$ rpki-client -vvf rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.mft File: D76580431FA15F4C3D598181DBE97B6443141E8C.mft (raw, json) Hash identifier: yQYGkvGQXrBRB2rqkE7GvaVrgIDvWRDaSuSHTs+ecr0= Subject key identifier: 75:9F:39:21:5B:39:F6:F3:B4:8E:F3:5E:8F:CE:DC:3C:0D:3C:AC:77 Authority key identifier: D7:65:80:43:1F:A1:5F:4C:3D:59:81:81:DB:E9:7B:64:43:14:1E:8C Certificate issuer: /CN=D76580431FA15F4C3D598181DBE97B6443141E8C Certificate serial: 38E228B34703C1C5D71E34EB4B24A8F725E3488A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76580431FA15F4C3D598181DBE97B6443141E8C.cer Subject info access: rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.mft Manifest number: 01CA Signing time: Tue 04 Nov 2025 21:58:56 +0000 Manifest this update: Tue 04 Nov 2025 21:53:56 +0000 Manifest next update: Wed 05 Nov 2025 23:13:56 +0000 Files and hashes: 1: D76580431FA15F4C3D598181DBE97B6443141E8C.crl (hash: fG8Az+OPk1dYlJ6lndsxlnq0ByAmPkXsuwljK4d+sUE=) 2: 323830343a343264383a3a2f33322d313238203d3e20323637353331.roa (hash: CDL7I4gAvVydbTzp/KRZRtQEnq0T01uD/KthejHARk8=) 3: 3230312e3138322e3139362e302f32322d3332203d3e20323637353331.roa (hash: aVpe9x63jz8Z/jD2LmUKqr4D6dFpdqMMv6wlyvjzNOA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.crl rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76580431FA15F4C3D598181DBE97B6443141E8C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 23:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e2:28:b3:47:03:c1:c5:d7:1e:34:eb:4b:24:a8:f7:25:e3:48:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76580431FA15F4C3D598181DBE97B6443141E8C Validity Not Before: Nov 4 21:53:56 2025 GMT Not After : Nov 5 23:13:56 2025 GMT Subject: CN=759F39215B39F6F3B48EF35E8FCEDC3C0D3CAC77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:33:20:05:97:4e:f7:40:88:b6:2a:1b:fc: 10:94:79:27:7b:36:9b:0f:bf:c8:c7:ac:32:36:8e: 65:71:0f:26:19:2c:e8:30:19:4b:ce:f6:5b:8c:e5: 48:74:e0:40:62:27:b1:18:68:60:77:4c:3f:46:19: b6:81:fd:b1:1b:a1:7a:c9:30:74:02:8e:8b:bd:cf: 3a:09:41:74:56:4c:46:ba:e7:a7:72:64:2a:7b:ff: b9:e5:b2:cd:23:d0:f9:a1:d1:78:ac:96:3f:6f:bd: 56:6d:78:4c:c7:2e:44:79:52:91:ed:e8:fc:88:72: df:fc:1a:8e:e5:17:2a:5d:77:9a:8b:9e:e5:17:10: 34:ef:35:48:51:87:d9:91:62:05:33:0d:70:59:07: 6a:eb:07:28:3b:8f:cb:5a:c4:b6:49:a0:da:46:44: 2c:65:f0:35:d2:47:33:14:39:be:2b:df:65:be:fd: 52:68:7b:1f:5c:f4:5e:d1:0f:74:29:5d:38:55:8e: 43:81:25:28:a4:07:ca:49:5c:58:cc:b8:d5:0f:c8: 4f:f5:5d:43:98:9b:de:15:97:8b:06:4d:72:b5:9a: 47:06:83:5d:99:2e:03:72:64:bb:90:1f:03:38:bb: 32:7f:7a:2a:94:f0:3d:de:54:bd:f0:ae:1e:7e:17: 9e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9F:39:21:5B:39:F6:F3:B4:8E:F3:5E:8F:CE:DC:3C:0D:3C:AC:77 X509v3 Authority Key Identifier: keyid:D7:65:80:43:1F:A1:5F:4C:3D:59:81:81:DB:E9:7B:64:43:14:1E:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76580431FA15F4C3D598181DBE97B6443141E8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:8f:5d:de:f0:85:56:3a:0e:92:1a:86:ec:f9:55:53:76:f3: e8:f5:d6:56:10:be:99:98:ff:b9:e8:c7:38:13:da:3a:d0:38: d4:df:d6:cd:fc:fa:bf:e3:1a:bc:45:c3:b0:68:ac:c4:19:20: 2f:c5:0d:2d:5f:fb:c5:0d:00:ad:c7:6f:aa:f2:79:16:e1:d3: 17:45:1c:0e:64:3d:fe:3d:d0:6c:d4:6d:ee:57:a8:6e:1e:55: 56:dc:6f:15:b4:16:5f:bf:12:de:f5:d4:33:3a:82:79:b6:06: ea:6a:74:49:3e:17:ce:e5:7a:30:6c:6e:19:1f:8b:95:67:32: c3:7a:45:ad:c9:93:1f:5b:ae:7e:ab:1e:da:43:14:0c:b3:7c: c3:5f:eb:ba:4e:ab:93:8e:e8:d2:d2:c0:71:49:8a:b7:3c:8b: a4:c5:3a:80:70:62:50:51:6e:b4:ac:cf:d6:e1:36:34:6f:44: b2:51:17:7b:39:7f:28:36:ee:86:50:32:6e:f3:cc:ba:13:c4: 1a:39:00:28:9a:de:96:7a:07:3e:ae:c2:81:6b:69:37:b1:2d: c1:a0:a7:c0:ea:ff:5e:a4:32:25:12:5c:a5:9a:29:2d:cb:f6: 22:64:ca:3c:3b:7f:a2:b8:0e:77:af:54:8d:93:05:8f:43:4e: 99:93:42:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOOIos0cDwcXXHjTrSySo9yXjSIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2NTgwNDMxRkExNUY0QzNENTk4MTgxREJFOTdCNjQ0 MzE0MUU4QzAeFw0yNTExMDQyMTUzNTZaFw0yNTExMDUyMzEzNTZaMDMxMTAvBgNV BAMTKDc1OUYzOTIxNUIzOUY2RjNCNDhFRjM1RThGQ0VEQzNDMEQzQ0FDNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsuDMgBZdO90CItiob/BCUeSd7 NpsPv8jHrDI2jmVxDyYZLOgwGUvO9luM5Uh04EBiJ7EYaGB3TD9GGbaB/bEboXrJ MHQCjou9zzoJQXRWTEa656dyZCp7/7nlss0j0Pmh0Xislj9vvVZteEzHLkR5UpHt 6PyIct/8Go7lFypdd5qLnuUXEDTvNUhRh9mRYgUzDXBZB2rrByg7j8taxLZJoNpG RCxl8DXSRzMUOb4r32W+/VJoex9c9F7RD3QpXThVjkOBJSikB8pJXFjMuNUPyE/1 XUOYm94Vl4sGTXK1mkcGg12ZLgNyZLuQHwM4uzJ/eiqU8D3eVL3wrh5+F54RAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdZ85IVs59vO0jvNej87cPA08rHcwHwYDVR0j BBgwFoAU12WAQx+hX0w9WYGB2+l7ZEMUHowwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnNTRkFnenNVSzlvNEVDQkxqYXdnVzVmdGJWRDZuTEY0WWhhejQ5TW8y QXAvMC9ENzY1ODA0MzFGQTE1RjRDM0Q1OTgxODFEQkU5N0I2NDQzMTQxRThDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3NjU4MDQzMUZBMTVGNEMz RDU5ODE4MURCRTk3QjY0NDMxNDFFOEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnNTRkFnenNVSzlvNEVDQkxqYXdnVzVmdGJWRDZuTEY0WWhhejQ5TW8yQXAvMC9E NzY1ODA0MzFGQTE1RjRDM0Q1OTgxODFEQkU5N0I2NDQzMTQxRThDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk49d3vCFVjoOkhqG7PlVU3bz6PXWVhC+mZj/uejHOBPaOtA41N/Wzfz6v+Ma vEXDsGisxBkgL8UNLV/7xQ0ArcdvqvJ5FuHTF0UcDmQ9/j3QbNRt7leobh5VVtxv FbQWX78S3vXUMzqCebYG6mp0ST4XzuV6MGxuGR+LlWcyw3pFrcmTH1uufqse2kMU DLN8w1/ruk6rk47o0tLAcUmKtzyLpMU6gHBiUFFutKzP1uE2NG9EslEXezl/KDbu hlAybvPMuhPEGjkAKJrelnoHPq7CgWtpN7EtwaCnwOr/XqQyJRJcpZopLcv2ImTK PDt/orgOd69UjZMFj0NOmZNCgw== -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:55 2025 by rpki-client