$ rpki-client -vvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft File: 85338CFAF888C0350AE9CB844AEBC476C4367656.mft (raw, json) Hash identifier: VO+apD/7Un6pBXInZi4827W9AvetbhSWIZ4L6BLUyII= Subject key identifier: 48:36:FC:8F:EB:49:CD:B9:19:31:86:29:A9:09:EA:F0:AB:3A:E9:10 Authority key identifier: 85:33:8C:FA:F8:88:C0:35:0A:E9:CB:84:4A:EB:C4:76:C4:36:76:56 Certificate issuer: /CN=85338CFAF888C0350AE9CB844AEBC476C4367656 Certificate serial: 4D2BA1C502DE85B3ED9027CD4C286678076D77 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer Subject info access: rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft Manifest number: 0274 Signing time: Wed 05 Nov 2025 03:25:35 +0000 Manifest this update: Wed 05 Nov 2025 03:20:35 +0000 Manifest next update: Thu 06 Nov 2025 04:02:35 +0000 Files and hashes: 1: 34352e3137382e3230342e302f32322d3234203d3e20323639303536.roa (hash: 4MTe5q9v1+RODyYpXAl+hTOa6qdVAoueHQymY2Pvcuo=) 2: 85338CFAF888C0350AE9CB844AEBC476C4367656.crl (hash: djw4aCjY/Lh+fyrRBlDEr9vyMEODSbtXgmdCqejq3Sw=) 3: 323830343a356563383a3a2f33322d3438203d3e20323639303536.roa (hash: iVzGwIcktrLJfi4MMxN4YYOLT8qF41PrYjqdCiMjJL8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.crl rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2b:a1:c5:02:de:85:b3:ed:90:27:cd:4c:28:66:78:07:6d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85338CFAF888C0350AE9CB844AEBC476C4367656 Validity Not Before: Nov 5 03:20:35 2025 GMT Not After : Nov 6 04:02:35 2025 GMT Subject: CN=4836FC8FEB49CDB919318629A909EAF0AB3AE910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:fd:36:e6:fc:88:1b:84:28:0c:ea:e8:60: 1a:56:38:dd:7d:a4:1c:d7:53:a5:57:84:b6:6b:ff: ef:18:31:ce:56:8b:f4:36:ca:ec:2f:30:6f:8d:ee: 92:fb:c5:eb:dc:c5:6d:f9:7a:2f:3c:06:71:88:67: f1:60:d7:fb:69:ce:2b:52:47:89:b8:2a:99:a4:fc: 2c:d8:b0:14:27:a6:5e:f9:aa:64:97:ec:7e:26:c0: 47:23:cb:74:4a:a4:37:43:ad:49:6d:87:e2:76:6f: aa:35:b0:d1:e3:cd:4b:75:ba:90:61:a7:8d:b6:d4: a2:d5:c6:4e:59:40:c2:30:fe:79:83:96:a0:fd:a8: 67:a1:a0:e4:38:0e:d4:bb:0a:2e:44:bd:43:79:7c: 0c:0c:4c:83:1a:73:80:11:9e:1f:05:71:c7:70:b8: 81:5d:52:1c:15:2b:33:21:d2:f8:e0:f6:16:85:15: 22:db:10:8e:7c:9f:e6:cc:d6:47:a9:51:50:8b:ac: f8:33:5a:bb:51:5a:c7:ff:88:2d:74:33:63:68:82: c8:d8:b0:a2:11:3a:02:53:37:6c:83:64:ef:81:e6: 79:8b:c8:f7:ef:18:31:92:7f:75:8c:7a:8c:0d:9e: 96:f4:24:d8:1a:d4:4d:98:bf:26:97:c9:44:82:70: 74:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:36:FC:8F:EB:49:CD:B9:19:31:86:29:A9:09:EA:F0:AB:3A:E9:10 X509v3 Authority Key Identifier: keyid:85:33:8C:FA:F8:88:C0:35:0A:E9:CB:84:4A:EB:C4:76:C4:36:76:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:70:e3:bd:ab:b6:0b:45:77:c9:23:70:94:5c:ef:02:82:21: de:05:a0:d7:77:31:26:a3:93:de:9c:bd:a9:c7:02:b2:3d:86: 5f:37:85:8b:96:d7:b8:89:59:2a:23:37:d1:a7:bb:4f:16:44: 50:8c:95:77:d0:78:3c:ad:29:bb:12:45:e5:f3:3f:63:db:3e: 80:b4:08:f6:96:4c:ad:9a:09:ab:81:34:36:59:45:12:f7:16: 8a:20:c7:de:80:74:ed:8a:5d:5c:bb:ed:13:8a:b0:a5:22:12: 3f:16:89:7c:4f:2b:3f:fd:ac:ab:0b:f2:4f:6b:de:ca:64:a5: 36:b4:8b:20:39:49:28:5d:5f:fc:0e:59:aa:1b:64:c1:1a:01: 68:d2:4e:9d:da:4c:bf:e6:0c:c6:ae:11:01:a8:4e:f6:44:68: 0f:00:38:6e:51:f9:0f:2d:c8:a6:7b:1e:bf:7f:0b:87:7d:79: bf:07:02:64:14:82:12:b7:e2:18:6a:31:25:cb:f7:69:58:72: 8c:df:65:96:b2:91:2d:22:43:bb:8b:24:29:61:0d:cb:2e:bf: d4:5d:a8:40:8e:21:6c:d1:ba:c5:ba:c0:f2:c5:51:40:c1:72: de:fe:a4:61:ee:6b:16:b0:5d:a3:ef:20:f5:89:6a:26:ef:c3: 13:e6:f7:84 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgITTSuhxQLehbPtkCfNTChmeAdtdzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg4NTMzOENGQUY4ODhDMDM1MEFFOUNCODQ0QUVCQzQ3NkM0 MzY3NjU2MB4XDTI1MTEwNTAzMjAzNVoXDTI1MTEwNjA0MDIzNVowMzExMC8GA1UE AxMoNDgzNkZDOEZFQjQ5Q0RCOTE5MzE4NjI5QTkwOUVBRjBBQjNBRTkxMDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMiX/Tbm/IgbhCgM6uhgGlY43X2k HNdTpVeEtmv/7xgxzlaL9DbK7C8wb43ukvvF69zFbfl6LzwGcYhn8WDX+2nOK1JH ibgqmaT8LNiwFCemXvmqZJfsfibARyPLdEqkN0OtSW2H4nZvqjWw0ePNS3W6kGGn jbbUotXGTllAwjD+eYOWoP2oZ6Gg5DgO1LsKLkS9Q3l8DAxMgxpzgBGeHwVxx3C4 gV1SHBUrMyHS+OD2FoUVItsQjnyf5szWR6lRUIus+DNau1Fax/+ILXQzY2iCyNiw ohE6AlM3bINk74HmeYvI9+8YMZJ/dYx6jA2elvQk2BrUTZi/JpfJRIJwdH0CAwEA AaOCAlkwggJVMB0GA1UdDgQWBBRINvyP60nNuRkxhimpCerwqzrpEDAfBgNVHSME GDAWgBSFM4z6+IjANQrpy4RK68R2xDZ2VjAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby81VkJaOFlWcDVlbVZaQjJxRWhNc1ZaQko4ampoaVM4TkJxQnZ1a2ZlOExD YS8wLzg1MzM4Q0ZBRjg4OEMwMzUwQUU5Q0I4NDRBRUJDNDc2QzQzNjc2NTYuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvODUzMzhDRkFGODg4QzAzNTBB RTlDQjg0NEFFQkM0NzZDNDM2NzY1Ni5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81 VkJaOFlWcDVlbVZaQjJxRWhNc1ZaQko4ampoaVM4TkJxQnZ1a2ZlOExDYS8wLzg1 MzM4Q0ZBRjg4OEMwMzUwQUU5Q0I4NDRBRUJDNDc2QzQzNjc2NTYubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA3cOO9q7YLRXfJI3CUXO8CgiHeBaDXdzEmo5PenL2pxwKyPYZfN4WLlte4iVkq IzfRp7tPFkRQjJV30Hg8rSm7EkXl8z9j2z6AtAj2lkytmgmrgTQ2WUUS9xaKIMfe gHTtil1cu+0TirClIhI/Fol8Tys//ayrC/JPa97KZKU2tIsgOUkoXV/8DlmqG2TB GgFo0k6d2ky/5gzGrhEBqE72RGgPADhuUfkPLcimex6/fwuHfXm/BwJkFIISt+IY ajEly/dpWHKM32WWspEtIkO7iyQpYQ3LLr/UXahAjiFs0brFusDyxVFAwXLe/qRh 7msWsF2j7yD1iWom78MT5veE -----END CERTIFICATE-----Generated at Wed Nov 5 11:48:29 2025 by rpki-client