$ rpki-client -vvf rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft File: 43230BA37049255C04E85C87D9F4BDD3B9313605.mft (raw, json) Hash identifier: pNwZD+CEdGq/ET6kPnJ8hYe8zVBx3izWrriI2G7/TGg= Subject key identifier: 38:D9:F2:36:55:5D:B9:0F:B9:F3:28:4C:75:11:18:90:BD:E0:13:44 Authority key identifier: 43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05 Certificate issuer: /CN=43230BA37049255C04E85C87D9F4BDD3B9313605 Certificate serial: 11A0616A74CF388563A3E9F3E1C529787CFEAC91 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer Subject info access: rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft Manifest number: 0305 Signing time: Wed 05 Nov 2025 22:01:14 +0000 Manifest this update: Wed 05 Nov 2025 21:56:14 +0000 Manifest next update: Fri 07 Nov 2025 00:58:14 +0000 Files and hashes: 1: 323830343a313435303a3a2f33322d3438203d3e20323632383631.roa (hash: 5Q9tiHGVOVDCj3G898IWOLh8INUElXpH3eiyHIywpQs=) 2: 3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa (hash: yDvjRXifxWYJIZTut8sX9MAq2K/UFlRpCJxUt7efohI=) 3: 43230BA37049255C04E85C87D9F4BDD3B9313605.crl (hash: CGwa1Z/TCO5080DFZIJCfrPsOelPh/T8heAg9bA//7E=) 4: 3139312e372e3136382e302f32312d3234203d3e20323632383631.roa (hash: 3UlOIp1JXcdTOtyXGjmZSygtLX1mH1cA31Z6zmF/6yE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 07 Nov 2025 00:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a0:61:6a:74:cf:38:85:63:a3:e9:f3:e1:c5:29:78:7c:fe:ac:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43230BA37049255C04E85C87D9F4BDD3B9313605 Validity Not Before: Nov 5 21:56:14 2025 GMT Not After : Nov 7 00:58:14 2025 GMT Subject: CN=38D9F236555DB90FB9F3284C75111890BDE01344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:01:9a:fd:3d:b4:32:7a:4f:ab:3c:03:9d:24: 71:06:00:16:fa:5a:9d:5f:d7:e7:b0:a5:43:03:a6: 5b:3a:83:0e:fd:d6:39:28:f5:71:57:e1:33:82:b5: 20:bb:4c:84:67:5d:03:53:c2:85:07:69:a8:42:e9: 08:78:e5:af:f4:89:1c:9b:6d:89:c8:95:98:b0:36: fd:52:c1:60:8b:a8:2a:72:91:77:f7:16:ef:0e:13: e6:50:8f:1e:f9:f9:2e:34:49:ae:0f:55:59:0d:77: 19:0b:1b:2a:c4:cf:06:34:3a:f2:29:c7:e0:ff:66: 58:2b:0e:30:bf:78:c2:f7:3a:a0:65:83:67:6f:48: 84:2d:48:0c:d2:a4:88:51:c2:02:21:c7:66:c9:74: b7:9b:80:29:19:49:07:f1:67:d2:06:b6:92:00:d6: fa:90:17:d6:a3:af:6d:65:86:82:96:79:b0:fc:b7: 56:ac:17:64:c1:07:1a:80:a7:d4:7c:7a:41:b9:b0: 01:2b:03:95:58:f3:e1:16:81:c5:72:74:49:9f:70: c5:5c:2a:1e:1b:ac:58:f8:41:10:ce:ec:b6:bb:7e: 51:f8:b9:01:6f:3b:d5:ec:c5:37:1b:d0:0f:97:09: 83:2f:c9:d8:10:8f:2c:54:40:11:f9:2a:a6:02:d3: 30:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D9:F2:36:55:5D:B9:0F:B9:F3:28:4C:75:11:18:90:BD:E0:13:44 X509v3 Authority Key Identifier: keyid:43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:59:ad:b5:79:9b:2d:cc:4b:0a:d9:54:79:2d:79:ac:31:f3: bf:c4:4d:2e:a3:c7:fd:67:8a:97:b1:8d:95:c0:db:ae:c4:f5: 66:65:fd:cc:11:0a:7a:47:84:3a:6e:af:99:a9:d1:0b:ef:2c: 98:8e:da:42:35:f1:ec:da:22:58:c7:6c:90:53:f0:5b:27:59: e4:fd:c0:32:be:7d:47:9d:3d:2b:c5:cf:2c:78:be:4e:09:97: 45:85:0b:02:1a:bd:56:5c:f1:5f:30:1a:1d:82:9a:16:02:c7: a2:8b:5d:02:e9:03:f3:7d:61:44:5d:f7:bf:33:fb:f4:44:c7: 6c:75:8a:c8:43:76:a8:00:3e:9d:48:c2:c2:fc:ac:e1:b0:84: 04:64:ac:84:29:8f:c7:fe:fd:f3:b1:6c:95:5f:d3:4a:cf:ac: 29:60:d3:2c:fd:60:82:ef:85:1e:98:08:e0:23:5c:d9:ee:98: 3c:f1:dc:33:69:ea:fc:10:10:3b:b7:45:dc:2a:1f:d4:e2:88: c3:c6:71:68:b5:a0:6e:92:93:e9:5b:e8:10:5b:30:95:ac:e3: 99:6b:e9:2d:d8:e7:fa:ea:3d:8c:4a:6e:eb:19:13:dc:ca:42: 05:b4:c1:38:94:c2:43:cc:d7:45:a7:57:0b:d7:a3:68:9e:cf: c7:76:36:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEaBhanTPOIVjo+nz4cUpeHz+rJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyMzBCQTM3MDQ5MjU1QzA0RTg1Qzg3RDlGNEJERDNC OTMxMzYwNTAeFw0yNTExMDUyMTU2MTRaFw0yNTExMDcwMDU4MTRaMDMxMTAvBgNV BAMTKDM4RDlGMjM2NTU1REI5MEZCOUYzMjg0Qzc1MTExODkwQkRFMDEzNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4AZr9PbQyek+rPAOdJHEGABb6 Wp1f1+ewpUMDpls6gw791jko9XFX4TOCtSC7TIRnXQNTwoUHaahC6Qh45a/0iRyb bYnIlZiwNv1SwWCLqCpykXf3Fu8OE+ZQjx75+S40Sa4PVVkNdxkLGyrEzwY0OvIp x+D/ZlgrDjC/eML3OqBlg2dvSIQtSAzSpIhRwgIhx2bJdLebgCkZSQfxZ9IGtpIA 1vqQF9ajr21lhoKWebD8t1asF2TBBxqAp9R8ekG5sAErA5VY8+EWgcVydEmfcMVc Kh4brFj4QRDO7La7flH4uQFvO9XsxTcb0A+XCYMvydgQjyxUQBH5KqYC0zDpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUONnyNlVduQ+58yhMdREYkL3gE0QwHwYDVR0j BBgwFoAUQyMLo3BJJVwE6FyH2fS907kxNgUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHR3V0Rpa2R2UjFZWWpVTExCemtFMkJCQlFadVdITGdQdHgxTGgyWUpz cWcvMS80MzIzMEJBMzcwNDkyNTVDMDRFODVDODdEOUY0QkREM0I5MzEzNjA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzMjMwQkEzNzA0OTI1NUMw NEU4NUM4N0Q5RjRCREQzQjkzMTM2MDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHR3V0Rpa2R2UjFZWWpVTExCemtFMkJCQlFadVdITGdQdHgxTGgyWUpzcWcvMS80 MzIzMEJBMzcwNDkyNTVDMDRFODVDODdEOUY0QkREM0I5MzEzNjA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAklmttXmbLcxLCtlUeS15rDHzv8RNLqPH/WeKl7GNlcDbrsT1ZmX9zBEKekeE Om6vmanRC+8smI7aQjXx7NoiWMdskFPwWydZ5P3AMr59R509K8XPLHi+TgmXRYUL Ahq9VlzxXzAaHYKaFgLHootdAukD831hRF33vzP79ETHbHWKyEN2qAA+nUjCwvys 4bCEBGSshCmPx/7987FslV/TSs+sKWDTLP1ggu+FHpgI4CNc2e6YPPHcM2nq/BAQ O7dF3Cof1OKIw8ZxaLWgbpKT6VvoEFswlazjmWvpLdjn+uo9jEpu6xkT3MpCBbTB OJTCQ8zXRadXC9ejaJ7Px3Y23A== -----END CERTIFICATE-----Generated at Thu Nov 6 06:19:19 2025 by rpki-client