$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/02DB708FAA035F37E9C4D396E2C459A6F379C838.mft File: 02DB708FAA035F37E9C4D396E2C459A6F379C838.mft (raw, json) Hash identifier: VekJP20oE14QiWxavn0ivNZS8T8xIclKStjeuW3ObaU= Subject key identifier: 94:FD:54:FF:45:76:E9:DC:EB:F1:76:74:59:40:E6:5D:D8:EB:7C:CF Authority key identifier: 02:DB:70:8F:AA:03:5F:37:E9:C4:D3:96:E2:C4:59:A6:F3:79:C8:38 Certificate issuer: /CN=02DB708FAA035F37E9C4D396E2C459A6F379C838 Certificate serial: 20F7924CF856367C922A8691AAD63A54F8B49E3F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02DB708FAA035F37E9C4D396E2C459A6F379C838.cer Subject info access: rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/02DB708FAA035F37E9C4D396E2C459A6F379C838.mft Manifest number: 0E Signing time: Tue 04 Nov 2025 19:00:14 +0000 Manifest this update: Tue 04 Nov 2025 18:55:14 +0000 Manifest next update: Wed 05 Nov 2025 22:31:14 +0000 Files and hashes: 1: 3137302e38322e32302e302f32322d3332203d3e20323636343430.roa (hash: +7JkTEE4bdu/mc4lXKGovNFi8dRokSvJlTmV0wVj7os=) 2: 02DB708FAA035F37E9C4D396E2C459A6F379C838.crl (hash: 8BsOS2BEGtnn5cTW5EaYSfFsczC0bv+BOavEYq8zdqQ=) 3: 323830343a333764633a3a2f33322d313238203d3e20323636343430.roa (hash: ljtDUaBK64bKw8D577GcFAYINbUO+k+F9aiNNEeXmD8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/02DB708FAA035F37E9C4D396E2C459A6F379C838.crl rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/02DB708FAA035F37E9C4D396E2C459A6F379C838.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02DB708FAA035F37E9C4D396E2C459A6F379C838.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:f7:92:4c:f8:56:36:7c:92:2a:86:91:aa:d6:3a:54:f8:b4:9e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02DB708FAA035F37E9C4D396E2C459A6F379C838 Validity Not Before: Nov 4 18:55:14 2025 GMT Not After : Nov 5 22:31:14 2025 GMT Subject: CN=94FD54FF4576E9DCEBF176745940E65DD8EB7CCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3e:34:32:c1:68:6b:1e:fb:c8:8e:f4:cc:5d: 86:09:ea:81:cb:10:d7:23:b1:90:96:12:a8:32:d5: b5:05:e6:f3:90:70:13:dd:f1:ff:2e:bc:47:8e:29: 53:6d:4e:bb:12:92:6b:0b:5e:16:c9:7b:3b:06:02: d6:a4:25:d5:f7:56:fb:d4:37:a4:4e:40:03:d7:0c: 33:3f:36:ed:4f:19:4a:65:d5:58:07:64:3a:d9:93: ef:27:7d:48:81:88:bc:3b:c8:44:c6:ba:8f:cf:b6: 1c:ba:0e:18:37:fe:a8:29:7f:66:7e:74:17:9f:d4: 35:6d:76:1d:2d:c9:0d:e8:46:12:7d:ef:d4:28:13: 21:a6:47:ad:eb:dc:37:a4:08:69:60:46:10:4c:ab: 1a:9d:e3:84:7c:f3:63:95:7a:49:0e:7a:f9:ec:64: cd:c7:fd:f6:02:fa:e1:d5:de:7d:a4:f4:e6:d1:91: cb:cd:ac:f1:39:05:4b:5d:59:8a:34:01:fa:8c:79: 19:52:d4:66:5f:eb:00:34:4c:5f:4c:8b:6d:4c:ff: 20:55:90:f8:67:39:b2:be:a3:2b:37:20:08:ce:11: bf:ee:55:f8:b1:d2:8f:0f:40:bf:db:dd:3c:c6:10: 39:c0:9c:83:5a:42:ec:41:a0:7d:ec:35:45:a4:89: 04:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FD:54:FF:45:76:E9:DC:EB:F1:76:74:59:40:E6:5D:D8:EB:7C:CF X509v3 Authority Key Identifier: keyid:02:DB:70:8F:AA:03:5F:37:E9:C4:D3:96:E2:C4:59:A6:F3:79:C8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/02DB708FAA035F37E9C4D396E2C459A6F379C838.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02DB708FAA035F37E9C4D396E2C459A6F379C838.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/02DB708FAA035F37E9C4D396E2C459A6F379C838.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:2a:18:cb:ba:c7:3a:61:32:cf:0f:9e:c2:b1:db:4d:56:4c: 75:c8:f4:30:57:5d:d5:58:85:b6:49:f5:6a:ed:12:fc:44:fb: 35:55:f8:6b:c5:63:88:f6:ae:db:06:3b:8d:30:25:24:d8:df: 0a:4c:2a:fc:05:22:b5:33:68:d6:f9:03:31:3a:8f:47:80:da: 42:fb:37:af:cb:e4:58:2a:09:51:4c:cd:47:65:2c:f4:0e:52: d2:50:db:70:5c:25:50:1a:5b:20:30:33:1a:3e:50:5e:2a:1a: 9f:9d:c2:8d:9a:11:3b:60:7b:03:54:7f:ba:ec:aa:30:43:a7: 60:8b:d4:ca:01:bc:a4:91:2f:5b:4a:cf:6e:5b:32:a3:41:e8: 23:32:4b:7a:e8:de:26:3e:ad:75:1d:7a:49:10:b6:15:30:9a: 7a:ea:58:95:77:25:b7:6f:a7:b4:00:70:d1:0a:0f:f4:d5:df: 0f:c8:29:ad:3d:20:23:80:a7:42:f9:d0:27:3c:16:37:f8:b4: 73:56:e9:d3:5a:48:81:73:7a:99:14:27:59:0a:d9:2c:1d:6c: 52:68:14:64:44:01:21:bc:cb:4d:7d:c3:7d:07:8c:86:27:76: af:ea:d1:e7:ea:50:58:91:62:c2:85:d7:5e:dd:8d:5e:38:99: 64:53:95:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIPeSTPhWNnySKoaRqtY6VPi0nj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJEQjcwOEZBQTAzNUYzN0U5QzREMzk2RTJDNDU5QTZG Mzc5QzgzODAeFw0yNTExMDQxODU1MTRaFw0yNTExMDUyMjMxMTRaMDMxMTAvBgNV BAMTKDk0RkQ1NEZGNDU3NkU5RENFQkYxNzY3NDU5NDBFNjVERDhFQjdDQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPjQywWhrHvvIjvTMXYYJ6oHL ENcjsZCWEqgy1bUF5vOQcBPd8f8uvEeOKVNtTrsSkmsLXhbJezsGAtakJdX3VvvU N6ROQAPXDDM/Nu1PGUpl1VgHZDrZk+8nfUiBiLw7yETGuo/Pthy6Dhg3/qgpf2Z+ dBef1DVtdh0tyQ3oRhJ979QoEyGmR63r3DekCGlgRhBMqxqd44R882OVekkOevns ZM3H/fYC+uHV3n2k9ObRkcvNrPE5BUtdWYo0AfqMeRlS1GZf6wA0TF9Mi21M/yBV kPhnObK+oys3IAjOEb/uVfix0o8PQL/b3TzGEDnAnINaQuxBoH3sNUWkiQTZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlP1U/0V26dzr8XZ0WUDmXdjrfM8wHwYDVR0j BBgwFoAUAttwj6oDXzfpxNOW4sRZpvN5yDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSG9XVGJVR1BYS1hzN1FQQ2FEY1ZYQ1hYcGhzdlRmc1pDbXBSaXVxWk1r WTQvMC8wMkRCNzA4RkFBMDM1RjM3RTlDNEQzOTZFMkM0NTlBNkYzNzlDODM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyREI3MDhGQUEwMzVGMzdF OUM0RDM5NkUyQzQ1OUE2RjM3OUM4MzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SG9XVGJVR1BYS1hzN1FQQ2FEY1ZYQ1hYcGhzdlRmc1pDbXBSaXVxWk1rWTQvMC8w MkRCNzA4RkFBMDM1RjM3RTlDNEQzOTZFMkM0NTlBNkYzNzlDODM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVSoYy7rHOmEyzw+ewrHbTVZMdcj0MFdd1ViFtkn1au0S/ET7NVX4a8VjiPau 2wY7jTAlJNjfCkwq/AUitTNo1vkDMTqPR4DaQvs3r8vkWCoJUUzNR2Us9A5S0lDb cFwlUBpbIDAzGj5QXioan53CjZoRO2B7A1R/uuyqMEOnYIvUygG8pJEvW0rPblsy o0HoIzJLeujeJj6tdR16SRC2FTCaeupYlXclt2+ntABw0QoP9NXfD8gprT0gI4Cn QvnQJzwWN/i0c1bp01pIgXN6mRQnWQrZLB1sUmgUZEQBIbzLTX3DfQeMhid2r+rR 5+pQWJFiwoXXXt2NXjiZZFOVpA== -----END CERTIFICATE-----Generated at Wed Nov 5 03:37:58 2025 by rpki-client