$ rpki-client -vvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft File: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft (raw, json) Hash identifier: dzcgtGmbuWZJkCqwKW+9kKsS0AllBKifmNDvjM1AgFM= Subject key identifier: D6:40:F5:8E:EA:A7:64:DB:A1:15:9D:7E:3E:54:8F:F8:92:74:52:C1 Authority key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5 Certificate issuer: /CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5 Certificate serial: 76063829AA403B0F564FE8341055A4EE5B65E1C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer Subject info access: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft Manifest number: 0300 Signing time: Wed 05 Nov 2025 11:43:58 +0000 Manifest this update: Wed 05 Nov 2025 11:38:58 +0000 Manifest next update: Thu 06 Nov 2025 12:31:58 +0000 Files and hashes: 1: 34352e37302e34302e302f32322d3332203d3e20323637353436.roa (hash: ZGz/qxMNOnn8ZRQqWAjpD7CsiHW3hsbP55xHl3KH4L0=) 2: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl (hash: yki4lbnE2DfJcP7oJLFa/RS0jTbxz5czA6b1aNYhlBs=) 3: 34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa (hash: oxjQRGVdgBIIIUSH26/VmV6NbSjuLnOQbtY6pEUcqrk=) 4: 323830343a343331303a3a2f33322d313238203d3e20323637353436.roa (hash: Kun2CCgPn8Q+q8HC0X//kGwa1c8M6wEv2En3ue4bLs0=) 5: 3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa (hash: xYKUjGDvB4ohftGmPkBCTmPGZBuO+nqUhKkaIhxMrJg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 12:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:06:38:29:aa:40:3b:0f:56:4f:e8:34:10:55:a4:ee:5b:65:e1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5 Validity Not Before: Nov 5 11:38:58 2025 GMT Not After : Nov 6 12:31:58 2025 GMT Subject: CN=D640F58EEAA764DBA1159D7E3E548FF8927452C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c8:57:56:cd:45:91:4b:18:c1:a5:4c:da:1a: bd:ae:98:7f:e1:22:82:b2:f9:8b:12:a1:7f:d6:2d: f5:96:fa:4d:54:87:2c:70:1f:47:dd:97:c3:c8:62: 47:1a:97:55:50:f3:f9:15:c6:24:54:c9:8c:b5:25: a6:08:86:27:1f:4a:e1:85:3e:6a:ef:4b:01:0d:55: 7f:27:fc:57:0f:6b:b4:ad:1c:b4:1a:ff:3f:f6:4a: 26:c7:e1:48:87:90:d3:8c:2b:8f:04:1d:77:be:ec: 11:97:f1:6b:4d:de:d7:f0:0b:6c:dc:99:6c:a5:6c: bb:d6:e1:a1:64:d0:51:6a:7f:79:7c:a3:6e:86:9c: ea:5e:49:a9:04:62:cd:fd:ff:52:b9:b7:ee:13:c2: 7f:96:1b:81:f1:5e:6b:24:ec:0c:0b:bf:6f:23:be: 9c:c9:c4:4d:32:af:f0:e5:da:85:29:26:ea:39:e1: 7a:6e:04:c1:0d:1f:47:5b:79:d2:ac:7d:57:c8:66: 43:9a:9c:ee:7b:c2:06:dd:43:81:9a:0b:e3:22:9c: e2:6b:47:14:21:89:70:d0:ba:ec:5f:ab:4e:58:5f: e1:68:4d:dc:4e:67:cf:2c:8f:96:8a:b8:50:e1:20: 3e:d1:4c:c1:e6:a9:a2:9b:71:fb:27:10:78:77:8f: d1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:40:F5:8E:EA:A7:64:DB:A1:15:9D:7E:3E:54:8F:F8:92:74:52:C1 X509v3 Authority Key Identifier: keyid:98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:c7:21:fe:72:10:ef:90:57:d3:d4:dc:f7:36:5b:f2:1e:ad: ee:7e:7d:42:c8:04:a9:ee:3a:96:94:f9:a4:7d:d3:db:18:ad: 96:6f:e0:58:61:e8:c2:a4:d8:ac:8c:f6:f2:c5:ef:a4:d7:99: c8:73:4e:c0:65:e0:56:df:f8:8d:53:42:3a:c6:80:28:31:5f: 41:d9:95:1d:67:dd:1e:20:a3:d0:8f:ce:c7:52:f4:63:72:5c: 32:7d:7d:68:26:65:42:49:0b:b8:cc:e3:e1:07:19:17:d1:13: 84:6e:4e:22:3d:71:d9:11:e4:09:05:32:d7:6f:9f:05:09:2b: 34:3a:ba:08:28:2f:11:60:4c:37:79:49:b1:cd:61:88:36:db: 00:2b:3a:7a:a3:bf:64:97:8e:3b:e8:72:1c:6c:a6:48:0e:d1: 12:73:7c:42:fd:13:cf:94:a0:7f:36:1e:4c:1d:b8:73:a3:a8: e6:a8:fe:c0:62:23:8d:43:ed:68:07:f0:90:90:98:a6:f6:2b: 4f:2f:4e:29:24:3e:20:f3:13:25:c7:c0:3c:c6:e0:3d:1c:27: 1a:93:2b:a5:1c:97:6b:18:bb:46:2c:11:62:9c:15:6e:c3:22: 2b:31:25:70:72:d5:2d:31:73:0d:33:3b:0d:ed:13:d7:4a:81: d3:48:b5:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdgY4KapAOw9WT+g0EFWk7ltl4cgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThENzA3REEwRjZENzIxQ0E5MDU2QUUwQjcxMjZFREQy MTRBRDdENTAeFw0yNTExMDUxMTM4NThaFw0yNTExMDYxMjMxNThaMDMxMTAvBgNV BAMTKEQ2NDBGNThFRUFBNzY0REJBMTE1OUQ3RTNFNTQ4RkY4OTI3NDUyQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+yFdWzUWRSxjBpUzaGr2umH/h IoKy+YsSoX/WLfWW+k1UhyxwH0fdl8PIYkcal1VQ8/kVxiRUyYy1JaYIhicfSuGF PmrvSwENVX8n/FcPa7StHLQa/z/2SibH4UiHkNOMK48EHXe+7BGX8WtN3tfwC2zc mWylbLvW4aFk0FFqf3l8o26GnOpeSakEYs39/1K5t+4Twn+WG4HxXmsk7AwLv28j vpzJxE0yr/Dl2oUpJuo54XpuBMENH0dbedKsfVfIZkOanO57wgbdQ4GaC+MinOJr RxQhiXDQuuxfq05YX+FoTdxOZ88sj5aKuFDhID7RTMHmqaKbcfsnEHh3j9FNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1kD1juqnZNuhFZ1+PlSP+JJ0UsEwHwYDVR0j BBgwFoAUmNcH2g9tchypBWrgtxJu3SFK19UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSExYYnZkUmNtRDRERko2cm03aVdOcTVHRWNURmtQVmhLdVpCTlpMMjZn U00vMS85OEQ3MDdEQTBGNkQ3MjFDQTkwNTZBRTBCNzEyNkVERDIxNEFEN0Q1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4RDcwN0RBMEY2RDcyMUNB OTA1NkFFMEI3MTI2RUREMjE0QUQ3RDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SExYYnZkUmNtRDRERko2cm03aVdOcTVHRWNURmtQVmhLdVpCTlpMMjZnU00vMS85 OEQ3MDdEQTBGNkQ3MjFDQTkwNTZBRTBCNzEyNkVERDIxNEFEN0Q1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd8ch/nIQ75BX09Tc9zZb8h6t7n59QsgEqe46lpT5pH3T2xitlm/gWGHowqTY rIz28sXvpNeZyHNOwGXgVt/4jVNCOsaAKDFfQdmVHWfdHiCj0I/Ox1L0Y3JcMn19 aCZlQkkLuMzj4QcZF9EThG5OIj1x2RHkCQUy12+fBQkrNDq6CCgvEWBMN3lJsc1h iDbbACs6eqO/ZJeOO+hyHGymSA7REnN8Qv0Tz5SgfzYeTB24c6Oo5qj+wGIjjUPt aAfwkJCYpvYrTy9OKSQ+IPMTJcfAPMbgPRwnGpMrpRyXaxi7RiwRYpwVbsMiKzEl cHLVLTFzDTM7De0T10qB00i1iA== -----END CERTIFICATE-----Generated at Wed Nov 5 14:36:03 2025 by rpki-client