$ rpki-client -vvf rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft File: 7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft (raw, json) Hash identifier: a5e8ClsX7joZdBDt/PU/igZBp0h96DENzJKwIq5pdMg= Subject key identifier: D2:24:9D:2B:69:2F:D7:3B:E9:E8:FC:19:61:63:7F:53:04:FE:84:4A Authority key identifier: 7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0 Certificate issuer: /CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0 Certificate serial: 44B14EFB43DC1F69D147C369FF2220595738AA01 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer Subject info access: rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft Manifest number: 018F Signing time: Tue 04 Nov 2025 17:33:02 +0000 Manifest this update: Tue 04 Nov 2025 17:28:02 +0000 Manifest next update: Wed 05 Nov 2025 18:16:02 +0000 Files and hashes: 1: 323830343a373639303a3a2f33322d3334203d3e20323731313230.roa (hash: 35WEcEG3QWk/zVJzYYzvfaiposzmcV1hcfKo2NLYw2E=) 2: 3137392e34382e3139322e302f32322d3234203d3e20323731313230.roa (hash: dnueVLcMDgoZGxfW5fVwhKVaVsjCcpgjMDDR39mpiEg=) 3: 7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl (hash: F4NTtEdxoMPy7NaMDI6pFCQQ7LnPIg+xMKAf0egKejQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 18:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b1:4e:fb:43:dc:1f:69:d1:47:c3:69:ff:22:20:59:57:38:aa:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0 Validity Not Before: Nov 4 17:28:02 2025 GMT Not After : Nov 5 18:16:02 2025 GMT Subject: CN=D2249D2B692FD73BE9E8FC1961637F5304FE844A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:fd:77:85:02:01:07:a7:76:99:35:6e:f2: 3f:9d:19:d5:17:6d:bb:22:21:21:60:80:5b:80:0b: 59:c5:76:6f:9d:f4:6d:93:07:1f:e1:13:00:48:5e: 8b:15:10:32:79:8e:7d:86:cc:f4:eb:1c:45:e1:cd: 50:94:0c:97:27:33:c7:a3:73:8e:94:03:71:40:46: 68:c4:79:29:d9:d2:26:31:e8:1a:e8:03:a1:79:d1: 37:32:70:75:5a:11:b2:b2:46:ba:a5:ed:3a:70:1b: 28:a5:d6:09:7e:4e:26:3e:67:2a:f3:04:3f:17:81: d4:9c:66:60:77:ed:6e:20:65:f2:20:ca:b0:fd:0d: e5:25:d0:da:6a:49:fe:36:8c:20:71:b6:fc:2c:e5: a6:7d:17:b3:c7:a1:e2:92:7a:12:86:dd:c2:fe:81: 2b:f0:bf:63:57:b7:47:c1:c7:00:45:d7:3c:ec:ba: 36:58:9c:ae:9f:5e:0d:df:6b:dd:c2:02:62:8d:81: 18:a6:9a:d4:44:24:8a:ab:08:f0:af:f8:8d:42:ac: fb:2d:a6:c3:af:2f:49:1e:b6:dc:e2:fe:c0:52:84: 9e:2d:6d:29:cb:29:e2:40:23:e2:98:da:45:b8:39: af:c3:99:45:60:ea:05:6d:ba:29:c7:bc:14:10:f5: b1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:24:9D:2B:69:2F:D7:3B:E9:E8:FC:19:61:63:7F:53:04:FE:84:4A X509v3 Authority Key Identifier: keyid:7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3d:9f:18:b1:f2:c7:f6:02:96:c8:4b:30:a6:1d:7c:13:d6: 2c:97:68:43:37:df:f5:cd:47:f4:7e:60:c9:f6:1b:05:60:28: 1a:04:39:9a:67:24:ce:e2:e2:5c:fa:14:ab:60:78:f8:4d:a8: de:e4:37:93:fe:0f:30:8a:3a:b9:a6:3d:ea:dc:95:e7:76:20: 9d:f7:ad:2d:be:ef:f5:7b:b7:df:ac:1f:a1:15:ae:c6:4b:88: 38:62:e1:96:e9:c2:7d:8d:62:78:bb:b0:e7:a6:13:71:25:1b: f8:04:8d:d4:48:9a:ef:2e:e4:ac:20:56:4f:67:98:c2:fa:6c: 4a:d3:f7:04:bf:b9:de:bf:82:b6:9d:98:c7:13:42:58:26:68: ef:84:a6:56:0e:9b:82:5c:d8:89:86:d5:06:98:fd:88:df:33: 5d:df:4e:c8:6a:75:30:57:e4:79:53:90:34:18:8b:1f:1e:16: 7a:3c:66:98:71:70:3b:08:0a:90:af:7f:e7:9a:8f:f3:fa:a1: 69:ad:52:4f:62:d3:49:f1:44:8e:c8:b5:d3:0c:54:4f:1a:a9: e1:60:ab:6b:84:e8:b1:67:a8:55:5c:fd:5e:a5:2e:0c:2b:18: ae:9b:ab:7e:81:6c:2b:52:52:54:fc:2b:25:89:66:f6:3c:3d: f4:a8:68:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURLFO+0PcH2nRR8Np/yIgWVc4qgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBMDRBODdFQUEzNTgzNEUxMTcyQzVCQjk2RDVEQjBE MEIyM0RDMDAeFw0yNTExMDQxNzI4MDJaFw0yNTExMDUxODE2MDJaMDMxMTAvBgNV BAMTKEQyMjQ5RDJCNjkyRkQ3M0JFOUU4RkMxOTYxNjM3RjUzMDRGRTg0NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHwP13hQIBB6d2mTVu8j+dGdUX bbsiISFggFuAC1nFdm+d9G2TBx/hEwBIXosVEDJ5jn2GzPTrHEXhzVCUDJcnM8ej c46UA3FARmjEeSnZ0iYx6BroA6F50TcycHVaEbKyRrql7TpwGyil1gl+TiY+Zyrz BD8XgdScZmB37W4gZfIgyrD9DeUl0NpqSf42jCBxtvws5aZ9F7PHoeKSehKG3cL+ gSvwv2NXt0fBxwBF1zzsujZYnK6fXg3fa93CAmKNgRimmtREJIqrCPCv+I1CrPst psOvL0kettzi/sBShJ4tbSnLKeJAI+KY2kW4Oa/DmUVg6gVtuinHvBQQ9bFTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0iSdK2kv1zvp6PwZYWN/UwT+hEowHwYDVR0j BBgwFoAUfKBKh+qjWDThFyxbuW1dsNCyPcAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjN4cEFQOHBOeVN0VEFBVEZrck11SjhVZ01zZkVhbnRNVFN0alFrQWhH ekIvMC83Q0EwNEE4N0VBQTM1ODM0RTExNzJDNUJCOTZENURCMEQwQjIzREMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQTA0QTg3RUFBMzU4MzRF MTE3MkM1QkI5NkQ1REIwRDBCMjNEQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MjN4cEFQOHBOeVN0VEFBVEZrck11SjhVZ01zZkVhbnRNVFN0alFrQWhHekIvMC83 Q0EwNEE4N0VBQTM1ODM0RTExNzJDNUJCOTZENURCMEQwQjIzREMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAez2fGLHyx/YClshLMKYdfBPWLJdoQzff9c1H9H5gyfYbBWAoGgQ5mmckzuLi XPoUq2B4+E2o3uQ3k/4PMIo6uaY96tyV53YgnfetLb7v9Xu336wfoRWuxkuIOGLh lunCfY1ieLuw56YTcSUb+ASN1Eia7y7krCBWT2eYwvpsStP3BL+53r+Ctp2YxxNC WCZo74SmVg6bglzYiYbVBpj9iN8zXd9OyGp1MFfkeVOQNBiLHx4WejxmmHFwOwgK kK9/55qP8/qhaa1ST2LTSfFEjsi10wxUTxqp4WCra4TosWeoVVz9XqUuDCsYrpur foFsK1JSVPwrJYlm9jw99Khogg== -----END CERTIFICATE-----Generated at Wed Nov 5 01:58:54 2025 by rpki-client