$ rpki-client -vvf rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.mft File: FA144211F588D96039C8D4D4A6F39AAB0B7B3461.mft (raw, json) Hash identifier: 22ziYpKKf7lJw4Xt96gDTQyTXJAWnGKi0aJnOhx0a1Q= Subject key identifier: 88:B2:2B:D6:45:65:9F:06:98:53:78:08:C4:C1:6E:DC:57:E5:68:2D Authority key identifier: FA:14:42:11:F5:88:D9:60:39:C8:D4:D4:A6:F3:9A:AB:0B:7B:34:61 Certificate issuer: /CN=FA144211F588D96039C8D4D4A6F39AAB0B7B3461 Certificate serial: 332DCEF497C0E1E1AE65405FD13EFFAF8A6CFF29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer Subject info access: rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.mft Manifest number: 0352 Signing time: Mon 20 Oct 2025 11:10:00 +0000 Manifest this update: Mon 20 Oct 2025 11:05:00 +0000 Manifest next update: Tue 21 Oct 2025 11:10:00 +0000 Files and hashes: 1: 323830343a313737343a3a2f33322d3336203d3e20323633313435.roa (hash: WxvH57Wz8SvXEzp3n47W+xkVYxUJbtKR9Au52uEiLdY=) 2: 3137302e3234352e3232342e302f32322d3234203d3e20323633313435.roa (hash: fD6su5SfxDHN6rqyqGgzJOzKc5dPxg0k72heEkRds0A=) 3: FA144211F588D96039C8D4D4A6F39AAB0B7B3461.crl (hash: RwpB5VIvgFR25w5JtQgginvRGrFJYm+KJO3mMp4QG9I=) 4: 3137372e3135342e32382e302f32322d3234203d3e20323633313435.roa (hash: 1Q8E5bu+ZPmeb2li1lFpLNPrAAJ90/Fr3SOdNOrwkW4=) 5: 3136382e3230352e3133362e302f32322d3234203d3e20323633313435.roa (hash: pEk0KQoE7f77MQAbwfk7qGFRwrltMIR7LKZ4VNuosJ4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.crl rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:2d:ce:f4:97:c0:e1:e1:ae:65:40:5f:d1:3e:ff:af:8a:6c:ff:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA144211F588D96039C8D4D4A6F39AAB0B7B3461 Validity Not Before: Oct 20 11:05:00 2025 GMT Not After : Oct 21 11:10:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:7f:94:db:23:ba:f9:93:09:06:20:b4:68: b9:75:9f:d0:e1:d8:dc:42:9c:74:b4:af:53:3b:53: 4e:1d:c2:5c:a3:9f:ff:ce:a5:97:76:e9:d8:27:fc: f9:8c:29:55:34:ff:55:6a:82:88:e8:6b:de:f2:4e: 24:8f:e3:57:22:16:96:cc:e5:cd:35:70:9b:12:56: 72:38:31:85:f9:c7:08:03:7f:c1:bc:29:52:e6:db: 63:f5:f4:f3:9f:ca:a6:85:4e:80:b9:ec:8f:47:d3: 31:81:8d:91:9b:c2:60:f1:d8:4c:be:94:86:c7:46: 62:be:53:26:fe:31:16:95:94:df:cc:16:bd:42:df: 7a:25:3c:ab:02:37:cb:1a:ef:34:52:8e:e3:d1:88: f3:12:41:37:f4:37:f7:84:61:1d:9d:2e:04:d7:ed: 9d:14:71:19:0f:80:48:c9:d3:72:bf:ad:11:b2:b9: 18:fb:d7:a7:1c:cc:bc:01:b1:8c:25:18:39:38:7f: 17:44:a6:08:53:d7:9f:12:bf:1d:c4:11:23:97:5a: ac:c0:cb:ca:55:61:1d:dc:ea:94:b4:ff:eb:f7:1d: 94:34:3c:5a:d4:85:96:00:4a:7f:31:cf:e8:cd:d9: 66:34:5f:89:31:91:79:f4:d6:e2:f2:41:cd:d9:d1: 21:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B2:2B:D6:45:65:9F:06:98:53:78:08:C4:C1:6E:DC:57:E5:68:2D X509v3 Authority Key Identifier: keyid:FA:14:42:11:F5:88:D9:60:39:C8:D4:D4:A6:F3:9A:AB:0B:7B:34:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:6b:37:a0:cf:4d:9f:d3:b3:05:35:1c:07:44:19:ec:de:93: a1:ba:94:38:e8:6d:e7:99:b5:55:a3:3e:80:21:3d:5f:33:f1: da:45:4c:ca:7f:b5:fe:a1:ec:b1:35:1b:58:c0:99:12:cb:cd: 36:cb:55:b4:a8:5a:35:8d:b6:89:28:a8:f6:c3:17:26:4c:40: 40:ba:8a:ef:d4:c7:57:37:ea:f7:3f:ab:09:01:4d:c8:fe:49: 24:0a:78:cc:19:c2:f4:06:7e:84:66:e7:13:15:d7:7d:0b:53: cc:b7:2c:69:d0:11:32:40:ce:3e:d9:f9:93:82:d6:78:2b:45: c3:f8:80:54:8c:b2:f9:27:75:bf:03:c1:c2:a0:3a:68:97:02: 1c:eb:a5:e9:fd:fa:4e:a6:8e:0c:9f:24:ad:d8:7c:06:94:d1: af:d5:d2:9a:65:73:e8:81:97:b7:f2:f7:dc:a7:21:c0:f2:09: cf:dc:80:65:30:eb:70:be:f2:94:b0:e4:6f:6d:b9:f3:c4:7c: ea:ab:34:06:81:cf:cc:55:c5:fd:2e:2d:0b:d0:9d:b9:dc:85: 08:fd:82:ed:b6:be:c0:31:75:68:d3:48:ad:3a:30:71:2f:8a: 15:2c:aa:90:5b:a9:7a:40:13:1a:2a:e2:a0:45:f5:d2:e2:1f: d3:a2:88:d7 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUMy3O9JfA4eGuZUBf0T7/r4ps/ykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkExNDQyMTFGNTg4RDk2MDM5QzhENEQ0QTZGMzlBQUIw QjdCMzQ2MTAeFw0yNTEwMjAxMTA1MDBaFw0yNTEwMjExMTEwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjJGMDdGOTREQjIzQkFGOTkz MDkwNjIwQjQ2OEI5NzU5RkQwRTFEOERDNDI5Qzc0QjRBRjUzM0I1MzRFMURDMjVD QTM5RkZGQ0VBNTk3NzZFOUQ4MjdGQ0Y5OEMyOTU1MzRGRjU1NkE4Mjg4RTg2QkRF RjI0RTI0OEZFMzU3MjIxNjk2Q0NFNUNEMzU3MDlCMTI1NjcyMzgzMTg1RjlDNzA4 MDM3RkMxQkMyOTUyRTZEQjYzRjVGNEYzOUZDQUE2ODU0RTgwQjlFQzhGNDdEMzMx ODE4RDkxOUJDMjYwRjFEODRDQkU5NDg2Qzc0NjYyQkU1MzI2RkUzMTE2OTU5NERG Q0MxNkJENDJERjdBMjUzQ0FCMDIzN0NCMUFFRjM0NTI4RUUzRDE4OEYzMTI0MTM3 RjQzN0Y3ODQ2MTFEOUQyRTA0RDdFRDlEMTQ3MTE5MEY4MDQ4QzlEMzcyQkZBRDEx QjJCOTE4RkJEN0E3MUNDQ0JDMDFCMThDMjUxODM5Mzg3RjE3NDRBNjA4NTNENzlG MTJCRjFEQzQxMTIzOTc1QUFDQzBDQkNBNTU2MTFERENFQTk0QjRGRkVCRjcxRDk0 MzQzQzVBRDQ4NTk2MDA0QTdGMzFDRkU4Q0REOTY2MzQ1Rjg5MzE5MTc5RjRENkUy RjI0MUNERDlEMTIxQTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAsvB/lNsjuvmTCQYgtGi5dZ/Q4djcQpx0tK9TO1NOHcJco5//zqWX dunYJ/z5jClVNP9VaoKI6Gve8k4kj+NXIhaWzOXNNXCbElZyODGF+ccIA3/BvClS 5ttj9fTzn8qmhU6AueyPR9MxgY2Rm8Jg8dhMvpSGx0ZivlMm/jEWlZTfzBa9Qt96 JTyrAjfLGu80Uo7j0YjzEkE39Df3hGEdnS4E1+2dFHEZD4BIydNyv60RsrkY+9en HMy8AbGMJRg5OH8XRKYIU9efEr8dxBEjl1qswMvKVWEd3OqUtP/r9x2UNDxa1IWW AEp/Mc/ozdlmNF+JMZF59Nbi8kHN2dEhpwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FIiyK9ZFZZ8GmFN4CMTBbtxX5WgtMB8GA1UdIwQYMBaAFPoUQhH1iNlgOcjU1Kbz mqsLezRhMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ1MTFzSFcxQXB3S1JZ RUFmSGdFTWExQ3pzZ3c4NzFIcDRTTXBYM3BLc1JMLzIvRkExNDQyMTFGNTg4RDk2 MDM5QzhENEQ0QTZGMzlBQUIwQjdCMzQ2MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9GQTE0NDIxMUY1ODhEOTYwMzlDOEQ0RDRBNkYzOUFBQjBCN0Iz NDYxLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ1MTFzSFcxQXB3S1JZRUFmSGdF TWExQ3pzZ3c4NzFIcDRTTXBYM3BLc1JMLzIvRkExNDQyMTFGNTg4RDk2MDM5QzhE NEQ0QTZGMzlBQUIwQjdCMzQ2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALhrN6DPTZ/TswU1HAdEGeze k6G6lDjobeeZtVWjPoAhPV8z8dpFTMp/tf6h7LE1G1jAmRLLzTbLVbSoWjWNtoko qPbDFyZMQEC6iu/Ux1c36vc/qwkBTcj+SSQKeMwZwvQGfoRm5xMV130LU8y3LGnQ ETJAzj7Z+ZOC1ngrRcP4gFSMsvkndb8DwcKgOmiXAhzrpen9+k6mjgyfJK3YfAaU 0a/V0pplc+iBl7fy99ynIcDyCc/cgGUw63C+8pSw5G9tufPEfOqrNAaBz8xVxf0u LQvQnbnchQj9gu22vsAxdWjTSK06MHEvihUsqpBbqXpAExoq4qBF9dLiH9OiiNc= -----END CERTIFICATE-----Generated at Tue Oct 21 02:04:21 2025 by rpki-client