$ rpki-client -vvf rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft File: CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft (raw, json) Hash identifier: 29u8NjIWInydOvVqguTUh9uddpLgiBz6vCsEF1mxYS0= Subject key identifier: 2A:F2:D6:5F:A0:6F:E9:03:58:28:65:02:77:5A:16:00:E3:E9:42:7F Authority key identifier: CA:0A:B2:BC:B2:83:EF:EB:B7:72:29:E5:6E:86:E4:5C:98:64:D5:CF Certificate issuer: /CN=CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF Certificate serial: 72E8484A6AAD39C2D3296FD91F1F8F884DA7B781 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer Subject info access: rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft Manifest number: 39 Signing time: Wed 05 Nov 2025 11:01:15 +0000 Manifest this update: Wed 05 Nov 2025 10:56:15 +0000 Manifest next update: Thu 06 Nov 2025 11:39:15 +0000 Files and hashes: 1: 3139322e3134302e36382e302f32322d3332203d3e20323636323531.roa (hash: EsQelpaQeAfU/Gzg0i25pm2jNJGfy2Qz/7ELSEE9Oeo=) 2: CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl (hash: brmVfnlMheuxej140mtmmoZuSvxAADE2cAPDzYkEdmw=) 3: 323830343a336431303a3a2f33322d313238203d3e20323636323531.roa (hash: 6OM5TUR8INqK6ybskaGnuewoKzCLeWsNPgoxidg6HF0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e8:48:4a:6a:ad:39:c2:d3:29:6f:d9:1f:1f:8f:88:4d:a7:b7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF Validity Not Before: Nov 5 10:56:15 2025 GMT Not After : Nov 6 11:39:15 2025 GMT Subject: CN=2AF2D65FA06FE90358286502775A1600E3E9427F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:88:01:e5:ab:f9:88:a6:4b:92:e7:09:53:9a: 2e:49:1a:a3:4a:e4:c0:fb:c4:a5:da:a8:2e:97:c1: c6:6e:7b:ef:19:42:6f:e4:3f:b3:59:c9:0d:b2:a7: f6:63:d2:f7:86:48:2a:8e:c0:3d:a1:69:e6:02:27: ea:63:a9:91:c9:50:45:c7:be:c4:10:93:74:9d:6f: dd:ac:4a:11:17:c2:e0:3e:38:5f:68:9c:5b:d4:ac: b0:c6:1e:94:fb:04:3a:8a:fe:38:ef:9e:69:92:db: ec:0a:04:0d:3e:16:bb:8f:86:4c:f7:f7:c3:1b:fd: 21:58:f8:f2:c2:c8:26:42:c2:f6:7d:dc:0e:af:fd: 74:0a:00:d3:a5:24:df:b4:5a:be:44:1e:38:b2:22: d2:69:93:1c:97:a0:85:6b:3f:1b:d4:8b:cb:28:c6: 6d:50:91:60:ce:77:64:d3:d7:8c:42:eb:f4:ea:f2: 5d:0a:0f:37:df:67:7c:47:77:6c:3f:69:e0:56:4f: 17:36:a3:e0:4b:4a:72:13:0c:b3:93:57:9c:ea:5a: 72:8b:1c:ea:71:a5:c0:2d:2a:32:2e:1d:3f:ea:dc: ff:52:9f:dc:38:57:18:6d:89:0a:50:e7:50:ac:58: b5:2c:87:56:84:27:1b:5d:50:c1:d0:98:62:a2:30: 7f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F2:D6:5F:A0:6F:E9:03:58:28:65:02:77:5A:16:00:E3:E9:42:7F X509v3 Authority Key Identifier: keyid:CA:0A:B2:BC:B2:83:EF:EB:B7:72:29:E5:6E:86:E4:5C:98:64:D5:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c4:63:89:37:8d:55:9a:5e:f4:b1:e1:68:50:a6:67:a3:e4: a0:d1:e7:5a:e0:8c:58:5d:a2:02:fb:14:f8:44:2a:d5:68:03: 2a:44:8e:04:64:26:43:74:0b:94:ca:61:3d:e2:2e:cd:6b:36: a0:f6:01:cc:ad:e4:5e:1f:bc:9a:d4:95:ac:2d:d6:f8:67:07: 01:10:65:8c:65:6d:07:11:49:38:27:f3:ad:26:48:5e:0a:b9: 6d:ea:3b:85:50:92:56:d4:a3:a8:4a:da:c5:b5:1e:22:4a:29: ae:44:21:67:1e:e1:79:9d:19:1a:cd:25:c7:55:c6:5e:2e:b0: a6:47:e6:5e:cd:3c:ea:14:f5:86:20:83:94:ee:c9:66:22:2c: 32:5f:fc:59:29:37:0b:c1:9d:14:4d:39:70:1f:db:12:24:9f: a5:f2:5a:36:be:6c:c1:c8:29:53:ae:21:42:07:76:1a:3d:95: ec:13:f5:3d:66:7b:23:1c:2b:ef:ee:a7:28:44:fc:97:59:0d: be:9d:e3:90:cc:3d:42:e4:f8:05:97:b0:8a:43:8c:97:1e:e8: 4b:f4:e4:3b:6f:d0:06:3c:fc:6b:97:a0:5f:7e:d6:36:14:ba: 5b:99:06:b4:b4:69:0f:68:2a:7f:8b:15:70:5a:1f:5d:0e:68: f2:c1:de:e8 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUcuhISmqtOcLTKW/ZHx+PiE2nt4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EwQUIyQkNCMjgzRUZFQkI3NzIyOUU1NkU4NkU0NUM5 ODY0RDVDRjAeFw0yNTExMDUxMDU2MTVaFw0yNTExMDYxMTM5MTVaMDMxMTAvBgNV BAMTKDJBRjJENjVGQTA2RkU5MDM1ODI4NjUwMjc3NUExNjAwRTNFOTQyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCniAHlq/mIpkuS5wlTmi5JGqNK 5MD7xKXaqC6XwcZue+8ZQm/kP7NZyQ2yp/Zj0veGSCqOwD2haeYCJ+pjqZHJUEXH vsQQk3Sdb92sShEXwuA+OF9onFvUrLDGHpT7BDqK/jjvnmmS2+wKBA0+FruPhkz3 98Mb/SFY+PLCyCZCwvZ93A6v/XQKANOlJN+0Wr5EHjiyItJpkxyXoIVrPxvUi8so xm1QkWDOd2TT14xC6/Tq8l0KDzffZ3xHd2w/aeBWTxc2o+BLSnITDLOTV5zqWnKL HOpxpcAtKjIuHT/q3P9Sn9w4VxhtiQpQ51CsWLUsh1aEJxtdUMHQmGKiMH91AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUKvLWX6Bv6QNYKGUCd1oWAOPpQn8wHwYDVR0j BBgwFoAUygqyvLKD7+u3cinlbobkXJhk1c8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9BVFdUWnZ0YVp6NEtYVzIzVENGVXhhUFFxRTZjbVJVQlJhOEc4RnBldXFm LzAvQ0EwQUIyQkNCMjgzRUZFQkI3NzIyOUU1NkU4NkU0NUM5ODY0RDVDRi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DQTBBQjJCQ0IyODNFRkVCQjc3 MjI5RTU2RTg2RTQ1Qzk4NjRENUNGLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FU V1RadnRhWno0S1hXMjNUQ0ZVeGFQUXFFNmNtUlVCUmE4RzhGcGV1cWYvMC9DQTBB QjJCQ0IyODNFRkVCQjc3MjI5RTU2RTg2RTQ1Qzk4NjRENUNGLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA msRjiTeNVZpe9LHhaFCmZ6PkoNHnWuCMWF2iAvsU+EQq1WgDKkSOBGQmQ3QLlMph PeIuzWs2oPYBzK3kXh+8mtSVrC3W+GcHARBljGVtBxFJOCfzrSZIXgq5beo7hVCS VtSjqEraxbUeIkoprkQhZx7heZ0ZGs0lx1XGXi6wpkfmXs086hT1hiCDlO7JZiIs Ml/8WSk3C8GdFE05cB/bEiSfpfJaNr5swcgpU64hQgd2Gj2V7BP1PWZ7Ixwr7+6n KET8l1kNvp3jkMw9QuT4BZewikOMlx7oS/TkO2/QBjz8a5egX37WNhS6W5kGtLRp D2gqf4sVcFofXQ5o8sHe6A== -----END CERTIFICATE-----Generated at Wed Nov 5 13:59:55 2025 by rpki-client