3:66:C3:18:3E:F7:D0:4C:10:86:52:A3:57:E4 Authority key identifier: 0F:73:AF:CF:07:9B:05:DD:A5:5B:9F:90:9C:C9:30:63:B7:D1:C1:A2 Certificate issuer: /CN=0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2 Certificate serial: 1422E6DFAF8150D71F4A080DC94107EC4976E902 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft Manifest number: 0304 Signing time: Sun 02 Nov 2025 15:52:44 +0000 Manifest this update: Sun 02 Nov 2025 15:47:44 +0000 Manifest next update: Mon 03 Nov 2025 19:31:44 +0000 Files and hashes: 1: 323830343a6631383a3a2f33322d3438203d3e20323633353636.roa (hash: cXUKgwkHmIVs0YsO9hKZSLfuZAgMe8nKbeE7rT1Twos=) 2: 3137372e34342e3231362e302f32322d3234203d3e20323633353636.roa (hash: bGnR+WkNs7p0RBufr9jEqbqttazLr+HeIQrCdeZTcYY=) 3: 0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.crl (hash: XfX6g3f8mVshllkwTugvpxwAM5PVmH8Lx/Bk/r6R9wk=) 4: 3137302e37392e32382e302f32322d3234203d3e20323633353636.roa (hash: rRcy8ewNN8KtY/VoKPEvFrpVwfoQppvqwOy37SAUArU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.crl rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 19:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:22:e6:df:af:81:50:d7:1f:4a:08:0d:c9:41:07:ec:49:76:e9:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2 Validity Not Before: Nov 2 15:47:44 2025 GMT Not After : Nov 3 19:31:44 2025 GMT Subject: CN=B19B9DB967E7E366C3183EF7D04C108652A357E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:39:da:5e:7b:91:c0:6e:bc:88:5b:d9:e3:ba: 61:7b:2a:bf:16:86:2a:84:cd:03:0f:ac:14:4e:53: d4:32:10:9f:c4:f6:1b:b2:66:ef:5f:89:d7:ce:35: 67:26:23:9e:05:54:d5:6a:a6:67:82:89:48:9f:48: 2e:b6:0f:6d:02:3a:16:9b:e7:fd:e4:4c:7f:59:82: 8d:a6:f6:8e:0e:5c:6b:81:25:27:e2:a1:79:2f:d5: f4:ba:ab:30:8a:6a:58:fb:cb:36:83:8d:19:e7:e8: 74:09:c2:48:11:3a:48:f3:47:11:d6:f0:6f:03:4e: 2e:0c:2d:16:96:f1:d2:27:f9:8f:11:d4:13:31:46: 99:44:cd:b1:a4:05:eb:51:1f:0f:3a:d2:e6:29:32: 7a:87:77:b7:17:28:96:fd:51:64:40:75:6c:f1:10: de:b6:e4:46:df:8d:78:c0:95:d0:88:11:91:64:6d: 44:dd:83:4f:7d:67:e3:d6:65:ad:40:dd:7e:d0:58: 87:f9:5d:0a:03:70:77:09:03:d4:da:03:be:4c:c9: 90:1f:38:e0:07:72:b3:e8:64:0f:6b:16:81:70:95: 7a:0b:4b:47:e9:7a:7b:28:23:e7:58:e1:91:05:93: 4f:a5:b4:7a:99:f6:27:99:89:63:b3:8b:e5:7e:86: 6b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9B:9D:B9:67:E7:E3:66:C3:18:3E:F7:D0:4C:10:86:52:A3:57:E4 X509v3 Authority Key Identifier: keyid:0F:73:AF:CF:07:9B:05:DD:A5:5B:9F:90:9C:C9:30:63:B7:D1:C1:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:af:ba:87:37:24:b5:75:b3:bb:fa:23:38:b4:61:f8:e8:a0: 4e:bf:70:7a:d7:8a:6b:58:28:ac:5f:44:20:40:c4:fd:5f:64: df:db:e8:20:dc:68:46:e9:56:47:26:4e:8a:59:81:c5:8e:97: 0c:f1:40:1b:fe:e2:ff:8a:5f:fe:fe:bc:39:77:0f:59:ba:9f: 58:b0:27:d0:e9:70:70:4c:a5:d9:37:b5:f6:a8:d2:a4:13:e3: bc:98:8d:74:78:20:9f:98:d3:85:87:db:a9:fe:c9:62:f5:6e: f4:51:2f:53:54:41:66:0a:b1:15:26:dc:55:0f:3a:72:bb:14: 05:12:a3:fe:c7:fc:30:58:fa:71:8d:40:0a:ac:c6:72:21:a4: c7:74:82:eb:26:6b:86:01:3e:2f:d9:3e:13:4a:8e:13:cf:d2: e0:03:f7:fe:07:6e:ed:4d:3c:c5:8b:96:d7:f6:7f:e3:99:6b: 1f:a9:6a:ac:21:d9:66:5d:38:fe:d1:a8:2f:7a:b4:2b:ce:b9: 35:27:ec:ac:f8:6a:ca:40:38:1a:f5:db:0f:e4:9a:6e:97:31: cc:c0:b1:4d:b6:f5:15:ad:32:77:0c:0c:b7:9a:40:26:47:1b: 51:9a:cc:54:58:ea:19:ba:20:bd:30:75:af:ba:7c:cf:98:74: a1:ae:49:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFCLm36+BUNcfSggNyUEH7El26QIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY3M0FGQ0YwNzlCMDVEREE1NUI5RjkwOUNDOTMwNjNC N0QxQzFBMjAeFw0yNTExMDIxNTQ3NDRaFw0yNTExMDMxOTMxNDRaMDMxMTAvBgNV BAMTKEIxOUI5REI5NjdFN0UzNjZDMzE4M0VGN0QwNEMxMDg2NTJBMzU3RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Odpee5HAbryIW9njumF7Kr8W hiqEzQMPrBROU9QyEJ/E9huyZu9fidfONWcmI54FVNVqpmeCiUifSC62D20COhab 5/3kTH9Zgo2m9o4OXGuBJSfioXkv1fS6qzCKalj7yzaDjRnn6HQJwkgROkjzRxHW 8G8DTi4MLRaW8dIn+Y8R1BMxRplEzbGkBetRHw860uYpMnqHd7cXKJb9UWRAdWzx EN625EbfjXjAldCIEZFkbUTdg099Z+PWZa1A3X7QWIf5XQoDcHcJA9TaA75MyZAf OOAHcrPoZA9rFoFwlXoLS0fpensoI+dY4ZEFk0+ltHqZ9ieZiWOzi+V+hmvZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsZuduWfn42bDGD730EwQhlKjV+QwHwYDVR0j BBgwFoAUD3OvzwebBd2lW5+QnMkwY7fRwaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDRhZlhyZVBlWW1iUkMyaWllVU5YeWJGVXdwd2U4cW50dnYyaTJySkFw c2QvMS8wRjczQUZDRjA3OUIwNUREQTU1QjlGOTA5Q0M5MzA2M0I3RDFDMUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGNzNBRkNGMDc5QjA1RERB NTVCOUY5MDlDQzkzMDYzQjdEMUMxQTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDRhZlhyZVBlWW1iUkMyaWllVU5YeWJGVXdwd2U4cW50dnYyaTJySkFwc2QvMS8w RjczQUZDRjA3OUIwNUREQTU1QjlGOTA5Q0M5MzA2M0I3RDFDMUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUK+6hzcktXWzu/ojOLRh+OigTr9weteKa1gorF9EIEDE/V9k39voINxoRulW RyZOilmBxY6XDPFAG/7i/4pf/v68OXcPWbqfWLAn0OlwcEyl2Te19qjSpBPjvJiN dHggn5jThYfbqf7JYvVu9FEvU1RBZgqxFSbcVQ86crsUBRKj/sf8MFj6cY1ACqzG ciGkx3SC6yZrhgE+L9k+E0qOE8/S4AP3/gdu7U08xYuW1/Z/45lrH6lqrCHZZl04 /tGoL3q0K865NSfsrPhqykA4GvXbD+SabpcxzMCxTbb1Fa0ydwwMt5pAJkcbUZrM VFjqGbogvTB1r7p8z5h0oa5J3w== -----END CERTIFICATE-----Generated at Mon Nov 3 12:24:23 2025 by rpki-client