$ rpki-client -vvf rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft File: B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft (raw, json) Hash identifier: 908Kyb+DYfhhxOHYBa4g+il1GHh3u1wxJk5fx+/IO1M= Subject key identifier: B2:4E:47:81:6D:9C:5C:D2:49:8E:AB:E0:47:24:D9:ED:AB:BD:A4:82 Authority key identifier: B3:2F:1F:CB:EE:4B:48:9E:65:86:36:E1:B2:45:45:CA:0E:4E:A8:20 Certificate issuer: /CN=B32F1FCBEE4B489E658636E1B24545CA0E4EA820 Certificate serial: 7E3827A34E675CDF853F93C0ACFE81DBD56D01EC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer Subject info access: rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft Manifest number: 0305 Signing time: Tue 04 Nov 2025 17:59:43 +0000 Manifest this update: Tue 04 Nov 2025 17:54:43 +0000 Manifest next update: Wed 05 Nov 2025 19:58:43 +0000 Files and hashes: 1: 323830343a336131383a3a2f33322d3334203d3e20323636303730.roa (hash: 5jChHZu/vFi+LLiu8tTfwWKXqbT78LjUfm2ELx1+iX8=) 2: B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl (hash: YzKzoCxQt9DlFgK5ar/GVShTYJOgIJvnk045VNSrmCY=) 3: 34352e342e3131322e302f32322d3234203d3e20323636303730.roa (hash: CImzxX+rkL1rxYW2A+TXCoq1LL7u0k8unKss9z1G3Xo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:38:27:a3:4e:67:5c:df:85:3f:93:c0:ac:fe:81:db:d5:6d:01:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32F1FCBEE4B489E658636E1B24545CA0E4EA820 Validity Not Before: Nov 4 17:54:43 2025 GMT Not After : Nov 5 19:58:43 2025 GMT Subject: CN=B24E47816D9C5CD2498EABE04724D9EDABBDA482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9c:e0:1f:4b:f9:8d:c2:cf:a7:26:bf:3f:af: b9:72:9b:99:ca:21:63:e7:19:7c:5f:c6:51:1b:3e: 90:06:1b:3d:bc:6d:ee:37:a6:67:c0:10:91:c1:e5: 0e:40:2d:4a:46:0d:26:fb:9d:4b:b7:04:2a:d2:b3: f9:73:b4:d0:8f:53:d9:e6:f2:9f:d3:22:80:78:b4: 2b:68:57:bb:00:af:11:41:e9:2e:bf:c7:ce:d1:1e: 37:a6:a7:c2:bb:9e:ac:00:2a:57:60:8f:98:ec:77: ac:8b:7a:77:1f:9e:26:b4:25:ee:9c:21:90:41:37: 7e:c2:5c:46:e1:81:5f:88:66:27:ab:04:f2:96:e0: 32:16:35:e3:c0:d9:d1:2c:c3:4b:d4:56:e8:76:d6: 21:c6:03:02:23:38:5b:41:70:72:a5:dd:b0:d6:f9: 77:da:4c:c0:8f:ee:81:86:7a:80:65:05:41:3d:0a: 0f:ff:ed:bc:89:a6:49:d8:71:cd:04:85:f8:d9:fe: 61:68:c8:51:b6:78:f6:bd:67:8f:26:81:1d:be:ec: 42:36:31:74:ba:55:46:1d:60:0b:98:e9:28:04:52: 7b:a4:fb:dd:50:97:81:88:02:e1:70:89:5d:71:49: 70:50:3b:7b:ad:4b:04:e4:2d:2a:77:78:96:f9:29: b4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4E:47:81:6D:9C:5C:D2:49:8E:AB:E0:47:24:D9:ED:AB:BD:A4:82 X509v3 Authority Key Identifier: keyid:B3:2F:1F:CB:EE:4B:48:9E:65:86:36:E1:B2:45:45:CA:0E:4E:A8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:3f:2a:c8:c6:c0:39:0b:e9:ea:a8:8d:1d:5d:bb:33:c3:f4: 8a:9d:b7:d4:34:8d:06:ee:56:6d:34:a5:c0:89:15:da:6a:78: 1e:b6:3e:33:53:09:03:8d:98:2f:8b:21:f8:e3:8d:24:31:ce: 08:91:7a:01:75:5e:9d:20:05:e8:c5:3c:28:ae:13:c9:b0:4d: cd:bc:4b:bd:c5:22:e5:42:48:11:04:d4:bf:5c:5a:d4:de:91: fc:f4:f4:53:7b:98:0e:fd:2d:08:8f:aa:c1:db:84:6d:c5:ed: 02:07:c7:78:65:aa:df:22:1a:f2:d1:be:c8:5c:36:a4:14:9b: 78:23:65:6c:41:bf:95:49:aa:1d:04:9e:14:1b:31:63:4d:3e: a7:78:60:40:9e:d4:d4:fd:f8:91:3b:b4:4c:f9:00:46:54:de: c2:46:4d:f9:04:b3:96:7c:c9:57:ae:84:1c:ef:94:bb:e5:de: 3b:0c:ba:40:5a:76:82:8c:47:96:fa:c6:f7:27:92:2a:0f:23: 83:17:4c:2f:45:9d:08:c0:fc:4b:0e:89:db:5d:c4:bc:25:7e: 76:1c:9d:93:fd:a6:81:51:5f:9a:37:ed:1a:e7:9f:e0:8d:ae: d0:da:bc:4c:16:c3:d3:69:b1:74:06:24:64:5a:8a:60:c5:b0: 9e:75:66:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfjgno05nXN+FP5PArP6B29VtAewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRjFGQ0JFRTRCNDg5RTY1ODYzNkUxQjI0NTQ1Q0Ew RTRFQTgyMDAeFw0yNTExMDQxNzU0NDNaFw0yNTExMDUxOTU4NDNaMDMxMTAvBgNV BAMTKEIyNEU0NzgxNkQ5QzVDRDI0OThFQUJFMDQ3MjREOUVEQUJCREE0ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBnOAfS/mNws+nJr8/r7lym5nK IWPnGXxfxlEbPpAGGz28be43pmfAEJHB5Q5ALUpGDSb7nUu3BCrSs/lztNCPU9nm 8p/TIoB4tCtoV7sArxFB6S6/x87RHjemp8K7nqwAKldgj5jsd6yLencfnia0Je6c IZBBN37CXEbhgV+IZierBPKW4DIWNePA2dEsw0vUVuh21iHGAwIjOFtBcHKl3bDW +XfaTMCP7oGGeoBlBUE9Cg//7byJpknYcc0EhfjZ/mFoyFG2ePa9Z48mgR2+7EI2 MXS6VUYdYAuY6SgEUnuk+91Ql4GIAuFwiV1xSXBQO3utSwTkLSp3eJb5KbSvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsk5HgW2cXNJJjqvgRyTZ7au9pIIwHwYDVR0j BBgwFoAUsy8fy+5LSJ5lhjbhskVFyg5OqCAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFFjeG55SkxkcFIzQ3NlMmJueDU1Znc3RkFFUFh1c3ZCdFFiTTRIbVJY amIvMS9CMzJGMUZDQkVFNEI0ODlFNjU4NjM2RTFCMjQ1NDVDQTBFNEVBODIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzMkYxRkNCRUU0QjQ4OUU2 NTg2MzZFMUIyNDU0NUNBMEU0RUE4MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFFjeG55SkxkcFIzQ3NlMmJueDU1Znc3RkFFUFh1c3ZCdFFiTTRIbVJYamIvMS9C MzJGMUZDQkVFNEI0ODlFNjU4NjM2RTFCMjQ1NDVDQTBFNEVBODIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUz8qyMbAOQvp6qiNHV27M8P0ip231DSNBu5WbTSlwIkV2mp4HrY+M1MJA42Y L4sh+OONJDHOCJF6AXVenSAF6MU8KK4TybBNzbxLvcUi5UJIEQTUv1xa1N6R/PT0 U3uYDv0tCI+qwduEbcXtAgfHeGWq3yIa8tG+yFw2pBSbeCNlbEG/lUmqHQSeFBsx Y00+p3hgQJ7U1P34kTu0TPkARlTewkZN+QSzlnzJV66EHO+Uu+XeOwy6QFp2goxH lvrG9yeSKg8jgxdML0WdCMD8Sw6J213EvCV+dhydk/2mgVFfmjftGuef4I2u0Nq8 TBbD02mxdAYkZFqKYMWwnnVmsg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:42 2025 by rpki-client