$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft File: 041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft (raw, json) Hash identifier: qlu2D1F/EFt1ptzrCZEP1o2vNmSpyZ6BxyGj9ULKDpg= Subject key identifier: 57:9B:2E:82:8F:99:3B:BA:DD:8C:A8:55:93:32:6F:FE:CD:39:D3:6A Authority key identifier: 04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3 Certificate issuer: /CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3 Certificate serial: 18382B7FBFCBCCEA5F6BD93330FF63CD42D2B36A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer Subject info access: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft Manifest number: 3A Signing time: Wed 05 Nov 2025 01:45:43 +0000 Manifest this update: Wed 05 Nov 2025 01:40:43 +0000 Manifest next update: Thu 06 Nov 2025 04:30:43 +0000 Files and hashes: 1: 323830343a316265383a3a2f33322d313238203d3e203631373536.roa (hash: pqgsM2ASUBh1TC0/RYOz8T+lL73SNCUA6ljQ57Xb+SQ=) 2: 3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (hash: ff5fnWNx341MgcrmBHedmB9h7orSMUG+v/FPbvSdt9w=) 3: 041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl (hash: 2DW71r1oIxQwTkwJniA7bRHTaJJJn3iMM7RmUw1OH4w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:38:2b:7f:bf:cb:cc:ea:5f:6b:d9:33:30:ff:63:cd:42:d2:b3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3 Validity Not Before: Nov 5 01:40:43 2025 GMT Not After : Nov 6 04:30:43 2025 GMT Subject: CN=579B2E828F993BBADD8CA85593326FFECD39D36A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2d:0c:29:7e:ba:c5:87:1f:5b:60:f6:be:4a: 48:a3:27:21:3b:cf:79:5f:1a:9d:9a:b3:70:43:5e: 90:42:76:5f:20:30:be:12:9f:0e:c8:38:2f:ff:33: 9a:fb:a3:a1:02:5d:52:0d:3f:cd:a0:1d:bb:8c:66: bd:98:94:77:f2:c6:a8:b0:a7:e6:8e:9b:5b:23:eb: 50:b5:6f:29:ec:70:e0:04:86:f6:0c:f9:9c:fa:a6: 3f:ff:4b:c0:27:19:48:a3:30:32:6d:4c:d6:e4:d2: 52:16:12:f0:81:1f:b9:2f:bd:d6:a5:80:83:32:f3: 82:b0:48:83:30:54:b5:c1:63:aa:df:78:61:f5:1e: 1f:dd:1a:f6:a4:77:24:44:04:b3:b7:99:03:cd:07: 76:b0:12:44:7d:45:41:a6:2f:bb:7a:25:a5:30:b6: 64:8a:9f:a8:e4:c2:df:7d:be:93:eb:e5:bc:84:3f: ea:2a:2f:0a:a6:ed:44:33:f7:3a:44:27:eb:bd:fd: 48:51:26:0a:f5:c6:43:ea:9e:b8:b5:26:7f:02:97: 1f:77:20:5c:c7:1c:6b:18:ad:ae:5a:8b:31:67:f0: ff:55:99:77:e4:c6:03:af:a8:0a:18:4d:fb:8e:f9: b7:9c:c9:83:fb:af:d1:fa:70:e3:07:a9:2f:74:ff: 47:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9B:2E:82:8F:99:3B:BA:DD:8C:A8:55:93:32:6F:FE:CD:39:D3:6A X509v3 Authority Key Identifier: keyid:04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:29:9e:7d:26:58:b6:fb:28:99:98:1b:31:f9:70:0f:29:3d: fd:0e:8e:73:5b:cc:00:cd:95:30:a3:58:40:3f:28:ec:5e:3a: 26:89:cc:75:9b:b4:7e:67:34:42:6e:40:28:5a:e6:73:a5:f9: 14:e6:3c:b0:2a:9f:5d:95:36:af:9c:85:3b:c0:85:9f:7d:0d: af:ea:ab:a2:96:17:84:4b:70:b3:fe:26:3a:06:47:e7:e3:ef: 5e:23:8a:b2:e2:ff:80:6e:b1:9f:f9:97:13:20:19:63:48:07: 04:bf:b6:cf:be:fe:a3:a4:56:ee:47:f3:83:4a:5b:ea:be:f1: 66:f8:c3:17:f6:78:99:15:b2:67:ab:ac:73:75:bb:ba:a0:38: 2a:63:dc:18:89:9b:ba:4b:e0:4c:37:93:eb:78:7f:a5:aa:8f: 83:76:67:d5:b0:68:f4:e4:70:77:d4:62:7b:f9:3c:6b:2f:c2: 67:35:2c:25:34:01:59:f5:a7:41:8d:66:af:3b:dd:22:cb:83: bc:9e:82:8c:04:22:56:ed:c0:db:a7:56:97:fb:88:71:69:36: 48:30:05:cd:98:ee:47:0b:0c:5a:21:07:4b:97:94:98:df:5f: 78:03:5c:8d:7e:2d:3b:13:05:b6:48:9b:62:e8:c5:8d:5a:0f: 04:42:0f:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGDgrf7/LzOpfa9kzMP9jzULSs2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQxRkEwQTQwOEFENTdFOTM4NERBMzMxQjMwNDBCOTFG REUwMEJFMzAeFw0yNTExMDUwMTQwNDNaFw0yNTExMDYwNDMwNDNaMDMxMTAvBgNV BAMTKDU3OUIyRTgyOEY5OTNCQkFERDhDQTg1NTkzMzI2RkZFQ0QzOUQzNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXLQwpfrrFhx9bYPa+SkijJyE7 z3lfGp2as3BDXpBCdl8gML4Snw7IOC//M5r7o6ECXVINP82gHbuMZr2YlHfyxqiw p+aOm1sj61C1bynscOAEhvYM+Zz6pj//S8AnGUijMDJtTNbk0lIWEvCBH7kvvdal gIMy84KwSIMwVLXBY6rfeGH1Hh/dGvakdyREBLO3mQPNB3awEkR9RUGmL7t6JaUw tmSKn6jkwt99vpPr5byEP+oqLwqm7UQz9zpEJ+u9/UhRJgr1xkPqnri1Jn8Clx93 IFzHHGsYra5aizFn8P9VmXfkxgOvqAoYTfuO+becyYP7r9H6cOMHqS90/0clAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUV5sugo+ZO7rdjKhVkzJv/s0502owHwYDVR0j BBgwFoAUBB+gpAitV+k4TaMxswQLkf3gC+MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVv QTkvMC8wNDFGQTBBNDA4QUQ1N0U5Mzg0REEzMzFCMzA0MEI5MUZERTAwQkUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0MUZBMEE0MDhBRDU3RTkz ODREQTMzMUIzMDQwQjkxRkRFMDBCRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVvQTkvMC8w NDFGQTBBNDA4QUQ1N0U5Mzg0REEzMzFCMzA0MEI5MUZERTAwQkUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFSmefSZYtvsomZgbMflwDyk9/Q6Oc1vMAM2VMKNYQD8o7F46JonMdZu0fmc0 Qm5AKFrmc6X5FOY8sCqfXZU2r5yFO8CFn30Nr+qropYXhEtws/4mOgZH5+PvXiOK suL/gG6xn/mXEyAZY0gHBL+2z77+o6RW7kfzg0pb6r7xZvjDF/Z4mRWyZ6usc3W7 uqA4KmPcGImbukvgTDeT63h/paqPg3Zn1bBo9ORwd9Rie/k8ay/CZzUsJTQBWfWn QY1mrzvdIsuDvJ6CjAQiVu3A26dWl/uIcWk2SDAFzZjuRwsMWiEHS5eUmN9feANc jX4tOxMFtkibYujFjVoPBEIPkg== -----END CERTIFICATE-----Generated at Wed Nov 5 15:31:10 2025 by rpki-client