$ rpki-client -vvf rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft File: 43A7C7C2B310D67DE688F19B159433597525FE31.mft (raw, json) Hash identifier: /wx7fpX0OGQKk9VT3rwG68ICn+LKoklUuNiVHmK/EIM= Subject key identifier: AC:81:FD:4A:D5:D1:FF:23:ED:C6:66:A5:F7:53:CD:F9:1B:7B:2F:99 Authority key identifier: 43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31 Certificate issuer: /CN=43A7C7C2B310D67DE688F19B159433597525FE31 Certificate serial: 2B08E355F121CE351F6AA86A7331F34F95ED5C69 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer Subject info access: rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft Manifest number: 0340 Signing time: Wed 05 Nov 2025 11:00:00 +0000 Manifest this update: Wed 05 Nov 2025 10:55:00 +0000 Manifest next update: Thu 06 Nov 2025 11:00:00 +0000 Files and hashes: 1: 323830343a336233383a3a2f33322d3438203d3e20323636313336.roa (hash: BsAdEqunEhJCfkGUPGa8OoXqKBbybo/Jki+SLpM68lM=) 2: 43A7C7C2B310D67DE688F19B159433597525FE31.crl (hash: spNqLzqX5KqbJGUSSk3teyvH8uUL1aeviGRgmUWuR04=) 3: 34352e362e3133362e302f32322d3234203d3e20323636313336.roa (hash: xVTS9aY7JJWTF69eZmGnn2UtRow1ARVcIof6mdgGYvk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.crl rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:08:e3:55:f1:21:ce:35:1f:6a:a8:6a:73:31:f3:4f:95:ed:5c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A7C7C2B310D67DE688F19B159433597525FE31 Validity Not Before: Nov 5 10:55:00 2025 GMT Not After : Nov 12 11:00:00 2025 GMT Subject: CN=3082010A0282010100AE5902E4D5687223223A75DE43C127BA8DDEF117A529E7636D25D347713A5558D29ACDDF9D280875E2603C87682EF1F95CA6B5B396359A93A067F08459B6B10F151D3BB573934FBBB38BD5EE1859135F874687DDD1B5131A6F3915DBA4AFCE63670B20EBE49091317E7BA896F2847EE8B0B874713E66A4B4F05D9777929E8C83BDEB630D262635DB901382FDBDA05409C3AB47EA5CD3EF8BAAB5022C3D1F6BE949445A7820CC2CA3F8370A833FD0C798ADA8F558146273BE0FEE38C024C879AC4FCE9D7F72E28504C9967BAC47A3D227D002BE8374E904AC319629110C7EFE71E85296B32E208429373DB26E925C7DF5C18AA1FD6E69C913C590646036B9E43B0203010001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:02:e4:d5:68:72:23:22:3a:75:de:43:c1: 27:ba:8d:de:f1:17:a5:29:e7:63:6d:25:d3:47:71: 3a:55:58:d2:9a:cd:df:9d:28:08:75:e2:60:3c:87: 68:2e:f1:f9:5c:a6:b5:b3:96:35:9a:93:a0:67:f0: 84:59:b6:b1:0f:15:1d:3b:b5:73:93:4f:bb:b3:8b: d5:ee:18:59:13:5f:87:46:87:dd:d1:b5:13:1a:6f: 39:15:db:a4:af:ce:63:67:0b:20:eb:e4:90:91:31: 7e:7b:a8:96:f2:84:7e:e8:b0:b8:74:71:3e:66:a4: b4:f0:5d:97:77:92:9e:8c:83:bd:eb:63:0d:26:26: 35:db:90:13:82:fd:bd:a0:54:09:c3:ab:47:ea:5c: d3:ef:8b:aa:b5:02:2c:3d:1f:6b:e9:49:44:5a:78: 20:cc:2c:a3:f8:37:0a:83:3f:d0:c7:98:ad:a8:f5: 58:14:62:73:be:0f:ee:38:c0:24:c8:79:ac:4f:ce: 9d:7f:72:e2:85:04:c9:96:7b:ac:47:a3:d2:27:d0: 02:be:83:74:e9:04:ac:31:96:29:11:0c:7e:fe:71: e8:52:96:b3:2e:20:84:29:37:3d:b2:6e:92:5c:7d: f5:c1:8a:a1:fd:6e:69:c9:13:c5:90:64:60:36:b9: e4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:81:FD:4A:D5:D1:FF:23:ED:C6:66:A5:F7:53:CD:F9:1B:7B:2F:99 X509v3 Authority Key Identifier: keyid:43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f5:bb:63:00:ee:b2:15:24:7c:4b:bc:a7:b7:4f:bf:c3:76: ef:f0:83:4d:64:63:d7:8b:49:09:8c:22:90:df:6d:72:0b:ea: 73:36:73:d3:6c:c8:72:99:4b:e2:e6:63:7a:b1:00:87:e5:de: 96:8d:40:16:8e:3c:60:56:a0:63:46:f1:1d:7f:2b:d1:96:02: 8a:a8:a0:6a:71:f6:7a:95:b9:12:97:65:c3:cf:6b:0d:e9:dc: 2c:bc:ee:c6:f4:14:85:a9:ef:71:7a:2d:56:2c:37:ca:88:ab: 2e:f9:2c:a3:06:40:ee:3a:11:69:68:ad:64:f5:9d:d7:8a:6b: 44:e6:6d:6c:c8:c5:df:e9:ad:80:3f:8d:e2:1a:40:d6:b5:29: ee:eb:27:e9:71:cd:aa:9c:9c:92:0a:bb:8b:c9:ad:e8:11:44: a8:39:91:e4:33:19:db:b5:27:d5:e3:fa:0c:28:ad:f9:dc:6e: 84:2d:a4:c3:3d:68:9f:d0:f3:ac:96:26:77:e9:b1:a9:57:0f: e2:c7:48:b6:e7:78:21:7c:c8:30:dd:50:b3:4d:d5:11:26:5c: 57:c0:87:78:47:ca:49:41:ba:c7:eb:5b:3a:b1:52:26:a7:c4: 77:86:60:fd:f4:77:4a:ca:eb:c7:1d:82:54:16:29:4c:6e:0a: a7:84:a4:92 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUKwjjVfEhzjUfaqhqczHzT5XtXGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBN0M3QzJCMzEwRDY3REU2ODhGMTlCMTU5NDMzNTk3 NTI1RkUzMTAeFw0yNTExMDUxMDU1MDBaFw0yNTExMTIxMTAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUU1OTAyRTRENTY4NzIyMzIy M0E3NURFNDNDMTI3QkE4RERFRjExN0E1MjlFNzYzNkQyNUQzNDc3MTNBNTU1OEQy OUFDRERGOUQyODA4NzVFMjYwM0M4NzY4MkVGMUY5NUNBNkI1QjM5NjM1OUE5M0Ew NjdGMDg0NTlCNkIxMEYxNTFEM0JCNTczOTM0RkJCQjM4QkQ1RUUxODU5MTM1Rjg3 NDY4N0RERDFCNTEzMUE2RjM5MTVEQkE0QUZDRTYzNjcwQjIwRUJFNDkwOTEzMTdF N0JBODk2RjI4NDdFRThCMEI4NzQ3MTNFNjZBNEI0RjA1RDk3Nzc5MjlFOEM4M0JE RUI2MzBEMjYyNjM1REI5MDEzODJGREJEQTA1NDA5QzNBQjQ3RUE1Q0QzRUY4QkFB QjUwMjJDM0QxRjZCRTk0OTQ0NUE3ODIwQ0MyQ0EzRjgzNzBBODMzRkQwQzc5OEFE QThGNTU4MTQ2MjczQkUwRkVFMzhDMDI0Qzg3OUFDNEZDRTlEN0Y3MkUyODUwNEM5 OTY3QkFDNDdBM0QyMjdEMDAyQkU4Mzc0RTkwNEFDMzE5NjI5MTEwQzdFRkU3MUU4 NTI5NkIzMkUyMDg0MjkzNzNEQjI2RTkyNUM3REY1QzE4QUExRkQ2RTY5QzkxM0M1 OTA2NDYwMzZCOUU0M0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEArlkC5NVociMiOnXeQ8Enuo3e8RelKedjbSXTR3E6VVjSms3fnSgI deJgPIdoLvH5XKa1s5Y1mpOgZ/CEWbaxDxUdO7Vzk0+7s4vV7hhZE1+HRofd0bUT Gm85Fdukr85jZwsg6+SQkTF+e6iW8oR+6LC4dHE+ZqS08F2Xd5KejIO962MNJiY1 25ATgv29oFQJw6tH6lzT74uqtQIsPR9r6UlEWnggzCyj+DcKgz/Qx5itqPVYFGJz vg/uOMAkyHmsT86df3LihQTJlnusR6PSJ9ACvoN06QSsMZYpEQx+/nHoUpazLiCE KTc9sm6SXH31wYqh/W5pyRPFkGRgNrnkOwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FKyB/UrV0f8j7cZmpfdTzfkbey+ZMB8GA1UdIwQYMBaAFEOnx8KzENZ95ojxmxWU M1l1Jf4xMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzU2VnRHSG9aQnlaTHRT WG01eVRQRkQ5Q0VOeFB2UXlndVlrYkpLOVQzYmltLzEvNDNBN0M3QzJCMzEwRDY3 REU2ODhGMTlCMTU5NDMzNTk3NTI1RkUzMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS80M0E3QzdDMkIzMTBENjdERTY4OEYxOUIxNTk0MzM1OTc1MjVG RTMxLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzU2VnRHSG9aQnlaTHRTWG01eVRQ RkQ5Q0VOeFB2UXlndVlrYkpLOVQzYmltLzEvNDNBN0M3QzJCMzEwRDY3REU2ODhG MTlCMTU5NDMzNTk3NTI1RkUzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFX1u2MA7rIVJHxLvKe3T7/D du/wg01kY9eLSQmMIpDfbXIL6nM2c9NsyHKZS+LmY3qxAIfl3paNQBaOPGBWoGNG 8R1/K9GWAoqooGpx9nqVuRKXZcPPaw3p3Cy87sb0FIWp73F6LVYsN8qIqy75LKMG QO46EWlorWT1ndeKa0TmbWzIxd/prYA/jeIaQNa1Ke7rJ+lxzaqcnJIKu4vJregR RKg5keQzGdu1J9Xj+gworfncboQtpMM9aJ/Q86yWJnfpsalXD+LHSLbneCF8yDDd ULNN1REmXFfAh3hHyklBusfrWzqxUianxHeGYP30d0rK68cdglQWKUxuCqeEpJI= -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:55 2025 by rpki-client