$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft File: 0688357ED433C0A60770FB474BDB2C72796B78BD.mft (raw, json) Hash identifier: VqZkN5tw2zq98FC+BBNAb+gJAyKWmvVwQ5Je71/IP9U= Subject key identifier: A2:A2:3C:B8:1C:38:3C:7B:11:1D:8E:2F:FD:46:5D:34:8C:3D:1E:72 Authority key identifier: 06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD Certificate issuer: /CN=0688357ED433C0A60770FB474BDB2C72796B78BD Certificate serial: 7C68DBDAA64E2778883380F3F416A5770FC1A1C5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft Manifest number: 0111 Signing time: Tue 04 Nov 2025 23:55:40 +0000 Manifest this update: Tue 04 Nov 2025 23:50:40 +0000 Manifest next update: Thu 06 Nov 2025 03:31:40 +0000 Files and hashes: 1: 3133382e33362e3233322e302f32322d3332203d3e203631363936.roa (hash: 0PAGB5C8H6IcqwDv00MSTHzGTYgYIUYZIqOHywJKqvU=) 2: 3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa (hash: IaTZ4i3zNgWw2pTgrax+ua0Htv3rIzLefPo79rSHOwM=) 3: 323830343a316165303a3a2f33322d3634203d3e203631363936.roa (hash: MNi0hCQVw5LiwCn26uDAV8DWpcneKIoS1bbRQFE26gw=) 4: 0688357ED433C0A60770FB474BDB2C72796B78BD.crl (hash: K4v68F2YMFSl/B7J/7Lrsb7jqdAmAhjuypc0uzHl64c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:68:db:da:a6:4e:27:78:88:33:80:f3:f4:16:a5:77:0f:c1:a1:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0688357ED433C0A60770FB474BDB2C72796B78BD Validity Not Before: Nov 4 23:50:40 2025 GMT Not After : Nov 6 03:31:40 2025 GMT Subject: CN=A2A23CB81C383C7B111D8E2FFD465D348C3D1E72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cd:41:b9:a7:05:f2:e2:a0:68:2d:fd:9f:0f: ae:28:61:d8:02:d1:81:15:c7:bf:62:54:b6:97:67: 77:b1:69:bc:00:79:2c:b7:21:41:09:dd:a3:a6:30: 3c:5f:7d:b8:0d:50:23:33:40:30:b0:e4:c0:3e:38: 9d:16:5d:fd:9f:f5:45:4c:35:61:4c:12:3b:b0:50: 57:9d:99:13:91:e5:f3:ea:3f:d1:0a:0d:8b:9b:a8: c7:15:d8:7c:cd:8c:70:c9:c3:9a:de:42:e7:3f:7f: 96:ce:8a:74:f7:69:ab:83:b9:49:6c:95:c1:42:b0: 2d:a7:4e:ba:4a:40:4c:7d:d0:25:ee:92:86:c4:f2: 71:45:e5:7a:20:79:0d:3a:0f:59:1f:b4:b1:28:9e: 94:70:50:0e:93:e0:1b:da:5a:cc:66:fc:3c:fb:64: d9:d0:28:a0:6f:84:f3:ee:06:1c:aa:a0:71:ac:23: c9:e8:f3:d4:0a:4e:3b:e5:68:81:c9:86:50:1f:b5: 25:2a:7d:41:30:9b:a0:6c:3a:22:d9:c0:b7:ce:c0: 8e:de:16:3c:3d:1b:dc:27:df:76:50:7f:a9:9d:8f: 96:17:fe:c6:20:37:1b:73:a0:bc:9c:27:5e:7a:3f: 8a:36:26:b8:b4:56:de:ac:d2:88:3d:55:71:9d:d8: 6d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A2:3C:B8:1C:38:3C:7B:11:1D:8E:2F:FD:46:5D:34:8C:3D:1E:72 X509v3 Authority Key Identifier: keyid:06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:da:10:6f:86:d3:5e:55:86:b2:2d:69:0a:01:d9:f7:28:92: 83:72:d3:dd:46:9a:0d:14:52:86:20:5f:40:00:db:8e:42:1b: 45:02:41:2b:92:93:c3:52:07:86:01:76:cc:48:5e:a3:f1:b0: 22:b3:5c:22:ad:28:14:24:af:e5:d7:32:bc:b5:25:f4:1c:ce: e5:82:f7:a3:e7:f2:5d:a4:33:04:ea:d9:12:96:c8:ea:d7:a5: 1d:2c:4e:a8:2c:31:bf:ee:b3:4c:c3:c0:4c:8c:e8:d3:16:61: de:1e:f3:e4:f7:2f:08:5a:89:1e:e8:43:2a:a2:75:69:10:78: f1:7b:8f:b7:69:41:36:59:e3:ba:17:53:cf:c2:e6:c2:bc:06: 43:73:f2:e2:1c:dc:0a:99:38:b7:99:94:e3:95:5e:34:87:3b: 5d:b3:c4:ee:c0:f2:95:34:be:39:27:88:92:67:55:da:6b:3f: 4c:06:f4:1d:71:0b:9d:0c:3c:18:d5:a2:fa:93:f6:40:49:34: dc:94:36:29:b1:13:64:26:50:22:0a:5f:9a:fc:05:39:ca:58: 62:db:7b:f0:70:93:32:ce:96:74:30:94:c9:4c:f6:d9:75:34: 0f:1e:da:e0:04:3b:93:e3:96:2d:fe:8a:54:bc:1c:32:05:b9: 3f:93:b8:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfGjb2qZOJ3iIM4Dz9Baldw/BocUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4ODM1N0VENDMzQzBBNjA3NzBGQjQ3NEJEQjJDNzI3 OTZCNzhCRDAeFw0yNTExMDQyMzUwNDBaFw0yNTExMDYwMzMxNDBaMDMxMTAvBgNV BAMTKEEyQTIzQ0I4MUMzODNDN0IxMTFEOEUyRkZENDY1RDM0OEMzRDFFNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKzUG5pwXy4qBoLf2fD64oYdgC 0YEVx79iVLaXZ3exabwAeSy3IUEJ3aOmMDxffbgNUCMzQDCw5MA+OJ0WXf2f9UVM NWFMEjuwUFedmROR5fPqP9EKDYubqMcV2HzNjHDJw5reQuc/f5bOinT3aauDuUls lcFCsC2nTrpKQEx90CXukobE8nFF5XogeQ06D1kftLEonpRwUA6T4BvaWsxm/Dz7 ZNnQKKBvhPPuBhyqoHGsI8no89QKTjvlaIHJhlAftSUqfUEwm6BsOiLZwLfOwI7e Fjw9G9wn33ZQf6mdj5YX/sYgNxtzoLycJ156P4o2Jri0Vt6s0og9VXGd2G05AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoqI8uBw4PHsRHY4v/UZdNIw9HnIwHwYDVR0j BBgwFoAUBog1ftQzwKYHcPtHS9sscnlreL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNX c3gvMC8wNjg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODgzNTdFRDQzM0MwQTYw NzcwRkI0NzRCREIyQzcyNzk2Qjc4QkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNXc3gvMC8w Njg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJNoQb4bTXlWGsi1pCgHZ9yiSg3LT3UaaDRRShiBfQADbjkIbRQJBK5KTw1IH hgF2zEheo/GwIrNcIq0oFCSv5dcyvLUl9BzO5YL3o+fyXaQzBOrZEpbI6telHSxO qCwxv+6zTMPATIzo0xZh3h7z5PcvCFqJHuhDKqJ1aRB48XuPt2lBNlnjuhdTz8Lm wrwGQ3Py4hzcCpk4t5mU45VeNIc7XbPE7sDylTS+OSeIkmdV2ms/TAb0HXELnQw8 GNWi+pP2QEk03JQ2KbETZCZQIgpfmvwFOcpYYtt78HCTMs6WdDCUyUz22XU0Dx7a 4AQ7k+OWLf6KVLwcMgW5P5O4aQ== -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:03 2025 by rpki-client