$ rpki-client -vvf rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft File: C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft (raw, json) Hash identifier: HDBxMpvWfxpEz+q9ntmLxGvyAwlNMYqz3HLohWfk3LE= Subject key identifier: 00:BE:9A:7A:BA:A5:BA:5E:DD:93:E3:AC:6B:5F:B5:BC:05:D5:EE:96 Authority key identifier: C0:04:F2:CC:C9:AC:B9:EC:01:A2:6E:FA:FF:53:A1:5B:B3:09:EC:E3 Certificate issuer: /CN=C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3 Certificate serial: 5F34B999AFAD4A068FB46B25A00E41762E2C25FE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer Subject info access: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft Manifest number: 017C Signing time: Tue 04 Nov 2025 14:19:18 +0000 Manifest this update: Tue 04 Nov 2025 14:14:18 +0000 Manifest next update: Wed 05 Nov 2025 15:27:18 +0000 Files and hashes: 1: C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl (hash: RtMO+m0LrTwCUh22EMkknl7wuBbRVP+wjYbcLTUSR9c=) 2: 34352e3139312e34302e302f32322d3234203d3e20323730323534.roa (hash: +ELc/cdHA6pm2kddxyuB8cT9ZxmW8xhCo1C9X8j7nOc=) 3: 323830343a363933303a3a2f33322d3338203d3e20323730323534.roa (hash: Vi58jILCPaGdfjCNKSlfegkMsczPE3KoQ/bs4WgeL5s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 15:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:34:b9:99:af:ad:4a:06:8f:b4:6b:25:a0:0e:41:76:2e:2c:25:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3 Validity Not Before: Nov 4 14:14:18 2025 GMT Not After : Nov 5 15:27:18 2025 GMT Subject: CN=00BE9A7ABAA5BA5EDD93E3AC6B5FB5BC05D5EE96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:72:c9:d6:dd:0e:20:ac:97:5e:f5:9b:fb: c3:d8:d7:3f:fb:03:a7:eb:fc:b9:39:9d:7d:a4:24: 83:cd:a5:8c:d2:37:0d:0d:b5:4a:0e:6d:9a:e5:fe: 69:32:ce:80:26:05:5c:ef:be:ed:97:43:21:e6:3b: 4a:af:54:a1:ca:41:44:d8:66:e3:c3:5e:44:cf:ce: 1e:70:a6:15:93:87:e0:92:96:c1:ad:4a:5c:76:70: 5d:09:a7:b8:57:c3:01:53:8e:9f:71:e2:3a:eb:11: cd:f8:91:52:00:b3:6e:c0:8a:ac:2b:49:27:43:fd: a7:2a:0f:56:22:47:28:24:22:34:c8:90:4f:99:4b: 31:00:90:0a:87:5f:4d:32:18:18:f8:51:ae:06:b8: 12:d9:d4:1c:9b:25:bb:a7:49:d8:18:bd:4b:2d:46: 78:4c:4e:cd:54:07:9e:e2:76:b3:4b:d7:56:1d:4c: cc:7b:68:63:77:38:58:96:7a:3a:2f:a7:6c:df:a7: 24:59:a2:04:af:b8:5a:d3:93:0b:2e:c0:11:3d:dc: 1e:c6:be:36:09:b1:c9:25:43:27:8d:db:08:a5:67: 1e:c8:f3:61:98:12:9d:b4:43:a7:0f:30:f1:d5:64: eb:1c:fb:92:8a:95:ad:0d:bc:10:57:97:35:33:73: 76:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BE:9A:7A:BA:A5:BA:5E:DD:93:E3:AC:6B:5F:B5:BC:05:D5:EE:96 X509v3 Authority Key Identifier: keyid:C0:04:F2:CC:C9:AC:B9:EC:01:A2:6E:FA:FF:53:A1:5B:B3:09:EC:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:4d:d1:d7:0e:86:af:5b:e6:74:d4:05:a2:41:29:9e:f9:53: b2:6e:29:f7:18:0e:26:a5:30:e1:31:30:4e:5f:bc:3d:e5:8e: db:71:77:a0:d9:3e:5e:d5:f8:2d:61:12:4d:1b:dc:14:3b:aa: 6d:69:30:a6:9f:4a:4b:72:c3:29:fc:21:c3:e4:ad:41:ea:ac: cb:8f:33:48:8c:f5:4e:c2:41:db:fe:e3:66:48:5a:8a:5a:ab: 99:64:ec:9a:99:a7:92:27:5e:a9:32:ac:58:4a:78:ad:3a:55: 10:ae:31:f5:b1:2b:73:48:b8:1f:9e:55:c4:90:b0:a7:fa:0c: 0b:b6:a0:3b:2b:7e:dc:bb:ff:b3:a4:b0:48:fa:a6:2c:3c:79: ff:fa:3b:ab:14:b8:41:4e:59:db:f0:0b:9d:ed:2a:36:af:b4: 50:c4:64:b4:e0:67:4d:9d:ca:dd:b8:84:58:10:29:71:d2:ad: 6c:a3:b5:ae:38:6b:c7:8c:99:8f:9d:6a:65:8a:7b:03:e9:92: 8e:c4:8f:0d:de:b2:6d:a7:d7:3a:bf:74:e2:fc:5d:a5:4b:6e: ac:8f:ae:37:fa:39:9b:45:0d:b9:ef:a7:0b:56:f9:4b:0e:59: 1d:1b:70:4d:0a:79:48:64:dd:4d:46:50:89:90:18:93:18:d9: 73:6d:c0:4f -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUXzS5ma+tSgaPtGsloA5Bdi4sJf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNEYyQ0NDOUFDQjlFQzAxQTI2RUZBRkY1M0ExNUJC MzA5RUNFMzAeFw0yNTExMDQxNDE0MThaFw0yNTExMDUxNTI3MThaMDMxMTAvBgNV BAMTKDAwQkU5QTdBQkFBNUJBNUVERDkzRTNBQzZCNUZCNUJDMDVENUVFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKzHLJ1t0OIKyXXvWb+8PY1z/7 A6fr/Lk5nX2kJIPNpYzSNw0NtUoObZrl/mkyzoAmBVzvvu2XQyHmO0qvVKHKQUTY ZuPDXkTPzh5wphWTh+CSlsGtSlx2cF0Jp7hXwwFTjp9x4jrrEc34kVIAs27Aiqwr SSdD/acqD1YiRygkIjTIkE+ZSzEAkAqHX00yGBj4Ua4GuBLZ1BybJbunSdgYvUst RnhMTs1UB57idrNL11YdTMx7aGN3OFiWejovp2zfpyRZogSvuFrTkwsuwBE93B7G vjYJscklQyeN2wilZx7I82GYEp20Q6cPMPHVZOsc+5KKla0NvBBXlzUzc3bvAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUAL6aerqlul7dk+Osa1+1vAXV7pYwHwYDVR0j BBgwFoAUwATyzMmsuewBom76/1OhW7MJ7OMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YRHZicVQ4RmdoUEJ4NVBMTlpFUDNkMndrNDd4N1o2ZG9DZ1hWOGlrZktz LzAvQzAwNEYyQ0NDOUFDQjlFQzAxQTI2RUZBRkY1M0ExNUJCMzA5RUNFMy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DMDA0RjJDQ0M5QUNCOUVDMDFB MjZFRkFGRjUzQTE1QkIzMDlFQ0UzLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1hE dmJxVDhGZ2hQQng1UExOWkVQM2Qyd2s0N3g3WjZkb0NnWFY4aWtmS3MvMC9DMDA0 RjJDQ0M5QUNCOUVDMDFBMjZFRkFGRjUzQTE1QkIzMDlFQ0UzLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA mU3R1w6Gr1vmdNQFokEpnvlTsm4p9xgOJqUw4TEwTl+8PeWO23F3oNk+XtX4LWES TRvcFDuqbWkwpp9KS3LDKfwhw+StQeqsy48zSIz1TsJB2/7jZkhailqrmWTsmpmn kideqTKsWEp4rTpVEK4x9bErc0i4H55VxJCwp/oMC7agOyt+3Lv/s6SwSPqmLDx5 //o7qxS4QU5Z2/ALne0qNq+0UMRktOBnTZ3K3biEWBApcdKtbKO1rjhrx4yZj51q ZYp7A+mSjsSPDd6ybafXOr904vxdpUturI+uN/o5m0UNue+nC1b5Sw5ZHRtwTQp5 SGTdTUZQiZAYkxjZc23ATw== -----END CERTIFICATE-----Generated at Wed Nov 5 07:29:09 2025 by rpki-client