$ rpki-client -vvf rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.mft File: 7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.mft (raw, json) Hash identifier: LfyEsXmXoqewEZaMv0s2Icw4SHCqv9IfbqL1ZWMUQV0= Subject key identifier: 24:8D:CC:69:12:AB:EF:2B:6C:7C:CC:EC:6C:65:0E:F3:6C:17:29:8F Authority key identifier: 7E:7A:96:BA:6C:40:87:7E:5B:4E:BD:C5:0E:C2:32:C6:DF:C4:6D:E0 Certificate issuer: /CN=7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0 Certificate serial: D21DFD8331FFC5A88292F70794EEEB7336EB7A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer Subject info access: rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.mft Manifest number: 16 Signing time: Tue 04 Nov 2025 17:23:58 +0000 Manifest this update: Tue 04 Nov 2025 17:18:58 +0000 Manifest next update: Wed 05 Nov 2025 19:31:58 +0000 Files and hashes: 1: 323830343a373261303a393230303a3a2f34302d3430203d3e20323730383635.roa (hash: io5yRG2PhsCKHUMpxm6iOUhJkjmMdbdmYPZLs+Bdypg=) 2: 3137372e35332e32382e302f32342d3234203d3e20323730383635.roa (hash: u887YDCLyhkiyp8vrV8uFFm+ZgFLDnwa375hvUeWgVE=) 3: 3137372e35332e33312e302f32342d3234203d3e20323730383635.roa (hash: eJo6SVUCmheUudi+TeV5SDSeuCr+p20JGZvQ+GjIQG8=) 4: 323830343a373261303a663830303a3a2f33382d3338203d3e20323730383635.roa (hash: oYQ6evit7fb+UkhzUMALFdmqPy04iUSKhq32mOB94O4=) 5: 3137372e35332e32392e302f32342d3234203d3e20323730383635.roa (hash: 4mA4wNA/NCgJCuXhxYLMon92fvyLclrDexhF6KhDb10=) 6: 7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.crl (hash: sJrUe+K2Q4lLyqDD5jz0P0KC12//GX2k3RXDPiJpOQg=) 7: 323830343a373261303a3a2f33332d3333203d3e20323730383635.roa (hash: HiPb4nXpsUvY39Gli6zsm9elERYPxbFAH+8wknNBCcY=) 8: 323830343a373261303a343030303a3a2f34302d3430203d3e20323730383635.roa (hash: n8wleTNmGwDwNstpjfrJ8d+sXAHiXEIw7xdw82mHV2k=) 9: 3137372e35332e33302e302f32342d3234203d3e20323730383635.roa (hash: 4qA2oAsxGzkE3tuJakCkNBqsv5c/AJ5qeDW1upO1poE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.crl rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d2:1d:fd:83:31:ff:c5:a8:82:92:f7:07:94:ee:eb:73:36:eb:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0 Validity Not Before: Nov 4 17:18:58 2025 GMT Not After : Nov 5 19:31:58 2025 GMT Subject: CN=248DCC6912ABEF2B6C7CCCEC6C650EF36C17298F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:64:05:65:7a:79:dc:d7:b7:75:d8:d5:08:cf: 7d:36:1c:be:fd:f6:ce:20:b4:9b:0c:b2:9f:a5:96: f4:ab:c3:85:08:18:34:d2:60:66:d0:08:09:0a:2b: 11:a5:c8:31:c8:45:fc:92:ef:34:78:6b:5c:69:0c: 69:ec:4d:b3:b4:b9:dc:12:a2:44:ac:c2:f7:95:61: 17:d4:17:83:0d:1f:0c:7f:fc:a1:e3:dd:93:72:bc: 88:1a:13:a4:04:bb:52:2c:49:16:ee:d8:7f:9c:17: c2:00:7a:84:d0:44:5b:8c:bf:2b:a9:12:62:18:4a: 01:60:24:b5:a2:7c:90:15:4d:68:af:9c:b0:87:6a: 28:f4:81:95:a1:91:3e:ec:53:e0:6a:19:60:4a:de: 5c:48:b6:fe:d8:0d:4d:14:1e:8c:41:d4:12:56:05: f8:ae:22:b8:df:2b:ff:de:d7:85:67:f9:3a:51:b6: 19:2c:b4:4d:ed:96:74:e4:8e:71:ca:84:db:37:c2: fa:32:e7:ea:5b:d8:62:59:81:94:7f:23:43:76:27: 0b:68:41:b0:72:e3:38:11:8e:42:bf:98:ce:09:a7: ad:7f:23:81:9a:37:b1:1f:5d:77:bd:66:3e:6d:9f: 73:e4:52:65:58:c8:76:83:d3:e7:05:e3:f1:75:82: c7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8D:CC:69:12:AB:EF:2B:6C:7C:CC:EC:6C:65:0E:F3:6C:17:29:8F X509v3 Authority Key Identifier: keyid:7E:7A:96:BA:6C:40:87:7E:5B:4E:BD:C5:0E:C2:32:C6:DF:C4:6D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:54:b9:37:95:ce:67:4d:28:43:40:d1:e6:8d:e4:ff:50:69: e3:a3:b3:07:4d:c1:c3:ed:c8:45:a7:f0:d4:17:27:aa:6d:5b: f8:ef:a3:78:26:2a:98:50:2f:18:5e:75:a8:59:63:85:a8:d2: b7:24:b3:59:e0:a5:4f:a0:d9:98:92:f6:fb:17:88:22:81:f0: 2b:bc:75:d6:8f:2f:db:ec:f8:f8:6d:fc:d7:56:a2:2e:0c:74: 9e:d5:91:ff:c7:ac:64:2b:2b:75:c8:50:35:c3:4f:14:60:e8: 68:07:58:65:30:56:4d:5e:9a:16:32:08:bf:d3:62:25:3c:70: 3d:8f:97:16:df:ff:75:c1:e7:c3:f5:cb:90:7d:d7:70:b4:15: 13:e0:24:8f:fd:26:f2:69:33:82:b6:b6:43:ef:22:25:35:09: 59:ca:fd:f9:8a:3a:5d:3d:52:ec:7d:23:86:b7:b3:73:1f:64: 6e:ca:9a:33:d7:05:64:3d:d4:a5:38:4f:97:8d:83:b0:b9:ee: 37:44:fc:e8:60:8f:50:42:3f:55:27:1d:29:59:ef:77:46:86: 8a:03:2b:26:cd:26:fb:f1:0f:24:7a:44:de:67:fb:40:16:d3: b9:82:8f:88:cf:cf:af:23:d1:25:13:c9:30:8a:f3:c9:0b:42: a9:a6:b8:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUANId/YMx/8WogpL3B5Tu63M263owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U3QTk2QkE2QzQwODc3RTVCNEVCREM1MEVDMjMyQzZE RkM0NkRFMDAeFw0yNTExMDQxNzE4NThaFw0yNTExMDUxOTMxNThaMDMxMTAvBgNV BAMTKDI0OERDQzY5MTJBQkVGMkI2QzdDQ0NFQzZDNjUwRUYzNkMxNzI5OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZAVlennc17d12NUIz302HL79 9s4gtJsMsp+llvSrw4UIGDTSYGbQCAkKKxGlyDHIRfyS7zR4a1xpDGnsTbO0udwS okSswveVYRfUF4MNHwx//KHj3ZNyvIgaE6QEu1IsSRbu2H+cF8IAeoTQRFuMvyup EmIYSgFgJLWifJAVTWivnLCHaij0gZWhkT7sU+BqGWBK3lxItv7YDU0UHoxB1BJW BfiuIrjfK//e14Vn+TpRthkstE3tlnTkjnHKhNs3wvoy5+pb2GJZgZR/I0N2Jwto QbBy4zgRjkK/mM4Jp61/I4GaN7EfXXe9Zj5tn3PkUmVYyHaD0+cF4/F1gsc9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJI3MaRKr7ytsfMzsbGUO82wXKY8wHwYDVR0j BBgwFoAUfnqWumxAh35bTr3FDsIyxt/EbeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG5MQkQ5NHJRNk5KNWhZRFNRNGY5TVQ5cGtxYWRmdTlGQnNhd1NWVm1x TnMvMC83RTdBOTZCQTZDNDA4NzdFNUI0RUJEQzUwRUMyMzJDNkRGQzQ2REUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFN0E5NkJBNkM0MDg3N0U1 QjRFQkRDNTBFQzIzMkM2REZDNDZERTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG5MQkQ5NHJRNk5KNWhZRFNRNGY5TVQ5cGtxYWRmdTlGQnNhd1NWVm1xTnMvMC83 RTdBOTZCQTZDNDA4NzdFNUI0RUJEQzUwRUMyMzJDNkRGQzQ2REUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeVS5N5XOZ00oQ0DR5o3k/1Bp46OzB03Bw+3IRafw1Bcnqm1b+O+jeCYqmFAv GF51qFljhajStySzWeClT6DZmJL2+xeIIoHwK7x11o8v2+z4+G3811aiLgx0ntWR /8esZCsrdchQNcNPFGDoaAdYZTBWTV6aFjIIv9NiJTxwPY+XFt//dcHnw/XLkH3X cLQVE+Akj/0m8mkzgra2Q+8iJTUJWcr9+Yo6XT1S7H0jhrezcx9kbsqaM9cFZD3U pThPl42DsLnuN0T86GCPUEI/VScdKVnvd0aGigMrJs0m+/EPJHpE3mf7QBbTuYKP iM/PryPRJRPJMIrzyQtCqaa4dw== -----END CERTIFICATE-----Generated at Wed Nov 5 03:37:00 2025 by rpki-client