$ rpki-client -vvf rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/194C6BCBEB71571D67E92F3EBF24D2D6C94B3853.mft File: 194C6BCBEB71571D67E92F3EBF24D2D6C94B3853.mft (raw, json) Hash identifier: YBJrzIC/yeuPm7QmBSyyxc2jg8A5D6Jm+gqhigrhNRE= Subject key identifier: 43:60:12:58:3C:A7:90:F6:F4:CD:E5:97:67:02:07:E0:91:D8:91:11 Authority key identifier: 19:4C:6B:CB:EB:71:57:1D:67:E9:2F:3E:BF:24:D2:D6:C9:4B:38:53 Certificate issuer: /CN=194C6BCBEB71571D67E92F3EBF24D2D6C94B3853 Certificate serial: 6B5D3C22D241D158211A917E87931D5A3AF736D7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/194C6BCBEB71571D67E92F3EBF24D2D6C94B3853.cer Subject info access: rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/194C6BCBEB71571D67E92F3EBF24D2D6C94B3853.mft Manifest number: 01A7 Signing time: Tue 04 Nov 2025 18:47:13 +0000 Manifest this update: Tue 04 Nov 2025 18:42:13 +0000 Manifest next update: Wed 05 Nov 2025 19:17:13 +0000 Files and hashes: 1: 323830343a333737633a3a2f33322d3438203d3e20323636343138.roa (hash: VrPTnVpis6TakoOqPCakneYkaHqRIwicb1g6Jx4oQrk=) 2: 194C6BCBEB71571D67E92F3EBF24D2D6C94B3853.crl (hash: /8WGpPtdV6i8OWcd8t8L88sk1OlJ+5CB6DzyJsyolf4=) 3: 3137302e38312e3136342e302f32322d3234203d3e20323636343138.roa (hash: 1pDAQvJnK9XgwdcDPvkLGNW/TsoUMwEW766cUnYuc2Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/194C6BCBEB71571D67E92F3EBF24D2D6C94B3853.crl rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/194C6BCBEB71571D67E92F3EBF24D2D6C94B3853.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/194C6BCBEB71571D67E92F3EBF24D2D6C94B3853.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:5d:3c:22:d2:41:d1:58:21:1a:91:7e:87:93:1d:5a:3a:f7:36:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194C6BCBEB71571D67E92F3EBF24D2D6C94B3853 Validity Not Before: Nov 4 18:42:13 2025 GMT Not After : Nov 5 19:17:13 2025 GMT Subject: CN=436012583CA790F6F4CDE597670207E091D89111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e8:40:c2:e0:46:84:63:1f:b7:16:49:a9:6a: b7:10:ee:df:e7:c2:5b:9b:81:93:7d:68:ba:33:20: 0a:f5:c7:dc:49:95:2e:67:c1:57:9a:1f:4b:b2:12: 4e:0d:83:98:77:d2:7c:3e:a2:df:bd:38:df:1d:da: 5c:63:6a:79:2b:e6:f8:a0:d8:e8:f0:6e:a7:0f:35: 31:5a:01:98:2e:ae:84:6f:f1:a1:1f:87:7f:5f:67: d5:43:6d:9d:4f:ad:ee:9a:84:dd:36:46:dd:5f:ad: 9c:3c:4d:13:e6:2b:20:40:91:e8:8b:f1:ab:5c:6c: 42:85:7a:cd:e9:cf:62:ee:ab:48:b0:a1:62:37:bb: 28:9a:ca:a8:03:ab:ee:f7:74:ff:78:4c:ca:8e:f9: 49:b4:5e:c3:9b:af:48:50:3b:3b:e2:41:d5:de:dd: f8:b2:3d:f1:d7:57:a8:ef:00:38:e7:dd:1f:6c:52: b8:1d:41:d2:c4:45:b7:dc:b0:61:0e:7d:a3:f5:a0: a5:1e:ae:70:33:3f:71:4d:34:7e:1f:6f:1b:ed:0c: 6c:ba:53:c8:55:b7:b2:c7:11:55:c0:e4:2c:7d:1e: 5b:3f:96:80:88:c8:2b:a0:dc:11:dd:ac:9c:0c:48: 8c:19:78:7d:71:cd:f2:bc:39:36:e2:fb:ba:7f:36: 03:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:60:12:58:3C:A7:90:F6:F4:CD:E5:97:67:02:07:E0:91:D8:91:11 X509v3 Authority Key Identifier: keyid:19:4C:6B:CB:EB:71:57:1D:67:E9:2F:3E:BF:24:D2:D6:C9:4B:38:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/194C6BCBEB71571D67E92F3EBF24D2D6C94B3853.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/194C6BCBEB71571D67E92F3EBF24D2D6C94B3853.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/194C6BCBEB71571D67E92F3EBF24D2D6C94B3853.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:aa:ce:38:67:43:bc:2c:30:f2:90:4d:5a:71:b9:bd:f5:6b: 67:cd:6c:7f:fb:ea:3f:fb:96:2d:6d:9b:4d:02:9a:b5:e6:82: 74:c1:56:d2:57:47:7c:f6:0e:0a:ee:38:a8:b3:69:60:12:57: 97:2a:00:e8:68:02:df:0c:fa:fe:9e:97:63:28:0d:c0:6c:0e: 1e:d5:03:40:79:4e:3f:7a:11:f5:49:97:a1:4c:90:0c:10:9e: 2f:62:2a:88:59:3c:a2:6e:be:5b:44:48:9d:fc:23:13:b2:82: d5:f7:ca:2d:cf:5b:d9:06:8e:38:f3:dc:d2:8e:68:7f:6f:c3: 07:cc:80:8a:6a:d0:fa:9a:ec:d5:5e:47:8e:04:31:12:e4:65: b5:ec:b2:7b:38:8c:55:e0:ae:9c:f2:13:21:1b:03:18:e4:b8: fa:d6:17:e4:90:26:7b:f7:e2:6b:a1:05:11:61:48:31:d1:88: 42:57:b0:0b:de:7a:67:6d:c1:12:de:bd:cf:f2:10:4b:4d:fb: 61:04:15:3f:a4:4f:5a:d2:87:91:10:7f:f6:7d:23:cb:11:c0: 67:37:28:82:ef:11:e3:ea:97:12:d0:f3:60:96:a4:53:47:ef: 0b:86:41:8c:fe:5a:d0:22:64:27:fc:4c:26:3d:4e:61:66:08: c0:6f:f8:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa108ItJB0VghGpF+h5MdWjr3NtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0QzZCQ0JFQjcxNTcxRDY3RTkyRjNFQkYyNEQyRDZD OTRCMzg1MzAeFw0yNTExMDQxODQyMTNaFw0yNTExMDUxOTE3MTNaMDMxMTAvBgNV BAMTKDQzNjAxMjU4M0NBNzkwRjZGNENERTU5NzY3MDIwN0UwOTFEODkxMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC86EDC4EaEYx+3FkmparcQ7t/n wlubgZN9aLozIAr1x9xJlS5nwVeaH0uyEk4Ng5h30nw+ot+9ON8d2lxjankr5vig 2OjwbqcPNTFaAZguroRv8aEfh39fZ9VDbZ1Pre6ahN02Rt1frZw8TRPmKyBAkeiL 8atcbEKFes3pz2Luq0iwoWI3uyiayqgDq+73dP94TMqO+Um0XsObr0hQOzviQdXe 3fiyPfHXV6jvADjn3R9sUrgdQdLERbfcsGEOfaP1oKUernAzP3FNNH4fbxvtDGy6 U8hVt7LHEVXA5Cx9Hls/loCIyCug3BHdrJwMSIwZeH1xzfK8OTbi+7p/NgMvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQ2ASWDynkPb0zeWXZwIH4JHYkREwHwYDVR0j BBgwFoAUGUxry+txVx1n6S8+vyTS1slLOFMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnJSb1dKd05RNTI2Y2lCcVRBaENwZ3puSFd3eEZSaXh4MUJKNXBuNDVr UmIvMC8xOTRDNkJDQkVCNzE1NzFENjdFOTJGM0VCRjI0RDJENkM5NEIzODUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5NEM2QkNCRUI3MTU3MUQ2 N0U5MkYzRUJGMjREMkQ2Qzk0QjM4NTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnJSb1dKd05RNTI2Y2lCcVRBaENwZ3puSFd3eEZSaXh4MUJKNXBuNDVrUmIvMC8x OTRDNkJDQkVCNzE1NzFENjdFOTJGM0VCRjI0RDJENkM5NEIzODUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoqrOOGdDvCww8pBNWnG5vfVrZ81sf/vqP/uWLW2bTQKateaCdMFW0ldHfPYO Cu44qLNpYBJXlyoA6GgC3wz6/p6XYygNwGwOHtUDQHlOP3oR9UmXoUyQDBCeL2Iq iFk8om6+W0RInfwjE7KC1ffKLc9b2QaOOPPc0o5of2/DB8yAimrQ+prs1V5HjgQx EuRlteyyeziMVeCunPITIRsDGOS4+tYX5JAme/fia6EFEWFIMdGIQlewC956Z23B Et69z/IQS037YQQVP6RPWtKHkRB/9n0jyxHAZzcogu8R4+qXEtDzYJakU0fvC4ZB jP5a0CJkJ/xMJj1OYWYIwG/4rg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:15:15 2025 by rpki-client