$ rpki-client -vvf rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft File: D1FFDF44055E16082D529730642377D751467152.mft (raw, json) Hash identifier: PpiiTNBwX9/vCy9TAWUTNya4tOTD/d5v91BXEjkg9oM= Subject key identifier: BB:37:DA:90:EE:51:63:9C:21:1A:E2:65:23:AF:09:48:88:0A:BC:44 Authority key identifier: D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52 Certificate issuer: /CN=D1FFDF44055E16082D529730642377D751467152 Certificate serial: 1526643729A4C09BCF4C5C3FDAD4AB4D1FA12440 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer Subject info access: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft Manifest number: 01AD Signing time: Tue 04 Nov 2025 19:22:13 +0000 Manifest this update: Tue 04 Nov 2025 19:17:13 +0000 Manifest next update: Wed 05 Nov 2025 22:46:13 +0000 Files and hashes: 1: 34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa (hash: +J/bMMv2VTnAcenJxSzOTld7FO4bilmUXcdCfBnX9eY=) 2: D1FFDF44055E16082D529730642377D751467152.crl (hash: NDVEgwADqJyvaZJJTW8KQxMDkpGR1L3om71+e7xRFa0=) 3: 323830343a356139343a3a2f33322d3438203d3e20323638373832.roa (hash: 8CQrF34soBwXu1YRdamnxb0gJeOCBly8lfmNOKaeNCU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:26:64:37:29:a4:c0:9b:cf:4c:5c:3f:da:d4:ab:4d:1f:a1:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1FFDF44055E16082D529730642377D751467152 Validity Not Before: Nov 4 19:17:13 2025 GMT Not After : Nov 5 22:46:13 2025 GMT Subject: CN=BB37DA90EE51639C211AE26523AF0948880ABC44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:93:cb:f8:d7:10:ba:e2:62:09:91:ac:c4:29: 18:fe:41:ba:f7:7b:67:bb:7a:0f:95:d3:64:b5:a2: 43:67:f6:1f:80:a3:ce:20:01:22:2d:7e:01:41:01: 68:82:f1:ed:e6:ab:48:00:60:32:7f:02:80:39:d0: 9c:52:b2:e2:a0:32:78:0b:d4:4e:07:9b:9c:53:fd: 40:b3:6a:0b:a4:2b:1e:77:33:96:31:1d:d2:34:d0: 43:cd:55:9c:77:6f:3e:74:ef:96:32:14:60:cb:13: af:8c:6d:be:90:ec:ec:02:56:7a:91:f9:6c:1b:c8: f1:42:f4:77:fe:2b:bf:69:73:ca:80:23:01:00:f2: 93:47:71:76:e1:27:c0:61:7b:cb:74:7b:3a:23:39: 94:b7:72:9d:7b:4f:8c:78:3f:2b:11:2e:ff:f4:ce: b0:56:a3:70:96:8c:c7:f9:ca:8a:ae:3f:ab:5e:d9: 07:4c:12:67:ef:55:d6:d1:e4:fd:ee:8e:aa:f3:e2: ab:31:2a:a0:7b:90:04:66:56:94:6f:0c:5d:ee:5f: 04:52:8d:1d:ef:87:56:47:a1:0f:cd:ad:58:a6:bb: 7a:3a:08:a2:b7:86:22:e7:f0:e8:cf:fd:80:d3:3d: 2d:47:2f:dc:6a:26:b7:b1:0a:05:7d:d1:7d:6c:75: 01:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:37:DA:90:EE:51:63:9C:21:1A:E2:65:23:AF:09:48:88:0A:BC:44 X509v3 Authority Key Identifier: keyid:D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:a1:24:04:33:36:c8:fa:df:44:29:dd:ed:aa:bb:fe:8b:de: 6c:01:08:58:60:d1:f1:1c:6f:11:9e:33:a3:6e:e0:a8:fc:b5: a1:c6:8b:4c:be:76:86:39:54:b6:18:3d:2d:09:cd:bc:be:56: 24:ce:cd:96:f0:90:c6:dd:d7:49:35:4d:0e:cd:d0:f0:37:22: 86:0b:a7:24:34:65:10:f1:d2:79:ee:69:8a:63:8c:a3:e9:42: 0e:1b:fa:7c:5d:26:49:80:66:90:78:55:a8:b2:10:cf:f5:fe: e6:46:05:a7:3e:3e:8c:a3:11:1b:ae:c8:8f:db:96:95:da:ff: f5:bf:aa:ef:67:8d:6e:a7:73:49:e2:5d:94:28:af:4f:26:b4: ec:f6:8a:b3:0c:c8:dc:1f:ff:c0:d5:49:cf:c6:2c:57:83:29: 83:ab:51:c3:65:d7:5e:c4:25:ca:32:8d:7d:e2:1c:4f:42:54: 69:ba:51:fd:61:2f:c9:a4:44:f3:e4:4e:f4:4e:23:92:c1:c4: 1d:c1:15:6e:c6:3a:96:68:95:84:7d:40:ac:d9:80:21:57:9e: fb:48:38:0d:53:d1:0a:96:11:b3:74:f1:6d:44:6a:98:65:2d: dd:87:1b:4d:c1:8e:f9:73:fb:98:d0:c8:f1:1c:40:90:0c:37: 53:a3:91:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFSZkNymkwJvPTFw/2tSrTR+hJEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGRkRGNDQwNTVFMTYwODJENTI5NzMwNjQyMzc3RDc1 MTQ2NzE1MjAeFw0yNTExMDQxOTE3MTNaFw0yNTExMDUyMjQ2MTNaMDMxMTAvBgNV BAMTKEJCMzdEQTkwRUU1MTYzOUMyMTFBRTI2NTIzQUYwOTQ4ODgwQUJDNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLk8v41xC64mIJkazEKRj+Qbr3 e2e7eg+V02S1okNn9h+Ao84gASItfgFBAWiC8e3mq0gAYDJ/AoA50JxSsuKgMngL 1E4Hm5xT/UCzagukKx53M5YxHdI00EPNVZx3bz5075YyFGDLE6+Mbb6Q7OwCVnqR +WwbyPFC9Hf+K79pc8qAIwEA8pNHcXbhJ8Bhe8t0ezojOZS3cp17T4x4PysRLv/0 zrBWo3CWjMf5yoquP6te2QdMEmfvVdbR5P3ujqrz4qsxKqB7kARmVpRvDF3uXwRS jR3vh1ZHoQ/NrVimu3o6CKK3hiLn8OjP/YDTPS1HL9xqJrexCgV90X1sdQGDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuzfakO5RY5whGuJlI68JSIgKvEQwHwYDVR0j BBgwFoAU0f/fRAVeFggtUpcwZCN311FGcVIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHlSTmFTVENLWjlia29hRndlRkxqVHNyR0c2eUtiQWZ5ZGQ2alI2bWlK Wm4vMC9EMUZGREY0NDA1NUUxNjA4MkQ1Mjk3MzA2NDIzNzdENzUxNDY3MTUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRkZERjQ0MDU1RTE2MDgy RDUyOTczMDY0MjM3N0Q3NTE0NjcxNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHlSTmFTVENLWjlia29hRndlRkxqVHNyR0c2eUtiQWZ5ZGQ2alI2bWlKWm4vMC9E MUZGREY0NDA1NUUxNjA4MkQ1Mjk3MzA2NDIzNzdENzUxNDY3MTUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAqEkBDM2yPrfRCnd7aq7/ovebAEIWGDR8RxvEZ4zo27gqPy1ocaLTL52hjlU thg9LQnNvL5WJM7NlvCQxt3XSTVNDs3Q8DcihgunJDRlEPHSee5pimOMo+lCDhv6 fF0mSYBmkHhVqLIQz/X+5kYFpz4+jKMRG67Ij9uWldr/9b+q72eNbqdzSeJdlCiv Tya07PaKswzI3B//wNVJz8YsV4Mpg6tRw2XXXsQlyjKNfeIcT0JUabpR/WEvyaRE 8+RO9E4jksHEHcEVbsY6lmiVhH1ArNmAIVee+0g4DVPRCpYRs3TxbURqmGUt3Ycb TcGO+XP7mNDI8RxAkAw3U6OR9A== -----END CERTIFICATE-----Generated at Wed Nov 5 13:04:12 2025 by rpki-client