$ rpki-client -vvf rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.mft File: 0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.mft (raw, json) Hash identifier: ZNB1C7gSyyIdOutzMWlLlaxj52AGXkyB2MHu//u5FjQ= Subject key identifier: 2C:DA:BA:16:E3:5F:72:F9:CA:1C:6D:DC:7D:27:B5:DB:A8:C1:64:C5 Authority key identifier: 0A:C3:24:E9:5D:DE:81:07:D6:C9:FC:F9:C7:93:1D:83:68:43:F4:A4 Certificate issuer: /CN=0AC324E95DDE8107D6C9FCF9C7931D836843F4A4 Certificate serial: 279B88F6D63A222C4FAE7282361CB88F2EF0D85B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer Subject info access: rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.mft Manifest number: 01D1 Signing time: Tue 04 Nov 2025 10:03:07 +0000 Manifest this update: Tue 04 Nov 2025 09:58:07 +0000 Manifest next update: Wed 05 Nov 2025 12:46:07 +0000 Files and hashes: 1: 34352e3136342e33382e302f32332d3233203d3e20323638363232.roa (hash: p2taKACznWmLR3WUujCbaaYoW+1XeelCG1lNNKbw0H0=) 2: 34352e3136342e33372e302f32342d3234203d3e20323638363232.roa (hash: tIIMprabgCvlRqzjKUIO6kIl7215pagl4pvXJt/TkkU=) 3: 34352e3136342e33362e302f32342d3234203d3e20323638363232.roa (hash: FmH3lnXSU46MIGKE9XFQ0SF5sJ/2XFpILCvxeSfncsU=) 4: 34352e3136342e33382e302f32342d3234203d3e20323638363232.roa (hash: e4DlJWP0eNMvDweKMrv/Xp6k9fK24k6O4gpQFdpr4bI=) 5: 323830343a353430303a3a2f33322d3438203d3e20323638363232.roa (hash: XOW3NF7XcCOGipdBFCdliNu09qRKllGGOyc75jw5ZJw=) 6: 34352e3136342e33362e302f32322d3232203d3e20323638363232.roa (hash: paCCzSAy4/JYr+Ew348M5XJKznH0BW+EtejoBVfxnJc=) 7: 34352e3136342e33392e302f32342d3234203d3e20323638363232.roa (hash: OkHLbqdybXac9nYcfQ/g7n2CZcUHbjYGpJn0ADccclk=) 8: 34352e3136342e33362e302f32332d3233203d3e20323638363232.roa (hash: vfzcN//MjNe5qJAAYez1Howy76km1U8AUBCQKP43n0U=) 9: 0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl (hash: Y4P0+HKz37Mj5VYhOaMkAD/T2SZ1klrLKx+TyNOko2w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 12:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:9b:88:f6:d6:3a:22:2c:4f:ae:72:82:36:1c:b8:8f:2e:f0:d8:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AC324E95DDE8107D6C9FCF9C7931D836843F4A4 Validity Not Before: Nov 4 09:58:07 2025 GMT Not After : Nov 5 12:46:07 2025 GMT Subject: CN=2CDABA16E35F72F9CA1C6DDC7D27B5DBA8C164C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:c3:fe:e2:a9:6d:4d:25:99:5e:e3:c2:92: bc:0c:a8:8a:ff:4c:99:80:19:b4:6f:b0:eb:7c:90: cb:e8:06:d6:88:94:4c:85:e9:c9:46:95:0f:76:17: 34:f6:a4:5b:26:ee:d9:31:6a:de:d2:85:c1:91:d9: 0a:ac:09:86:91:1b:e3:99:fd:bb:f2:c0:7a:23:d2: 9e:4d:dc:c1:7d:a1:5d:37:25:88:01:f8:4f:bb:4f: 2d:eb:20:00:8e:5f:0d:6e:25:59:62:2e:e5:28:b2: c1:6e:17:20:3b:4f:6e:6b:d4:d2:f3:82:11:c1:0d: 34:19:04:de:f1:c0:4e:33:0b:a5:76:b3:54:6f:78: b0:bb:9f:3c:50:ff:43:ea:b5:2f:25:73:bb:c9:f2: 5f:c3:71:06:73:8e:0b:a6:46:29:6c:19:3b:97:8e: d4:1a:86:5e:65:4c:a4:5d:8f:b5:01:73:d2:ea:01: 69:b4:9f:0d:85:2f:17:13:61:00:ac:c1:f0:1b:c2: ff:b4:c7:9b:ab:66:92:ed:34:0d:6c:88:36:cb:c7: bc:20:24:b0:b1:2b:fa:5c:5a:56:6a:8f:c0:42:8b: ef:e6:3c:8c:69:b5:6d:66:09:8b:d4:6c:a6:2a:67: de:a8:d3:d9:c8:9b:7b:40:33:19:63:cd:cb:e9:e1: 57:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DA:BA:16:E3:5F:72:F9:CA:1C:6D:DC:7D:27:B5:DB:A8:C1:64:C5 X509v3 Authority Key Identifier: keyid:0A:C3:24:E9:5D:DE:81:07:D6:C9:FC:F9:C7:93:1D:83:68:43:F4:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f0:3e:ef:1f:22:9f:fc:58:50:54:2e:53:69:2a:c3:80:0d: 30:00:e2:c4:87:4e:c2:69:10:55:e4:e4:3d:17:dc:e1:a7:b8: cb:48:7c:fb:29:27:fa:3f:0d:62:3d:91:d9:7c:9b:a2:7b:29: bd:46:f7:fd:2f:42:4a:fa:3e:c9:03:c3:fd:f2:14:13:23:10: b3:11:b1:0d:fe:8e:3e:43:a0:49:2b:43:df:20:d6:b5:4c:1d: 0b:a6:47:fe:fc:1c:10:7d:89:23:7d:fd:a6:e0:75:bd:ee:70: 58:64:92:b3:5e:47:60:df:31:32:77:0f:29:ab:36:03:68:38: f6:d4:e2:96:64:be:1e:34:cc:af:cd:0a:77:ea:2b:ba:a6:7f: 3c:a1:93:96:29:a8:2d:9a:5a:08:f6:1c:73:38:21:71:3e:a8: 0a:f3:63:b8:e2:4a:b2:f2:f8:1a:ce:04:23:bd:52:07:64:db: b9:0b:5e:ec:6d:4f:9a:7c:e7:51:69:8d:56:0c:04:07:79:74: cc:50:c5:7a:c9:d3:be:7e:56:48:aa:4e:4a:67:82:94:81:be: e3:2b:f6:54:6f:ae:0c:e1:34:b3:a1:98:84:22:4f:8f:36:de: 79:64:b3:1d:f0:d6:9f:e9:91:42:64:d8:1f:49:de:02:4f:ea: 8c:53:f3:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ5uI9tY6IixPrnKCNhy4jy7w2FswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFDMzI0RTk1RERFODEwN0Q2QzlGQ0Y5Qzc5MzFEODM2 ODQzRjRBNDAeFw0yNTExMDQwOTU4MDdaFw0yNTExMDUxMjQ2MDdaMDMxMTAvBgNV BAMTKDJDREFCQTE2RTM1RjcyRjlDQTFDNkREQzdEMjdCNURCQThDMTY0QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxM8P+4qltTSWZXuPCkrwMqIr/ TJmAGbRvsOt8kMvoBtaIlEyF6clGlQ92FzT2pFsm7tkxat7ShcGR2QqsCYaRG+OZ /bvywHoj0p5N3MF9oV03JYgB+E+7Ty3rIACOXw1uJVliLuUossFuFyA7T25r1NLz ghHBDTQZBN7xwE4zC6V2s1RveLC7nzxQ/0PqtS8lc7vJ8l/DcQZzjgumRilsGTuX jtQahl5lTKRdj7UBc9LqAWm0nw2FLxcTYQCswfAbwv+0x5urZpLtNA1siDbLx7wg JLCxK/pcWlZqj8BCi+/mPIxptW1mCYvUbKYqZ96o09nIm3tAMxljzcvp4VcpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULNq6FuNfcvnKHG3cfSe126jBZMUwHwYDVR0j BBgwFoAUCsMk6V3egQfWyfz5x5Mdg2hD9KQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2U0cUVOSmY4QzNFVnJZNVJQWGNNY0pMaGYyVWJmSmFoeVdkSkhDVGZX a3EvMC8wQUMzMjRFOTVEREU4MTA3RDZDOUZDRjlDNzkzMUQ4MzY4NDNGNEE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBQzMyNEU5NURERTgxMDdE NkM5RkNGOUM3OTMxRDgzNjg0M0Y0QTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2U0cUVOSmY4QzNFVnJZNVJQWGNNY0pMaGYyVWJmSmFoeVdkSkhDVGZXa3EvMC8w QUMzMjRFOTVEREU4MTA3RDZDOUZDRjlDNzkzMUQ4MzY4NDNGNEE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgfA+7x8in/xYUFQuU2kqw4ANMADixIdOwmkQVeTkPRfc4ae4y0h8+ykn+j8N Yj2R2XybonspvUb3/S9CSvo+yQPD/fIUEyMQsxGxDf6OPkOgSStD3yDWtUwdC6ZH /vwcEH2JI339puB1ve5wWGSSs15HYN8xMncPKas2A2g49tTilmS+HjTMr80Kd+or uqZ/PKGTlimoLZpaCPYcczghcT6oCvNjuOJKsvL4Gs4EI71SB2TbuQte7G1Pmnzn UWmNVgwEB3l0zFDFesnTvn5WSKpOSmeClIG+4yv2VG+uDOE0s6GYhCJPjzbeeWSz HfDWn+mRQmTYH0neAk/qjFPz1w== -----END CERTIFICATE-----Generated at Wed Nov 5 05:16:12 2025 by rpki-client