$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.mft File: 0F44F5750AB24A7D6E844281A724F470994C316E.mft (raw, json) Hash identifier: UcYYRudqEFNeZ0MY+Z/TsI/F0lB1YWdCL4lrPjpTuVs= Subject key identifier: B4:B6:AB:92:9F:25:F7:5F:8F:E9:84:6A:3A:D7:0B:2D:53:1D:53:AF Authority key identifier: 0F:44:F5:75:0A:B2:4A:7D:6E:84:42:81:A7:24:F4:70:99:4C:31:6E Certificate issuer: /CN=0F44F5750AB24A7D6E844281A724F470994C316E Certificate serial: 5A918D680D6530BE15E94ACAC05F7CE6A12693A8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.mft Manifest number: 01AA Signing time: Wed 05 Nov 2025 18:23:00 +0000 Manifest this update: Wed 05 Nov 2025 18:18:00 +0000 Manifest next update: Thu 06 Nov 2025 21:36:00 +0000 Files and hashes: 1: 34352e3232352e3235322e302f32322d3234203d3e20323636393532.roa (hash: YdoF+7d38TupvLHfFFGrLqea38RQ20/TNcHeY4fDrqo=) 2: 0F44F5750AB24A7D6E844281A724F470994C316E.crl (hash: hMx+UCN0DOrHAatVDGm9sflDoRB2mSFepqmiAXrv8YA=) 3: 323830343a343564343a3a2f33322d3334203d3e20323636393532.roa (hash: CXzNb4G2GphJ1TIFeCdVumYJctK0+mEXyMAVo+V69Ek=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.crl rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 21:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:91:8d:68:0d:65:30:be:15:e9:4a:ca:c0:5f:7c:e6:a1:26:93:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F44F5750AB24A7D6E844281A724F470994C316E Validity Not Before: Nov 5 18:18:00 2025 GMT Not After : Nov 6 21:36:00 2025 GMT Subject: CN=B4B6AB929F25F75F8FE9846A3AD70B2D531D53AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1f:40:56:0c:ec:9c:3c:ca:8d:9c:12:23:4d: 91:88:91:13:51:a0:01:48:32:97:72:88:bb:6c:d5: be:c2:3a:32:b5:ac:13:05:c9:32:7e:90:b7:a4:4c: 9a:5a:bd:03:99:29:1b:5f:9f:38:93:0b:b1:9e:4f: 75:f4:7e:65:5e:de:52:7c:0a:bd:44:51:17:dc:49: 87:b6:21:f2:14:d0:e7:14:25:70:b5:8f:39:fc:c9: b4:5d:91:f8:e2:86:ce:d8:a4:06:ad:13:21:44:87: 6e:ee:f4:ec:2f:df:cd:9f:b8:03:0f:e6:67:b1:34: 40:c4:32:80:ec:49:33:80:13:e7:82:c5:33:83:d4: 9f:23:4d:74:c7:19:19:0f:55:e6:c2:f0:97:31:ff: ea:11:ad:cf:90:3a:a8:41:1a:0b:e0:ff:fe:0f:fb: b7:ad:9f:97:1c:77:33:4e:7d:37:79:da:07:35:57: 27:86:de:9f:b7:f3:2d:8b:35:b3:ba:59:f6:a1:3e: 56:69:39:45:52:cb:93:93:3f:ac:d9:33:a4:9e:40: 20:5a:06:bf:a9:53:98:82:05:b8:43:8e:9c:cb:fa: 01:de:01:b7:4f:54:74:3a:37:4e:12:8f:af:0d:8b: 4f:26:f0:26:01:da:e3:cc:68:77:1a:16:68:50:b7: d8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B6:AB:92:9F:25:F7:5F:8F:E9:84:6A:3A:D7:0B:2D:53:1D:53:AF X509v3 Authority Key Identifier: keyid:0F:44:F5:75:0A:B2:4A:7D:6E:84:42:81:A7:24:F4:70:99:4C:31:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:49:5a:87:cb:5f:25:69:db:d0:c6:97:50:f3:de:1b:9e:f1: a5:f4:c6:11:91:fb:52:2a:1d:7c:3a:88:3c:ed:bc:1e:e3:1d: fe:f1:4c:2e:61:df:4c:17:8f:7c:d4:2d:ee:f9:8d:d8:2f:15: bd:16:11:32:7f:ad:85:c9:dd:3a:cd:29:ca:f4:18:d0:a5:d2: 6f:5c:04:3d:c3:26:c4:73:9a:55:9c:b9:83:88:c0:bc:91:b6: fa:3b:be:8a:9f:50:25:55:5d:08:2c:fd:79:99:ba:02:c1:a1: 30:fd:6c:6a:a2:b2:d1:0b:1d:1c:de:e2:89:dd:75:87:6f:2b: d1:dd:ab:fb:38:17:e3:cc:ab:3e:04:da:ae:ff:05:62:6a:37: 67:36:fb:e0:93:df:73:83:7c:bd:30:9e:58:e6:dc:c0:d4:53: 3e:e0:5e:f5:fc:73:5b:bc:c9:7b:b1:07:7e:19:a4:3d:f1:ca: 99:b9:ca:bd:db:62:60:2e:54:51:e9:d3:58:b5:7f:75:ac:0c: 9b:98:fa:e3:c8:af:5f:f5:c7:f2:fd:ba:03:40:94:c2:ec:ed: e5:b1:18:21:e0:dd:2d:a4:a8:39:49:78:d2:d4:ab:75:24:2a: 36:32:8b:0b:c0:9e:3d:5c:74:60:34:3b:7c:17:73:76:00:99: 44:6c:01:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWpGNaA1lML4V6UrKwF985qEmk6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY0NEY1NzUwQUIyNEE3RDZFODQ0MjgxQTcyNEY0NzA5 OTRDMzE2RTAeFw0yNTExMDUxODE4MDBaFw0yNTExMDYyMTM2MDBaMDMxMTAvBgNV BAMTKEI0QjZBQjkyOUYyNUY3NUY4RkU5ODQ2QTNBRDcwQjJENTMxRDUzQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwH0BWDOycPMqNnBIjTZGIkRNR oAFIMpdyiLts1b7COjK1rBMFyTJ+kLekTJpavQOZKRtfnziTC7GeT3X0fmVe3lJ8 Cr1EURfcSYe2IfIU0OcUJXC1jzn8ybRdkfjihs7YpAatEyFEh27u9Owv382fuAMP 5mexNEDEMoDsSTOAE+eCxTOD1J8jTXTHGRkPVebC8Jcx/+oRrc+QOqhBGgvg//4P +7etn5ccdzNOfTd52gc1VyeG3p+38y2LNbO6WfahPlZpOUVSy5OTP6zZM6SeQCBa Br+pU5iCBbhDjpzL+gHeAbdPVHQ6N04Sj68Ni08m8CYB2uPMaHcaFmhQt9hbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtLarkp8l91+P6YRqOtcLLVMdU68wHwYDVR0j BBgwFoAUD0T1dQqySn1uhEKBpyT0cJlMMW4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGcyVFN3dFRuNGdpQ2ZzUThKWldGU0RkNE1ac3E1NjRyVkZDZnRtUEI0 Y1QvMC8wRjQ0RjU3NTBBQjI0QTdENkU4NDQyODFBNzI0RjQ3MDk5NEMzMTZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGNDRGNTc1MEFCMjRBN0Q2 RTg0NDI4MUE3MjRGNDcwOTk0QzMxNkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGcyVFN3dFRuNGdpQ2ZzUThKWldGU0RkNE1ac3E1NjRyVkZDZnRtUEI0Y1QvMC8w RjQ0RjU3NTBBQjI0QTdENkU4NDQyODFBNzI0RjQ3MDk5NEMzMTZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXElah8tfJWnb0MaXUPPeG57xpfTGEZH7UiodfDqIPO28HuMd/vFMLmHfTBeP fNQt7vmN2C8VvRYRMn+thcndOs0pyvQY0KXSb1wEPcMmxHOaVZy5g4jAvJG2+ju+ ip9QJVVdCCz9eZm6AsGhMP1saqKy0QsdHN7iid11h28r0d2r+zgX48yrPgTarv8F Ymo3Zzb74JPfc4N8vTCeWObcwNRTPuBe9fxzW7zJe7EHfhmkPfHKmbnKvdtiYC5U UenTWLV/dawMm5j648ivX/XH8v26A0CUwuzt5bEYIeDdLaSoOUl40tSrdSQqNjKL C8CePVx0YDQ7fBdzdgCZRGwBYQ== -----END CERTIFICATE-----Generated at Thu Nov 6 04:54:09 2025 by rpki-client