$ rpki-client -vvf rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.mft File: 608E3468464471A407DA37B93E7EAA2E8A3F6EE4.mft (raw, json) Hash identifier: PuvP7QpXvMjjlo7iqsjM1CPi8rdPCXA5KjQ47+lvyR8= Subject key identifier: D1:48:21:61:81:C6:86:9F:48:03:D5:61:7E:F2:AC:B9:A1:82:C6:EE Authority key identifier: 60:8E:34:68:46:44:71:A4:07:DA:37:B9:3E:7E:AA:2E:8A:3F:6E:E4 Certificate issuer: /CN=608E3468464471A407DA37B93E7EAA2E8A3F6EE4 Certificate serial: 071E3EA5745B1552BF193AF8593AB031C837A83D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.cer Subject info access: rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.mft Manifest number: D2 Signing time: Tue 04 Nov 2025 20:32:17 +0000 Manifest this update: Tue 04 Nov 2025 20:27:17 +0000 Manifest next update: Wed 05 Nov 2025 21:15:17 +0000 Files and hashes: 1: 323830343a326134303a3a2f33322d3332203d3e20323634303637.roa (hash: 0+MSOrTWTJTXHqpTIRscOq/wFmB+HvUBUPggdZH9MS8=) 2: 3134332e3230322e38302e302f32322d3234203d3e20323634303637.roa (hash: 8fKWUXz88EE4FdGimDW8PmZu7e3/wVnFNr79jS1k7hU=) 3: 3133382e3131382e3138342e302f32322d3234203d3e20323634303637.roa (hash: JegZlSc5Dn8mTlmuObQ1tMRC7FzKBH+2Ic5xnWDfXN8=) 4: 608E3468464471A407DA37B93E7EAA2E8A3F6EE4.crl (hash: Cyp/a6KAhB6mXOH4uLFpTzjY+P22ByPwfbN5WqMxxxQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.crl rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 21:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:1e:3e:a5:74:5b:15:52:bf:19:3a:f8:59:3a:b0:31:c8:37:a8:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=608E3468464471A407DA37B93E7EAA2E8A3F6EE4 Validity Not Before: Nov 4 20:27:17 2025 GMT Not After : Nov 5 21:15:17 2025 GMT Subject: CN=D148216181C6869F4803D5617EF2ACB9A182C6EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:65:bc:04:62:98:08:85:77:d1:1d:e2:4c:de: 1d:aa:88:ee:c7:82:a5:05:b1:0a:7c:7a:d8:77:d4: 4c:a3:44:62:5d:ae:9b:11:1e:04:6e:9e:f8:a1:2b: ed:61:a0:c4:4b:a0:de:a8:f5:5b:85:9b:0d:0b:fc: 2a:9c:87:d9:ab:bd:51:05:45:9d:57:ae:64:75:2c: dc:fe:9a:6b:03:ea:e9:b9:1e:5c:f1:f6:35:e3:9a: 30:f8:1e:18:3e:d1:6c:fd:42:70:48:fc:c3:16:ed: 33:ed:ef:70:74:71:2a:d0:4a:28:fe:31:48:dd:ae: c1:6a:f3:ee:a6:b8:89:54:ea:b3:c5:24:1a:47:58: b7:8c:2b:7e:0b:1b:bb:51:55:7c:8d:a7:92:7a:91: 1d:b3:9f:de:55:07:a5:19:f2:5b:49:a8:00:85:23: b2:66:1a:af:2b:26:df:43:ea:22:60:51:39:9c:30: fb:40:c4:3b:64:e2:96:1c:e0:a4:b9:9e:ee:9e:40: ae:53:29:46:82:a6:8c:27:b1:45:c3:0b:eb:8a:2f: b4:e6:e1:9f:25:a0:c7:19:9f:b5:7c:0d:9c:61:0e: ce:fd:ee:fb:0c:41:04:5c:17:02:a5:2b:19:6a:a8: 41:21:e6:4e:46:20:a8:9f:a7:eb:eb:3c:1b:6b:33: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:48:21:61:81:C6:86:9F:48:03:D5:61:7E:F2:AC:B9:A1:82:C6:EE X509v3 Authority Key Identifier: keyid:60:8E:34:68:46:44:71:A4:07:DA:37:B9:3E:7E:AA:2E:8A:3F:6E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:af:7e:75:92:70:cd:d3:04:4f:88:b6:7d:bd:dd:4f:20:6d: 54:0c:e6:19:7d:c7:d1:e9:79:b1:0f:f8:29:cc:bf:ae:5e:aa: 78:2d:33:36:9f:2d:d8:64:3b:74:9a:a2:dc:69:78:2a:7d:f1: 0c:c1:c4:18:69:48:90:34:13:2f:a5:df:61:69:d8:51:8d:9a: 06:8b:97:26:65:4f:a5:0b:5b:6e:e1:df:a3:27:80:2a:3f:2c: 8c:b8:35:c0:32:99:a2:91:ae:dc:4c:50:f1:f9:e7:d5:03:12: bc:7e:0f:89:64:52:e6:8d:50:49:a5:4a:ab:3f:01:0c:b4:1e: 5e:3c:9d:f3:be:aa:34:8a:f9:25:f6:5a:b0:64:88:94:80:a5: 9e:01:0e:23:ad:29:06:56:50:1f:9d:cd:eb:b2:20:da:68:a9: 1e:d7:9c:96:22:10:7f:72:4f:36:8f:7f:74:26:26:6c:89:b2: f3:9f:3e:41:e3:4a:bc:73:cf:c0:11:c9:5b:67:24:aa:99:c9: 63:a6:d4:79:85:32:86:53:b3:c4:8e:08:52:a2:b1:c4:11:28: a3:99:bb:90:db:12:a5:10:08:3d:38:5b:45:b6:99:f7:e3:80: 36:91:9b:1b:a8:c5:d5:15:f1:65:f4:86:f7:43:06:48:4e:d8: d7:fb:56:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBx4+pXRbFVK/GTr4WTqwMcg3qD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA4RTM0Njg0NjQ0NzFBNDA3REEzN0I5M0U3RUFBMkU4 QTNGNkVFNDAeFw0yNTExMDQyMDI3MTdaFw0yNTExMDUyMTE1MTdaMDMxMTAvBgNV BAMTKEQxNDgyMTYxODFDNjg2OUY0ODAzRDU2MTdFRjJBQ0I5QTE4MkM2RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOZbwEYpgIhXfRHeJM3h2qiO7H gqUFsQp8eth31EyjRGJdrpsRHgRunvihK+1hoMRLoN6o9VuFmw0L/Cqch9mrvVEF RZ1XrmR1LNz+mmsD6um5Hlzx9jXjmjD4Hhg+0Wz9QnBI/MMW7TPt73B0cSrQSij+ MUjdrsFq8+6muIlU6rPFJBpHWLeMK34LG7tRVXyNp5J6kR2zn95VB6UZ8ltJqACF I7JmGq8rJt9D6iJgUTmcMPtAxDtk4pYc4KS5nu6eQK5TKUaCpownsUXDC+uKL7Tm 4Z8loMcZn7V8DZxhDs797vsMQQRcFwKlKxlqqEEh5k5GIKifp+vrPBtrM4WNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0UghYYHGhp9IA9VhfvKsuaGCxu4wHwYDVR0j BBgwFoAUYI40aEZEcaQH2je5Pn6qLoo/buQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkZKR2JuV1lwZHF0allzaFdCeUVxY3lUWWU2QnhXUHlvNTJITWV1WlFx aHcvMC82MDhFMzQ2ODQ2NDQ3MUE0MDdEQTM3QjkzRTdFQUEyRThBM0Y2RUU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwOEUzNDY4NDY0NDcxQTQw N0RBMzdCOTNFN0VBQTJFOEEzRjZFRTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkZKR2JuV1lwZHF0allzaFdCeUVxY3lUWWU2QnhXUHlvNTJITWV1WlFxaHcvMC82 MDhFMzQ2ODQ2NDQ3MUE0MDdEQTM3QjkzRTdFQUEyRThBM0Y2RUU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfq9+dZJwzdMET4i2fb3dTyBtVAzmGX3H0el5sQ/4Kcy/rl6qeC0zNp8t2GQ7 dJqi3Gl4Kn3xDMHEGGlIkDQTL6XfYWnYUY2aBouXJmVPpQtbbuHfoyeAKj8sjLg1 wDKZopGu3ExQ8fnn1QMSvH4PiWRS5o1QSaVKqz8BDLQeXjyd876qNIr5JfZasGSI lIClngEOI60pBlZQH53N67Ig2mipHtecliIQf3JPNo9/dCYmbImy858+QeNKvHPP wBHJW2ckqpnJY6bUeYUyhlOzxI4IUqKxxBEoo5m7kNsSpRAIPThbRbaZ9+OANpGb G6jF1RXxZfSG90MGSE7Y1/tWIw== -----END CERTIFICATE-----Generated at Wed Nov 5 12:27:33 2025 by rpki-client