$ rpki-client -vvf rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft File: 964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft (raw, json) Hash identifier: sAG1C9I7HrUueUi7/Z+8e2Eay3N5VZM/FQVnH6usvJ8= Subject key identifier: BA:1C:0B:19:65:7F:33:6E:32:FE:7D:0F:8B:B8:91:C5:09:E5:07:85 Authority key identifier: 96:4E:46:83:BB:2B:25:96:30:0F:81:FE:BD:9E:A9:DB:50:5A:F0:25 Certificate issuer: /CN=964E4683BB2B2596300F81FEBD9EA9DB505AF025 Certificate serial: 3AAED23749C6AAC0959B62CCB17120EE7CCD6569 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer Subject info access: rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft Manifest number: 027B Signing time: Wed 05 Nov 2025 10:37:48 +0000 Manifest this update: Wed 05 Nov 2025 10:32:48 +0000 Manifest next update: Thu 06 Nov 2025 11:01:48 +0000 Files and hashes: 1: 3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa (hash: TWgboQvD5ElxCD7GryGFp3lioM8xkrhIZhs+YOtG00s=) 2: 323830343a343130343a3a2f33322d313238203d3e20323635393938.roa (hash: 2RhvcmCViO7K6rvzNLUvrSfyH4uASVKfLVRVw16Kfio=) 3: 964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl (hash: IigMja1kM8RmYjY4qqrWJ5cvz3ii6oulW5C6iTunMhA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ae:d2:37:49:c6:aa:c0:95:9b:62:cc:b1:71:20:ee:7c:cd:65:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964E4683BB2B2596300F81FEBD9EA9DB505AF025 Validity Not Before: Nov 5 10:32:48 2025 GMT Not After : Nov 6 11:01:48 2025 GMT Subject: CN=BA1C0B19657F336E32FE7D0F8BB891C509E50785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c3:3a:10:30:ea:3c:a6:c9:e2:a0:6c:f2:3a: bb:f0:c5:d2:ee:a9:c4:18:4a:69:e1:17:4d:69:6e: 21:9e:46:59:70:83:02:6b:95:8a:92:db:86:da:de: e3:0a:4f:80:83:39:2d:99:48:49:67:08:2e:c1:f1: 7b:bb:c4:2b:dd:2d:99:08:76:5b:03:f4:e6:3b:cc: 38:55:7e:c2:28:f7:95:72:46:96:81:67:d2:72:3c: 48:6e:8f:9c:56:b4:94:a0:b4:ce:bc:ac:42:ba:08: 46:3e:ab:93:80:05:40:74:9e:e9:30:55:85:37:29: fb:01:ef:2d:d5:6d:b8:83:3c:27:2a:c4:b5:92:cc: 41:dd:c2:96:af:42:89:b1:e7:16:e9:f3:1a:04:20: 52:33:d1:4e:e4:fa:da:e8:a5:a3:c8:01:63:ab:11: 73:36:fd:f0:7c:e5:b6:04:73:02:ef:1a:75:81:47: 25:1d:ce:8f:40:a1:80:09:ad:36:91:be:22:1d:4e: 04:1d:bb:b3:7d:3d:67:76:ac:6c:95:13:00:c9:5a: 1c:f6:48:52:23:c1:c3:45:c4:ca:a6:c1:c9:e2:3f: 75:5d:1e:e5:37:a8:f7:c1:8a:02:ca:02:f2:fd:81: f8:78:7e:4e:68:88:6d:48:55:fd:37:65:76:94:8f: e0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1C:0B:19:65:7F:33:6E:32:FE:7D:0F:8B:B8:91:C5:09:E5:07:85 X509v3 Authority Key Identifier: keyid:96:4E:46:83:BB:2B:25:96:30:0F:81:FE:BD:9E:A9:DB:50:5A:F0:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:6c:a9:e3:57:4c:80:67:3e:88:32:3b:82:8f:14:be:43:b4: 55:a6:7e:08:b8:6e:81:4e:22:59:e6:8d:b1:8f:3c:4b:d6:4c: 4d:a6:b7:4f:99:2e:be:2c:ab:0c:92:48:db:dc:6b:32:6b:39: 2c:29:b8:ac:72:20:55:1b:7c:96:f2:ac:99:69:9c:85:7e:72: 5c:eb:07:02:40:03:e0:f9:9f:0c:86:e0:93:13:62:9c:39:6e: ae:c7:72:6a:c6:7e:b7:03:5a:27:e1:1a:47:7e:f0:ac:bf:c8: b4:13:6a:4e:f7:18:a2:b2:d1:11:92:6e:c9:25:4d:9f:87:b2: da:b9:0f:c7:52:66:0d:6b:12:94:39:d3:57:47:bd:08:e9:6d: 9c:d1:a0:e2:05:8e:68:86:5d:8f:50:4b:49:76:de:48:e8:73: 03:9c:ba:da:02:73:81:e2:0d:03:77:5d:50:92:05:e1:ab:76: 85:f8:0b:b1:07:fd:76:3d:af:7f:db:4f:ff:b7:88:fc:9c:07: 8b:49:c9:ae:03:a3:bd:12:2c:66:0c:ee:fa:00:88:92:40:1c: 65:89:c4:fa:18:9a:b6:6e:82:e7:61:c6:fc:d5:f2:c2:e3:78: 1c:41:6d:67:5a:85:7d:da:67:1f:83:ea:00:8c:4a:6f:17:c3: 0b:b9:1e:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOq7SN0nGqsCVm2LMsXEg7nzNZWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY0RTQ2ODNCQjJCMjU5NjMwMEY4MUZFQkQ5RUE5REI1 MDVBRjAyNTAeFw0yNTExMDUxMDMyNDhaFw0yNTExMDYxMTAxNDhaMDMxMTAvBgNV BAMTKEJBMUMwQjE5NjU3RjMzNkUzMkZFN0QwRjhCQjg5MUM1MDlFNTA3ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClwzoQMOo8psnioGzyOrvwxdLu qcQYSmnhF01pbiGeRllwgwJrlYqS24ba3uMKT4CDOS2ZSElnCC7B8Xu7xCvdLZkI dlsD9OY7zDhVfsIo95VyRpaBZ9JyPEhuj5xWtJSgtM68rEK6CEY+q5OABUB0nukw VYU3KfsB7y3VbbiDPCcqxLWSzEHdwpavQomx5xbp8xoEIFIz0U7k+tropaPIAWOr EXM2/fB85bYEcwLvGnWBRyUdzo9AoYAJrTaRviIdTgQdu7N9PWd2rGyVEwDJWhz2 SFIjwcNFxMqmwcniP3VdHuU3qPfBigLKAvL9gfh4fk5oiG1IVf03ZXaUj+BFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuhwLGWV/M24y/n0Pi7iRxQnlB4UwHwYDVR0j BBgwFoAUlk5Gg7srJZYwD4H+vZ6p21Ba8CUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGt4UWg4eFVrbkQ1akdEcmRMSE1IZXFlZHlGbUt1UEtKVWFDeXN1ZXhY UVAvMC85NjRFNDY4M0JCMkIyNTk2MzAwRjgxRkVCRDlFQTlEQjUwNUFGMDI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2NEU0NjgzQkIyQjI1OTYz MDBGODFGRUJEOUVBOURCNTA1QUYwMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGt4UWg4eFVrbkQ1akdEcmRMSE1IZXFlZHlGbUt1UEtKVWFDeXN1ZXhYUVAvMC85 NjRFNDY4M0JCMkIyNTk2MzAwRjgxRkVCRDlFQTlEQjUwNUFGMDI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsmyp41dMgGc+iDI7go8UvkO0VaZ+CLhugU4iWeaNsY88S9ZMTaa3T5kuviyr DJJI29xrMms5LCm4rHIgVRt8lvKsmWmchX5yXOsHAkAD4PmfDIbgkxNinDlursdy asZ+twNaJ+EaR37wrL/ItBNqTvcYorLREZJuySVNn4ey2rkPx1JmDWsSlDnTV0e9 COltnNGg4gWOaIZdj1BLSXbeSOhzA5y62gJzgeINA3ddUJIF4at2hfgLsQf9dj2v f9tP/7eI/JwHi0nJrgOjvRIsZgzu+gCIkkAcZYnE+hiatm6C52HG/NXywuN4HEFt Z1qFfdpnH4PqAIxKbxfDC7ketQ== -----END CERTIFICATE-----Generated at Wed Nov 5 20:01:38 2025 by rpki-client