$ rpki-client -vvf rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft File: FAF093F291860536EFFC93934E77DC96693302DB.mft (raw, json) Hash identifier: 2ViyklNK9iIZSVx/iJIJnt24q2sjtgDAGmUE6qG1niE= Subject key identifier: 83:F4:E1:07:77:1A:9A:C8:83:24:18:87:F8:C9:37:EF:8F:4C:6B:6F Authority key identifier: FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB Certificate issuer: /CN=FAF093F291860536EFFC93934E77DC96693302DB Certificate serial: 452558FC635BCDF635E1B9FA6F98585074B3C3F8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer Subject info access: rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft Manifest number: 01C3 Signing time: Tue 04 Nov 2025 17:22:50 +0000 Manifest this update: Tue 04 Nov 2025 17:17:50 +0000 Manifest next update: Wed 05 Nov 2025 19:43:50 +0000 Files and hashes: 1: 3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa (hash: +6i+XKwWimizfoRbdVJb2YohVqqa/xjfO3uX3N5x8Vw=) 2: 3133382e3235352e31352e302f32342d3234203d3e20323633393437.roa (hash: EhmTEC5QC+H+pd2HDVqUylhWWO+vL5RhWs9lWiFoqmo=) 3: 323830343a323833343a3a2f33322d3334203d3e20323633393437.roa (hash: VoAdhZL4dy4CwwQ5dn/EUOWDbJltxLahEw3mn1FyuU4=) 4: FAF093F291860536EFFC93934E77DC96693302DB.crl (hash: lBugkBw5co7JvgZ12Eb9hj+29kttfhnNzPmjgqtGMtM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:25:58:fc:63:5b:cd:f6:35:e1:b9:fa:6f:98:58:50:74:b3:c3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAF093F291860536EFFC93934E77DC96693302DB Validity Not Before: Nov 4 17:17:50 2025 GMT Not After : Nov 5 19:43:50 2025 GMT Subject: CN=83F4E107771A9AC883241887F8C937EF8F4C6B6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:99:cc:42:94:08:7c:f5:7a:59:83:ae:f1:a5: 16:92:26:4f:56:c0:96:bc:d9:6d:55:1d:ed:11:b5: 81:84:af:76:0f:05:de:64:e0:48:34:b1:4b:a7:11: 8c:bd:0a:fd:ff:c5:08:a8:8f:b4:21:4a:54:69:5e: ef:6b:38:1a:ee:6f:68:20:b2:0f:53:21:f9:d3:03: 0d:bb:0e:ea:60:a8:af:0a:85:28:d6:49:45:48:c1: db:0f:76:e5:5e:2f:ec:47:46:ed:a1:dc:d9:e5:ba: 03:4c:8a:83:ba:71:56:33:64:f4:43:ad:a6:34:45: ee:1b:60:83:53:ba:e4:53:c3:5d:cb:df:bb:2b:c9: 53:9c:e1:93:7d:bc:08:54:59:ab:ac:31:94:cb:61: 51:86:fc:39:fb:68:26:41:60:24:7f:3a:57:a7:dc: d3:f7:98:06:c7:bb:13:83:3a:3c:6f:3e:75:84:f6: f8:a1:ba:5c:d1:c6:5e:f9:df:f7:6c:c6:3f:72:3f: c2:f0:4f:12:19:1e:9a:e0:0e:c0:ab:45:ae:7f:bc: 80:b8:c4:65:ae:11:a9:ba:27:92:17:13:30:04:f9: 21:33:10:70:aa:4a:e4:bf:2f:2a:c2:0e:86:3e:cf: 2d:17:b7:be:73:eb:01:ba:1f:5e:c9:c1:4c:6e:23: db:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F4:E1:07:77:1A:9A:C8:83:24:18:87:F8:C9:37:EF:8F:4C:6B:6F X509v3 Authority Key Identifier: keyid:FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:41:8b:54:29:e5:6f:51:ac:a6:e0:5d:25:44:77:e3:34:2e: 6d:f9:66:14:fb:c2:90:95:e9:2b:3e:bb:3b:0d:8a:7b:f5:62: 41:c4:3c:eb:9e:19:f7:b1:ff:5e:01:4b:c4:8e:f3:a0:6a:66: 09:6a:44:84:a1:06:a4:36:3c:e0:b9:a5:9f:96:3a:68:a7:02: 5b:3e:92:95:62:15:92:c8:e7:2b:bd:6a:ee:63:0a:5f:ca:4d: 76:c8:e3:01:e3:99:32:5b:56:3b:9c:e6:71:87:02:c7:23:7f: 47:13:cb:66:51:7c:46:9d:ec:82:2c:82:eb:ba:5c:77:a5:fc: 08:26:17:81:de:57:0b:d7:f8:b7:a2:9f:c6:3a:98:53:cb:57: 25:d0:d5:54:25:e4:1c:ff:aa:1e:55:d0:7c:fb:1f:d7:0e:dd: b3:d6:c9:7f:f7:13:aa:6a:7d:23:5e:ad:6b:a7:7d:e4:ea:fb: b6:65:1d:88:e3:bc:ba:49:69:80:83:ed:76:f1:0d:8b:4c:26: 5b:45:f4:45:38:2f:55:74:4b:c6:bf:8f:a4:c2:83:3b:10:71: f2:86:e2:c3:65:91:e4:da:2a:58:ec:c2:1f:4b:54:98:d9:b0: c1:d2:15:3d:21:99:bf:00:d5:c9:b8:d7:8e:d7:db:8b:06:3e: a8:82:94:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURSVY/GNbzfY14bn6b5hYUHSzw/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFGMDkzRjI5MTg2MDUzNkVGRkM5MzkzNEU3N0RDOTY2 OTMzMDJEQjAeFw0yNTExMDQxNzE3NTBaFw0yNTExMDUxOTQzNTBaMDMxMTAvBgNV BAMTKDgzRjRFMTA3NzcxQTlBQzg4MzI0MTg4N0Y4QzkzN0VGOEY0QzZCNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbmcxClAh89XpZg67xpRaSJk9W wJa82W1VHe0RtYGEr3YPBd5k4Eg0sUunEYy9Cv3/xQioj7QhSlRpXu9rOBrub2gg sg9TIfnTAw27DupgqK8KhSjWSUVIwdsPduVeL+xHRu2h3NnlugNMioO6cVYzZPRD raY0Re4bYINTuuRTw13L37sryVOc4ZN9vAhUWausMZTLYVGG/Dn7aCZBYCR/Olen 3NP3mAbHuxODOjxvPnWE9vihulzRxl753/dsxj9yP8LwTxIZHprgDsCrRa5/vIC4 xGWuEam6J5IXEzAE+SEzEHCqSuS/LyrCDoY+zy0Xt75z6wG6H17JwUxuI9v9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUg/ThB3camsiDJBiH+Mk3749Ma28wHwYDVR0j BBgwFoAU+vCT8pGGBTbv/JOTTnfclmkzAtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSExBZmJMaEFlbkxROXQzQVAzNU5DaWJqM0hZZXFGTDhLejNvbjNXcG9Z U0UvMC9GQUYwOTNGMjkxODYwNTM2RUZGQzkzOTM0RTc3REM5NjY5MzMwMkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBRjA5M0YyOTE4NjA1MzZF RkZDOTM5MzRFNzdEQzk2NjkzMzAyREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SExBZmJMaEFlbkxROXQzQVAzNU5DaWJqM0hZZXFGTDhLejNvbjNXcG9ZU0UvMC9G QUYwOTNGMjkxODYwNTM2RUZGQzkzOTM0RTc3REM5NjY5MzMwMkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA0GLVCnlb1GspuBdJUR34zQubflmFPvCkJXpKz67Ow2Ke/ViQcQ8654Z97H/ XgFLxI7zoGpmCWpEhKEGpDY84Lmln5Y6aKcCWz6SlWIVksjnK71q7mMKX8pNdsjj AeOZMltWO5zmcYcCxyN/RxPLZlF8Rp3sgiyC67pcd6X8CCYXgd5XC9f4t6KfxjqY U8tXJdDVVCXkHP+qHlXQfPsf1w7ds9bJf/cTqmp9I16ta6d95Or7tmUdiOO8uklp gIPtdvENi0wmW0X0RTgvVXRLxr+PpMKDOxBx8obiw2WR5NoqWOzCH0tUmNmwwdIV PSGZvwDVybjXjtfbiwY+qIKUgw== -----END CERTIFICATE-----Generated at Wed Nov 5 11:47:55 2025 by rpki-client