$ rpki-client -vvf rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft File: 71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft (raw, json) Hash identifier: QcdT5cIuFoCv9un0w+6x7Zyp1oEUCk830TTJo7dsTwo= Subject key identifier: 1E:BA:A4:51:C3:03:43:F0:0E:E0:41:23:DF:A8:7C:E8:B4:AF:4D:7F Authority key identifier: 71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52 Certificate issuer: /CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52 Certificate serial: 2DA291E69A59B4F34A0C888BD2E6A1C72F9344FD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer Subject info access: rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft Manifest number: 0306 Signing time: Tue 04 Nov 2025 21:54:52 +0000 Manifest this update: Tue 04 Nov 2025 21:49:52 +0000 Manifest next update: Thu 06 Nov 2025 01:07:52 +0000 Files and hashes: 1: 3134332e3230382e3232382e302f32322d3332203d3e20323633303034.roa (hash: IV3rgpu5jqUf8IKt60skmyD4qSR/oAcEE4NuthHk2GU=) 2: 3138362e3233372e31362e302f32312d3332203d3e20323633303034.roa (hash: 3DVq0DqkNADLTWL9AGG+zxpnVBOYf65tDKJdH03YwxI=) 3: 323830343a326265343a3a2f33322d313238203d3e20323633303034.roa (hash: YCMokJP8YtzLgx2BEvdyCNMZiRlmmm6TEAPNElQUjXQ=) 4: 71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl (hash: 8Xeudxd4TYI0GnVdexMCinxt8Btb9HkohkD1bcVQGog=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a2:91:e6:9a:59:b4:f3:4a:0c:88:8b:d2:e6:a1:c7:2f:93:44:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52 Validity Not Before: Nov 4 21:49:52 2025 GMT Not After : Nov 6 01:07:52 2025 GMT Subject: CN=1EBAA451C30343F00EE04123DFA87CE8B4AF4D7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:35:9d:9b:a0:4c:a6:33:67:ab:c9:41:27: 4b:dd:ec:1d:84:cc:e8:9f:fa:51:88:b1:a2:7b:45: 2e:8b:5d:c1:ad:d3:00:be:f2:75:a4:50:00:ba:d9: 45:4b:b4:2c:60:7e:38:fb:80:e6:85:a0:c9:68:34: c1:4d:4c:a1:8f:86:63:1a:83:5a:a3:b8:93:0d:df: ef:56:e4:54:1e:91:77:06:d8:43:67:ca:e6:5c:bf: fd:e2:ad:09:91:20:4a:be:a1:90:7a:01:ff:c3:37: 00:33:91:40:a3:25:5f:58:4a:ec:3e:48:bb:14:67: 95:13:23:04:33:77:b0:d0:c7:d9:74:eb:23:18:fc: 62:83:de:e8:15:d4:c7:22:02:9a:3d:d0:4a:c9:2c: cb:73:ba:91:47:d9:71:96:aa:25:92:dd:71:d2:97: 4f:7a:16:ed:2b:97:c1:83:05:6d:cb:be:7f:39:a8: 06:9f:9c:39:09:55:68:61:59:85:77:7c:fb:f9:d5: 50:e1:c1:13:94:c3:ab:9d:0e:34:7d:d8:e1:c1:aa: bd:c0:45:65:8b:3f:f7:ee:e5:58:60:06:80:41:c7: 98:4b:1c:5f:59:5b:7d:b5:9e:a7:34:c7:56:40:82: 84:b9:9f:9e:b8:8d:6c:c0:ec:90:ad:da:23:8a:3f: ab:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BA:A4:51:C3:03:43:F0:0E:E0:41:23:DF:A8:7C:E8:B4:AF:4D:7F X509v3 Authority Key Identifier: keyid:71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:51:7a:2c:36:e0:37:c7:ac:94:0c:5f:e8:83:71:ec:e2:1e: 3d:47:c5:df:66:20:d3:3e:21:2a:5e:5f:25:25:f2:1a:99:2f: b4:72:d3:18:bb:1b:e0:8d:57:2f:f8:09:20:6d:c8:fe:1c:fa: 94:44:89:40:5f:54:53:0e:b5:83:86:3a:a6:66:eb:14:4e:5f: ae:3e:4b:30:60:58:da:7d:c2:fa:b7:69:b6:57:c3:ec:d5:1c: 8c:1a:aa:a7:eb:2e:d8:6c:75:ca:5e:c6:ec:e7:22:a2:3f:40: 3e:87:7a:d0:b0:f6:bf:0f:ad:3a:ee:4f:61:17:13:97:85:48: 3b:43:a9:1f:2c:82:ad:50:0e:d8:8e:ea:6f:e6:f4:5a:24:f9: ff:b8:c8:a6:d0:2b:76:ad:bf:93:09:90:93:30:59:9c:9b:6b: b7:44:88:c1:e9:f0:61:84:ff:90:81:5b:5e:fe:77:a7:9d:8f: 84:58:a3:5e:69:ee:97:b3:78:0c:3e:c9:4e:46:6d:e5:ec:a4: 87:87:79:00:6c:c5:df:0d:3c:70:0e:28:b6:6b:13:f1:28:a4: ff:87:ad:3c:8a:a5:62:2b:20:37:25:49:92:86:59:72:b0:3c: a7:23:d9:c4:ea:e9:d4:71:80:56:c0:b7:b7:71:25:1a:23:2e: 89:20:26:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULaKR5ppZtPNKDIiL0uahxy+TRP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFMzM2QUExRUFEQkU0QTYxMDg2NkVEQjQxNDFEMzZB NUI3N0M1MjAeFw0yNTExMDQyMTQ5NTJaFw0yNTExMDYwMTA3NTJaMDMxMTAvBgNV BAMTKDFFQkFBNDUxQzMwMzQzRjAwRUUwNDEyM0RGQTg3Q0U4QjRBRjREN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrHjWdm6BMpjNnq8lBJ0vd7B2E zOif+lGIsaJ7RS6LXcGt0wC+8nWkUAC62UVLtCxgfjj7gOaFoMloNMFNTKGPhmMa g1qjuJMN3+9W5FQekXcG2ENnyuZcv/3irQmRIEq+oZB6Af/DNwAzkUCjJV9YSuw+ SLsUZ5UTIwQzd7DQx9l06yMY/GKD3ugV1MciApo90ErJLMtzupFH2XGWqiWS3XHS l096Fu0rl8GDBW3Lvn85qAafnDkJVWhhWYV3fPv51VDhwROUw6udDjR92OHBqr3A RWWLP/fu5VhgBoBBx5hLHF9ZW321nqc0x1ZAgoS5n564jWzA7JCt2iOKP6tFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHrqkUcMDQ/AO4EEj36h86LSvTX8wHwYDVR0j BBgwFoAUceM2qh6tvkphCGbttBQdNqW3fFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUc2aHduWGN4b0dWak4xWWtmVVdyYjNVeWhLQXB0R0w5cFlqM3dCOWo5 Q3QvMS83MUUzMzZBQTFFQURCRTRBNjEwODY2RURCNDE0MUQzNkE1Qjc3QzUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRTMzNkFBMUVBREJFNEE2 MTA4NjZFREI0MTQxRDM2QTVCNzdDNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUc2aHduWGN4b0dWak4xWWtmVVdyYjNVeWhLQXB0R0w5cFlqM3dCOWo5Q3QvMS83 MUUzMzZBQTFFQURCRTRBNjEwODY2RURCNDE0MUQzNkE1Qjc3QzUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGVF6LDbgN8eslAxf6INx7OIePUfF32Yg0z4hKl5fJSXyGpkvtHLTGLsb4I1X L/gJIG3I/hz6lESJQF9UUw61g4Y6pmbrFE5frj5LMGBY2n3C+rdptlfD7NUcjBqq p+su2Gx1yl7G7Ocioj9APod60LD2vw+tOu5PYRcTl4VIO0OpHyyCrVAO2I7qb+b0 WiT5/7jIptArdq2/kwmQkzBZnJtrt0SIwenwYYT/kIFbXv53p52PhFijXmnul7N4 DD7JTkZt5eykh4d5AGzF3w08cA4otmsT8Sik/4etPIqlYisgNyVJkoZZcrA8pyPZ xOrp1HGAVsC3t3ElGiMuiSAmaQ== -----END CERTIFICATE-----Generated at Wed Nov 5 15:16:54 2025 by rpki-client