$ rpki-client -vvf rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/0/C7AA2249FA58EA1330AA369A2E7EA202B054E665.mft File: C7AA2249FA58EA1330AA369A2E7EA202B054E665.mft (raw, json) Hash identifier: Gh2Cc6MPeX29xKbANGbvsmZReQc3JIZtnaCQaA6OUAw= Subject key identifier: A3:C4:80:9F:3F:FA:03:18:47:4D:D5:46:24:F8:43:D8:96:3C:C5:51 Authority key identifier: C7:AA:22:49:FA:58:EA:13:30:AA:36:9A:2E:7E:A2:02:B0:54:E6:65 Certificate issuer: /CN=C7AA2249FA58EA1330AA369A2E7EA202B054E665 Certificate serial: 08981B06A6DA40E2F537B169BADFAC9FC1A2BA50 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7AA2249FA58EA1330AA369A2E7EA202B054E665.cer Subject info access: rsync://rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/0/C7AA2249FA58EA1330AA369A2E7EA202B054E665.mft Manifest number: 01AE Signing time: Wed 05 Nov 2025 00:46:37 +0000 Manifest this update: Wed 05 Nov 2025 00:41:37 +0000 Manifest next update: Thu 06 Nov 2025 01:20:37 +0000 Files and hashes: 1: 34352e3233352e38342e302f32322d3234203d3e20323638313934.roa (hash: vG8xuQ9x0wYzXOy9Kmi5RiLmbg7K9G/hvr9xLoJpvyo=) 2: 323830343a346436383a3a2f33322d3438203d3e20323638313934.roa (hash: ny3mmpCYx/i7rtb8nwvG8x+yTF3ccyd7VTl98Ybvphw=) 3: C7AA2249FA58EA1330AA369A2E7EA202B054E665.crl (hash: pASJh6uCr3yMoBSg4tR7VLKHSpb+nP9PT9yM9PQWca4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/0/C7AA2249FA58EA1330AA369A2E7EA202B054E665.crl rsync://rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/0/C7AA2249FA58EA1330AA369A2E7EA202B054E665.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7AA2249FA58EA1330AA369A2E7EA202B054E665.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:98:1b:06:a6:da:40:e2:f5:37:b1:69:ba:df:ac:9f:c1:a2:ba:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7AA2249FA58EA1330AA369A2E7EA202B054E665 Validity Not Before: Nov 5 00:41:37 2025 GMT Not After : Nov 6 01:20:37 2025 GMT Subject: CN=A3C4809F3FFA0318474DD54624F843D8963CC551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e9:b6:87:9a:45:07:82:d5:73:95:49:4f:4e: 1c:d4:ac:79:4a:f8:79:02:96:b4:f8:c1:c2:64:0f: 64:76:09:5e:cd:db:e5:a5:7e:b2:01:81:ac:82:ab: ff:c7:81:1a:4e:2a:07:a6:8d:cb:d4:8a:86:1e:ca: 03:73:1d:38:00:a9:3c:e4:fd:3e:d0:5d:8e:96:8e: 6e:7f:3e:66:7e:49:28:87:4e:35:2d:99:e0:45:18: bd:ca:c8:99:1e:63:55:33:6b:46:bb:79:e4:bd:ec: 08:37:f6:16:3a:c5:76:01:4c:2b:06:f8:b6:fb:87: 40:57:4a:f5:f8:e0:e3:95:66:42:2b:77:a6:0a:de: fb:2b:9d:aa:04:9c:e2:03:75:e1:55:80:e9:2c:ce: 28:c4:c3:50:95:5a:82:8d:4c:b3:59:44:82:de:8f: de:f0:5e:c2:94:0c:ff:83:35:97:51:6b:26:47:35: c7:e4:9c:5b:69:f2:82:51:28:f5:b5:52:97:75:74: f7:a4:66:1a:4a:67:77:6c:d9:b7:0a:71:b2:a4:3f: 9a:52:3e:00:f1:c5:07:f6:0a:4d:0b:7c:82:5f:cc: 64:bf:c3:f6:cf:5a:25:1a:6d:ed:1f:03:d4:5a:46: 9e:24:de:d2:01:73:3e:e1:f0:7c:69:ef:7a:54:33: c3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C4:80:9F:3F:FA:03:18:47:4D:D5:46:24:F8:43:D8:96:3C:C5:51 X509v3 Authority Key Identifier: keyid:C7:AA:22:49:FA:58:EA:13:30:AA:36:9A:2E:7E:A2:02:B0:54:E6:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/0/C7AA2249FA58EA1330AA369A2E7EA202B054E665.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7AA2249FA58EA1330AA369A2E7EA202B054E665.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/0/C7AA2249FA58EA1330AA369A2E7EA202B054E665.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:aa:33:f6:2b:eb:8a:aa:3a:06:49:fe:a9:32:dd:bc:e6:b7: ca:63:4f:6c:af:d5:6d:37:fc:c9:a3:aa:60:f6:91:75:29:1c: 62:19:2b:3c:b7:ee:5c:ba:50:46:4e:0c:ed:38:bb:ea:5b:23: a5:3f:63:e1:e9:39:2e:cc:b7:4f:07:00:d0:b2:a0:8d:5f:f0: 7c:e2:78:5e:85:dd:99:87:6c:05:39:15:6c:69:49:b0:b7:ce: dd:84:16:99:a0:c8:8c:16:43:62:5e:69:fc:8c:71:b0:3a:c4: 20:2b:74:b3:d9:0c:74:12:df:cf:55:20:8e:fe:4b:4a:ec:fe: 75:fd:37:75:cb:8d:85:33:ed:ab:16:dc:56:17:06:2d:67:8c: 5f:af:24:b0:a3:66:ab:13:9d:13:3b:34:01:67:60:dc:70:a7: 0f:64:ed:e1:b1:c6:26:47:ef:30:5e:49:64:f0:14:55:b3:4f: ff:74:ac:15:c7:cf:69:0e:ec:73:01:19:37:ea:fd:42:17:3d: 56:bb:b4:7c:27:da:05:8e:66:7a:14:5e:22:55:e2:a0:bb:94: 57:cb:a7:bf:0b:36:0d:ea:29:20:89:c6:ff:bd:f8:d4:df:56: 5b:2b:39:90:93:53:31:d4:ee:b5:74:0b:b7:d1:df:4a:e0:3f: e0:ca:2d:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCJgbBqbaQOL1N7Fput+sn8GiulAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdBQTIyNDlGQTU4RUExMzMwQUEzNjlBMkU3RUEyMDJC MDU0RTY2NTAeFw0yNTExMDUwMDQxMzdaFw0yNTExMDYwMTIwMzdaMDMxMTAvBgNV BAMTKEEzQzQ4MDlGM0ZGQTAzMTg0NzRERDU0NjI0Rjg0M0Q4OTYzQ0M1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe6baHmkUHgtVzlUlPThzUrHlK +HkClrT4wcJkD2R2CV7N2+WlfrIBgayCq//HgRpOKgemjcvUioYeygNzHTgAqTzk /T7QXY6Wjm5/PmZ+SSiHTjUtmeBFGL3KyJkeY1Uza0a7eeS97Ag39hY6xXYBTCsG +Lb7h0BXSvX44OOVZkIrd6YK3vsrnaoEnOIDdeFVgOkszijEw1CVWoKNTLNZRILe j97wXsKUDP+DNZdRayZHNcfknFtp8oJRKPW1Upd1dPekZhpKZ3ds2bcKcbKkP5pS PgDxxQf2Ck0LfIJfzGS/w/bPWiUabe0fA9RaRp4k3tIBcz7h8Hxp73pUM8N3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUo8SAnz/6AxhHTdVGJPhD2JY8xVEwHwYDVR0j BBgwFoAUx6oiSfpY6hMwqjaaLn6iArBU5mUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0ZCZ21DRWdTWGhnQjV0c0pFVlA1Nm9LQ3dYaFlaSFROTHRuRmdWYTNw RFcvMC9DN0FBMjI0OUZBNThFQTEzMzBBQTM2OUEyRTdFQTIwMkIwNTRFNjY1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3QUEyMjQ5RkE1OEVBMTMz MEFBMzY5QTJFN0VBMjAyQjA1NEU2NjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0ZCZ21DRWdTWGhnQjV0c0pFVlA1Nm9LQ3dYaFlaSFROTHRuRmdWYTNwRFcvMC9D N0FBMjI0OUZBNThFQTEzMzBBQTM2OUEyRTdFQTIwMkIwNTRFNjY1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwaoz9ivriqo6Bkn+qTLdvOa3ymNPbK/VbTf8yaOqYPaRdSkcYhkrPLfuXLpQ Rk4M7Ti76lsjpT9j4ek5Lsy3TwcA0LKgjV/wfOJ4XoXdmYdsBTkVbGlJsLfO3YQW maDIjBZDYl5p/IxxsDrEICt0s9kMdBLfz1Ugjv5LSuz+df03dcuNhTPtqxbcVhcG LWeMX68ksKNmqxOdEzs0AWdg3HCnD2Tt4bHGJkfvMF5JZPAUVbNP/3SsFcfPaQ7s cwEZN+r9Qhc9Vru0fCfaBY5mehReIlXioLuUV8unvws2DeopIInG/7341N9WWys5 kJNTMdTutXQLt9HfSuA/4Motgw== -----END CERTIFICATE-----Generated at Wed Nov 5 08:57:16 2025 by rpki-client