$ rpki-client -vvf rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft File: A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft (raw, json) Hash identifier: e+xI/gRIBgfBn//vToaqj64S7e7f5o36fhEfiB9Y7ko= Subject key identifier: 08:95:2C:62:A2:B2:8E:92:15:A8:9C:3C:EC:C3:69:CE:56:3B:FC:AF Authority key identifier: A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78 Certificate issuer: /CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478 Certificate serial: 0BF6961D2D7FD2E49EF1A96E56DF45733CEA50E7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer Subject info access: rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft Manifest number: 0198 Signing time: Wed 05 Nov 2025 11:02:18 +0000 Manifest this update: Wed 05 Nov 2025 10:57:18 +0000 Manifest next update: Thu 06 Nov 2025 14:54:18 +0000 Files and hashes: 1: 3139302e31322e3133362e302f32322d3234203d3e20323731323734.roa (hash: Q3yHgRlmtEhdQ8yepDv0S7EpKfArRnJDjYInZLcsL7Y=) 2: 323830343a373865633a313030303a3a2f33362d3336203d3e20323731323734.roa (hash: oLmLFNGFzVEdnh4c4itLZP17aZpEt3QNy5IaojB/SV4=) 3: 323830343a373865633a323030303a3a2f33362d3336203d3e20323731323734.roa (hash: /GVfblh8G4/htSymp0DWV+ukSlnZu4UwALGlIKuOsz0=) 4: 323830343a373865633a333030303a3a2f33362d3336203d3e20323731323734.roa (hash: itszwuEmuIFWcA7xqcmDhV3dc8Ptj1VPtF9iuMZi9H0=) 5: A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl (hash: oY78ZLFLuLo4pkvF1vUZufwtTYVft4fYaKMDqyLE9SA=) 6: 323830343a373865633a3a2f33322d3332203d3e20323731323734.roa (hash: 2W2KSo/Abj/XorQFmTqJcenbjW+CL3gGoaAjYN3R7js=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 14:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f6:96:1d:2d:7f:d2:e4:9e:f1:a9:6e:56:df:45:73:3c:ea:50:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478 Validity Not Before: Nov 5 10:57:18 2025 GMT Not After : Nov 6 14:54:18 2025 GMT Subject: CN=08952C62A2B28E9215A89C3CECC369CE563BFCAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f3:b6:90:cb:f1:03:61:55:8c:1e:03:db:5c: 6f:05:09:93:64:67:27:d1:03:fc:5e:2f:2e:7f:de: 0e:88:42:b2:ff:c9:a7:92:0b:e3:e1:49:22:96:1f: 88:d7:fc:6b:58:73:3b:7c:76:d1:fd:03:a0:6f:76: 2c:c9:4f:a8:4c:0f:66:c3:04:b7:13:9f:1b:bc:73: 3b:89:71:42:b9:b4:fa:b6:ee:5c:05:10:bc:68:9d: 04:99:02:3c:25:c5:97:51:0e:21:fa:ed:5b:3f:8c: c5:06:92:4f:bf:f2:fe:fa:c8:03:05:4e:56:a1:92: 55:8d:48:ee:96:6f:ce:10:5b:87:35:48:ff:6f:45: d1:d7:c0:0d:96:ef:cb:1d:38:02:fa:1d:60:15:83: 1d:36:dc:b8:63:f7:51:70:61:40:e6:ec:44:66:1b: 6c:d6:7e:26:c1:08:83:9c:ee:0d:a9:88:1d:34:e1: 78:08:a2:d6:b5:4a:17:fe:23:13:43:b4:98:8c:52: 96:db:6d:a6:ec:b0:48:cf:95:29:89:6b:ae:6f:38: c4:ac:16:52:2f:22:bd:59:83:c9:f6:d0:20:0a:58: ee:69:cc:30:b8:9a:0d:1c:22:34:51:70:e0:74:9b: b7:4f:38:c8:40:26:d6:20:87:a6:97:0a:66:5b:40: f7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:95:2C:62:A2:B2:8E:92:15:A8:9C:3C:EC:C3:69:CE:56:3B:FC:AF X509v3 Authority Key Identifier: keyid:A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:0a:de:86:1c:bf:44:23:38:78:ce:4d:0a:cc:e1:e5:9d:bc: 8f:f4:9a:10:92:dd:4f:79:75:d1:a2:c8:64:8a:ad:6c:e8:7b: 03:d1:f9:8a:6f:5f:6d:07:f7:75:35:58:3e:0f:ea:cd:f0:85: 70:2a:10:0c:f7:de:d8:b6:13:09:34:d6:0f:0d:da:1e:d1:29: 34:f4:ee:0f:bf:8a:6d:d1:4a:cc:99:82:8c:ac:77:16:9d:66: b9:a7:02:29:13:25:4c:40:c9:9c:e3:73:59:b5:aa:81:4d:3c: 20:c5:01:c5:77:18:3c:57:a0:a9:10:5f:53:82:b1:e6:3e:1d: 8e:c4:ee:ad:92:74:31:52:1b:bc:46:45:76:21:dd:42:12:9c: 78:a6:de:28:8c:8f:ec:13:df:fe:7d:8e:e5:a3:44:69:68:96: a6:c0:18:01:0c:f5:30:4c:aa:b1:94:37:24:f8:d3:dd:35:41: 59:01:0b:91:ab:69:a8:5a:38:ce:01:8e:01:8e:27:35:bb:3c: 61:8d:58:67:ad:95:f1:23:40:2d:4d:60:87:3d:38:18:6f:ba: 4c:fa:29:a3:10:81:a2:b1:b0:1e:f8:90:73:29:7f:ed:80:d2: 58:a5:8f:4b:da:d9:cd:2a:a0:ba:23:0f:3c:ea:3e:b8:de:34: a1:09:c8:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUC/aWHS1/0uSe8aluVt9FczzqUOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFDQzg4QzdGRDQ5RUVCNDE2OUJDQzdGQzM2NkREQUQ3 NTBDMTQ3ODAeFw0yNTExMDUxMDU3MThaFw0yNTExMDYxNDU0MThaMDMxMTAvBgNV BAMTKDA4OTUyQzYyQTJCMjhFOTIxNUE4OUMzQ0VDQzM2OUNFNTYzQkZDQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+87aQy/EDYVWMHgPbXG8FCZNk ZyfRA/xeLy5/3g6IQrL/yaeSC+PhSSKWH4jX/GtYczt8dtH9A6BvdizJT6hMD2bD BLcTnxu8czuJcUK5tPq27lwFELxonQSZAjwlxZdRDiH67Vs/jMUGkk+/8v76yAMF TlahklWNSO6Wb84QW4c1SP9vRdHXwA2W78sdOAL6HWAVgx023Lhj91FwYUDm7ERm G2zWfibBCIOc7g2piB004XgIota1Shf+IxNDtJiMUpbbbabssEjPlSmJa65vOMSs FlIvIr1Zg8n20CAKWO5pzDC4mg0cIjRRcOB0m7dPOMhAJtYgh6aXCmZbQPexAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCJUsYqKyjpIVqJw87MNpzlY7/K8wHwYDVR0j BBgwFoAUocyIx/1J7rQWm8x/w2bdrXUMFHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGZoVDdqSjJDbVk5NEdFVkt4OGd5bVNDUDg0SGRQazhUa0VTRXNaWlFh N3UvMC9BMUNDODhDN0ZENDlFRUI0MTY5QkNDN0ZDMzY2RERBRDc1MEMxNDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExQ0M4OEM3RkQ0OUVFQjQx NjlCQ0M3RkMzNjZEREFENzUwQzE0NzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGZoVDdqSjJDbVk5NEdFVkt4OGd5bVNDUDg0SGRQazhUa0VTRXNaWlFhN3UvMC9B MUNDODhDN0ZENDlFRUI0MTY5QkNDN0ZDMzY2RERBRDc1MEMxNDc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0Qrehhy/RCM4eM5NCszh5Z28j/SaEJLdT3l10aLIZIqtbOh7A9H5im9fbQf3 dTVYPg/qzfCFcCoQDPfe2LYTCTTWDw3aHtEpNPTuD7+KbdFKzJmCjKx3Fp1muacC KRMlTEDJnONzWbWqgU08IMUBxXcYPFegqRBfU4Kx5j4djsTurZJ0MVIbvEZFdiHd QhKceKbeKIyP7BPf/n2O5aNEaWiWpsAYAQz1MEyqsZQ3JPjT3TVBWQELkatpqFo4 zgGOAY4nNbs8YY1YZ62V8SNALU1ghz04GG+6TPopoxCBorGwHviQcyl/7YDSWKWP S9rZzSqguiMPPOo+uN40oQnIIw== -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:35 2025 by rpki-client