$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft File: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft (raw, json) Hash identifier: RzqfrTFWauiR5qV5oVayGY7lV0E1/aUEDM0JRlqqHtQ= Subject key identifier: 64:1A:DB:97:C7:70:37:D2:1E:4C:BE:C8:4B:EB:4C:D7:22:F5:74:48 Authority key identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 Certificate issuer: /CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Certificate serial: 520BB7BD42C33D35C2381D194ACFA0E58D21B280 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft Manifest number: 0309 Signing time: Wed 05 Nov 2025 10:18:21 +0000 Manifest this update: Wed 05 Nov 2025 10:13:21 +0000 Manifest next update: Thu 06 Nov 2025 10:21:21 +0000 Files and hashes: 1: 323830313a62363a3a2f33322d3438203d3e20323633303833.roa (hash: /sq5AM8I6YaMflMxl5q4xXK1dCuBrTD/NmShXyjbG5M=) 2: 3137392e3130362e3139322e302f31382d3234203d3e20323633303833.roa (hash: fFcuOyny+lMAM8e0QThYzGDXjn34h9O3teYEKFUfcPs=) 3: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl (hash: ud47AwF+kIFg+OB0qAVRsHCl/MfOISDPzf9eEBf0cY4=) 4: 3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa (hash: rojlOjdeX3UrPuGCG6PrXeAls8xreKNh9ggg9OI9Em4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 10:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:0b:b7:bd:42:c3:3d:35:c2:38:1d:19:4a:cf:a0:e5:8d:21:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Validity Not Before: Nov 5 10:13:21 2025 GMT Not After : Nov 6 10:21:21 2025 GMT Subject: CN=641ADB97C77037D21E4CBEC84BEB4CD722F57448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4f:98:dc:17:af:e5:38:10:71:4c:d4:e4:b6: d6:a5:10:87:8e:82:66:d3:9b:f4:43:87:43:45:46: 93:9f:2d:26:13:93:d1:9d:72:55:13:38:19:64:44: 2a:b1:8a:06:d6:0f:b7:38:8a:f9:aa:61:c8:4b:46: e9:82:f0:f8:f3:cd:fa:ae:b0:bc:83:b3:e3:e3:b4: 37:b3:86:32:f1:c4:3c:c0:e7:39:29:1d:00:70:83: a8:aa:51:f3:e7:1a:ac:18:ce:d4:8d:09:b4:0a:82: e6:8e:9b:ce:96:4a:93:4f:3b:06:42:87:6b:6c:f8: 8f:f5:84:f7:bc:df:78:da:21:8e:53:69:a9:60:ec: 23:b3:1b:ef:c7:9e:d2:7f:e1:9d:f6:8e:51:b0:2b: b0:93:56:62:08:c5:64:be:e2:94:2c:c0:64:f2:8e: ae:14:0d:a2:9d:b8:e9:6d:17:de:3e:a2:6e:b7:59: 44:65:bc:2e:e7:c7:c6:40:aa:19:38:89:26:24:1f: 4b:35:01:b6:d9:1e:af:40:bd:9e:d9:8c:10:36:a7: 1b:0a:ba:8e:a4:d6:ac:34:85:a8:b9:2a:f7:7c:9a: 87:06:8b:df:ca:a0:f1:49:1f:1b:13:ea:f5:1d:b0: 66:40:43:ca:7f:2e:9d:78:53:0f:6d:a0:37:fe:1b: 2e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:1A:DB:97:C7:70:37:D2:1E:4C:BE:C8:4B:EB:4C:D7:22:F5:74:48 X509v3 Authority Key Identifier: keyid:F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:40:36:98:26:6d:45:2c:5c:af:59:d7:fe:af:2a:13:e2:72: 8b:6d:e0:55:81:6b:97:88:d0:41:4f:b8:31:24:69:8a:4d:7e: 0e:b0:f4:de:1c:aa:39:12:fe:0e:5a:ab:96:73:6f:89:73:cc: 90:b0:be:48:df:49:4c:3a:5d:4b:9a:76:cf:5d:91:26:38:26: e2:af:4c:5a:79:52:80:d8:62:da:2f:10:2c:7a:8d:dd:2a:4e: 39:6a:2b:a4:08:9b:01:4c:cb:71:c0:a0:13:ce:2a:b5:76:1c: 8b:39:4c:5f:35:1f:9d:d5:25:d4:91:3d:86:65:30:25:49:83: 3b:bb:77:c4:84:75:59:23:5e:f3:a5:43:04:c1:e0:69:8d:dc: 56:63:c0:28:e3:9f:f1:ec:63:22:b4:0c:66:f0:9a:43:28:dd: c4:4e:23:08:d1:4f:f7:e1:ca:23:cc:f5:e7:44:f0:3d:a4:24: 38:ed:f2:73:8a:38:29:3e:ad:66:84:cb:63:38:a1:12:cd:f1: 74:ad:1e:2b:ff:5a:73:b1:97:2b:3a:4c:9a:d7:5c:4f:3d:c7: e8:4a:29:07:ae:b3:69:31:79:9d:b3:11:c8:55:c6:b8:c5:ab: f6:a7:ca:2f:00:c3:77:c6:f2:cf:7a:9b:b5:f3:b2:74:0f:68: 97:1d:9f:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUgu3vULDPTXCOB0ZSs+g5Y0hsoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBOThGNzc5RDNCRUY2NTk1OTZCNjRCMzJCMjhFQjZB RkU4RUFCNTAeFw0yNTExMDUxMDEzMjFaFw0yNTExMDYxMDIxMjFaMDMxMTAvBgNV BAMTKDY0MUFEQjk3Qzc3MDM3RDIxRTRDQkVDODRCRUI0Q0Q3MjJGNTc0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtT5jcF6/lOBBxTNTkttalEIeO gmbTm/RDh0NFRpOfLSYTk9GdclUTOBlkRCqxigbWD7c4ivmqYchLRumC8Pjzzfqu sLyDs+PjtDezhjLxxDzA5zkpHQBwg6iqUfPnGqwYztSNCbQKguaOm86WSpNPOwZC h2ts+I/1hPe833jaIY5Taalg7COzG+/HntJ/4Z32jlGwK7CTVmIIxWS+4pQswGTy jq4UDaKduOltF94+om63WURlvC7nx8ZAqhk4iSYkH0s1AbbZHq9AvZ7ZjBA2pxsK uo6k1qw0hai5Kvd8mocGi9/KoPFJHxsT6vUdsGZAQ8p/Lp14Uw9toDf+Gy7hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZBrbl8dwN9IeTL7IS+tM1yL1dEgwHwYDVR0j BBgwFoAU8KmPd50772WVlrZLMrKOtq/o6rUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRt OWIvMS9GMEE5OEY3NzlEM0JFRjY1OTU5NkI2NEIzMkIyOEVCNkFGRThFQUI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwQTk4Rjc3OUQzQkVGNjU5 NTk2QjY0QjMyQjI4RUI2QUZFOEVBQjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRtOWIvMS9G MEE5OEY3NzlEM0JFRjY1OTU5NkI2NEIzMkIyOEVCNkFGRThFQUI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnUA2mCZtRSxcr1nX/q8qE+Jyi23gVYFrl4jQQU+4MSRpik1+DrD03hyqORL+ DlqrlnNviXPMkLC+SN9JTDpdS5p2z12RJjgm4q9MWnlSgNhi2i8QLHqN3SpOOWor pAibAUzLccCgE84qtXYcizlMXzUfndUl1JE9hmUwJUmDO7t3xIR1WSNe86VDBMHg aY3cVmPAKOOf8exjIrQMZvCaQyjdxE4jCNFP9+HKI8z150TwPaQkOO3yc4o4KT6t ZoTLYzihEs3xdK0eK/9ac7GXKzpMmtdcTz3H6EopB66zaTF5nbMRyFXGuMWr9qfK LwDDd8byz3qbtfOydA9olx2fjQ== -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:33 2025 by rpki-client