$ rpki-client -vvf rpki-repo.registro.br/repo/AdW2tgvChBfisJX972XVc5fuke9FTM2cDasttYNAEx7q/0/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.mft File: D29B42908CC29F329464DE38C3D03CB9E63C3DC5.mft (raw, json) Hash identifier: jqO8IvGCFrYrcwvIHqIkCabQkHOtwy1NKEyRHiEPunM= Subject key identifier: 48:0E:DC:BE:BC:76:44:D8:6F:97:55:3E:1F:48:BF:87:A8:DC:9D:C4 Authority key identifier: D2:9B:42:90:8C:C2:9F:32:94:64:DE:38:C3:D0:3C:B9:E6:3C:3D:C5 Certificate issuer: /CN=D29B42908CC29F329464DE38C3D03CB9E63C3DC5 Certificate serial: 29295AED8AD362E74412D80C8EBEB62079FA9EAC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.cer Subject info access: rsync://rpki-repo.registro.br/repo/AdW2tgvChBfisJX972XVc5fuke9FTM2cDasttYNAEx7q/0/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.mft Manifest number: 0D Signing time: Tue 04 Nov 2025 19:35:29 +0000 Manifest this update: Tue 04 Nov 2025 19:30:29 +0000 Manifest next update: Wed 05 Nov 2025 21:14:29 +0000 Files and hashes: 1: D29B42908CC29F329464DE38C3D03CB9E63C3DC5.crl (hash: fODwV5GWYNpKCqzpnIKnxKi2DaUmGhFNyDNaBTXEp1o=) 2: 34352e3232362e3130382e302f32322d3332203d3e20323636393933.roa (hash: Z6xp+ak0v8Qyp2vmtOALPsuo4K6cHKyMKGNHL8CfwuE=) 3: 323830343a343638303a3a2f33322d313238203d3e20323636393933.roa (hash: LHvIW3ECSdm40+1I40OKH3SRqiRIU0hBxVlWoFKTcqs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AdW2tgvChBfisJX972XVc5fuke9FTM2cDasttYNAEx7q/0/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.crl rsync://rpki-repo.registro.br/repo/AdW2tgvChBfisJX972XVc5fuke9FTM2cDasttYNAEx7q/0/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 21:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:29:5a:ed:8a:d3:62:e7:44:12:d8:0c:8e:be:b6:20:79:fa:9e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D29B42908CC29F329464DE38C3D03CB9E63C3DC5 Validity Not Before: Nov 4 19:30:29 2025 GMT Not After : Nov 5 21:14:29 2025 GMT Subject: CN=480EDCBEBC7644D86F97553E1F48BF87A8DC9DC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3e:45:ba:e2:b2:d2:c6:5e:6a:6b:02:6d:e1: b8:cc:91:70:e8:cf:ba:6a:05:d6:e4:42:a2:de:76: c1:3f:ac:52:d4:63:83:de:23:27:92:28:05:a4:54: f7:bb:54:ac:61:7a:24:eb:6c:74:f0:b5:38:02:9c: 7d:94:71:71:10:19:75:f6:4b:f7:d6:b3:d2:5e:56: 03:81:8e:04:69:29:6c:6f:1b:19:68:29:a1:2d:a0: 31:3e:dc:fe:4d:ad:63:f6:aa:85:7a:1f:16:bc:71: ac:cf:86:36:e7:ee:79:f6:70:d9:eb:df:24:1d:41: 58:59:6a:6e:1a:f4:9f:f4:bb:1e:78:70:aa:94:a7: bb:fa:76:c4:2b:c7:bd:8e:45:0e:2a:da:f1:74:29: 2e:11:97:d5:12:52:de:7a:59:98:f2:0d:2b:54:82: 2c:12:47:4e:43:0f:be:91:4f:a9:03:3a:fc:b3:a7: ff:f6:b0:ee:28:ca:62:78:52:63:b3:08:18:19:72: df:b2:ec:72:79:92:17:9d:05:2d:39:64:42:f0:4c: e4:a2:a5:54:cc:43:02:41:62:25:da:92:f3:04:c8: 6c:82:0a:e7:3a:13:e3:9f:4a:be:c3:84:fc:0a:dd: 66:a0:e4:5b:04:e8:af:99:a4:ef:d4:82:7b:d7:a1: 4b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0E:DC:BE:BC:76:44:D8:6F:97:55:3E:1F:48:BF:87:A8:DC:9D:C4 X509v3 Authority Key Identifier: keyid:D2:9B:42:90:8C:C2:9F:32:94:64:DE:38:C3:D0:3C:B9:E6:3C:3D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AdW2tgvChBfisJX972XVc5fuke9FTM2cDasttYNAEx7q/0/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AdW2tgvChBfisJX972XVc5fuke9FTM2cDasttYNAEx7q/0/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:2d:64:a3:87:bc:4d:e6:94:f1:79:6e:83:3e:30:57:cb:d0: b5:72:ef:3d:d2:d5:0d:1d:f7:d2:0c:95:8d:36:d9:51:34:53: bb:14:cf:e7:81:c1:47:25:fa:be:ff:18:c8:34:81:7e:70:c6: eb:a1:06:65:56:9a:ac:23:a7:74:f5:e6:79:08:5f:06:de:f9: 43:8d:5c:76:3a:88:91:ae:5c:89:f0:a2:d2:54:29:0a:18:f8: 12:16:7f:0c:b8:d1:d1:0c:23:05:d7:48:6c:77:5d:0a:39:17: 9e:4f:e3:5a:2f:67:38:85:74:4f:dc:30:e5:9c:b6:c4:c0:18: 00:63:84:51:a6:fe:b1:cc:0d:9a:5c:d5:8e:2a:d6:98:7b:da: e2:5f:86:42:98:3a:89:de:fd:04:c1:6c:9c:bd:4c:31:92:4b: 95:a4:9b:a9:45:32:a0:8f:f3:8e:a9:ce:32:41:2e:c7:d1:94: 3f:81:5e:14:2b:48:62:61:c4:7e:80:a1:42:d0:44:c3:93:78: 44:a3:2d:19:da:d8:c2:26:29:ab:64:b7:95:b2:1c:4c:fe:17: f2:f2:e0:b5:5c:67:bb:46:eb:2b:55:9f:3b:c7:30:f4:02:59: 16:60:fa:20:cd:31:9f:65:90:b2:f1:95:ac:ea:34:78:40:c6: ff:03:40:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKSla7YrTYudEEtgMjr62IHn6nqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5QjQyOTA4Q0MyOUYzMjk0NjRERTM4QzNEMDNDQjlF NjNDM0RDNTAeFw0yNTExMDQxOTMwMjlaFw0yNTExMDUyMTE0MjlaMDMxMTAvBgNV BAMTKDQ4MEVEQ0JFQkM3NjQ0RDg2Rjk3NTUzRTFGNDhCRjg3QThEQzlEQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMPkW64rLSxl5qawJt4bjMkXDo z7pqBdbkQqLedsE/rFLUY4PeIyeSKAWkVPe7VKxheiTrbHTwtTgCnH2UcXEQGXX2 S/fWs9JeVgOBjgRpKWxvGxloKaEtoDE+3P5NrWP2qoV6Hxa8cazPhjbn7nn2cNnr 3yQdQVhZam4a9J/0ux54cKqUp7v6dsQrx72ORQ4q2vF0KS4Rl9USUt56WZjyDStU giwSR05DD76RT6kDOvyzp//2sO4oymJ4UmOzCBgZct+y7HJ5khedBS05ZELwTOSi pVTMQwJBYiXakvMEyGyCCuc6E+OfSr7DhPwK3Wag5FsE6K+ZpO/UgnvXoUtRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSA7cvrx2RNhvl1U+H0i/h6jcncQwHwYDVR0j BBgwFoAU0ptCkIzCnzKUZN44w9A8ueY8PcUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWRXMnRndkNoQmZpc0pYOTcyWFZjNWZ1a2U5RlRNMmNEYXN0dFlOQUV4 N3EvMC9EMjlCNDI5MDhDQzI5RjMyOTQ2NERFMzhDM0QwM0NCOUU2M0MzREM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOUI0MjkwOENDMjlGMzI5 NDY0REUzOEMzRDAzQ0I5RTYzQzNEQzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWRXMnRndkNoQmZpc0pYOTcyWFZjNWZ1a2U5RlRNMmNEYXN0dFlOQUV4N3EvMC9E MjlCNDI5MDhDQzI5RjMyOTQ2NERFMzhDM0QwM0NCOUU2M0MzREM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEC1ko4e8TeaU8Xlugz4wV8vQtXLvPdLVDR330gyVjTbZUTRTuxTP54HBRyX6 vv8YyDSBfnDG66EGZVaarCOndPXmeQhfBt75Q41cdjqIka5cifCi0lQpChj4EhZ/ DLjR0QwjBddIbHddCjkXnk/jWi9nOIV0T9ww5Zy2xMAYAGOEUab+scwNmlzVjirW mHva4l+GQpg6id79BMFsnL1MMZJLlaSbqUUyoI/zjqnOMkEux9GUP4FeFCtIYmHE foChQtBEw5N4RKMtGdrYwiYpq2S3lbIcTP4X8vLgtVxnu0brK1WfO8cw9AJZFmD6 IM0xn2WQsvGVrOo0eEDG/wNAfg== -----END CERTIFICATE-----Generated at Wed Nov 5 12:29:28 2025 by rpki-client