$ rpki-client -vvf rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft File: 01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft (raw, json) Hash identifier: C4+0dpTEEYUAI02w/EGHUJF7Qg2JTuqwpbVGal1suuw= Subject key identifier: DC:D0:F0:01:DF:4D:E0:4D:06:A7:B1:91:63:8E:18:45:15:22:7F:B0 Authority key identifier: 01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C Certificate issuer: /CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C Certificate serial: 352C05D6C10F2BC97881D92C4555639E71C910E2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer Subject info access: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft Manifest number: 0307 Signing time: Tue 04 Nov 2025 23:17:35 +0000 Manifest this update: Tue 04 Nov 2025 23:12:35 +0000 Manifest next update: Thu 06 Nov 2025 00:48:35 +0000 Files and hashes: 1: 01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl (hash: diMJVc84d8/M6Kw5hHQTQSv76dPOaRuHwOnbsVJFdv0=) 2: 323830343a356233303a3a2f33322d3438203d3e20323638383234.roa (hash: 6f8pVuH01b1SF3mi0On+jZU5yb6oYEzn5QGJJ2ruw7o=) 3: 3137392e3130372e35322e302f32322d3234203d3e20323638383234.roa (hash: GXCJwGNSeovJEODltbl+tv+hc1YYl0zHS2TuTav4gew=) 4: 34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa (hash: 0YsTjeqlNRVyQvgwlwqrsgilyPHmCf1iPKM6xbeuc78=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:2c:05:d6:c1:0f:2b:c9:78:81:d9:2c:45:55:63:9e:71:c9:10:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C Validity Not Before: Nov 4 23:12:35 2025 GMT Not After : Nov 6 00:48:35 2025 GMT Subject: CN=DCD0F001DF4DE04D06A7B191638E184515227FB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0d:a5:f9:da:51:81:ac:d1:9c:a4:22:68:ab: 5e:f6:84:57:af:56:64:cf:4a:d3:bc:11:c4:2b:6b: ec:92:6b:8f:f0:dd:0b:41:28:39:2c:d3:38:ae:69: c1:1c:c9:ef:7a:c9:25:58:3e:5d:1f:63:4e:45:5e: 9e:97:ed:33:92:e9:40:be:69:87:07:ca:18:0e:7e: 5e:c4:81:33:20:ed:75:0b:17:89:fd:ba:53:96:c6: 6e:da:15:e9:49:ca:25:9c:75:2b:5e:c6:2b:d5:6a: f0:d6:38:c6:f0:70:30:62:5d:bb:46:01:89:7f:90: 82:c4:b0:7e:97:b6:f7:5c:35:00:f6:85:9c:c3:3e: ea:bf:24:76:27:07:b3:37:db:10:0e:f6:21:b7:d9: a5:60:57:33:5f:f5:e7:ae:73:d7:ee:cf:6d:87:d4: e6:e3:c1:5a:1d:9d:03:c9:83:ee:bc:8f:aa:57:ab: b6:9b:e1:60:21:68:b3:b9:e9:92:4c:0b:a6:d4:bb: 0d:af:10:83:2e:5c:3f:32:47:6a:ff:7c:81:43:27: be:50:44:e2:dd:0e:6b:d2:dc:f0:45:b7:6b:f2:e0: eb:a4:f3:c3:96:ee:5b:93:48:ad:ca:f2:1e:cd:a6: e6:d3:f1:c4:25:f1:73:ee:4c:f3:f2:40:3b:25:37: 39:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D0:F0:01:DF:4D:E0:4D:06:A7:B1:91:63:8E:18:45:15:22:7F:B0 X509v3 Authority Key Identifier: keyid:01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:15:05:08:39:a3:1e:94:cd:14:cb:aa:d1:d3:8f:f0:74:df: fc:cf:65:96:77:e3:4a:e2:76:c7:26:21:9f:49:dc:b1:fc:99: 8f:1c:26:39:a8:61:80:d9:ba:4a:74:2a:b9:99:fd:f3:5f:d2: 95:ce:53:9d:f5:bc:ff:2b:ce:a8:ea:b8:bb:9d:8b:7f:81:b6: 51:f5:73:be:2e:22:cd:10:45:42:c7:c9:57:23:69:5d:c1:fa: 87:a8:80:8b:a5:2e:56:89:5c:91:bc:2d:0a:ed:b9:bf:2a:93: cb:83:4e:f1:bd:08:ae:95:4a:b9:48:f0:88:f8:6c:e0:08:f5: 31:39:8c:e7:ef:a5:31:b4:ab:33:a2:2f:36:75:88:85:33:e5: fb:7e:a9:4f:f4:6b:dc:d1:e5:3d:a4:60:ec:d0:cc:9c:02:be: 80:8b:c4:40:c6:54:cd:7d:a0:05:cb:b5:83:a9:d3:36:fb:ec: bd:fc:8e:d8:2e:60:37:a0:d3:3a:24:84:62:2a:36:88:d7:0d: 94:05:12:c5:e9:ce:d1:3c:20:4a:5f:15:95:76:51:9a:d6:6a: 79:15:f5:ff:e6:05:04:be:04:4c:99:4d:52:e6:b3:9c:83:62: 2d:c6:a8:d1:79:76:0d:c7:74:13:45:84:1b:f0:d9:e5:c3:a3: 0a:7b:f0:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNSwF1sEPK8l4gdksRVVjnnHJEOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFDQjcxMDhCQkNBMjlGNTU0RDQyMUFDRTAzMkI5NzdB QTFCRjY3QzAeFw0yNTExMDQyMzEyMzVaFw0yNTExMDYwMDQ4MzVaMDMxMTAvBgNV BAMTKERDRDBGMDAxREY0REUwNEQwNkE3QjE5MTYzOEUxODQ1MTUyMjdGQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjDaX52lGBrNGcpCJoq172hFev VmTPStO8EcQra+ySa4/w3QtBKDks0ziuacEcye96ySVYPl0fY05FXp6X7TOS6UC+ aYcHyhgOfl7EgTMg7XULF4n9ulOWxm7aFelJyiWcdStexivVavDWOMbwcDBiXbtG AYl/kILEsH6XtvdcNQD2hZzDPuq/JHYnB7M32xAO9iG32aVgVzNf9eeuc9fuz22H 1ObjwVodnQPJg+68j6pXq7ab4WAhaLO56ZJMC6bUuw2vEIMuXD8yR2r/fIFDJ75Q ROLdDmvS3PBFt2vy4Ouk88OW7luTSK3K8h7NpubT8cQl8XPuTPPyQDslNzlzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3NDwAd9N4E0Gp7GRY44YRRUif7AwHwYDVR0j BBgwFoAUActxCLvKKfVU1CGs4DK5d6ob9nwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUU0Y0d3elR1V21rTWhtakI0enBjV2d6V2JZVlRKRXlkNU02R2JGU2ZV aUIvMS8wMUNCNzEwOEJCQ0EyOUY1NTRENDIxQUNFMDMyQjk3N0FBMUJGNjdDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQ0I3MTA4QkJDQTI5RjU1 NEQ0MjFBQ0UwMzJCOTc3QUExQkY2N0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUU0Y0d3elR1V21rTWhtakI0enBjV2d6V2JZVlRKRXlkNU02R2JGU2ZVaUIvMS8w MUNCNzEwOEJCQ0EyOUY1NTRENDIxQUNFMDMyQjk3N0FBMUJGNjdDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiBUFCDmjHpTNFMuq0dOP8HTf/M9llnfjSuJ2xyYhn0ncsfyZjxwmOahhgNm6 SnQquZn981/Slc5TnfW8/yvOqOq4u52Lf4G2UfVzvi4izRBFQsfJVyNpXcH6h6iA i6UuVolckbwtCu25vyqTy4NO8b0IrpVKuUjwiPhs4Aj1MTmM5++lMbSrM6IvNnWI hTPl+36pT/Rr3NHlPaRg7NDMnAK+gIvEQMZUzX2gBcu1g6nTNvvsvfyO2C5gN6DT OiSEYio2iNcNlAUSxenO0TwgSl8VlXZRmtZqeRX1/+YFBL4ETJlNUuaznINiLcao 0Xl2Dcd0E0WEG/DZ5cOjCnvwiw== -----END CERTIFICATE-----Generated at Wed Nov 5 08:38:46 2025 by rpki-client