$ rpki-client -vvf rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft File: D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft (raw, json) Hash identifier: krqssiaLS0Dw0geo8f9L8WiiE/Mf5HtJrGvEiuoQwbE= Subject key identifier: 3E:D8:FC:E3:1A:B7:D4:3B:98:72:B0:DD:06:7B:60:02:B9:E7:49:CD Authority key identifier: D4:5D:43:F1:B6:0A:DF:D2:FE:33:99:6A:90:BB:B6:2E:F5:5A:1D:02 Certificate issuer: /CN=D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02 Certificate serial: 31AAFB47091DD43B068EFB8525795BCBA41918EB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer Subject info access: rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft Manifest number: 35 Signing time: Wed 05 Nov 2025 00:33:59 +0000 Manifest this update: Wed 05 Nov 2025 00:28:59 +0000 Manifest next update: Thu 06 Nov 2025 03:54:59 +0000 Files and hashes: 1: 3139322e3134312e37362e302f32322d3233203d3e20323637343731.roa (hash: BAIjoYlkoz30iWzjTTZ7rECmmuGLwYnw0gEYlRfBtXA=) 2: 323830343a343230303a3a2f33322d3333203d3e20323637343731.roa (hash: ENOTPp+Zx/+E9r3MsBtUJ8AK0ZmsIRTEgOgOR3Mab9k=) 3: D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.crl (hash: pnuBgtp/uzclA2CMyZ6uv3JceedKaahXarqhocUzqiE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.crl rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:aa:fb:47:09:1d:d4:3b:06:8e:fb:85:25:79:5b:cb:a4:19:18:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02 Validity Not Before: Nov 5 00:28:59 2025 GMT Not After : Nov 6 03:54:59 2025 GMT Subject: CN=3ED8FCE31AB7D43B9872B0DD067B6002B9E749CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:98:ca:36:93:67:fa:9a:bb:b9:3f:a5:0b:f4: ce:83:47:90:08:a5:98:f1:77:26:57:f0:d8:57:e0: a8:78:f3:50:3c:ba:b3:66:35:fe:ad:fd:26:0d:e9: 5c:2c:b6:5e:f2:40:ec:b9:5a:68:31:c4:34:b2:89: f2:cf:45:f9:55:8f:d4:6e:62:00:6a:e0:51:c3:15: 75:39:60:d2:2a:3e:6a:cf:59:07:0c:43:d8:79:bb: 56:f0:f0:8a:1e:00:df:5b:b9:ec:a7:17:b7:99:30: 7e:3f:da:47:3c:06:20:da:96:7b:d1:27:8a:dd:66: 0e:69:16:37:7e:b4:d0:88:41:ae:0e:aa:c6:20:f5: 6b:dc:69:74:b2:27:23:61:25:c9:f9:87:db:ac:47: fa:db:6d:d9:3f:14:db:f5:2e:01:ee:ba:b7:25:ce: 7b:da:16:07:a6:ba:2b:ae:a4:7c:a6:29:42:da:66: 0b:fd:f6:50:93:0b:9b:e2:7e:8d:09:eb:1e:41:f2: 83:3b:5c:69:39:89:ce:a2:b6:58:ae:83:dc:d2:fb: de:b7:cf:32:03:e6:72:40:d5:ef:60:04:02:0c:99: 22:2c:eb:1e:ab:95:ee:3a:e5:9a:cd:dc:c7:48:11: 17:d7:f9:1c:a5:92:d9:4f:24:f1:8e:2d:e4:14:ca: ce:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D8:FC:E3:1A:B7:D4:3B:98:72:B0:DD:06:7B:60:02:B9:E7:49:CD X509v3 Authority Key Identifier: keyid:D4:5D:43:F1:B6:0A:DF:D2:FE:33:99:6A:90:BB:B6:2E:F5:5A:1D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:de:87:7e:af:bd:e5:ca:bc:16:ae:7f:38:9c:d1:f0:ac:aa: 8d:01:ad:1a:2e:83:c9:a4:a2:78:69:96:f5:f2:00:db:32:8e: 98:24:86:a2:ae:05:c8:c3:7e:aa:14:34:e3:3d:4e:f0:6a:59: 58:54:a6:4f:f4:49:b4:3b:c1:d6:1d:90:31:8b:2e:95:d2:6e: 43:9d:a1:d9:ae:69:6b:4e:a8:98:53:b3:4d:c6:55:b5:56:0f: 34:a2:e8:4f:2b:88:6d:f9:72:6c:6e:0b:61:4e:5e:64:76:5e: 67:5a:96:28:7d:49:41:c0:13:b0:a1:46:e6:2c:0b:26:e6:22: e8:60:2d:26:ed:82:6d:3a:2b:dd:9e:c9:62:e9:37:13:a9:99: 2f:4a:f6:e0:7e:d6:32:cc:91:55:23:00:c1:16:9f:e7:6b:2b: bb:c1:e0:32:5f:81:1d:23:06:a9:44:d3:f4:8a:6b:9d:64:bb: ac:52:77:db:61:42:dc:30:a2:71:c8:8e:67:79:af:1d:26:79: 3e:21:c2:59:65:c4:e6:7f:06:9f:22:46:e4:ca:8f:99:5e:43: 1f:23:35:c8:5a:45:9a:d1:2e:7b:39:2f:63:f6:73:29:7c:e2: 12:6a:63:bc:cb:76:21:f8:83:33:96:fd:1f:5a:a2:13:74:39: 51:46:a9:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMar7Rwkd1DsGjvuFJXlby6QZGOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1RDQzRjFCNjBBREZEMkZFMzM5OTZBOTBCQkI2MkVG NTVBMUQwMjAeFw0yNTExMDUwMDI4NTlaFw0yNTExMDYwMzU0NTlaMDMxMTAvBgNV BAMTKDNFRDhGQ0UzMUFCN0Q0M0I5ODcyQjBERDA2N0I2MDAyQjlFNzQ5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfmMo2k2f6mru5P6UL9M6DR5AI pZjxdyZX8NhX4Kh481A8urNmNf6t/SYN6Vwstl7yQOy5WmgxxDSyifLPRflVj9Ru YgBq4FHDFXU5YNIqPmrPWQcMQ9h5u1bw8IoeAN9bueynF7eZMH4/2kc8BiDalnvR J4rdZg5pFjd+tNCIQa4OqsYg9WvcaXSyJyNhJcn5h9usR/rbbdk/FNv1LgHuurcl znvaFgemuiuupHymKULaZgv99lCTC5vifo0J6x5B8oM7XGk5ic6itliug9zS+963 zzID5nJA1e9gBAIMmSIs6x6rle465ZrN3MdIERfX+RylktlPJPGOLeQUys7zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPtj84xq31DuYcrDdBntgArnnSc0wHwYDVR0j BBgwFoAU1F1D8bYK39L+M5lqkLu2LvVaHQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1lTYmRnMmRmVTl6S3FmbnN4U3BpYzhuRHB5RmJBN3R6N2VVRDhmUzV4 RHAvMC9ENDVENDNGMUI2MEFERkQyRkUzMzk5NkE5MEJCQjYyRUY1NUExRDAyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NUQ0M0YxQjYwQURGRDJG RTMzOTk2QTkwQkJCNjJFRjU1QTFEMDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1lTYmRnMmRmVTl6S3FmbnN4U3BpYzhuRHB5RmJBN3R6N2VVRDhmUzV4RHAvMC9E NDVENDNGMUI2MEFERkQyRkUzMzk5NkE5MEJCQjYyRUY1NUExRDAyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATd6Hfq+95cq8Fq5/OJzR8KyqjQGtGi6DyaSieGmW9fIA2zKOmCSGoq4FyMN+ qhQ04z1O8GpZWFSmT/RJtDvB1h2QMYsuldJuQ52h2a5pa06omFOzTcZVtVYPNKLo TyuIbflybG4LYU5eZHZeZ1qWKH1JQcATsKFG5iwLJuYi6GAtJu2CbTor3Z7JYuk3 E6mZL0r24H7WMsyRVSMAwRaf52sru8HgMl+BHSMGqUTT9IprnWS7rFJ322FC3DCi cciOZ3mvHSZ5PiHCWWXE5n8GnyJG5MqPmV5DHyM1yFpFmtEuezkvY/ZzKXziEmpj vMt2IfiDM5b9H1qiE3Q5UUapkw== -----END CERTIFICATE-----Generated at Wed Nov 5 03:38:13 2025 by rpki-client