$ rpki-client -vvf rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.mft File: C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.mft (raw, json) Hash identifier: 2bx9IlBzI9OWMW3spLoVVQ84hAnARyrqNNQMm/LdUF0= Subject key identifier: 1C:9E:24:FB:06:2A:CD:2A:29:AC:C9:0B:2A:70:1F:98:AD:0B:BB:0D Authority key identifier: C6:3A:9F:F3:60:45:62:A8:0C:B5:5E:9B:EA:3D:F0:20:02:F5:CA:4A Certificate issuer: /CN=C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A Certificate serial: 47DB447D2C189E6C29175E924B3545771EBD3FF8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.cer Subject info access: rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.mft Manifest number: 0286 Signing time: Tue 04 Nov 2025 15:22:12 +0000 Manifest this update: Tue 04 Nov 2025 15:17:12 +0000 Manifest next update: Wed 05 Nov 2025 17:02:12 +0000 Files and hashes: 1: 323830343a343139383a3a2f33322d3336203d3e20323637343433.roa (hash: NfllLyEJp8UoEh4DXohmtE2d8eRTUTW38d9Wu1YXuFI=) 2: C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.crl (hash: CkxjaPYv1en6nc+SxGLWBU9YSb48JR+vM7dXNQEnzwo=) 3: 3139322e3134312e35322e302f32322d3234203d3e20323637343433.roa (hash: DAUG0xQ+vuKJ/I2lyRAeXcT4Z1cY6tf1uwUMOmKKJFg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.crl rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 17:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:db:44:7d:2c:18:9e:6c:29:17:5e:92:4b:35:45:77:1e:bd:3f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A Validity Not Before: Nov 4 15:17:12 2025 GMT Not After : Nov 5 17:02:12 2025 GMT Subject: CN=1C9E24FB062ACD2A29ACC90B2A701F98AD0BBB0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:76:5f:5f:fa:07:9f:e8:ca:05:89:9b:9b:fe: e3:c1:66:58:e0:b2:70:64:84:45:f3:66:5a:11:01: 6e:74:d5:ba:8d:e1:d3:cb:89:28:14:5d:91:93:4f: e9:72:f6:9d:30:a0:3e:11:d5:ca:54:9b:2e:07:26: 1a:13:c5:0a:9a:88:7a:b1:4a:b7:4b:1a:4b:20:59: 92:f2:28:cc:db:19:ff:5c:36:1a:ba:74:fe:6b:35: c9:f9:71:bf:04:c9:27:5e:86:da:79:1e:99:ce:46: 2c:27:6e:e4:fb:e8:2a:fd:64:3d:0c:a5:bb:5d:9b: 90:72:70:71:21:0a:62:f2:cb:71:1c:32:82:a7:df: 27:f7:f7:44:86:15:57:62:fa:e7:cd:43:26:58:34: e3:55:4c:d6:8f:08:35:19:f0:58:f0:51:2c:a7:47: 7b:dd:a6:5f:a2:ba:00:62:e8:c5:14:1f:eb:c9:0a: a8:10:39:e7:0c:d0:b5:ce:28:a8:0d:37:66:ed:b0: a3:4e:67:a7:b0:c7:3f:15:e1:48:37:dd:92:a6:72: 7b:74:98:cf:55:85:16:71:e1:44:52:e3:44:a0:22: 4d:e4:4e:b1:2e:0e:e0:a0:c6:2d:7e:fa:01:63:a2: e1:c2:84:95:e5:6b:f3:4a:6d:6c:37:8d:8d:c8:e1: fa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9E:24:FB:06:2A:CD:2A:29:AC:C9:0B:2A:70:1F:98:AD:0B:BB:0D X509v3 Authority Key Identifier: keyid:C6:3A:9F:F3:60:45:62:A8:0C:B5:5E:9B:EA:3D:F0:20:02:F5:CA:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:6a:66:ec:f6:8b:8b:f9:db:c0:9f:3a:33:34:92:84:fb:1f: 9e:c6:e9:a6:4d:6c:5e:0d:95:eb:48:fd:f0:2d:e9:09:b9:4f: d1:2b:9e:4f:79:36:b4:c1:f3:ce:c6:70:0f:03:bc:6c:ca:1d: fc:20:81:d8:ea:c0:a5:9e:64:f7:c7:a6:35:c9:6c:e0:0a:d0: 64:69:fe:ac:77:f0:b5:ac:4f:ab:13:c9:85:62:46:88:54:12: c2:c9:69:7f:7e:31:9f:ce:c8:06:83:4e:10:7f:c1:94:88:d9: 10:a8:f7:b6:3e:00:93:95:77:d6:89:84:d2:6e:d5:9b:c7:4d: c0:b5:aa:58:36:77:71:44:36:25:58:7c:03:b0:d9:96:45:18: 56:dd:30:aa:f0:d5:98:6c:91:45:04:bd:52:4b:51:35:88:6a: b9:cd:7a:e5:42:4d:85:99:f6:81:48:a6:12:a2:94:b7:5c:c9: 2d:a0:5f:71:b8:05:a1:9f:88:23:02:9c:5d:55:1a:ec:98:7f: 77:4a:7f:cb:d5:fb:6c:4b:53:a1:fb:33:46:63:57:18:e7:83: 40:87:be:53:d9:1e:f1:02:5f:30:e7:7b:ef:67:4e:dc:cb:db: f1:35:0a:3f:57:37:48:a5:ff:2b:74:e4:b9:65:7e:b4:f0:d7: b5:fc:2a:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR9tEfSwYnmwpF16SSzVFdx69P/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYzQTlGRjM2MDQ1NjJBODBDQjU1RTlCRUEzREYwMjAw MkY1Q0E0QTAeFw0yNTExMDQxNTE3MTJaFw0yNTExMDUxNzAyMTJaMDMxMTAvBgNV BAMTKDFDOUUyNEZCMDYyQUNEMkEyOUFDQzkwQjJBNzAxRjk4QUQwQkJCMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdl9f+gef6MoFiZub/uPBZljg snBkhEXzZloRAW501bqN4dPLiSgUXZGTT+ly9p0woD4R1cpUmy4HJhoTxQqaiHqx SrdLGksgWZLyKMzbGf9cNhq6dP5rNcn5cb8EySdehtp5HpnORiwnbuT76Cr9ZD0M pbtdm5BycHEhCmLyy3EcMoKn3yf390SGFVdi+ufNQyZYNONVTNaPCDUZ8FjwUSyn R3vdpl+iugBi6MUUH+vJCqgQOecM0LXOKKgNN2btsKNOZ6ewxz8V4Ug33ZKmcnt0 mM9VhRZx4URS40SgIk3kTrEuDuCgxi1++gFjouHChJXla/NKbWw3jY3I4fqTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHJ4k+wYqzSoprMkLKnAfmK0Luw0wHwYDVR0j BBgwFoAUxjqf82BFYqgMtV6b6j3wIAL1ykowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDMyQ21VMnAxeXBhaFlWaUFDZVoxOFZwZlQyRWVNd2NnbVR2SmF6eGNq RlkvMC9DNjNBOUZGMzYwNDU2MkE4MENCNTVFOUJFQTNERjAyMDAyRjVDQTRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2M0E5RkYzNjA0NTYyQTgw Q0I1NUU5QkVBM0RGMDIwMDJGNUNBNEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDMyQ21VMnAxeXBhaFlWaUFDZVoxOFZwZlQyRWVNd2NnbVR2SmF6eGNqRlkvMC9D NjNBOUZGMzYwNDU2MkE4MENCNTVFOUJFQTNERjAyMDAyRjVDQTRBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc2pm7PaLi/nbwJ86MzSShPsfnsbppk1sXg2V60j98C3pCblP0SueT3k2tMHz zsZwDwO8bMod/CCB2OrApZ5k98emNcls4ArQZGn+rHfwtaxPqxPJhWJGiFQSwslp f34xn87IBoNOEH/BlIjZEKj3tj4Ak5V31omE0m7Vm8dNwLWqWDZ3cUQ2JVh8A7DZ lkUYVt0wqvDVmGyRRQS9UktRNYhquc165UJNhZn2gUimEqKUt1zJLaBfcbgFoZ+I IwKcXVUa7Jh/d0p/y9X7bEtTofszRmNXGOeDQIe+U9ke8QJfMOd772dO3Mvb8TUK P1c3SKX/K3TkuWV+tPDXtfwqWQ== -----END CERTIFICATE-----Generated at Wed Nov 5 10:04:06 2025 by rpki-client