$ rpki-client -vvf rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.mft File: 93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.mft (raw, json) Hash identifier: w4CSxK7Rf5/JwArwp3fGJyOtst7SAK+A9b2rZ0iMOE8= Subject key identifier: CF:AA:39:60:76:89:72:71:68:E8:EF:75:7A:A5:50:6D:9C:A0:EA:7D Authority key identifier: 93:40:43:25:EF:A1:1B:DB:A0:40:1F:5D:1F:F2:DA:84:D0:A5:7F:8B Certificate issuer: /CN=93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B Certificate serial: 79B9BC1FE575222EEFE7EEED0A7312C5F5186A50 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.mft Manifest number: EA Signing time: Mon 20 Oct 2025 07:14:42 +0000 Manifest this update: Mon 20 Oct 2025 07:09:42 +0000 Manifest next update: Tue 21 Oct 2025 08:19:42 +0000 Files and hashes: 1: 323830343a353565303a3a2f33322d3438203d3e20323637393632.roa (hash: zOuQ60gBJ0AamnW+HULpwLkNhP1+20wPQkoYWT6vK0s=) 2: 93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.crl (hash: aA3soVb9eGE2iCfAb3HowsWtPq4s/OxQoYz+5WHpOi0=) 3: 34352e3136362e3133362e302f32322d3234203d3e20323637393632.roa (hash: uq2CyFDm56qrGP7Dl3r6PQnpbLJf7dq6uCTMFlyW30M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.crl rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b9:bc:1f:e5:75:22:2e:ef:e7:ee:ed:0a:73:12:c5:f5:18:6a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B Validity Not Before: Oct 20 07:09:42 2025 GMT Not After : Oct 21 08:19:42 2025 GMT Subject: CN=CFAA39607689727168E8EF757AA5506D9CA0EA7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a0:3f:fc:8e:f3:6c:17:1a:86:07:ba:14:db: 0b:b1:db:14:0f:62:5a:7f:8a:ae:4e:8d:94:4d:8f: aa:c6:90:15:08:2d:60:35:f0:e6:be:0c:a0:c8:ad: 1b:0d:76:88:7a:51:e1:f3:ca:4e:f9:64:fd:20:45: 9b:df:8f:aa:bd:d4:58:6d:98:85:ae:56:60:80:0e: e0:66:79:c9:e0:5a:6f:5b:27:15:7c:1b:47:05:5c: c4:85:39:b4:97:b2:56:26:db:31:62:c8:7c:c7:fc: 41:9d:57:6f:ec:23:87:a7:7a:5d:07:63:ee:dc:90: 76:99:ef:6d:08:01:54:11:87:c3:ae:75:0b:f8:e5: 47:3a:39:42:a4:2a:ac:62:dd:ca:4f:8b:f9:fc:b5: bb:2b:4e:7a:54:51:45:e1:20:13:24:2b:df:43:79: 69:80:8f:ba:c0:98:57:78:f9:a8:47:84:b7:da:fd: eb:4b:f7:04:b2:5b:8a:2e:43:e4:cf:a6:47:0f:3b: 89:42:eb:6d:62:5b:1c:2a:61:67:d5:89:a1:ec:eb: 2d:90:fc:f7:dc:d8:a2:1d:51:c5:74:bc:95:68:14: 6c:3c:ab:fb:d9:3b:0a:12:bb:2c:36:c6:ad:75:f1: 19:8d:f0:3a:df:0e:c8:b1:eb:33:88:d4:a4:8d:48: af:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AA:39:60:76:89:72:71:68:E8:EF:75:7A:A5:50:6D:9C:A0:EA:7D X509v3 Authority Key Identifier: keyid:93:40:43:25:EF:A1:1B:DB:A0:40:1F:5D:1F:F2:DA:84:D0:A5:7F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:3b:9f:9d:8b:44:b5:a1:7b:c3:0f:c4:c0:f5:49:55:fb:4f: 7a:70:1f:30:0a:db:d4:be:95:10:66:ba:6b:13:0c:75:0b:d7: 10:d9:0d:47:d5:99:a6:7b:49:f3:d9:91:e7:61:98:76:e0:6d: c9:b1:dd:34:a6:f0:1a:1d:91:ed:7b:2d:71:50:dc:58:40:82: 48:37:cd:2d:aa:65:c8:86:95:13:1a:26:fd:8a:a4:aa:da:82: 94:fd:32:76:d7:15:9b:53:18:52:81:84:46:40:0e:87:7f:aa: 1e:f1:72:fe:88:6e:2f:05:4b:6b:c5:ca:ca:8e:cd:d7:d1:d8: 99:c9:0c:76:ab:c3:a0:0c:43:ff:4e:84:54:f3:56:1a:99:6f: fc:83:6d:1d:e1:be:4b:67:9e:5d:d4:ae:57:50:d9:db:a0:2c: a3:8f:84:63:2c:50:6f:11:2f:6a:63:f1:2c:1f:04:96:59:24: 07:9e:d6:d0:5c:ba:c2:f2:c0:88:8c:63:2d:42:f5:b3:be:66: e9:fd:03:d3:28:d5:54:d6:00:71:25:4d:3a:41:24:78:ce:9b: 4c:c1:d7:eb:ec:a9:69:10:ab:1b:36:bb:00:75:e9:ea:b6:4a: 40:8d:9f:ee:1a:d3:ea:d2:84:ec:9c:55:cc:7c:cc:92:53:76: d6:c0:e7:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUebm8H+V1Ii7v5+7tCnMSxfUYalAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM0MDQzMjVFRkExMUJEQkEwNDAxRjVEMUZGMkRBODRE MEE1N0Y4QjAeFw0yNTEwMjAwNzA5NDJaFw0yNTEwMjEwODE5NDJaMDMxMTAvBgNV BAMTKENGQUEzOTYwNzY4OTcyNzE2OEU4RUY3NTdBQTU1MDZEOUNBMEVBN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOoD/8jvNsFxqGB7oU2wux2xQP Ylp/iq5OjZRNj6rGkBUILWA18Oa+DKDIrRsNdoh6UeHzyk75ZP0gRZvfj6q91Fht mIWuVmCADuBmecngWm9bJxV8G0cFXMSFObSXslYm2zFiyHzH/EGdV2/sI4enel0H Y+7ckHaZ720IAVQRh8OudQv45Uc6OUKkKqxi3cpPi/n8tbsrTnpUUUXhIBMkK99D eWmAj7rAmFd4+ahHhLfa/etL9wSyW4ouQ+TPpkcPO4lC621iWxwqYWfViaHs6y2Q /Pfc2KIdUcV0vJVoFGw8q/vZOwoSuyw2xq118RmN8DrfDsix6zOI1KSNSK95AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUz6o5YHaJcnFo6O91eqVQbZyg6n0wHwYDVR0j BBgwFoAUk0BDJe+hG9ugQB9dH/LahNClf4swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlpCenlpUGZrQzVaZnM1Sml5Mll1aXplcFNEZTZUV3BMVHFoNVJmc3Y1 S0svMC85MzQwNDMyNUVGQTExQkRCQTA0MDFGNUQxRkYyREE4NEQwQTU3RjhCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzNDA0MzI1RUZBMTFCREJB MDQwMUY1RDFGRjJEQTg0RDBBNTdGOEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlpCenlpUGZrQzVaZnM1Sml5Mll1aXplcFNEZTZUV3BMVHFoNVJmc3Y1S0svMC85 MzQwNDMyNUVGQTExQkRCQTA0MDFGNUQxRkYyREE4NEQwQTU3RjhCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQzufnYtEtaF7ww/EwPVJVftPenAfMArb1L6VEGa6axMMdQvXENkNR9WZpntJ 89mR52GYduBtybHdNKbwGh2R7XstcVDcWECCSDfNLaplyIaVExom/YqkqtqClP0y dtcVm1MYUoGERkAOh3+qHvFy/ohuLwVLa8XKyo7N19HYmckMdqvDoAxD/06EVPNW Gplv/INtHeG+S2eeXdSuV1DZ26Aso4+EYyxQbxEvamPxLB8EllkkB57W0Fy6wvLA iIxjLUL1s75m6f0D0yjVVNYAcSVNOkEkeM6bTMHX6+ypaRCrGza7AHXp6rZKQI2f 7hrT6tKE7JxVzHzMklN21sDn9w== -----END CERTIFICATE-----Generated at Mon Oct 20 11:28:18 2025 by rpki-client