$ rpki-client -vvf rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft File: 1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft (raw, json) Hash identifier: tBq9wtWxT/BgfOznXw+LqB/WmZ1PDu0XpgBJ2IOXx+c= Subject key identifier: 98:BF:04:D0:54:7A:21:41:D0:C1:B3:60:EA:45:9F:34:ED:A6:A1:5B Authority key identifier: 1B:17:47:FF:CB:5B:39:7A:C6:6D:00:BF:76:A4:03:AA:7D:0B:2D:DC Certificate issuer: /CN=1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC Certificate serial: 3BF47661591C230476653EC6CCAF54A3CBB4E4C5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer Subject info access: rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft Manifest number: 0308 Signing time: Wed 05 Nov 2025 08:28:51 +0000 Manifest this update: Wed 05 Nov 2025 08:23:51 +0000 Manifest next update: Thu 06 Nov 2025 12:22:51 +0000 Files and hashes: 1: 1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.crl (hash: qCQObcNsNvz/bl4MoQ8rxeFk8EkdzuLAAQb0QRHz+Kk=) 2: 34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa (hash: R+YeKaric66ljUw2I3Ykw+k8MG3+GmRJweocJpLs5io=) 3: 323830343a353833303a3a2f33322d313238203d3e20323638313132.roa (hash: U0D6objo3IN8IwtefdRBKWj3Eg4/rYfaZK3h4CbPvKM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.crl rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f4:76:61:59:1c:23:04:76:65:3e:c6:cc:af:54:a3:cb:b4:e4:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC Validity Not Before: Nov 5 08:23:51 2025 GMT Not After : Nov 6 12:22:51 2025 GMT Subject: CN=98BF04D0547A2141D0C1B360EA459F34EDA6A15B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:46:de:8f:54:08:c7:15:f4:fc:68:88:e3:ab: 21:3f:1c:8d:74:7b:a5:52:df:99:0d:86:27:e2:b9: 43:83:bd:28:e3:40:0f:9d:67:b0:80:d1:f4:9d:15: d8:50:be:0d:bf:82:15:89:f7:71:19:3f:42:cd:5e: 94:57:8a:fd:e8:24:dd:eb:af:35:3b:04:0d:12:62: ee:b8:fd:72:93:69:b2:86:eb:ed:ea:ec:12:26:1a: ee:ee:d5:b5:47:4c:49:e5:20:7e:b2:21:fc:42:19: 10:e1:2b:c4:9c:50:c4:e6:a6:13:11:e0:18:88:2a: b3:ca:bd:42:63:de:44:a3:19:1f:b2:06:d2:00:4e: 21:67:56:92:ac:20:87:33:1a:7f:cf:34:1b:ad:99: 94:6e:13:cc:28:c6:8e:4c:82:b3:3f:75:d9:ed:5e: 41:2c:a6:cb:40:69:3d:f5:97:fd:76:63:a0:e4:26: cc:d1:dc:92:2f:cb:a8:01:b7:a1:e3:33:35:e7:34: 13:36:2b:c0:fd:05:47:7f:7d:72:ee:00:ca:74:48: 47:f3:80:ab:06:5c:f0:d4:30:6e:53:19:15:51:24: 17:16:43:60:97:29:8b:b4:06:40:a7:e6:8e:9e:cc: 38:db:4a:e3:08:bf:22:24:eb:9c:88:9b:75:56:b7: 49:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BF:04:D0:54:7A:21:41:D0:C1:B3:60:EA:45:9F:34:ED:A6:A1:5B X509v3 Authority Key Identifier: keyid:1B:17:47:FF:CB:5B:39:7A:C6:6D:00:BF:76:A4:03:AA:7D:0B:2D:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ce:7f:2c:53:bb:1f:b1:01:ea:ba:fe:21:30:1a:30:46:fe: 52:91:4c:6f:0b:1f:98:8f:7c:2a:36:59:04:32:4c:a6:de:0b: 6e:f8:b5:8c:b7:79:4d:e2:fc:c7:2c:88:c7:54:47:71:d0:65: 7a:69:8f:d8:d5:c1:7a:11:c7:05:5f:2f:c3:d9:1d:76:43:9d: b8:c0:ea:4b:eb:c8:23:3d:80:3c:9f:68:66:63:01:af:3f:d6: 00:23:3e:26:57:91:52:05:c9:0f:c5:41:fb:8c:0d:7d:a3:ab: d8:ca:cb:e8:0e:55:a8:16:e5:a6:fd:1a:e6:ad:63:91:4b:f9: 48:72:3a:23:26:92:9d:e0:d7:9a:f0:0d:8c:02:c9:ff:93:bb: 91:c3:69:15:00:58:ab:49:7f:66:ff:28:f0:90:d8:30:f6:49: 7b:a7:5d:77:5e:34:34:99:ce:4b:41:8f:00:a0:ae:c7:0a:d2: dd:86:85:38:b5:85:3b:f1:4e:64:34:4c:a1:6d:cf:3e:cf:d7: cf:2c:2a:4d:0f:0b:5d:51:83:34:b0:ef:7d:5b:92:5a:e1:d9: b2:2a:7e:15:1c:9b:8b:22:5d:15:5a:80:53:ef:9e:e1:b6:63: d9:08:0e:36:f7:76:09:fb:60:82:10:05:1e:f5:3f:61:78:0c: 9c:b7:c3:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO/R2YVkcIwR2ZT7GzK9Uo8u05MUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIxNzQ3RkZDQjVCMzk3QUM2NkQwMEJGNzZBNDAzQUE3 RDBCMkREQzAeFw0yNTExMDUwODIzNTFaFw0yNTExMDYxMjIyNTFaMDMxMTAvBgNV BAMTKDk4QkYwNEQwNTQ3QTIxNDFEMEMxQjM2MEVBNDU5RjM0RURBNkExNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgRt6PVAjHFfT8aIjjqyE/HI10 e6VS35kNhifiuUODvSjjQA+dZ7CA0fSdFdhQvg2/ghWJ93EZP0LNXpRXiv3oJN3r rzU7BA0SYu64/XKTabKG6+3q7BImGu7u1bVHTEnlIH6yIfxCGRDhK8ScUMTmphMR 4BiIKrPKvUJj3kSjGR+yBtIATiFnVpKsIIczGn/PNButmZRuE8woxo5MgrM/ddnt XkEspstAaT31l/12Y6DkJszR3JIvy6gBt6HjMzXnNBM2K8D9BUd/fXLuAMp0SEfz gKsGXPDUMG5TGRVRJBcWQ2CXKYu0BkCn5o6ezDjbSuMIvyIk65yIm3VWt0lrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmL8E0FR6IUHQwbNg6kWfNO2moVswHwYDVR0j BBgwFoAUGxdH/8tbOXrGbQC/dqQDqn0LLdwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3pQWUJtQWdYRDlvakhHaVZRUDgxdTh6NnlkWDZhMXpFSGJaRXVCYkdw RVQvMS8xQjE3NDdGRkNCNUIzOTdBQzY2RDAwQkY3NkE0MDNBQTdEMEIyRERDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCMTc0N0ZGQ0I1QjM5N0FD NjZEMDBCRjc2QTQwM0FBN0QwQjJEREMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N3pQWUJtQWdYRDlvakhHaVZRUDgxdTh6NnlkWDZhMXpFSGJaRXVCYkdwRVQvMS8x QjE3NDdGRkNCNUIzOTdBQzY2RDAwQkY3NkE0MDNBQTdEMEIyRERDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ85/LFO7H7EB6rr+ITAaMEb+UpFMbwsfmI98KjZZBDJMpt4Lbvi1jLd5TeL8 xyyIx1RHcdBlemmP2NXBehHHBV8vw9kddkOduMDqS+vIIz2APJ9oZmMBrz/WACM+ JleRUgXJD8VB+4wNfaOr2MrL6A5VqBblpv0a5q1jkUv5SHI6IyaSneDXmvANjALJ /5O7kcNpFQBYq0l/Zv8o8JDYMPZJe6ddd140NJnOS0GPAKCuxwrS3YaFOLWFO/FO ZDRMoW3PPs/XzywqTQ8LXVGDNLDvfVuSWuHZsip+FRybiyJdFVqAU++e4bZj2QgO Nvd2CftgghAFHvU/YXgMnLfDcw== -----END CERTIFICATE-----Generated at Wed Nov 5 11:15:56 2025 by rpki-client