$ rpki-client -vvf rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft File: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft (raw, json) Hash identifier: ycvTWXJOhfYnzk+Ki5TGUJXxrITMRhd5KkToHWuZpbE= Subject key identifier: 60:00:4D:BE:EC:1E:1C:DB:D5:AD:0D:59:3E:BF:4D:49:D2:D3:83:5D Authority key identifier: 40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD Certificate issuer: /CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD Certificate serial: 254E6D7346C36A64F4050B7A2A4666FDC1356CCB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer Subject info access: rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft Manifest number: 0307 Signing time: Tue 04 Nov 2025 15:44:59 +0000 Manifest this update: Tue 04 Nov 2025 15:39:59 +0000 Manifest next update: Wed 05 Nov 2025 18:50:59 +0000 Files and hashes: 1: 323830343a343236633a3a2f33322d3438203d3e20323637343939.roa (hash: 25SAOXwAX4L8AMZJng8zABZRivbLO/GLBh3G1AeqA58=) 2: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl (hash: dUQAwsaGbDRDnaR/zHtTKIlsNwvIg4zLtikO6aNcrOI=) 3: 3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa (hash: mF0u/vAyNOeoPPNVDLbnxzMdhqwwSdgGBBg/m8ai89U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 18:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:4e:6d:73:46:c3:6a:64:f4:05:0b:7a:2a:46:66:fd:c1:35:6c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD Validity Not Before: Nov 4 15:39:59 2025 GMT Not After : Nov 5 18:50:59 2025 GMT Subject: CN=60004DBEEC1E1CDBD5AD0D593EBF4D49D2D3835D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:07:9a:6b:3e:6f:e6:f0:5d:19:40:74:03:98: 20:c9:20:19:88:2c:a8:bd:9a:aa:5a:c3:fd:77:a0: 0d:1c:f2:7c:9a:b1:b1:0e:58:42:e3:58:f3:ba:7f: e9:ef:ab:ee:cf:c7:d1:c8:25:30:76:12:16:ac:1e: 34:02:c7:34:fc:fb:f6:c8:80:37:46:29:20:d8:6e: 90:37:9f:4c:03:50:29:86:3f:c8:79:9b:b4:bb:10: 3e:23:4d:4e:2e:02:31:cd:2c:69:25:49:2f:38:98: 8b:4e:b4:9a:32:99:d4:bc:e0:ee:8c:d6:88:0d:c2: 08:d0:6b:1a:6f:87:70:b5:82:c7:ec:d7:dd:09:ee: 05:39:f9:6b:f2:93:70:b4:1b:4f:73:e3:89:bd:78: 8a:37:65:49:5c:f3:56:11:04:f8:76:16:55:98:c0: db:94:c4:2a:da:36:79:c9:68:e2:29:0d:0b:1b:37: 28:47:b1:52:0e:2a:72:3c:9b:93:ca:1f:c3:92:11: bf:b7:c0:73:69:ec:ea:58:c7:a0:49:16:8c:58:ba: 32:36:28:8c:3f:8e:9b:2c:b6:2f:85:99:f3:41:89: c5:41:31:e0:dc:c7:2e:7d:fa:1e:19:17:b7:9d:11: a6:b4:e7:78:58:d3:94:cc:a2:f4:70:e2:69:7a:e5: cf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:00:4D:BE:EC:1E:1C:DB:D5:AD:0D:59:3E:BF:4D:49:D2:D3:83:5D X509v3 Authority Key Identifier: keyid:40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:3b:e8:75:cc:82:2b:0b:d5:78:96:ed:af:11:df:67:38:df: 72:3a:a5:e1:ea:4c:9f:56:3b:4f:00:af:16:19:21:9d:d0:03: c8:b4:64:aa:9b:0f:5c:b0:fa:c8:b7:1a:5b:60:bf:39:30:e3: d6:44:72:e3:c3:cb:76:2b:13:06:1d:dc:1d:9b:c8:e7:f0:41: 4e:de:f8:b1:c5:dd:ae:dc:b8:f3:11:51:bf:51:da:15:b0:20: cc:c1:9c:ff:fb:76:cb:a4:c2:32:d3:c1:ff:aa:fc:d6:b6:fb: a4:1a:bb:c5:75:62:6b:57:27:ca:34:4f:0d:e3:1f:ad:94:c5: a6:95:e0:42:ed:9d:74:d7:8d:2d:5d:e2:e0:e6:71:f9:1c:b2: cf:53:7d:8a:d3:56:e1:a4:68:49:cc:77:98:4f:da:7e:f6:96: 5a:b0:ff:a9:ea:07:da:64:73:7b:d2:87:a9:94:5f:13:f1:43: 0a:91:41:c8:d0:e1:83:ae:10:44:6f:19:f4:90:4e:14:f1:9c: 03:44:07:dc:dd:b9:65:b5:bb:86:0f:27:8f:c8:86:db:03:69: 28:44:1e:ad:64:fb:5e:62:ef:0b:d0:06:14:1f:a1:5f:87:00: a1:49:9f:80:09:e2:e4:24:4f:1b:32:7d:d8:ad:3d:a4:e4:56: 8a:59:db:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJU5tc0bDamT0BQt6KkZm/cE1bMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBDQUEyQkM1N0IzM0RGQkU1NUIzRUI0RUE1OEE3RTlB MTcxNTVERDAeFw0yNTExMDQxNTM5NTlaFw0yNTExMDUxODUwNTlaMDMxMTAvBgNV BAMTKDYwMDA0REJFRUMxRTFDREJENUFEMEQ1OTNFQkY0RDQ5RDJEMzgzNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4B5prPm/m8F0ZQHQDmCDJIBmI LKi9mqpaw/13oA0c8nyasbEOWELjWPO6f+nvq+7Px9HIJTB2EhasHjQCxzT8+/bI gDdGKSDYbpA3n0wDUCmGP8h5m7S7ED4jTU4uAjHNLGklSS84mItOtJoymdS84O6M 1ogNwgjQaxpvh3C1gsfs190J7gU5+Wvyk3C0G09z44m9eIo3ZUlc81YRBPh2FlWY wNuUxCraNnnJaOIpDQsbNyhHsVIOKnI8m5PKH8OSEb+3wHNp7OpYx6BJFoxYujI2 KIw/jpssti+FmfNBicVBMeDcxy59+h4ZF7edEaa053hY05TMovRw4ml65c+9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYABNvuweHNvVrQ1ZPr9NSdLTg10wHwYDVR0j BBgwFoAUQMqivFezPfvlWz606lin6aFxVd0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjRaaGlhUmtYODlkYkRWcUhNRzN1dWszc1pDNzU1dWcxV3A3UjFMUXBV SmcvMS80MENBQTJCQzU3QjMzREZCRTU1QjNFQjRFQTU4QTdFOUExNzE1NURELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQ0FBMkJDNTdCMzNERkJF NTVCM0VCNEVBNThBN0U5QTE3MTU1REQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SjRaaGlhUmtYODlkYkRWcUhNRzN1dWszc1pDNzU1dWcxV3A3UjFMUXBVSmcvMS80 MENBQTJCQzU3QjMzREZCRTU1QjNFQjRFQTU4QTdFOUExNzE1NURELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABjvodcyCKwvVeJbtrxHfZzjfcjql4epMn1Y7TwCvFhkhndADyLRkqpsPXLD6 yLcaW2C/OTDj1kRy48PLdisTBh3cHZvI5/BBTt74scXdrty48xFRv1HaFbAgzMGc //t2y6TCMtPB/6r81rb7pBq7xXVia1cnyjRPDeMfrZTFppXgQu2ddNeNLV3i4OZx +Ryyz1N9itNW4aRoScx3mE/afvaWWrD/qeoH2mRze9KHqZRfE/FDCpFByNDhg64Q RG8Z9JBOFPGcA0QH3N25ZbW7hg8nj8iG2wNpKEQerWT7XmLvC9AGFB+hX4cAoUmf gAni5CRPGzJ92K09pORWilnbZg== -----END CERTIFICATE-----Generated at Wed Nov 5 08:58:39 2025 by rpki-client