$ rpki-client -vvf rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.mft File: 0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.mft (raw, json) Hash identifier: tmhGKnO/HYdKPDl3id1dM8EMJA45mrkwg9qDed7s/bY= Subject key identifier: 71:5E:40:BF:39:B9:EC:B7:71:28:19:85:EA:3F:39:89:1D:E3:86:D4 Authority key identifier: 0C:E1:0F:3D:2F:72:46:78:7E:71:71:D1:A1:D8:8B:A0:BA:A6:53:E7 Certificate issuer: /CN=0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7 Certificate serial: 40943E732B8656965875970582E89F31C2310B9C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.cer Subject info access: rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.mft Manifest number: 11 Signing time: Tue 04 Nov 2025 22:13:45 +0000 Manifest this update: Tue 04 Nov 2025 22:08:45 +0000 Manifest next update: Wed 05 Nov 2025 22:14:45 +0000 Files and hashes: 1: 323830343a386565383a3a2f33322d3438203d3e20323733343535.roa (hash: NVUJownjGnvFSmtuDbAZ9K64Gu/5n2+eB4lx6uENZ3s=) 2: 0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.crl (hash: osN6mcplfJ3zs4GdUUjcbTrCJ9rMpVTYBT/0Zsheu+M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.crl rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:94:3e:73:2b:86:56:96:58:75:97:05:82:e8:9f:31:c2:31:0b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7 Validity Not Before: Nov 4 22:08:45 2025 GMT Not After : Nov 5 22:14:45 2025 GMT Subject: CN=715E40BF39B9ECB771281985EA3F39891DE386D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:25:9f:95:50:b3:ca:96:53:b7:fd:36:9f: 0a:49:51:c2:eb:70:4f:b0:e6:b3:87:72:58:ca:86: d0:89:4d:96:a3:66:9c:11:69:1a:9d:6f:07:fc:23: 52:10:6e:e4:ea:7f:6b:63:90:f2:cf:77:62:3a:bd: 4d:4e:7b:dd:27:98:54:f5:76:3b:9f:3f:73:6b:d8: 2f:d5:1d:3a:19:71:4f:60:72:b9:e8:db:c7:81:1b: 2c:60:54:4f:e6:c3:15:a2:4c:a3:02:0d:c4:2f:7b: e9:aa:45:04:5f:69:59:f3:8a:f9:8d:40:6f:8f:ab: ba:be:bb:0d:9d:d2:cc:cf:8f:e9:ff:5e:f2:56:5c: c7:00:97:6b:57:b8:01:13:b3:ad:9e:4d:2b:fb:f1: b0:f8:a8:cb:37:da:d3:b7:75:46:a0:40:4b:c1:6f: 98:09:29:62:e8:2f:2e:56:8e:cd:11:42:2c:45:cb: 8e:1a:1d:6c:63:b0:a3:c2:0e:55:a4:41:ec:ca:b5: 42:59:a8:be:a5:0f:c5:9d:65:1c:ce:b2:d8:25:f7: 04:56:56:3d:31:0a:ae:7e:ef:fd:51:db:46:ef:06: 57:ca:ef:bb:8a:1c:97:42:53:86:f5:8f:8b:d2:ce: ca:1b:e5:84:35:db:62:76:e6:41:a2:01:cc:07:b3: e2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5E:40:BF:39:B9:EC:B7:71:28:19:85:EA:3F:39:89:1D:E3:86:D4 X509v3 Authority Key Identifier: keyid:0C:E1:0F:3D:2F:72:46:78:7E:71:71:D1:A1:D8:8B:A0:BA:A6:53:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f3:ab:04:ab:de:0c:e9:e7:8d:96:ce:b8:bd:bd:93:ab:b7: 91:4e:93:ab:14:49:4a:ac:07:3d:0d:64:eb:2f:0a:e0:8f:44: 49:e0:9f:52:9d:74:8d:16:27:40:c0:43:2e:19:10:46:3c:93: be:e9:09:b8:6d:f8:7a:f8:ab:a2:7a:8a:a8:b2:8c:40:62:68: ea:27:4e:9d:46:7f:8e:5c:75:00:19:16:30:8d:8a:a0:89:74: ba:45:6e:25:2d:d5:6f:85:6c:71:7d:9f:e3:c6:a9:65:c6:b8: ec:b3:77:cb:8b:18:2f:3c:2f:8c:26:b5:bb:18:13:9a:cf:c8: f6:d9:4a:e1:f9:f2:79:b0:34:cd:39:07:15:28:2a:0e:f4:dc: ef:ac:8c:25:69:a8:db:c3:94:ff:40:a8:b2:89:61:3d:be:41: aa:27:55:0d:3b:5c:34:51:35:85:40:5f:8c:16:79:7d:0e:0a: 96:e5:34:09:90:3f:c2:35:91:98:1e:c4:74:8d:09:be:a9:c3: b1:85:b4:70:60:df:f9:d7:f9:c7:8f:5a:64:cf:cf:fb:56:b6: 9e:62:8a:f5:b6:b5:82:ec:40:1e:61:64:3f:f8:c5:51:9c:41: f9:de:e1:1f:6e:5c:12:ce:84:ec:7f:86:de:da:e1:3b:e6:6f: bc:9b:a4:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQJQ+cyuGVpZYdZcFguifMcIxC5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMTBGM0QyRjcyNDY3ODdFNzE3MUQxQTFEODhCQTBC QUE2NTNFNzAeFw0yNTExMDQyMjA4NDVaFw0yNTExMDUyMjE0NDVaMDMxMTAvBgNV BAMTKDcxNUU0MEJGMzlCOUVDQjc3MTI4MTk4NUVBM0YzOTg5MURFMzg2RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPCWflVCzypZTt/02nwpJUcLr cE+w5rOHcljKhtCJTZajZpwRaRqdbwf8I1IQbuTqf2tjkPLPd2I6vU1Oe90nmFT1 djufP3Nr2C/VHToZcU9gcrno28eBGyxgVE/mwxWiTKMCDcQve+mqRQRfaVnzivmN QG+Pq7q+uw2d0szPj+n/XvJWXMcAl2tXuAETs62eTSv78bD4qMs32tO3dUagQEvB b5gJKWLoLy5Wjs0RQixFy44aHWxjsKPCDlWkQezKtUJZqL6lD8WdZRzOstgl9wRW Vj0xCq5+7/1R20bvBlfK77uKHJdCU4b1j4vSzsob5YQ122J25kGiAcwHs+KrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcV5Avzm57LdxKBmF6j85iR3jhtQwHwYDVR0j BBgwFoAUDOEPPS9yRnh+cXHRodiLoLqmU+cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkdFcHpFTTJBSFBBOHVTdmFZNXV4b1A5bVFhdkI3eUM3U2VwdHRTdUQ3 NnEvMC8wQ0UxMEYzRDJGNzI0Njc4N0U3MTcxRDFBMUQ4OEJBMEJBQTY1M0U3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDRTEwRjNEMkY3MjQ2Nzg3 RTcxNzFEMUExRDg4QkEwQkFBNjUzRTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkdFcHpFTTJBSFBBOHVTdmFZNXV4b1A5bVFhdkI3eUM3U2VwdHRTdUQ3NnEvMC8w Q0UxMEYzRDJGNzI0Njc4N0U3MTcxRDFBMUQ4OEJBMEJBQTY1M0U3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIvOrBKveDOnnjZbOuL29k6u3kU6TqxRJSqwHPQ1k6y8K4I9ESeCfUp10jRYn QMBDLhkQRjyTvukJuG34evironqKqLKMQGJo6idOnUZ/jlx1ABkWMI2KoIl0ukVu JS3Vb4VscX2f48apZca47LN3y4sYLzwvjCa1uxgTms/I9tlK4fnyebA0zTkHFSgq DvTc76yMJWmo28OU/0CosolhPb5BqidVDTtcNFE1hUBfjBZ5fQ4KluU0CZA/wjWR mB7EdI0JvqnDsYW0cGDf+df5x49aZM/P+1a2nmKK9ba1guxAHmFkP/jFUZxB+d7h H25cEs6E7H+G3trhO+ZvvJuknA== -----END CERTIFICATE-----Generated at Wed Nov 5 02:37:05 2025 by rpki-client