$ rpki-client -vvf rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft File: 0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft (raw, json) Hash identifier: UJz1I5yQcl8zljBfwm74aXsPnrpLppbI/To/98KRXr8= Subject key identifier: 39:7A:D2:D7:A7:12:06:50:FB:41:79:CC:B1:6D:85:1F:50:74:85:94 Authority key identifier: 0E:F7:13:1E:83:15:CF:BC:2A:0C:8E:B2:A6:84:48:B4:0D:F9:DD:EB Certificate issuer: /CN=0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB Certificate serial: 34B057426394A64A44EB9EDF36EA8B93FC601CB1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft Manifest number: 0300 Signing time: Wed 05 Nov 2025 14:23:01 +0000 Manifest this update: Wed 05 Nov 2025 14:18:01 +0000 Manifest next update: Thu 06 Nov 2025 17:32:01 +0000 Files and hashes: 1: 323830313a38303a336537303a3a2f34372d3437203d3e20323731353431.roa (hash: gQvqAbK6gQBmP0J6nHXKQ8gCtZEaiIVsEdHKjqQvV/Q=) 2: 0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl (hash: 2as3hQdYKHjfJ1U8p7VaHWQp1IcLhZc32OEpI8rvSNo=) 3: 3138312e3233322e3235302e302f32332d3234203d3e20323731353431.roa (hash: 4IIa4k60q+t0mOSWWa3xktMr2fL1MMbexf0+Pk1A8dU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 17:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b0:57:42:63:94:a6:4a:44:eb:9e:df:36:ea:8b:93:fc:60:1c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB Validity Not Before: Nov 5 14:18:01 2025 GMT Not After : Nov 6 17:32:01 2025 GMT Subject: CN=397AD2D7A7120650FB4179CCB16D851F50748594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:89:38:f2:7a:9b:33:1a:c7:09:e7:11:04:65: 3f:c8:b4:e6:a8:57:7f:47:0e:ee:2c:6d:a6:f0:65: c7:e2:08:38:94:99:68:d5:65:7b:ca:2d:d1:62:41: 58:62:94:05:c4:36:57:bc:7a:73:aa:35:9d:e3:d4: b7:1f:d0:12:74:5f:f2:a3:4b:8d:40:d0:5f:8c:56: 41:30:c6:da:ba:4e:be:80:5c:eb:d7:09:66:d3:2a: af:71:15:9b:f3:2c:44:7d:00:ea:94:aa:55:fd:e0: b2:32:b1:75:01:f3:2c:98:56:87:8a:b7:22:b0:61: 93:19:18:3a:75:2f:5a:63:7c:95:f7:ff:0e:4c:63: 9c:8d:7f:7a:27:6c:a2:ab:a4:c0:11:98:dc:d5:79: af:e1:3e:e8:b9:8d:4d:47:bd:05:17:44:3c:8e:eb: fe:49:3b:28:67:8d:8c:1f:6e:e9:f2:4f:4b:fc:63: 91:f1:f2:89:ab:82:a6:5a:96:f1:09:51:1b:b8:57: c4:af:c1:0b:5f:2f:03:bb:56:38:3c:7e:29:27:ad: 75:a0:e3:35:24:b3:ff:4c:21:2d:9e:fd:0e:90:2c: da:f4:65:f5:96:94:d4:ed:60:3a:fd:73:66:b4:52: 82:17:85:29:d1:a1:8b:12:86:04:90:6a:58:d3:33: c7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7A:D2:D7:A7:12:06:50:FB:41:79:CC:B1:6D:85:1F:50:74:85:94 X509v3 Authority Key Identifier: keyid:0E:F7:13:1E:83:15:CF:BC:2A:0C:8E:B2:A6:84:48:B4:0D:F9:DD:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:45:87:38:c3:91:dd:65:3e:82:a9:b6:2e:f1:32:66:ab:0c: ee:e9:59:d4:2b:89:64:61:2a:e9:b3:2d:f6:47:47:b1:83:e4: 45:e7:0b:9a:8b:5c:f8:4f:e2:f8:ae:37:fa:f9:cc:d1:af:5f: 66:a7:73:c3:36:a8:f4:5f:8a:9d:7d:84:e3:51:31:58:49:4e: c7:b9:a8:b5:63:43:74:51:d3:79:64:b7:60:bc:83:b1:2b:e9: 97:7c:e6:26:25:67:99:c7:95:bc:81:50:8a:7a:fc:66:6a:f9: ee:07:15:fe:dd:eb:4c:67:df:c9:eb:af:76:12:f3:ad:7f:87: 43:3e:f4:e2:61:21:d9:79:eb:87:bf:91:71:44:b6:d5:3e:37: 08:63:d3:1e:d0:02:7d:e0:dd:da:98:b0:d8:ce:ed:29:fa:f6: da:41:b0:bd:3f:25:3f:a8:bf:a5:91:34:41:74:a2:12:9c:b8: e7:62:d2:a7:a4:db:aa:77:57:34:2d:fc:46:41:54:81:35:ba: 1c:9a:32:ae:3e:d7:e5:3e:01:9b:80:7f:f6:16:48:b2:f9:d8: a1:50:d3:d4:8e:17:6c:59:7a:14:d7:0d:f1:49:a0:b0:6b:f7: ed:9f:60:82:b0:b9:bf:6d:d9:35:6d:a1:90:88:71:ee:97:a5: a6:a2:97:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNLBXQmOUpkpE657fNuqLk/xgHLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVGNzEzMUU4MzE1Q0ZCQzJBMEM4RUIyQTY4NDQ4QjQw REY5RERFQjAeFw0yNTExMDUxNDE4MDFaFw0yNTExMDYxNzMyMDFaMDMxMTAvBgNV BAMTKDM5N0FEMkQ3QTcxMjA2NTBGQjQxNzlDQ0IxNkQ4NTFGNTA3NDg1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbiTjyepszGscJ5xEEZT/ItOao V39HDu4sbabwZcfiCDiUmWjVZXvKLdFiQVhilAXENle8enOqNZ3j1Lcf0BJ0X/Kj S41A0F+MVkEwxtq6Tr6AXOvXCWbTKq9xFZvzLER9AOqUqlX94LIysXUB8yyYVoeK tyKwYZMZGDp1L1pjfJX3/w5MY5yNf3onbKKrpMARmNzVea/hPui5jU1HvQUXRDyO 6/5JOyhnjYwfbunyT0v8Y5Hx8omrgqZalvEJURu4V8SvwQtfLwO7Vjg8fiknrXWg 4zUks/9MIS2e/Q6QLNr0ZfWWlNTtYDr9c2a0UoIXhSnRoYsShgSQaljTM8fpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOXrS16cSBlD7QXnMsW2FH1B0hZQwHwYDVR0j BBgwFoAUDvcTHoMVz7wqDI6ypoRItA353eswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmE1MThTbjVDWWh3SnZFaWh5dHhDdkplUHU2d3k0eUhFWDZlZkx5aUFY RkEvMS8wRUY3MTMxRTgzMTVDRkJDMkEwQzhFQjJBNjg0NDhCNDBERjlEREVCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFRjcxMzFFODMxNUNGQkMy QTBDOEVCMkE2ODQ0OEI0MERGOURERUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmE1MThTbjVDWWh3SnZFaWh5dHhDdkplUHU2d3k0eUhFWDZlZkx5aUFYRkEvMS8w RUY3MTMxRTgzMTVDRkJDMkEwQzhFQjJBNjg0NDhCNDBERjlEREVCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJEWHOMOR3WU+gqm2LvEyZqsM7ulZ1CuJZGEq6bMt9kdHsYPkRecLmotc+E/i +K43+vnM0a9fZqdzwzao9F+KnX2E41ExWElOx7motWNDdFHTeWS3YLyDsSvpl3zm JiVnmceVvIFQinr8Zmr57gcV/t3rTGffyeuvdhLzrX+HQz704mEh2Xnrh7+RcUS2 1T43CGPTHtACfeDd2piw2M7tKfr22kGwvT8lP6i/pZE0QXSiEpy452LSp6TbqndX NC38RkFUgTW6HJoyrj7X5T4Bm4B/9hZIsvnYoVDT1I4XbFl6FNcN8UmgsGv37Z9g grC5v23ZNW2hkIhx7pelpqKXQA== -----END CERTIFICATE-----Generated at Wed Nov 5 16:43:48 2025 by rpki-client