$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft File: 2987D670913962CF69181F73C94FE8C279E038DA.mft (raw, json) Hash identifier: 2lb9gWWNDoTks3388ig0DbUTgg/vZ/JbQIGimPFg72o= Subject key identifier: 24:F2:B6:9C:03:86:DA:6E:17:6B:0D:D5:17:07:A4:27:40:5B:25:25 Authority key identifier: 29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA Certificate issuer: /CN=2987D670913962CF69181F73C94FE8C279E038DA Certificate serial: 1E7734A153E1D4E949E21E632A11D441E0D523A5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft Manifest number: 0B Signing time: Mon 20 Oct 2025 01:42:35 +0000 Manifest this update: Mon 20 Oct 2025 01:37:35 +0000 Manifest next update: Tue 21 Oct 2025 02:48:35 +0000 Files and hashes: 1: 3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa (hash: bQcV36xReQ/IDV5gVRSjwtVDmMEnos4N2zSYcbzUSh8=) 2: 323830343a323738303a3a2f33322d3334203d3e20323633393035.roa (hash: 56hiDQJz7DPztx5lZlqeTXai+RNb2R69Hh8Nu7xk9pI=) 3: 3137302e38302e36382e302f32322d3234203d3e20323633393035.roa (hash: 7NSu1PMWeoZCELaEl8OW9YbMtDkl2sNpkyCrwdD6WJA=) 4: 2987D670913962CF69181F73C94FE8C279E038DA.crl (hash: U7bNVU5sw9fNrzgT7+EhvSMlVcBx2uS/ec8EZCs5VQ4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:77:34:a1:53:e1:d4:e9:49:e2:1e:63:2a:11:d4:41:e0:d5:23:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2987D670913962CF69181F73C94FE8C279E038DA Validity Not Before: Oct 20 01:37:35 2025 GMT Not After : Oct 21 02:48:35 2025 GMT Subject: CN=24F2B69C0386DA6E176B0DD51707A427405B2525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5d:dc:98:5a:07:5d:c3:d7:3e:ed:d4:4c:6e: b2:8e:e1:94:97:7c:cf:9f:0c:40:a7:7f:c9:50:45: d2:9a:95:be:a5:d4:bf:b9:b7:30:b0:ba:a3:d0:da: ef:cf:b7:8b:0d:98:7d:fb:03:9b:03:49:b8:a5:c0: 7d:3c:cb:22:50:f4:9b:c7:59:e0:f9:18:a1:86:b0: c1:18:7f:2f:71:95:8f:71:0a:66:a0:19:43:d4:83: d5:a6:21:3a:29:1d:1a:8c:c0:80:73:10:99:5c:bf: d6:cf:a3:96:0c:bd:1d:9f:93:b7:16:17:d1:fa:a7: a5:0f:1d:37:d1:5c:b4:d9:bd:58:5c:72:31:a7:83: 62:09:f3:e6:0b:16:ce:3f:9b:51:8b:1c:b3:ef:f3: 92:57:4b:d9:62:80:93:94:8d:e4:ce:7b:d8:75:3e: 97:48:02:1d:80:55:be:54:6a:37:83:56:f3:d1:8b: f8:5f:04:da:bc:7c:23:ab:71:bc:91:72:af:7c:77: ba:93:b1:58:d4:12:ac:ed:68:6a:49:1c:86:7b:3d: 04:64:15:ad:f0:e3:52:26:30:c8:34:e0:60:54:ac: bf:4a:34:95:26:21:3c:aa:e9:d8:ff:b0:5b:ee:36: be:83:c1:76:1b:01:e3:90:b1:8f:2c:f9:19:b7:09: 6d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F2:B6:9C:03:86:DA:6E:17:6B:0D:D5:17:07:A4:27:40:5B:25:25 X509v3 Authority Key Identifier: keyid:29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:c9:76:61:45:19:90:3f:11:5e:67:4b:cf:5a:01:60:23:15: 30:6d:89:db:d5:7a:e9:9c:ba:d6:40:cc:69:e6:8b:4c:dd:9c: ce:c0:88:bb:14:15:10:07:b8:7c:58:7a:77:bd:9f:04:f0:a8: 55:e6:86:7e:68:cd:9e:68:4e:3c:2c:e8:c5:35:7f:a1:ef:dc: d5:91:44:3a:01:3d:62:5d:a8:f6:8e:5c:a3:ce:a0:cd:67:69: 63:db:ed:e0:22:98:e2:59:e6:d2:a1:6f:ca:74:c4:3c:88:1b: 3c:70:f0:cf:28:77:52:8c:1f:9f:02:87:32:f4:bd:df:da:70: e0:62:52:d8:b0:17:33:0d:fd:31:61:4a:48:74:0c:61:04:5d: 68:c2:b2:ef:e3:7a:49:55:d6:10:38:9d:b3:31:d6:a8:f8:80: a5:15:d0:14:05:78:7c:30:37:82:1b:b0:76:4f:f3:f0:b1:50: 94:50:08:e0:4d:19:cf:76:55:24:dc:79:84:96:62:cf:38:50: bb:f6:c6:85:ff:51:01:4a:38:e2:c6:19:fd:f4:fc:6f:ff:42: 65:d2:5a:92:78:98:56:42:82:c2:1f:67:b6:4d:a0:a1:f6:f7: db:05:36:c0:34:8c:a4:e4:bf:c1:76:ea:1f:36:7e:9a:a3:69: b4:8d:5d:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHnc0oVPh1OlJ4h5jKhHUQeDVI6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4N0Q2NzA5MTM5NjJDRjY5MTgxRjczQzk0RkU4QzI3 OUUwMzhEQTAeFw0yNTEwMjAwMTM3MzVaFw0yNTEwMjEwMjQ4MzVaMDMxMTAvBgNV BAMTKDI0RjJCNjlDMDM4NkRBNkUxNzZCMERENTE3MDdBNDI3NDA1QjI1MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbXdyYWgddw9c+7dRMbrKO4ZSX fM+fDECnf8lQRdKalb6l1L+5tzCwuqPQ2u/Pt4sNmH37A5sDSbilwH08yyJQ9JvH WeD5GKGGsMEYfy9xlY9xCmagGUPUg9WmITopHRqMwIBzEJlcv9bPo5YMvR2fk7cW F9H6p6UPHTfRXLTZvVhccjGng2IJ8+YLFs4/m1GLHLPv85JXS9ligJOUjeTOe9h1 PpdIAh2AVb5UajeDVvPRi/hfBNq8fCOrcbyRcq98d7qTsVjUEqztaGpJHIZ7PQRk Fa3w41ImMMg04GBUrL9KNJUmITyq6dj/sFvuNr6DwXYbAeOQsY8s+Rm3CW1PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJPK2nAOG2m4Xaw3VFwekJ0BbJSUwHwYDVR0j BBgwFoAUKYfWcJE5Ys9pGB9zyU/ownngONowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBj eUYvMC8yOTg3RDY3MDkxMzk2MkNGNjkxODFGNzNDOTRGRThDMjc5RTAzOERBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5ODdENjcwOTEzOTYyQ0Y2 OTE4MUY3M0M5NEZFOEMyNzlFMDM4REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBjeUYvMC8y OTg3RDY3MDkxMzk2MkNGNjkxODFGNzNDOTRGRThDMjc5RTAzOERBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2Ml2YUUZkD8RXmdLz1oBYCMVMG2J29V66Zy61kDMaeaLTN2czsCIuxQVEAe4 fFh6d72fBPCoVeaGfmjNnmhOPCzoxTV/oe/c1ZFEOgE9Yl2o9o5co86gzWdpY9vt 4CKY4lnm0qFvynTEPIgbPHDwzyh3UowfnwKHMvS939pw4GJS2LAXMw39MWFKSHQM YQRdaMKy7+N6SVXWEDidszHWqPiApRXQFAV4fDA3ghuwdk/z8LFQlFAI4E0Zz3ZV JNx5hJZizzhQu/bGhf9RAUo44sYZ/fT8b/9CZdJakniYVkKCwh9ntk2gofb32wU2 wDSMpOS/wXbqHzZ+mqNptI1dxg== -----END CERTIFICATE-----Generated at Mon Oct 20 08:32:12 2025 by rpki-client