$ rpki-client -vvf rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft File: A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft (raw, json) Hash identifier: 45YZa7SWD/en3OQXXK0EF5n7k6BjAeRQu2qYpvfXMus= Subject key identifier: A1:5B:AE:CA:D7:49:53:0C:6C:C2:8A:A1:14:08:2E:D1:1A:20:F5:BE Authority key identifier: A8:D5:22:AC:61:89:85:62:D9:5E:A2:A9:86:B1:B1:C2:66:8D:51:B1 Certificate issuer: /CN=A8D522AC61898562D95EA2A986B1B1C2668D51B1 Certificate serial: 43F2B9D5D1DC8B9872249EF223B74C5F5BDFB29A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer Subject info access: rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft Manifest number: 01A3 Signing time: Mon 03 Nov 2025 20:45:58 +0000 Manifest this update: Mon 03 Nov 2025 20:40:58 +0000 Manifest next update: Tue 04 Nov 2025 21:20:58 +0000 Files and hashes: 1: 323830343a336230633a3a2f33322d3333203d3e20323636313236.roa (hash: b78eH9iE1lP2ssDkb0TNloMMWzmhsxuPlTJnnpjNVZo=) 2: 34352e362e37322e302f32322d3234203d3e20323636313236.roa (hash: fqgs2eFmIRLdUTGy5kMf68dcobrxQa4f6/bOtmUuRGc=) 3: A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl (hash: DqJc+aW7vM7USpltbvkwI9ZOFOUBwFLuiqtP0nF/SuU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f2:b9:d5:d1:dc:8b:98:72:24:9e:f2:23:b7:4c:5f:5b:df:b2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8D522AC61898562D95EA2A986B1B1C2668D51B1 Validity Not Before: Nov 3 20:40:58 2025 GMT Not After : Nov 4 21:20:58 2025 GMT Subject: CN=A15BAECAD749530C6CC28AA114082ED11A20F5BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:55:5b:8e:1b:9a:41:6b:db:4f:8b:d9:5e:53: fd:15:c2:12:06:38:32:4a:ef:39:d9:c5:79:87:b8: 4c:36:cd:bf:14:d2:59:e5:20:4f:44:0a:6b:4f:0d: 88:4a:52:7c:31:16:15:41:06:0d:67:c9:d8:43:7c: ce:fc:57:25:eb:6e:00:a0:a6:cc:83:dc:5d:a5:51: 44:f7:ca:bd:e3:55:2e:b0:b3:9c:0f:32:1d:6f:ae: 48:13:d4:24:fd:48:da:99:68:67:f0:42:71:5f:fb: 3c:86:d3:55:40:d5:3f:ba:d6:35:a5:cd:01:87:8b: ea:1a:d6:af:22:49:64:e6:7a:fd:8d:fe:ec:3e:63: 20:ff:3c:54:39:09:83:ee:c2:d1:48:73:46:08:16: 98:0c:1e:2a:c1:88:70:13:b5:92:e5:07:65:d7:62: 75:8d:6d:f6:71:7b:59:b9:6d:9e:94:65:0b:b1:25: 2c:37:2e:3c:47:a0:2d:a4:5b:d5:16:73:15:82:2b: c6:1d:ae:bb:c6:54:f5:ad:52:a3:17:34:b4:83:ce: f9:29:b4:ab:86:35:0d:14:91:71:01:e6:ee:57:66: fe:5a:c8:51:06:ca:5d:ed:88:7c:ad:33:df:32:44: 3b:d5:7f:3a:ac:03:d2:06:0b:14:25:a3:33:31:4c: 61:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5B:AE:CA:D7:49:53:0C:6C:C2:8A:A1:14:08:2E:D1:1A:20:F5:BE X509v3 Authority Key Identifier: keyid:A8:D5:22:AC:61:89:85:62:D9:5E:A2:A9:86:B1:B1:C2:66:8D:51:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:0f:38:eb:58:b4:ec:ea:e6:9c:cd:b9:7c:eb:6b:5b:6a:32: b2:fc:5d:00:97:e8:01:5b:19:3e:49:93:37:b5:a4:e0:bf:83: e9:5c:a0:b8:6e:fd:c4:31:19:86:97:4f:ca:ea:a5:ea:00:bf: f0:2a:4b:08:ba:e4:7e:fe:fd:fd:81:f9:b8:c0:82:18:35:ff: b0:a7:cc:aa:aa:50:7a:f7:82:e1:f4:8a:e4:55:8b:39:1a:6a: 7d:8f:9d:ed:1b:72:70:e1:f0:f6:48:9b:0a:81:27:6e:d0:52: 24:b3:96:f4:b3:0c:cb:a2:6f:f5:52:0e:b9:b3:03:ec:75:44: d9:cf:53:e3:90:43:47:25:7d:bb:2f:9e:ba:cb:64:ff:db:f6: df:da:a3:ea:d2:cd:6a:9a:ee:77:2d:f1:05:d7:4a:e4:a2:2c: 78:de:a9:a9:d1:af:9f:80:8c:d7:72:da:63:1c:53:c3:ce:5e: fb:b3:4d:48:bd:f9:a1:b0:fe:df:98:a6:d9:b6:80:aa:bd:8e: d3:fd:8f:38:ce:b0:2b:e3:0b:d7:97:02:14:5c:59:a8:bb:19: 9f:81:34:c5:59:aa:eb:34:96:87:4b:20:b9:4c:6b:3b:43:05: 6c:7e:c7:c7:97:e0:77:80:4a:f1:2b:1d:4c:85:4b:8a:46:ff: b8:55:50:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ/K51dHci5hyJJ7yI7dMX1vfspowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThENTIyQUM2MTg5ODU2MkQ5NUVBMkE5ODZCMUIxQzI2 NjhENTFCMTAeFw0yNTExMDMyMDQwNThaFw0yNTExMDQyMTIwNThaMDMxMTAvBgNV BAMTKEExNUJBRUNBRDc0OTUzMEM2Q0MyOEFBMTE0MDgyRUQxMUEyMEY1QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgVVuOG5pBa9tPi9leU/0VwhIG ODJK7znZxXmHuEw2zb8U0lnlIE9ECmtPDYhKUnwxFhVBBg1nydhDfM78VyXrbgCg psyD3F2lUUT3yr3jVS6ws5wPMh1vrkgT1CT9SNqZaGfwQnFf+zyG01VA1T+61jWl zQGHi+oa1q8iSWTmev2N/uw+YyD/PFQ5CYPuwtFIc0YIFpgMHirBiHATtZLlB2XX YnWNbfZxe1m5bZ6UZQuxJSw3LjxHoC2kW9UWcxWCK8YdrrvGVPWtUqMXNLSDzvkp tKuGNQ0UkXEB5u5XZv5ayFEGyl3tiHytM98yRDvVfzqsA9IGCxQlozMxTGFTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoVuuytdJUwxswoqhFAgu0Rog9b4wHwYDVR0j BBgwFoAUqNUirGGJhWLZXqKphrGxwmaNUbEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFRIeUZTSmhFSDM5b01yaXVQSGNZanUzcUNiaEN3RFRIVGVUd1BNcG9j YlAvMC9BOEQ1MjJBQzYxODk4NTYyRDk1RUEyQTk4NkIxQjFDMjY2OEQ1MUIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4RDUyMkFDNjE4OTg1NjJE OTVFQTJBOTg2QjFCMUMyNjY4RDUxQjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFRIeUZTSmhFSDM5b01yaXVQSGNZanUzcUNiaEN3RFRIVGVUd1BNcG9jYlAvMC9B OEQ1MjJBQzYxODk4NTYyRDk1RUEyQTk4NkIxQjFDMjY2OEQ1MUIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZA8461i07OrmnM25fOtrW2oysvxdAJfoAVsZPkmTN7Wk4L+D6VyguG79xDEZ hpdPyuql6gC/8CpLCLrkfv79/YH5uMCCGDX/sKfMqqpQeveC4fSK5FWLORpqfY+d 7RtycOHw9kibCoEnbtBSJLOW9LMMy6Jv9VIOubMD7HVE2c9T45BDRyV9uy+eustk /9v239qj6tLNaprudy3xBddK5KIseN6pqdGvn4CM13LaYxxTw85e+7NNSL35obD+ 35im2baAqr2O0/2POM6wK+ML15cCFFxZqLsZn4E0xVmq6zSWh0sguUxrO0MFbH7H x5fgd4BK8SsdTIVLikb/uFVQpw== -----END CERTIFICATE-----Generated at Tue Nov 4 08:16:42 2025 by rpki-client