$ rpki-client -vvf rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft File: 10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft (raw, json) Hash identifier: qFYA/oEzKAprtG/W77TZ65DTYGrMhU9aRh3+r6q6MP0= Subject key identifier: 8E:12:AF:55:D0:A8:BE:FD:9C:E6:A8:5B:8B:1B:DC:37:E8:E6:50:02 Authority key identifier: 10:CC:3E:D3:0E:D2:B9:E1:9A:7E:D0:8E:B0:6D:68:83:FE:4A:22:1F Certificate issuer: /CN=10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F Certificate serial: 0B3727EE1EF784646125A07DFC648B82C2D38266 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer Subject info access: rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft Manifest number: 0305 Signing time: Tue 04 Nov 2025 09:18:42 +0000 Manifest this update: Tue 04 Nov 2025 09:13:42 +0000 Manifest next update: Wed 05 Nov 2025 10:25:42 +0000 Files and hashes: 1: 10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.crl (hash: e7ggznsdHGqwkn/+N5aKWIKc0/ODDGDENXCJ1LwDHzs=) 2: 3137302e3234342e3231322e302f32322d3234203d3e20323636353038.roa (hash: Cf2cMmebdvqPZ/KmztmmSY2nBbCIFr1Er8I0Jm6TuIE=) 3: 323830343a333865343a3a2f33322d3438203d3e20323636353038.roa (hash: 7t8yhV0k/bA1AjqvPjiCZxRA/tJx1nCk2/dyeg5pwiU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.crl rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 10:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:37:27:ee:1e:f7:84:64:61:25:a0:7d:fc:64:8b:82:c2:d3:82:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F Validity Not Before: Nov 4 09:13:42 2025 GMT Not After : Nov 5 10:25:42 2025 GMT Subject: CN=8E12AF55D0A8BEFD9CE6A85B8B1BDC37E8E65002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:0e:7d:75:bf:dc:49:38:09:c1:0b:5e:d1: 3d:e9:69:5d:e6:c2:e1:df:a4:56:54:87:1a:f1:d7: 22:5c:1d:6b:76:3b:4e:a5:d7:d5:5f:a9:9d:f1:36: ec:58:8c:e0:98:a1:e0:2d:6f:15:22:40:56:4f:45: 43:b7:1e:7b:f3:1b:36:e3:55:3f:b2:c8:71:d7:d4: 45:9e:29:cf:7c:53:ed:69:1c:26:f5:58:3d:37:36: 91:12:66:97:23:e7:5b:25:82:88:3f:9b:58:1c:6a: c1:da:7b:2b:0a:af:97:a9:39:e8:5c:bc:83:ad:c9: 7f:b5:21:e2:37:b3:be:93:db:d1:1d:f5:6c:3f:b7: 52:1b:43:e8:24:5e:ab:ba:6b:31:2c:86:2b:38:71: 8a:ec:ff:96:ca:a9:77:dd:d8:d5:dc:db:37:1a:b5: 95:a8:82:13:a3:48:fc:42:84:ed:31:42:0c:14:12: 50:98:8e:53:ea:c6:cf:fa:08:67:e7:07:26:90:2e: c4:34:07:6d:f4:22:de:2a:14:bc:0d:29:b8:34:22: ca:52:3f:53:04:7e:f4:a0:c2:d1:06:63:fa:6c:b2: 05:7e:69:93:29:63:36:9c:08:20:94:b1:40:8b:9a: 53:fc:8f:d0:da:ba:ed:35:cd:3d:fe:f5:1d:c9:fc: 05:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:12:AF:55:D0:A8:BE:FD:9C:E6:A8:5B:8B:1B:DC:37:E8:E6:50:02 X509v3 Authority Key Identifier: keyid:10:CC:3E:D3:0E:D2:B9:E1:9A:7E:D0:8E:B0:6D:68:83:FE:4A:22:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:22:da:36:61:d6:06:30:e2:1f:69:b9:7e:99:16:e0:ed:f4: 19:78:86:c4:b2:19:c9:70:42:02:c6:b9:19:b6:6d:4c:17:b2: 57:fd:f5:fb:a9:73:57:21:52:8b:c9:73:6b:fd:d8:e0:fd:12: fe:7f:fe:85:82:75:ab:61:09:dd:ba:4a:c7:da:03:cd:5b:d9: 2e:39:e8:ed:c1:d9:fa:7b:d0:9f:95:a5:66:be:92:a5:3c:22: aa:43:1b:a6:27:db:d9:cd:86:f5:d9:b9:2c:77:3d:c0:cc:ae: 4d:91:6b:1c:d9:14:d6:bb:a2:4f:d2:27:e9:be:7d:1d:a4:03: 5c:68:4b:f9:df:24:c2:28:df:e7:e8:98:02:da:f5:2e:78:d5: b6:64:ea:96:27:03:71:91:b8:dc:cb:bc:d8:7b:da:5c:38:1f: 62:89:e5:41:30:d4:e6:ea:52:44:b0:e9:6e:ba:39:9e:3e:1d: b0:ef:9f:28:bf:b3:00:84:c3:b9:a6:70:08:62:a0:63:0c:f7: a4:93:c3:a5:b4:65:50:35:c7:76:70:b5:4d:77:c8:4e:b0:cb: 29:2f:d8:66:79:a4:e8:f3:96:e5:47:e6:54:fd:ca:09:e2:5a: c7:f9:ef:05:d3:d9:cf:92:64:dd:e9:db:08:fd:68:3c:72:88: 0f:52:c8:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCzcn7h73hGRhJaB9/GSLgsLTgmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQzNFRDMwRUQyQjlFMTlBN0VEMDhFQjA2RDY4ODNG RTRBMjIxRjAeFw0yNTExMDQwOTEzNDJaFw0yNTExMDUxMDI1NDJaMDMxMTAvBgNV BAMTKDhFMTJBRjU1RDBBOEJFRkQ5Q0U2QTg1QjhCMUJEQzM3RThFNjUwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKLQ59db/cSTgJwQte0T3paV3m wuHfpFZUhxrx1yJcHWt2O06l19VfqZ3xNuxYjOCYoeAtbxUiQFZPRUO3HnvzGzbj VT+yyHHX1EWeKc98U+1pHCb1WD03NpESZpcj51slgog/m1gcasHaeysKr5epOehc vIOtyX+1IeI3s76T29Ed9Ww/t1IbQ+gkXqu6azEshis4cYrs/5bKqXfd2NXc2zca tZWoghOjSPxChO0xQgwUElCYjlPqxs/6CGfnByaQLsQ0B230It4qFLwNKbg0IspS P1MEfvSgwtEGY/pssgV+aZMpYzacCCCUsUCLmlP8j9Dauu01zT3+9R3J/AXRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjhKvVdCovv2c5qhbixvcN+jmUAIwHwYDVR0j BBgwFoAUEMw+0w7SueGaftCOsG1og/5KIh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN05VVjRYQTZINnZpUWN2NGVMWDhydEd5bnVkSHcycnZkM1dmS0UyZmZF TGIvMS8xMENDM0VEMzBFRDJCOUUxOUE3RUQwOEVCMDZENjg4M0ZFNEEyMjFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwQ0MzRUQzMEVEMkI5RTE5 QTdFRDA4RUIwNkQ2ODgzRkU0QTIyMUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N05VVjRYQTZINnZpUWN2NGVMWDhydEd5bnVkSHcycnZkM1dmS0UyZmZFTGIvMS8x MENDM0VEMzBFRDJCOUUxOUE3RUQwOEVCMDZENjg4M0ZFNEEyMjFGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApCLaNmHWBjDiH2m5fpkW4O30GXiGxLIZyXBCAsa5GbZtTBeyV/31+6lzVyFS i8lza/3Y4P0S/n/+hYJ1q2EJ3bpKx9oDzVvZLjno7cHZ+nvQn5WlZr6SpTwiqkMb pifb2c2G9dm5LHc9wMyuTZFrHNkU1ruiT9In6b59HaQDXGhL+d8kwijf5+iYAtr1 LnjVtmTqlicDcZG43Mu82HvaXDgfYonlQTDU5upSRLDpbro5nj4dsO+fKL+zAITD uaZwCGKgYwz3pJPDpbRlUDXHdnC1TXfITrDLKS/YZnmk6POW5UfmVP3KCeJax/nv BdPZz5Jk3enbCP1oPHKID1LIbA== -----END CERTIFICATE-----Generated at Wed Nov 5 03:02:56 2025 by rpki-client