$ rpki-client -vvf rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft File: 864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft (raw, json) Hash identifier: hHWkHZQMe4DQzgF/n+Pb+W2ffrdXJqfLPOVNojItwvo= Subject key identifier: 5E:80:38:7B:86:7C:8C:0C:87:65:5C:5B:CD:DC:7E:2A:0C:59:41:4F Authority key identifier: 86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59 Certificate issuer: /CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59 Certificate serial: 10E3E437281F1B484C2B130AD84C8ADDDA74ADE1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer Subject info access: rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft Manifest number: 016C Signing time: Mon 03 Nov 2025 08:23:52 +0000 Manifest this update: Mon 03 Nov 2025 08:18:52 +0000 Manifest next update: Tue 04 Nov 2025 10:23:52 +0000 Files and hashes: 1: 864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl (hash: 57V1vvZyYd6LgGR0sGhjFxzwBQ8F1vIx+KV3jHdL92s=) 2: 323830343a313164343a3a2f33322d3336203d3e20323633343432.roa (hash: ZjHIppO8S58r4UufCCbUgVo3HLt+HFAGV3p8lcKLf5I=) 3: 3137372e31302e39322e302f32322d3234203d3e20323633343432.roa (hash: e1XjvkH2G61dqhOHqc4pF2YHXIhwmms0v4hSF8s9XzI=) 4: 3137372e39312e3134342e302f32302d3234203d3e20323633343432.roa (hash: U2X+DNMG/Bb1Kgy1CKCKBiUdZyIh3tpWZrlBBVlp8/0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e3:e4:37:28:1f:1b:48:4c:2b:13:0a:d8:4c:8a:dd:da:74:ad:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59 Validity Not Before: Nov 3 08:18:52 2025 GMT Not After : Nov 4 10:23:52 2025 GMT Subject: CN=5E80387B867C8C0C87655C5BCDDC7E2A0C59414F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:69:59:26:fd:20:b8:1d:d2:60:69:3b:52:7d: bd:9a:75:0b:92:88:1f:58:d7:85:8d:c9:0f:f3:47: 82:da:75:4b:e5:6d:cd:52:e9:85:98:e6:e7:ed:2b: 09:25:1f:34:7a:39:63:06:be:5c:14:95:5e:b3:b6: a7:f7:2c:3d:47:c2:50:da:b6:64:37:01:fc:ec:58: 3c:d1:99:82:3c:b2:6e:bf:38:fb:53:56:05:4a:49: c8:04:06:a2:2a:c3:91:4c:64:cd:94:8a:f3:20:b8: 0d:13:7d:87:4c:7a:ff:68:04:1b:be:74:05:b9:80: cc:77:e8:2f:b8:8a:95:47:cf:21:e2:3a:a0:fd:70: 4d:e6:f3:f4:d4:4a:53:7d:96:21:64:b6:f7:5d:cf: 28:cd:1f:d0:f4:1e:45:46:bd:83:5b:64:94:8a:38: 5f:a2:06:8e:52:4c:d4:18:4e:7f:b7:29:e2:f9:a6: 52:7d:43:49:6e:d9:0a:80:f7:da:ce:f4:16:4c:a0: 13:a9:b0:8f:b9:cf:97:e4:0b:b6:63:dc:d4:fe:f5: 49:f1:0a:2d:ce:99:3b:16:07:c9:63:3d:1c:ed:45: 4a:73:7b:2d:7c:17:4b:a5:e1:ad:3c:a4:55:16:e1: 8d:2b:e6:f0:96:46:eb:0b:a4:0e:ce:f4:35:40:a9: fd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:80:38:7B:86:7C:8C:0C:87:65:5C:5B:CD:DC:7E:2A:0C:59:41:4F X509v3 Authority Key Identifier: keyid:86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:22:ea:40:f2:26:ef:3f:19:90:31:fe:7a:f4:f7:58:d8:fd: 10:62:49:eb:98:e1:fa:0d:7d:ea:5f:9f:a1:4c:7e:cc:25:42: 1f:f7:13:e7:9a:ec:97:1a:aa:00:cc:a8:72:aa:42:c0:cb:23: 84:ad:1c:fd:6e:4e:bc:8a:7e:95:e4:1d:26:9f:76:02:c5:7e: 49:9c:33:26:79:4e:78:12:e5:1c:08:7a:bc:a6:a8:e9:9a:c0: ca:ed:11:6a:f8:90:7d:b7:28:af:5d:85:31:55:10:93:d2:d6: 2b:e1:4b:c4:e8:e1:87:2b:2a:a4:9e:ce:5d:c2:19:fd:a4:16: b2:13:77:5c:f9:b6:6e:c2:99:d9:5a:6c:f2:ca:46:02:c5:e2: 9f:18:fe:7c:a4:d3:13:be:cb:66:f7:0b:5d:ee:7e:01:5a:d2: 9f:9c:7f:fd:4b:a2:85:42:08:0a:cb:47:2b:8f:f6:04:07:0d: dd:32:be:09:21:5b:b7:40:dd:fd:80:cd:6e:57:f8:8c:a0:9f: f9:ee:61:dc:e1:76:de:cc:bf:38:94:56:a6:38:37:82:bc:b4: f5:e9:b8:e5:9d:b8:08:86:3a:9f:e4:bd:60:70:07:2d:7f:09: 7d:1b:b4:10:55:90:fb:fb:0b:07:8e:ee:62:84:c6:90:7a:4c: c8:a1:c0:f4 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUEOPkNygfG0hMKxMK2EyK3dp0reEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY0QkNCMTExRkZCRjcxQTE3OTQ4MEM3REQ3N0ZDQzY2 NEQ4QUI1OTAeFw0yNTExMDMwODE4NTJaFw0yNTExMDQxMDIzNTJaMDMxMTAvBgNV BAMTKDVFODAzODdCODY3QzhDMEM4NzY1NUM1QkNEREM3RTJBMEM1OTQxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcaVkm/SC4HdJgaTtSfb2adQuS iB9Y14WNyQ/zR4LadUvlbc1S6YWY5uftKwklHzR6OWMGvlwUlV6ztqf3LD1HwlDa tmQ3AfzsWDzRmYI8sm6/OPtTVgVKScgEBqIqw5FMZM2UivMguA0TfYdMev9oBBu+ dAW5gMx36C+4ipVHzyHiOqD9cE3m8/TUSlN9liFktvddzyjNH9D0HkVGvYNbZJSK OF+iBo5STNQYTn+3KeL5plJ9Q0lu2QqA99rO9BZMoBOpsI+5z5fkC7Zj3NT+9Unx Ci3OmTsWB8ljPRztRUpzey18F0ul4a08pFUW4Y0r5vCWRusLpA7O9DVAqf2zAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUXoA4e4Z8jAyHZVxbzdx+KgxZQU8wHwYDVR0j BBgwFoAUhkvLER/79xoXlIDH3Xf8xmTYq1kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9xOWc2QVFVVmVVZGhZSlFEVGY4MXFjU2VKam5DTUtvZlgxNDFHUkRFbW8x LzAvODY0QkNCMTExRkZCRjcxQTE3OTQ4MEM3REQ3N0ZDQzY2NEQ4QUI1OS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84NjRCQ0IxMTFGRkJGNzFBMTc5 NDgwQzdERDc3RkNDNjY0RDhBQjU5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3E5 ZzZBUVVWZVVkaFlKUURUZjgxcWNTZUpqbkNNS29mWDE0MUdSREVtbzEvMC84NjRC Q0IxMTFGRkJGNzFBMTc5NDgwQzdERDc3RkNDNjY0RDhBQjU5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA ESLqQPIm7z8ZkDH+evT3WNj9EGJJ65jh+g196l+foUx+zCVCH/cT55rslxqqAMyo cqpCwMsjhK0c/W5OvIp+leQdJp92AsV+SZwzJnlOeBLlHAh6vKao6ZrAyu0RaviQ fbcor12FMVUQk9LWK+FLxOjhhysqpJ7OXcIZ/aQWshN3XPm2bsKZ2Vps8spGAsXi nxj+fKTTE77LZvcLXe5+AVrSn5x//UuihUIICstHK4/2BAcN3TK+CSFbt0Dd/YDN blf4jKCf+e5h3OF23sy/OJRWpjg3gry09em45Z24CIY6n+S9YHAHLX8JfRu0EFWQ +/sLB47uYoTGkHpMyKHA9A== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:59 2025 by rpki-client