$ rpki-client -vvf rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/793843AE7EAE08FD5A902A5679C194A4E02D2781.mft File: 793843AE7EAE08FD5A902A5679C194A4E02D2781.mft (raw, json) Hash identifier: Ri3AzQ30nFXJdl5NkMURBLwEyo3L3So73L2FKmT+aDs= Subject key identifier: 4A:CE:A7:92:3B:2B:6F:E7:E0:05:B0:83:08:29:66:8C:09:D7:BD:F7 Authority key identifier: 79:38:43:AE:7E:AE:08:FD:5A:90:2A:56:79:C1:94:A4:E0:2D:27:81 Certificate issuer: /CN=793843AE7EAE08FD5A902A5679C194A4E02D2781 Certificate serial: 6BF1F5D86003F3B1DDB5B3AD680E0D18CA2D95C6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793843AE7EAE08FD5A902A5679C194A4E02D2781.cer Subject info access: rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/793843AE7EAE08FD5A902A5679C194A4E02D2781.mft Manifest number: 0238 Signing time: Wed 05 Nov 2025 14:29:50 +0000 Manifest this update: Wed 05 Nov 2025 14:24:50 +0000 Manifest next update: Thu 06 Nov 2025 16:02:50 +0000 Files and hashes: 1: 3137372e382e3133322e302f32322d3332203d3e20323730353831.roa (hash: Kcu0+gXUcf3geIYyVDHTYNPOLPCPeqfxE97c3TX/wJs=) 2: 323830343a366533303a3a2f33322d313238203d3e20323730353831.roa (hash: YqVEEc9hJVnpwd7dlUQG1gBKY7tccWG1NTTDiXfcfIA=) 3: 793843AE7EAE08FD5A902A5679C194A4E02D2781.crl (hash: Q/j6qKZpzPm0x3yqZ2UYmeQkLNfu0Zba5Y5LBs9sOs8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/793843AE7EAE08FD5A902A5679C194A4E02D2781.crl rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/793843AE7EAE08FD5A902A5679C194A4E02D2781.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793843AE7EAE08FD5A902A5679C194A4E02D2781.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 16:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f1:f5:d8:60:03:f3:b1:dd:b5:b3:ad:68:0e:0d:18:ca:2d:95:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=793843AE7EAE08FD5A902A5679C194A4E02D2781 Validity Not Before: Nov 5 14:24:50 2025 GMT Not After : Nov 6 16:02:50 2025 GMT Subject: CN=4ACEA7923B2B6FE7E005B0830829668C09D7BDF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6e:dc:ff:cf:ea:bc:5d:04:91:85:d2:13:01: ca:3a:67:b8:42:57:1d:50:36:2b:9f:44:6a:b1:c2: 56:4b:10:41:27:b2:e7:bf:ca:a2:41:30:c4:81:f2: 0f:cb:b6:c9:69:35:85:0e:ba:73:e6:69:e8:ef:98: 8b:61:3c:0d:c1:ae:92:9e:e3:6a:d5:9e:91:f2:3e: 66:a4:e7:98:eb:61:57:ee:f9:a0:78:d0:b9:07:67: bd:54:94:52:5a:72:d4:45:96:1f:cb:13:0e:73:78: 5a:51:d8:22:e1:31:40:14:6c:49:69:53:3b:54:71: 87:47:99:f1:ae:0c:9c:fc:1b:60:eb:4b:19:f4:10: d5:cc:c6:3c:bf:56:23:75:ed:e3:c9:7a:81:93:e4: 51:e7:8a:d1:98:84:0c:ac:20:17:ce:24:41:76:5c: 23:2f:e8:1e:1e:46:d6:bb:a7:3c:1f:64:26:10:89: eb:31:2e:5a:2f:a6:a8:02:56:03:c7:b7:c3:7d:1e: 3a:08:17:0b:71:58:f8:76:d0:09:a2:cc:57:55:db: 92:c2:a7:8e:b2:0c:77:92:63:22:6c:17:03:0b:4a: e7:f5:3c:e3:15:9f:79:ec:0a:e2:b4:21:49:db:e6: b5:9b:a6:75:55:1c:03:3f:91:df:55:a9:8b:0a:81: e4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CE:A7:92:3B:2B:6F:E7:E0:05:B0:83:08:29:66:8C:09:D7:BD:F7 X509v3 Authority Key Identifier: keyid:79:38:43:AE:7E:AE:08:FD:5A:90:2A:56:79:C1:94:A4:E0:2D:27:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/793843AE7EAE08FD5A902A5679C194A4E02D2781.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793843AE7EAE08FD5A902A5679C194A4E02D2781.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/793843AE7EAE08FD5A902A5679C194A4E02D2781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:8f:de:b1:ab:5c:21:ac:69:3f:fa:19:42:0b:02:56:99:43: 4f:ce:57:d5:2f:ed:9e:62:44:49:81:61:f1:7b:a5:81:0e:d9: d6:69:fd:a3:7d:c4:16:1b:56:73:7f:01:a4:8f:bf:d8:89:62: 7b:df:f5:28:70:f6:7d:21:89:db:a8:f0:fe:4f:d4:c2:2f:c0: e7:a6:a9:15:15:c7:96:3b:e5:e0:f2:36:b1:38:db:a6:77:36: 31:88:a4:f9:c8:21:6a:d8:3a:a0:3d:9a:b0:5f:9d:a1:96:4a: 86:52:a8:02:6e:61:33:a5:82:b0:6b:f3:97:0f:6a:24:5a:c9: 8e:8a:57:86:a6:22:be:77:4e:3d:29:e9:d7:b7:a6:af:3b:22: 77:d3:9d:17:fe:58:4c:d8:fa:73:a5:08:7c:97:aa:6c:79:a2: 8c:26:d3:88:26:45:16:88:93:9f:d5:6e:c2:29:bb:08:e0:17: 5d:28:8d:41:9a:48:00:75:8d:cb:95:2e:63:d8:b6:11:7d:1f: 6b:90:c5:93:67:4b:2c:fa:de:c6:7a:da:e8:a2:d7:82:ab:19: 19:89:fa:88:37:e8:bd:bc:57:af:5b:58:07:cb:77:af:75:b6: 50:cd:21:5c:d3:d1:63:55:17:a2:af:a3:16:dc:a7:46:5b:b1: 17:ba:86:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa/H12GAD87HdtbOtaA4NGMotlcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkzODQzQUU3RUFFMDhGRDVBOTAyQTU2NzlDMTk0QTRF MDJEMjc4MTAeFw0yNTExMDUxNDI0NTBaFw0yNTExMDYxNjAyNTBaMDMxMTAvBgNV BAMTKDRBQ0VBNzkyM0IyQjZGRTdFMDA1QjA4MzA4Mjk2NjhDMDlEN0JERjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLbtz/z+q8XQSRhdITAco6Z7hC Vx1QNiufRGqxwlZLEEEnsue/yqJBMMSB8g/LtslpNYUOunPmaejvmIthPA3BrpKe 42rVnpHyPmak55jrYVfu+aB40LkHZ71UlFJactRFlh/LEw5zeFpR2CLhMUAUbElp UztUcYdHmfGuDJz8G2DrSxn0ENXMxjy/ViN17ePJeoGT5FHnitGYhAysIBfOJEF2 XCMv6B4eRta7pzwfZCYQiesxLlovpqgCVgPHt8N9HjoIFwtxWPh20AmizFdV25LC p46yDHeSYyJsFwMLSuf1POMVn3nsCuK0IUnb5rWbpnVVHAM/kd9VqYsKgeT5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSs6nkjsrb+fgBbCDCClmjAnXvfcwHwYDVR0j BBgwFoAUeThDrn6uCP1akCpWecGUpOAtJ4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMldkcGZWWlJBaWJqM1hSWXZLVUttRnU4SGY1VUJ0OEJRTUdSc3FGYnZ0 d0IvMC83OTM4NDNBRTdFQUUwOEZENUE5MDJBNTY3OUMxOTRBNEUwMkQyNzgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5Mzg0M0FFN0VBRTA4RkQ1 QTkwMkE1Njc5QzE5NEE0RTAyRDI3ODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MldkcGZWWlJBaWJqM1hSWXZLVUttRnU4SGY1VUJ0OEJRTUdSc3FGYnZ0d0IvMC83 OTM4NDNBRTdFQUUwOEZENUE5MDJBNTY3OUMxOTRBNEUwMkQyNzgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlY/esatcIaxpP/oZQgsCVplDT85X1S/tnmJESYFh8XulgQ7Z1mn9o33EFhtW c38BpI+/2Ilie9/1KHD2fSGJ26jw/k/Uwi/A56apFRXHljvl4PI2sTjbpnc2MYik +cghatg6oD2asF+doZZKhlKoAm5hM6WCsGvzlw9qJFrJjopXhqYivndOPSnp17em rzsid9OdF/5YTNj6c6UIfJeqbHmijCbTiCZFFoiTn9Vuwim7COAXXSiNQZpIAHWN y5UuY9i2EX0fa5DFk2dLLPrexnra6KLXgqsZGYn6iDfovbxXr1tYB8t3r3W2UM0h XNPRY1UXoq+jFtynRluxF7qGJQ== -----END CERTIFICATE-----Generated at Wed Nov 5 17:07:36 2025 by rpki-client