$ rpki-client -vvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft File: FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft (raw, json) Hash identifier: oVa8TJS83beB0AAOfkqPVx6ipzo08YuZXuIwykGUEIM= Subject key identifier: 7A:63:6F:81:B7:96:F5:DA:B2:9F:FC:51:E7:DC:2B:39:ED:9F:79:37 Authority key identifier: FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22 Certificate issuer: /CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922 Certificate serial: 0E6E36F1CF3707F9FD0A189B83C4B3748982574C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer Subject info access: rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft Manifest number: 01D3 Signing time: Wed 05 Nov 2025 05:15:10 +0000 Manifest this update: Wed 05 Nov 2025 05:10:10 +0000 Manifest next update: Thu 06 Nov 2025 07:44:10 +0000 Files and hashes: 1: 323830343a343034383a343130303a3a2f34342d3434203d3e20323635393439.roa (hash: g8l0/tSjcKhIaUC0SlVVhkO3pLYOBU75RScol8wWaJ8=) 2: 323830343a343034383a3a2f33322d3332203d3e20323635393439.roa (hash: PJVFr/8LbXIOpb6FEWfNrqUpXzqDkNqYCUBShsnPL+U=) 3: 323830343a343034383a633030303a3a2f34382d3438203d3e20323635393439.roa (hash: yNWsDSXI0ojc83gWzcz/ezCfrNQSleAUCqeINfZRGUI=) 4: 323830343a343034383a343138303a3a2f34342d3434203d3e20323635393439.roa (hash: 8pRzyt9oKL936Lq1pXfOXg0CrOSFWQSd7jQBgXRtGTs=) 5: FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl (hash: V1CGuJFFuC13s8YZ5tTzlpbgV6DKbj/H8yUN37NMBPA=) 6: 3136342e3136332e39362e302f32322d3234203d3e20323635393439.roa (hash: eaLjYHuylYDNlI3C2KTFFFRv9QuJT7KhJPOURxEEGOk=) 7: 323830343a343034383a343139303a3a2f34342d3434203d3e20323635393439.roa (hash: mFBvQ9U6S9ziGHYVsmFoKj+ZF8wnQ9qJb6vsgKrGp8c=) 8: 323830343a343034383a343131303a3a2f34342d3434203d3e20323635393439.roa (hash: hB6GZrapWVT+nZyDAtSBayPQVOJQA3CPhxdpm15MnK0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:6e:36:f1:cf:37:07:f9:fd:0a:18:9b:83:c4:b3:74:89:82:57:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922 Validity Not Before: Nov 5 05:10:10 2025 GMT Not After : Nov 6 07:44:10 2025 GMT Subject: CN=7A636F81B796F5DAB29FFC51E7DC2B39ED9F7937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:09:b2:63:e0:92:c2:76:80:f3:2f:67:af:a2: 20:1d:8b:53:ee:46:c4:57:28:3c:76:5f:1a:a9:91: ad:3c:7d:dd:b1:bb:b7:16:54:1d:b1:0b:a4:58:45: 28:25:a1:ce:a1:87:c0:06:6f:c4:0b:cd:2c:38:ee: 2b:c3:ce:ca:1e:16:24:0e:7c:7e:f4:79:42:dd:42: e1:c9:80:65:c9:05:06:a3:c0:cb:3a:38:3a:99:1b: 9c:5f:7b:d7:b7:ae:4c:b6:1c:0b:a3:a7:eb:de:76: e5:5c:9e:60:b1:e0:7e:0a:82:48:f1:c6:1d:64:e5: 80:e8:a5:e1:94:e5:2d:55:f8:9f:46:8a:c2:fc:76: 86:1a:4f:af:66:e1:56:06:5a:fa:d2:c0:35:04:11: d0:4a:a2:42:da:32:8c:f8:55:f5:35:75:bc:a3:61: 8c:76:b4:59:71:13:21:10:cd:8e:41:b4:a3:c9:4e: 3c:4f:60:0d:75:85:3c:b0:f3:d1:83:ff:86:c3:04: d4:8c:58:8d:ca:34:b2:5a:4e:55:25:4d:2d:d4:e4: 1d:cf:38:1d:0d:3e:b0:64:c8:8d:da:95:de:13:ef: bc:41:d6:c0:ef:95:a3:9e:9d:69:ad:0a:a1:16:fa: 90:9d:91:c2:69:a7:bc:da:ce:08:f3:53:c2:84:27: d7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:63:6F:81:B7:96:F5:DA:B2:9F:FC:51:E7:DC:2B:39:ED:9F:79:37 X509v3 Authority Key Identifier: keyid:FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:45:54:12:79:8c:3d:46:63:42:12:97:43:0e:7b:bf:5d:db: 5a:91:46:30:d9:0d:e5:d8:74:b4:ff:e8:9c:18:ea:64:89:eb: f7:37:1e:5e:ad:65:44:4a:bb:d6:b6:ca:53:c0:02:58:57:06: d0:0a:f6:82:b5:4a:fe:36:5c:a9:17:a2:6f:3b:d6:45:db:d7: b5:f6:de:6a:b2:26:a6:1b:99:12:67:66:63:3a:87:f4:12:ae: 54:df:15:cd:2f:e7:31:59:66:08:bb:6d:30:92:6d:2a:1b:93: 1d:1d:71:b6:d9:8a:5c:be:cd:fd:97:f6:15:26:d8:86:00:46: c9:e6:2a:af:1f:25:39:a0:35:f5:35:e4:eb:62:34:d4:e9:23: a1:9b:c9:f9:9e:77:52:1a:8f:95:af:e6:0a:e3:e6:2e:65:f0: 9a:36:77:0f:3b:05:42:47:cf:6c:11:39:e1:d9:ff:d5:8b:91: b4:d1:64:0a:7a:e7:cc:2e:b6:17:43:ec:d2:bd:02:d9:09:18: 0a:20:53:70:64:d2:08:2f:1b:c5:b0:98:b8:bd:02:1e:c6:87: 3c:ea:f3:05:ff:c9:b5:99:45:8c:dc:a2:03:f7:e0:2b:14:e8: 42:f6:4e:3d:b0:f3:93:9a:93:59:56:c7:75:85:cd:d5:45:e7: 00:cf:07:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDm428c83B/n9Chibg8SzdImCV0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0QUNCMDgyODEwMUZGRDZGOTFCRkJDRkJGMDVFRTk4 RjJGOTkyMjAeFw0yNTExMDUwNTEwMTBaFw0yNTExMDYwNzQ0MTBaMDMxMTAvBgNV BAMTKDdBNjM2RjgxQjc5NkY1REFCMjlGRkM1MUU3REMyQjM5RUQ5Rjc5MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7CbJj4JLCdoDzL2evoiAdi1Pu RsRXKDx2Xxqpka08fd2xu7cWVB2xC6RYRSgloc6hh8AGb8QLzSw47ivDzsoeFiQO fH70eULdQuHJgGXJBQajwMs6ODqZG5xfe9e3rky2HAujp+veduVcnmCx4H4Kgkjx xh1k5YDopeGU5S1V+J9GisL8doYaT69m4VYGWvrSwDUEEdBKokLaMoz4VfU1dbyj YYx2tFlxEyEQzY5BtKPJTjxPYA11hTyw89GD/4bDBNSMWI3KNLJaTlUlTS3U5B3P OB0NPrBkyI3ald4T77xB1sDvlaOenWmtCqEW+pCdkcJpp7zazgjzU8KEJ9fhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUemNvgbeW9dqyn/xR59wrOe2feTcwHwYDVR0j BBgwFoAU/0rLCCgQH/1vkb+8+/Be6Y8vmSIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDl3QVc5Z21YU21vMnNlNWJQa0RUaUw1VkUzejdvWFVBZWhhQ0syZ3pX ZVovMC9GRjRBQ0IwODI4MTAxRkZENkY5MUJGQkNGQkYwNUVFOThGMkY5OTIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNEFDQjA4MjgxMDFGRkQ2 RjkxQkZCQ0ZCRjA1RUU5OEYyRjk5MjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDl3QVc5Z21YU21vMnNlNWJQa0RUaUw1VkUzejdvWFVBZWhhQ0syZ3pXZVovMC9G RjRBQ0IwODI4MTAxRkZENkY5MUJGQkNGQkYwNUVFOThGMkY5OTIyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACkVUEnmMPUZjQhKXQw57v13bWpFGMNkN5dh0tP/onBjqZInr9zceXq1lREq7 1rbKU8ACWFcG0Ar2grVK/jZcqReibzvWRdvXtfbearImphuZEmdmYzqH9BKuVN8V zS/nMVlmCLttMJJtKhuTHR1xttmKXL7N/Zf2FSbYhgBGyeYqrx8lOaA19TXk62I0 1OkjoZvJ+Z53UhqPla/mCuPmLmXwmjZ3DzsFQkfPbBE54dn/1YuRtNFkCnrnzC62 F0Ps0r0C2QkYCiBTcGTSCC8bxbCYuL0CHsaHPOrzBf/JtZlFjNyiA/fgKxToQvZO PbDzk5qTWVbHdYXN1UXnAM8HHA== -----END CERTIFICATE-----Generated at Wed Nov 5 14:44:20 2025 by rpki-client