$ rpki-client -vvf rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft File: E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft (raw, json) Hash identifier: xA7AupaBK6dA/IekW/Oit3+rc6KlywN88iZuh67xE7g= Subject key identifier: DC:17:8A:16:A5:95:86:D8:59:26:9F:A6:4A:5B:2D:E4:4B:16:6E:64 Authority key identifier: E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4 Certificate issuer: /CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4 Certificate serial: 49F838D63DD93234B7A5FE89FDCB1A863D6C79E1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer Subject info access: rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft Manifest number: 0303 Signing time: Tue 04 Nov 2025 14:11:37 +0000 Manifest this update: Tue 04 Nov 2025 14:06:37 +0000 Manifest next update: Wed 05 Nov 2025 16:46:37 +0000 Files and hashes: 1: E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl (hash: 1uboIaCRdOxiNr8ZShPykttCJollEUoBy/s0KMO+kJ8=) 2: 34352e3138332e3138302e302f32322d3234203d3e20323639333337.roa (hash: ht/LU548z0DQ9qyd/CXKzpoxrH9NqeBOqRLrPd+T36Y=) 3: 323830343a363331343a3a2f33322d3438203d3e20323639333337.roa (hash: 8rIADCc1IMBXHDjsfVNZY3xX+m3yox+H7e16XbvP0l4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 16:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f8:38:d6:3d:d9:32:34:b7:a5:fe:89:fd:cb:1a:86:3d:6c:79:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4 Validity Not Before: Nov 4 14:06:37 2025 GMT Not After : Nov 5 16:46:37 2025 GMT Subject: CN=DC178A16A59586D859269FA64A5B2DE44B166E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:98:18:96:7c:8e:b5:18:55:1d:89:65:e7:c7: 63:39:0a:75:cf:60:0a:63:72:62:c6:b8:a6:34:d4: 56:d3:d2:8d:e6:1c:54:fb:22:d0:60:88:c1:cb:59: 4f:cd:23:74:ae:c6:af:78:93:c3:a7:b0:3a:e7:9f: 77:7c:68:de:4c:40:46:34:c6:ba:2a:82:24:40:42: 06:2f:2e:80:bd:38:9f:f7:58:e3:77:32:88:44:9f: 68:ec:7d:7f:4e:6f:0b:1f:5b:8b:e5:db:88:94:43: c3:bd:73:c9:78:f7:06:4b:f2:09:24:68:24:73:66: be:34:8f:0c:98:df:ba:14:d6:1c:87:6e:12:dd:2c: be:82:80:6e:0c:5c:d7:cc:55:49:2e:2b:52:14:3c: b0:f3:ea:de:7a:4c:ec:45:97:df:9c:7a:39:be:cf: 39:d3:05:ec:ae:ed:6e:ec:7e:a9:65:0b:ce:68:a1: b3:62:b9:a7:0d:2f:e9:81:d6:ad:5f:bc:61:0d:ea: fe:09:1a:6a:6d:df:1b:80:61:45:ca:e1:dd:b5:9f: 0c:76:65:d2:1b:da:c5:56:0d:db:60:55:e4:2a:21: f5:8d:18:fe:b6:41:b2:d7:98:96:15:23:02:4b:9e: 94:6e:b5:67:68:6f:f7:d3:d6:21:f3:90:d9:81:c1: 28:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:17:8A:16:A5:95:86:D8:59:26:9F:A6:4A:5B:2D:E4:4B:16:6E:64 X509v3 Authority Key Identifier: keyid:E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a7:d9:30:70:f2:0d:03:7a:f3:d5:8d:4f:32:79:90:45:42: 21:e4:14:61:a8:d6:ca:2b:01:08:80:37:92:f6:40:25:58:be: b4:37:01:8e:5e:7c:e1:28:6e:38:b6:ec:16:9e:d1:e6:15:d5: 42:0b:57:38:66:e5:8e:df:55:3d:57:a3:bf:50:f2:9f:a4:d2: c8:f5:4d:96:44:45:61:fe:1e:2d:70:ac:ef:a2:7a:31:01:b8: 1b:96:75:19:e4:22:48:cd:e8:ff:dc:cc:f9:92:b4:30:bd:38: 03:7d:11:91:b4:f4:59:f4:c5:30:6a:5b:58:bd:43:24:92:02: 6f:fc:21:eb:a3:36:3a:41:03:d0:5e:97:7d:8a:b2:b7:e1:76: d6:d2:50:1c:55:1b:53:82:9d:81:6f:e0:0b:a1:ae:63:93:1e: b5:e7:b1:d8:46:e4:25:8d:7e:d7:96:2f:bb:98:bd:70:d9:c8: 51:f3:f1:68:93:52:f5:01:70:16:c7:56:d5:ab:03:79:a4:c5: 6e:73:13:7b:70:87:95:34:82:f8:a8:4d:4c:73:9f:9a:d7:63: 48:f0:3a:77:3d:a3:39:d9:03:1e:68:7f:82:c1:9f:b9:5e:51: 82:99:4f:a4:18:db:65:d5:f7:7d:a9:0b:03:95:3b:e1:3e:6b: b7:fe:f1:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSfg41j3ZMjS3pf6J/csahj1seeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEFCRjAzOUIxRkYyMEY5REU1RkY2Q0UxREUzRENC QkFGRDZCNDAeFw0yNTExMDQxNDA2MzdaFw0yNTExMDUxNjQ2MzdaMDMxMTAvBgNV BAMTKERDMTc4QTE2QTU5NTg2RDg1OTI2OUZBNjRBNUIyREU0NEIxNjZFNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKmBiWfI61GFUdiWXnx2M5CnXP YApjcmLGuKY01FbT0o3mHFT7ItBgiMHLWU/NI3Suxq94k8OnsDrnn3d8aN5MQEY0 xroqgiRAQgYvLoC9OJ/3WON3MohEn2jsfX9ObwsfW4vl24iUQ8O9c8l49wZL8gkk aCRzZr40jwyY37oU1hyHbhLdLL6CgG4MXNfMVUkuK1IUPLDz6t56TOxFl9+cejm+ zznTBeyu7W7sfqllC85oobNiuacNL+mB1q1fvGEN6v4JGmpt3xuAYUXK4d21nwx2 ZdIb2sVWDdtgVeQqIfWNGP62QbLXmJYVIwJLnpRutWdob/fT1iHzkNmBwShNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3BeKFqWVhthZJp+mSlst5EsWbmQwHwYDVR0j BBgwFoAU5wir8Dmx/yD53l/2zh3j3Luv1rQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0g0NmE5dFJGdFZSNWJaRkthalZlZTlZNzV2cDQ0QzZhMzRMMVlzblVq SEUvMS9FNzA4QUJGMDM5QjFGRjIwRjlERTVGRjZDRTFERTNEQ0JCQUZENkI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3MDhBQkYwMzlCMUZGMjBG OURFNUZGNkNFMURFM0RDQkJBRkQ2QjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0g0NmE5dFJGdFZSNWJaRkthalZlZTlZNzV2cDQ0QzZhMzRMMVlzblVqSEUvMS9F NzA4QUJGMDM5QjFGRjIwRjlERTVGRjZDRTFERTNEQ0JCQUZENkI0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC6fZMHDyDQN689WNTzJ5kEVCIeQUYajWyisBCIA3kvZAJVi+tDcBjl584Shu OLbsFp7R5hXVQgtXOGbljt9VPVejv1Dyn6TSyPVNlkRFYf4eLXCs76J6MQG4G5Z1 GeQiSM3o/9zM+ZK0ML04A30RkbT0WfTFMGpbWL1DJJICb/wh66M2OkED0F6XfYqy t+F21tJQHFUbU4KdgW/gC6GuY5Meteex2EbkJY1+15Yvu5i9cNnIUfPxaJNS9QFw FsdW1asDeaTFbnMTe3CHlTSC+KhNTHOfmtdjSPA6dz2jOdkDHmh/gsGfuV5RgplP pBjbZdX3fakLA5U74T5rt/7x9A== -----END CERTIFICATE-----Generated at Wed Nov 5 01:19:51 2025 by rpki-client