$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft File: D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft (raw, json) Hash identifier: FEdGOgsNR4flrPL4590ouVsxCnCim3vX4XaWRqwgCIU= Subject key identifier: 3B:B9:92:A9:82:C3:0D:A4:34:B0:BF:49:D7:56:3D:72:C2:0C:34:A0 Authority key identifier: D0:2C:56:35:F1:D8:38:00:E7:A8:ED:97:15:4E:C2:A1:8C:A5:01:BC Certificate issuer: /CN=D02C5635F1D83800E7A8ED97154EC2A18CA501BC Certificate serial: 4A63C25EE2C568BDE782F71CE2923ADEA0FB9B4B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer Subject info access: rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft Manifest number: 49 Signing time: Tue 04 Nov 2025 14:35:38 +0000 Manifest this update: Tue 04 Nov 2025 14:30:38 +0000 Manifest next update: Wed 05 Nov 2025 16:22:38 +0000 Files and hashes: 1: D02C5635F1D83800E7A8ED97154EC2A18CA501BC.crl (hash: YMfQYZjUTHtW15pcsGiSuTp+vB71yUC/9Xp+azqeGDw=) 2: 3138372e38352e36302e302f32322d3234203d3e20323632343033.roa (hash: 4NR4fcpgDlb5r7pUpuC26l2DBqMGwlvWFeJSAq28Lg0=) 3: 3137372e33382e39362e302f32312d3234203d3e20323632343033.roa (hash: m5CoR7Fq0M+qjSqPMr7/zS3iw9JAykuD5v+oIlFdbX0=) 4: 3138372e36312e38382e302f32322d3234203d3e20323632343033.roa (hash: aDikW3K0yc2BZC8ObSuWS0WVAHPD+SNZGwOY1KqGk4M=) 5: 323830343a3365303a3a2f33322d3438203d3e20323632343033.roa (hash: a/8o7Q2W9We/0XL+WJuVwmMVe5Tjw2P18g5zdZR9wYo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.crl rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 16:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:63:c2:5e:e2:c5:68:bd:e7:82:f7:1c:e2:92:3a:de:a0:fb:9b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D02C5635F1D83800E7A8ED97154EC2A18CA501BC Validity Not Before: Nov 4 14:30:38 2025 GMT Not After : Nov 5 16:22:38 2025 GMT Subject: CN=3BB992A982C30DA434B0BF49D7563D72C20C34A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:52:85:50:91:21:17:cd:6b:b5:ec:8b:fc:57: 94:3c:c3:0f:98:a6:88:ec:81:26:6b:14:96:55:ee: c1:80:5e:32:5a:6a:f1:42:7b:3b:c3:d9:8c:53:0c: 4f:fb:d9:14:81:3c:83:bc:20:3a:a1:d8:23:d3:dc: 0f:7b:0d:76:1e:49:e9:fd:ee:ad:0e:ef:49:f2:6c: 7f:e7:c7:4c:e0:7c:c8:e7:7e:ce:78:b0:7c:ef:d4: b9:e6:a4:bb:49:9b:67:a7:ed:4c:10:f8:0f:3d:39: 5d:59:32:d9:57:b6:3c:97:97:fa:dc:e9:2a:33:f8: cb:48:8d:53:2d:09:d0:2d:09:3a:b8:8f:95:f1:a8: 63:e1:77:3c:f2:1d:69:a6:49:83:ed:5a:37:05:fd: 4a:c3:a3:1f:03:55:ff:20:4d:65:12:8d:af:c9:42: 4f:1a:72:cf:e2:c7:14:32:c4:42:00:42:2e:7e:01: 85:73:a0:62:f1:62:27:ae:18:05:19:e6:43:7e:09: a9:0c:4e:3e:1b:89:5e:40:a0:40:09:66:31:73:12: 1a:e1:23:26:c7:eb:a9:6d:a3:81:89:3d:d6:f0:aa: af:35:b4:7b:70:44:71:46:c0:4c:03:a9:96:7f:ff: 38:08:6c:fe:4b:34:a2:de:90:2b:33:47:3f:23:60: ee:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B9:92:A9:82:C3:0D:A4:34:B0:BF:49:D7:56:3D:72:C2:0C:34:A0 X509v3 Authority Key Identifier: keyid:D0:2C:56:35:F1:D8:38:00:E7:A8:ED:97:15:4E:C2:A1:8C:A5:01:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d8:e9:e8:35:7c:33:2d:f2:a8:55:04:66:05:dd:71:f8:54: 50:c2:a2:ca:1b:96:1e:55:90:13:2a:a4:af:7d:65:87:c9:e3: b0:35:72:27:38:16:79:6e:a8:10:a8:38:7f:69:34:11:f2:1d: 96:ca:ec:f9:38:77:a9:9b:13:90:45:61:11:ad:94:71:8e:fc: 8f:dc:ef:37:f3:f3:83:fc:75:d7:9e:ee:c0:69:99:64:73:2f: 97:40:5f:05:18:13:02:a8:16:70:57:20:45:1d:a1:4d:3e:23: 34:37:c0:af:e4:42:ab:e9:b6:cf:d5:30:e8:2d:db:c0:47:26: 51:53:dd:59:de:1c:95:ef:55:00:14:dd:c9:83:2f:c3:62:ee: e5:b1:af:91:8a:7d:bc:56:69:90:43:26:9f:c3:6c:b3:6a:30: ff:91:eb:cd:81:28:92:21:f0:4c:a8:60:cb:fa:d1:9f:48:12: 00:35:2b:56:1f:54:37:34:c3:6d:e4:08:ab:b8:42:b3:1d:66: 67:6c:fa:45:68:84:d0:1e:fd:d2:6f:0a:9a:13:0e:bf:83:38: 0f:e5:b0:d8:bb:16:ce:cd:55:33:1b:8c:b4:f2:df:19:c2:de: 38:8f:1f:08:f3:e8:47:e6:72:3a:4a:43:1e:09:ae:9d:54:7f: 31:28:8f:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSmPCXuLFaL3ngvcc4pI63qD7m0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAyQzU2MzVGMUQ4MzgwMEU3QThFRDk3MTU0RUMyQTE4 Q0E1MDFCQzAeFw0yNTExMDQxNDMwMzhaFw0yNTExMDUxNjIyMzhaMDMxMTAvBgNV BAMTKDNCQjk5MkE5ODJDMzBEQTQzNEIwQkY0OUQ3NTYzRDcyQzIwQzM0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQUoVQkSEXzWu17Iv8V5Q8ww+Y pojsgSZrFJZV7sGAXjJaavFCezvD2YxTDE/72RSBPIO8IDqh2CPT3A97DXYeSen9 7q0O70nybH/nx0zgfMjnfs54sHzv1LnmpLtJm2en7UwQ+A89OV1ZMtlXtjyXl/rc 6Soz+MtIjVMtCdAtCTq4j5XxqGPhdzzyHWmmSYPtWjcF/UrDox8DVf8gTWUSja/J Qk8acs/ixxQyxEIAQi5+AYVzoGLxYieuGAUZ5kN+CakMTj4biV5AoEAJZjFzEhrh IybH66lto4GJPdbwqq81tHtwRHFGwEwDqZZ//zgIbP5LNKLekCszRz8jYO4jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUO7mSqYLDDaQ0sL9J11Y9csIMNKAwHwYDVR0j BBgwFoAU0CxWNfHYOADnqO2XFU7CoYylAbwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWZpa0s2S0V6UzdWbldQQUpuVXBqb0RycmJXZjRrOWdKTlI5VDFUbndu SnkvMC9EMDJDNTYzNUYxRDgzODAwRTdBOEVEOTcxNTRFQzJBMThDQTUwMUJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwMkM1NjM1RjFEODM4MDBF N0E4RUQ5NzE1NEVDMkExOENBNTAxQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWZpa0s2S0V6UzdWbldQQUpuVXBqb0RycmJXZjRrOWdKTlI5VDFUbnduSnkvMC9E MDJDNTYzNUYxRDgzODAwRTdBOEVEOTcxNTRFQzJBMThDQTUwMUJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd9jp6DV8My3yqFUEZgXdcfhUUMKiyhuWHlWQEyqkr31lh8njsDVyJzgWeW6o EKg4f2k0EfIdlsrs+Th3qZsTkEVhEa2UcY78j9zvN/Pzg/x1157uwGmZZHMvl0Bf BRgTAqgWcFcgRR2hTT4jNDfAr+RCq+m2z9Uw6C3bwEcmUVPdWd4cle9VABTdyYMv w2Lu5bGvkYp9vFZpkEMmn8Nss2ow/5HrzYEokiHwTKhgy/rRn0gSADUrVh9UNzTD beQIq7hCsx1mZ2z6RWiE0B790m8KmhMOv4M4D+Ww2LsWzs1VMxuMtPLfGcLeOI8f CPPoR+ZyOkpDHgmunVR/MSiPiQ== -----END CERTIFICATE-----Generated at Wed Nov 5 03:46:19 2025 by rpki-client