$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft File: D95738A14AD98B305087E048FD2E4821E5E2299A.mft (raw, json) Hash identifier: OnCB1YPyoIUF+dOXwVr/bvwsJfDsFzXlLJgLUHNuVL8= Subject key identifier: A5:58:A8:97:06:64:C1:FE:AA:19:22:97:71:45:D1:E4:11:50:D5:66 Authority key identifier: D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A Certificate issuer: /CN=D95738A14AD98B305087E048FD2E4821E5E2299A Certificate serial: 390633839DEB5DD569FBAF0ADE1D82A64697FE51 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft Manifest number: 0116 Signing time: Tue 04 Nov 2025 20:48:12 +0000 Manifest this update: Tue 04 Nov 2025 20:43:12 +0000 Manifest next update: Wed 05 Nov 2025 22:08:12 +0000 Files and hashes: 1: 3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa (hash: g6mPrnM05WB2yDxH6Zlq8hbCsk4V+orsbGR3GF+AKT8=) 2: D95738A14AD98B305087E048FD2E4821E5E2299A.crl (hash: jq9JHXmBtqLUJZjjYaSmzdNTLssK5pPtjcbsJknhEKw=) 3: 323830343a313235343a3a2f33322d3332203d3e20323633343730.roa (hash: ELWb7rC3fgvn1sa3PxipINIruhW615Gy+69ajKYPWzI=) 4: 3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa (hash: 3dEyGzKHFOd9LeZVxU1UzcBmIS+t2RbJviuI4dC12Lk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:06:33:83:9d:eb:5d:d5:69:fb:af:0a:de:1d:82:a6:46:97:fe:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D95738A14AD98B305087E048FD2E4821E5E2299A Validity Not Before: Nov 4 20:43:12 2025 GMT Not After : Nov 5 22:08:12 2025 GMT Subject: CN=A558A8970664C1FEAA1922977145D1E41150D566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:e2:9c:5f:9b:cb:a3:66:c8:fc:d1:b0:e9: a7:60:38:c7:10:17:3b:25:1b:48:12:b7:95:03:44: 46:3b:d0:e1:e3:3b:dd:f3:67:de:ab:f2:71:fc:c7: 90:5f:66:a4:a2:99:93:31:7b:93:7f:53:9a:91:82: f0:07:c3:be:71:7a:19:5c:71:42:2c:db:dd:f2:83: d3:f3:5c:44:44:71:3d:6e:0f:bf:15:b1:42:3f:c3: 4c:b5:e5:bb:01:00:51:a6:7d:d8:c2:46:13:0e:9a: 49:50:25:27:28:f5:50:db:7f:6b:98:27:ff:3d:75: 7b:49:03:75:08:a6:a6:b8:61:89:51:24:d6:13:d8: da:3b:2f:e8:82:5b:22:df:13:64:89:98:b4:d0:70: b6:58:2b:0b:21:bd:96:f8:cd:65:fb:2d:6f:0e:25: 15:5a:29:09:bd:ee:9e:05:a6:b7:fd:b7:b3:45:90: 13:ea:3a:ea:42:e3:c9:dd:5d:91:be:66:37:f5:18: df:a3:24:44:44:2b:10:84:c5:6c:64:60:b3:df:3f: c1:c3:57:fd:46:1c:dc:85:a9:5b:d2:10:ba:99:79: c2:39:80:1a:b9:47:28:67:c6:64:14:81:74:79:4e: 15:32:bc:9e:49:b8:94:39:d7:ff:ed:ee:38:4c:7c: 59:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:58:A8:97:06:64:C1:FE:AA:19:22:97:71:45:D1:E4:11:50:D5:66 X509v3 Authority Key Identifier: keyid:D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:9d:55:3b:76:c0:a7:bd:f1:98:71:e0:b3:84:6b:bf:e7:4e: 06:59:1f:de:1e:cc:6c:7c:00:d7:5c:89:38:0e:32:e9:64:d8: b6:a8:c8:46:1e:1e:ed:47:82:fb:82:e5:77:c9:03:05:49:61: b0:60:11:86:bd:95:4b:5b:3f:b6:4f:22:de:d3:a5:14:60:bb: c7:f7:7d:64:83:5c:00:74:1b:35:db:7f:4c:ca:93:74:a6:ec: c8:86:c6:36:b1:68:86:d5:99:3a:d7:27:44:e0:49:62:15:ef: 31:b8:2f:c9:cb:b3:b8:00:2d:bd:ff:f3:32:25:66:78:6e:eb: e1:51:7f:19:c6:30:50:6d:74:a3:36:00:fb:17:9c:0f:8a:a7: ad:b4:27:42:98:5f:8c:52:0f:5e:af:db:71:f4:6b:93:20:06: 2a:ec:ec:e6:6b:aa:52:f8:b7:fc:03:89:72:d7:ef:1d:17:c7: b7:92:fd:f1:6c:9b:83:79:70:d0:38:15:dd:b6:9e:46:72:c1: 5a:73:aa:2e:ec:27:8c:02:e5:7b:c9:87:d0:0f:aa:1b:5c:00: 88:14:85:7d:92:c4:7e:cb:5f:72:bb:ad:a2:39:6b:86:79:f5: 4c:a8:04:4b:74:11:49:a5:ac:c7:2a:4a:27:d8:f0:b6:15:62: a6:98:da:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOQYzg53rXdVp+68K3h2CpkaX/lEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk1NzM4QTE0QUQ5OEIzMDUwODdFMDQ4RkQyRTQ4MjFF NUUyMjk5QTAeFw0yNTExMDQyMDQzMTJaFw0yNTExMDUyMjA4MTJaMDMxMTAvBgNV BAMTKEE1NThBODk3MDY2NEMxRkVBQTE5MjI5NzcxNDVEMUU0MTE1MEQ1NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFauKcX5vLo2bI/NGw6adgOMcQ FzslG0gSt5UDREY70OHjO93zZ96r8nH8x5BfZqSimZMxe5N/U5qRgvAHw75xehlc cUIs293yg9PzXEREcT1uD78VsUI/w0y15bsBAFGmfdjCRhMOmklQJSco9VDbf2uY J/89dXtJA3UIpqa4YYlRJNYT2No7L+iCWyLfE2SJmLTQcLZYKwshvZb4zWX7LW8O JRVaKQm97p4Fprf9t7NFkBPqOupC48ndXZG+Zjf1GN+jJEREKxCExWxkYLPfP8HD V/1GHNyFqVvSELqZecI5gBq5RyhnxmQUgXR5ThUyvJ5JuJQ51//t7jhMfFm1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpViolwZkwf6qGSKXcUXR5BFQ1WYwHwYDVR0j BBgwFoAU2Vc4oUrZizBQh+BI/S5IIeXiKZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2 UFkvMC9EOTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NTczOEExNEFEOThCMzA1 MDg3RTA0OEZEMkU0ODIxRTVFMjI5OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2UFkvMC9E OTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUp1VO3bAp73xmHHgs4Rrv+dOBlkf3h7MbHwA11yJOA4y6WTYtqjIRh4e7UeC +4Lld8kDBUlhsGARhr2VS1s/tk8i3tOlFGC7x/d9ZINcAHQbNdt/TMqTdKbsyIbG NrFohtWZOtcnROBJYhXvMbgvycuzuAAtvf/zMiVmeG7r4VF/GcYwUG10ozYA+xec D4qnrbQnQphfjFIPXq/bcfRrkyAGKuzs5muqUvi3/AOJctfvHRfHt5L98Wybg3lw 0DgV3baeRnLBWnOqLuwnjALle8mH0A+qG1wAiBSFfZLEfstfcrutojlrhnn1TKgE S3QRSaWsxypKJ9jwthVippjaOA== -----END CERTIFICATE-----Generated at Wed Nov 5 08:37:31 2025 by rpki-client