$ rpki-client -vvf rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft File: 721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft (raw, json) Hash identifier: 65mPB4V38SdKJhMv+hUC0I1EXtg9iTnlbxOryvWWwMM= Subject key identifier: 60:BD:55:8D:21:6A:6F:56:90:B0:DF:4D:4A:9E:80:57:42:75:9F:40 Authority key identifier: 72:1F:DE:F0:EC:64:EC:9E:CB:89:63:D4:27:95:35:83:6A:0A:16:EB Certificate issuer: /CN=721FDEF0EC64EC9ECB8963D4279535836A0A16EB Certificate serial: 717DA7FD63C7299AD7CE5F8121CA55E75C93BF59 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.cer Subject info access: rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft Manifest number: 14 Signing time: Tue 04 Nov 2025 11:50:17 +0000 Manifest this update: Tue 04 Nov 2025 11:45:17 +0000 Manifest next update: Wed 05 Nov 2025 14:50:17 +0000 Files and hashes: 1: 34352e3137372e3138342e302f32322d3332203d3e20323638393933.roa (hash: 1fsdSmR4TdjbL1xr7Loe4KWvKXQMJAqt1mSxZ8Jgpyo=) 2: 721FDEF0EC64EC9ECB8963D4279535836A0A16EB.crl (hash: LmyoG5yB1cAoVFU9HpPmxRMShR5laPUjyo/pWH9PNaA=) 3: 323830343a356463633a3a2f33322d313238203d3e20323638393933.roa (hash: 8+Ghan3SgXuTsYmRhspkbGki+wRJrZx9AdfY1l2WwTE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.crl rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:7d:a7:fd:63:c7:29:9a:d7:ce:5f:81:21:ca:55:e7:5c:93:bf:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=721FDEF0EC64EC9ECB8963D4279535836A0A16EB Validity Not Before: Nov 4 11:45:17 2025 GMT Not After : Nov 5 14:50:17 2025 GMT Subject: CN=60BD558D216A6F5690B0DF4D4A9E805742759F40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0c:6c:ca:3e:f4:c3:75:db:bd:ba:1a:9a:63: 56:b1:a1:a4:e3:3a:fa:b7:be:7a:88:cb:cb:3b:31: f7:c7:84:8a:9a:f3:80:40:94:34:e8:65:9d:e9:0e: 79:0a:53:e9:6e:fe:a9:71:89:0a:0b:0a:01:ce:8e: 29:d5:2e:f7:0f:50:7d:0b:87:0e:2c:5e:d6:08:c3: 7f:df:8f:b0:c8:1f:8f:a4:4c:9a:a8:66:2e:9c:8d: a3:ed:11:b6:e3:57:71:97:6c:44:ad:2b:33:43:9a: 62:56:d9:fc:6d:44:24:78:34:14:79:7c:57:35:a5: d0:8c:2a:9a:5f:29:1d:76:53:28:6a:cb:8b:d0:bf: d5:71:34:c9:0f:ea:35:75:3d:43:45:44:8d:9e:e9: db:c4:0a:2a:4a:3f:8d:c0:d3:fd:ee:9d:46:35:32: 92:b7:8f:c2:e5:52:b9:e5:93:2f:7b:b4:26:77:11: 05:d9:28:4f:c8:d8:c8:8f:57:a2:95:da:2c:95:bb: db:cd:2b:22:9b:a7:5f:cf:29:c8:9e:cc:60:84:82: 02:bc:be:c6:fa:f5:c0:d5:0f:1c:05:d8:97:05:f2: 80:b2:09:fd:48:15:f1:f3:64:62:30:cd:61:9c:ea: 21:30:27:62:54:e5:50:fb:cf:2d:c9:10:2c:33:57: 64:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BD:55:8D:21:6A:6F:56:90:B0:DF:4D:4A:9E:80:57:42:75:9F:40 X509v3 Authority Key Identifier: keyid:72:1F:DE:F0:EC:64:EC:9E:CB:89:63:D4:27:95:35:83:6A:0A:16:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:74:01:fe:50:ab:f8:f1:e1:41:c6:4f:ed:83:26:f5:37:b2: 26:4e:7a:e3:09:ce:fc:4a:88:2f:54:eb:88:b4:7d:7b:fe:46: bb:57:b4:8f:0a:e8:ff:ec:9e:24:6b:35:cc:55:b3:80:14:43: d6:55:3d:ab:4f:2e:64:d6:b9:a5:29:1f:cc:7e:5c:8c:87:24: 65:79:4e:9b:00:6c:e0:6c:ca:a8:c9:77:1d:11:88:b6:e5:79: b9:52:c7:57:a4:ae:2d:fb:1d:2a:05:b5:ea:98:1c:fa:f1:c1: 96:d2:73:45:13:f3:c6:b1:38:50:e4:26:84:a8:7d:cf:94:11: cf:a9:9c:2e:11:66:c1:9f:fe:40:7a:93:10:c1:66:ee:87:e7: 6e:b5:13:d1:38:e8:90:cf:f6:7a:24:31:f2:8f:24:41:30:6d: b9:0e:80:fd:0b:8e:4b:32:22:b7:e3:50:f5:c2:4e:6e:1d:4c: 1c:75:16:bc:2d:c1:1e:c4:6e:ac:6b:e8:28:76:1c:67:10:be: d5:94:9e:20:1f:ac:39:4f:45:fe:2c:7b:f3:0b:59:a1:83:8a: ff:26:b7:7f:72:91:a1:5d:ea:04:09:12:de:08:ed:c6:b8:0a: 79:b8:4f:e7:76:bb:71:d0:b9:03:a3:66:e5:10:61:25:0f:3d: 20:f9:04:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcX2n/WPHKZrXzl+BIcpV51yTv1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIxRkRFRjBFQzY0RUM5RUNCODk2M0Q0Mjc5NTM1ODM2 QTBBMTZFQjAeFw0yNTExMDQxMTQ1MTdaFw0yNTExMDUxNDUwMTdaMDMxMTAvBgNV BAMTKDYwQkQ1NThEMjE2QTZGNTY5MEIwREY0RDRBOUU4MDU3NDI3NTlGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHDGzKPvTDddu9uhqaY1axoaTj Ovq3vnqIy8s7MffHhIqa84BAlDToZZ3pDnkKU+lu/qlxiQoLCgHOjinVLvcPUH0L hw4sXtYIw3/fj7DIH4+kTJqoZi6cjaPtEbbjV3GXbEStKzNDmmJW2fxtRCR4NBR5 fFc1pdCMKppfKR12Uyhqy4vQv9VxNMkP6jV1PUNFRI2e6dvECipKP43A0/3unUY1 MpK3j8LlUrnlky97tCZ3EQXZKE/I2MiPV6KV2iyVu9vNKyKbp1/PKciezGCEggK8 vsb69cDVDxwF2JcF8oCyCf1IFfHzZGIwzWGc6iEwJ2JU5VD7zy3JECwzV2QvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYL1VjSFqb1aQsN9NSp6AV0J1n0AwHwYDVR0j BBgwFoAUch/e8Oxk7J7LiWPUJ5U1g2oKFuswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzVGSEthRmtpUFBwWmtON01KMmhFbXpxNUhDaDNnM25ha0xoVlhoMkRz MzQvMC83MjFGREVGMEVDNjRFQzlFQ0I4OTYzRDQyNzk1MzU4MzZBMEExNkVCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyMUZERUYwRUM2NEVDOUVD Qjg5NjNENDI3OTUzNTgzNkEwQTE2RUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzVGSEthRmtpUFBwWmtON01KMmhFbXpxNUhDaDNnM25ha0xoVlhoMkRzMzQvMC83 MjFGREVGMEVDNjRFQzlFQ0I4OTYzRDQyNzk1MzU4MzZBMEExNkVCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACXQB/lCr+PHhQcZP7YMm9TeyJk564wnO/EqIL1TriLR9e/5Gu1e0jwro/+ye JGs1zFWzgBRD1lU9q08uZNa5pSkfzH5cjIckZXlOmwBs4GzKqMl3HRGItuV5uVLH V6SuLfsdKgW16pgc+vHBltJzRRPzxrE4UOQmhKh9z5QRz6mcLhFmwZ/+QHqTEMFm 7ofnbrUT0TjokM/2eiQx8o8kQTBtuQ6A/QuOSzIit+NQ9cJObh1MHHUWvC3BHsRu rGvoKHYcZxC+1ZSeIB+sOU9F/ix78wtZoYOK/ya3f3KRoV3qBAkS3gjtxrgKebhP 53a7cdC5A6Nm5RBhJQ89IPkEkw== -----END CERTIFICATE-----Generated at Wed Nov 5 03:47:54 2025 by rpki-client