$ rpki-client -vvf rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/96A685ACC1AE4D09C4B25F227F9800FD9278C982.mft File: 96A685ACC1AE4D09C4B25F227F9800FD9278C982.mft (raw, json) Hash identifier: 78GsfPbK1grodew6eJ7Aw7sXGvTsjfE9Ru7S5F233RY= Subject key identifier: CA:D9:5B:EC:AC:0A:C0:FE:6A:D5:3C:BB:EB:50:FE:C2:93:0A:15:71 Authority key identifier: 96:A6:85:AC:C1:AE:4D:09:C4:B2:5F:22:7F:98:00:FD:92:78:C9:82 Certificate issuer: /CN=96A685ACC1AE4D09C4B25F227F9800FD9278C982 Certificate serial: 415657D4F0EC1B8E42148A03276B43C215628D1C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A685ACC1AE4D09C4B25F227F9800FD9278C982.cer Subject info access: rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/96A685ACC1AE4D09C4B25F227F9800FD9278C982.mft Manifest number: 0214 Signing time: Tue 04 Nov 2025 22:23:23 +0000 Manifest this update: Tue 04 Nov 2025 22:18:23 +0000 Manifest next update: Wed 05 Nov 2025 22:35:23 +0000 Files and hashes: 1: 96A685ACC1AE4D09C4B25F227F9800FD9278C982.crl (hash: 2/Iml3ond2SR94EuUR4Zz5c+rXXpvQY5cdVxGtAXadw=) 2: 3132382e3230312e3138302e302f32322d3332203d3e20323636363434.roa (hash: LCpjUHvOqeon5R2eI8MqMtmoTaiH42tdh3AnzR7YzKI=) 3: 323830343a336632633a3a2f33322d313238203d3e20323636363434.roa (hash: 6H0dUCYu+zpyOtjKrACs8ym/KLI6dHxy1ivwjplR+eE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/96A685ACC1AE4D09C4B25F227F9800FD9278C982.crl rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/96A685ACC1AE4D09C4B25F227F9800FD9278C982.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A685ACC1AE4D09C4B25F227F9800FD9278C982.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:56:57:d4:f0:ec:1b:8e:42:14:8a:03:27:6b:43:c2:15:62:8d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96A685ACC1AE4D09C4B25F227F9800FD9278C982 Validity Not Before: Nov 4 22:18:23 2025 GMT Not After : Nov 5 22:35:23 2025 GMT Subject: CN=CAD95BECAC0AC0FE6AD53CBBEB50FEC2930A1571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:32:f5:af:60:45:c3:60:5b:fa:c9:56:f7:58: bb:66:4e:d5:06:b5:45:4c:7a:27:cb:9a:ad:50:84: b1:e4:0b:7c:31:17:3b:1c:5c:8c:0f:da:75:df:f0: 78:13:13:80:5f:1c:aa:db:95:d6:dd:80:3e:fd:e6: 82:f9:e5:4f:bf:f1:4b:fa:b7:1b:e4:75:6c:f2:7e: 18:7c:80:ee:9a:45:9e:96:cb:9a:ed:d4:ae:89:2a: da:9c:d2:97:ee:8e:77:26:96:31:b6:13:b9:e2:67: 9b:ae:91:46:b5:66:33:2f:52:41:ec:49:30:0d:d5: 6e:e8:82:56:79:06:92:83:1b:bb:c5:2e:02:a8:d9: c5:fd:04:d5:31:27:41:f0:0a:a1:57:32:d0:cc:1c: 0f:31:e2:ec:76:38:cd:6f:7b:81:b7:63:80:8e:cd: e5:36:06:c7:3f:78:fc:ed:e7:52:7a:24:4f:04:2b: 43:2c:d8:52:0a:b8:5b:a4:5e:a9:a8:8a:d1:aa:29: 71:1e:8b:d8:1b:e6:30:90:9a:25:78:b6:5b:3b:7c: 29:ac:32:ed:5c:d7:9a:e8:11:63:d6:e3:56:f7:ea: 85:d7:2a:32:79:f9:30:81:f2:a9:64:c9:a5:73:ec: 79:69:36:9b:c7:c5:f8:be:4f:ac:ee:83:96:3c:ea: 79:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D9:5B:EC:AC:0A:C0:FE:6A:D5:3C:BB:EB:50:FE:C2:93:0A:15:71 X509v3 Authority Key Identifier: keyid:96:A6:85:AC:C1:AE:4D:09:C4:B2:5F:22:7F:98:00:FD:92:78:C9:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/96A685ACC1AE4D09C4B25F227F9800FD9278C982.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A685ACC1AE4D09C4B25F227F9800FD9278C982.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/96A685ACC1AE4D09C4B25F227F9800FD9278C982.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:40:bb:b0:bf:26:9a:de:2f:8a:5f:c1:77:e7:19:8d:c5:1f: bb:d6:5e:a5:a7:56:89:e3:0c:12:81:7b:9d:6a:f0:92:43:36: b6:55:7d:fa:0b:98:f3:80:c8:91:25:be:e5:bb:d2:d4:f2:b9: 77:fc:ed:5d:84:53:2f:f3:c2:36:6f:ee:77:c8:4b:c8:75:04: 7c:46:df:35:4e:8a:a9:15:06:6f:99:c0:8c:25:98:15:bb:71: 13:bf:d2:e5:60:50:e8:ce:96:55:59:61:40:d1:ef:df:07:30: ac:4d:fc:5c:23:e1:8c:9d:c2:3d:c4:2b:e4:5a:e4:4e:86:50: c4:a3:f6:38:7d:22:70:42:ee:a8:5d:d9:dd:12:b0:76:b2:73: 59:08:55:9c:8d:57:ca:7a:63:5e:12:9c:1f:16:6b:44:c1:77: 33:9a:1c:f6:4a:5b:2b:1f:fa:a7:50:b9:43:aa:80:69:da:ac: 53:82:a9:7f:3c:6d:80:c0:0b:3c:05:98:83:e9:e2:86:17:10: b0:48:be:9b:f8:e9:d2:d1:a4:89:cd:b2:ad:ae:64:03:b7:05: 0c:cc:bb:84:e1:00:23:30:f8:6f:35:7a:c1:ba:b9:48:be:fc: b5:48:ab:7f:df:68:5a:40:a0:09:77:c5:09:60:a6:8b:1f:43: a7:fe:64:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQVZX1PDsG45CFIoDJ2tDwhVijRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZBNjg1QUNDMUFFNEQwOUM0QjI1RjIyN0Y5ODAwRkQ5 Mjc4Qzk4MjAeFw0yNTExMDQyMjE4MjNaFw0yNTExMDUyMjM1MjNaMDMxMTAvBgNV BAMTKENBRDk1QkVDQUMwQUMwRkU2QUQ1M0NCQkVCNTBGRUMyOTMwQTE1NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChMvWvYEXDYFv6yVb3WLtmTtUG tUVMeifLmq1QhLHkC3wxFzscXIwP2nXf8HgTE4BfHKrbldbdgD795oL55U+/8Uv6 txvkdWzyfhh8gO6aRZ6Wy5rt1K6JKtqc0pfujncmljG2E7niZ5uukUa1ZjMvUkHs STAN1W7oglZ5BpKDG7vFLgKo2cX9BNUxJ0HwCqFXMtDMHA8x4ux2OM1ve4G3Y4CO zeU2Bsc/ePzt51J6JE8EK0Ms2FIKuFukXqmoitGqKXEei9gb5jCQmiV4tls7fCms Mu1c15roEWPW41b36oXXKjJ5+TCB8qlkyaVz7HlpNpvHxfi+T6zug5Y86nm9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUytlb7KwKwP5q1Ty761D+wpMKFXEwHwYDVR0j BBgwFoAUlqaFrMGuTQnEsl8if5gA/ZJ4yYIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWoyWDJDYXJGcGU5eUtkSm53TjU5cHhkZE5hWnBkelI5NmJ0MUw3WmdT dEcvMC85NkE2ODVBQ0MxQUU0RDA5QzRCMjVGMjI3Rjk4MDBGRDkyNzhDOTgyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2QTY4NUFDQzFBRTREMDlD NEIyNUYyMjdGOTgwMEZEOTI3OEM5ODIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWoyWDJDYXJGcGU5eUtkSm53TjU5cHhkZE5hWnBkelI5NmJ0MUw3WmdTdEcvMC85 NkE2ODVBQ0MxQUU0RDA5QzRCMjVGMjI3Rjk4MDBGRDkyNzhDOTgyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlkC7sL8mmt4vil/Bd+cZjcUfu9ZepadWieMMEoF7nWrwkkM2tlV9+guY84DI kSW+5bvS1PK5d/ztXYRTL/PCNm/ud8hLyHUEfEbfNU6KqRUGb5nAjCWYFbtxE7/S 5WBQ6M6WVVlhQNHv3wcwrE38XCPhjJ3CPcQr5FrkToZQxKP2OH0icELuqF3Z3RKw drJzWQhVnI1XynpjXhKcHxZrRMF3M5oc9kpbKx/6p1C5Q6qAadqsU4KpfzxtgMAL PAWYg+nihhcQsEi+m/jp0tGkic2yra5kA7cFDMy7hOEAIzD4bzV6wbq5SL78tUir f99oWkCgCXfFCWCmix9Dp/5k2A== -----END CERTIFICATE-----Generated at Wed Nov 5 11:16:02 2025 by rpki-client