$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft File: A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft (raw, json) Hash identifier: REGJvrSrslXLzTJbVEwi1idwqhMOeQNKiGiNBB0JOJ0= Subject key identifier: 3F:AB:55:22:05:2A:36:6B:89:66:DC:F1:84:18:00:4B:E4:DE:A0:57 Authority key identifier: A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3 Certificate issuer: /CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3 Certificate serial: 3711E2EB4B8C7238391D729A365B3EF422B02A79 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft Manifest number: 024B Signing time: Sun 19 Oct 2025 20:05:21 +0000 Manifest this update: Sun 19 Oct 2025 20:00:21 +0000 Manifest next update: Mon 20 Oct 2025 21:32:21 +0000 Files and hashes: 1: A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl (hash: hmSjNeX7xl1hCga+tS2is8N4+fgH9WKUmUxjUVFycl4=) 2: 3137302e38332e3136302e302f32322d3234203d3e20323634313132.roa (hash: kjRXgE0/0tSktAP46xSsYXcpBUoV/kAEz7+o0rfOYak=) 3: 323830343a323261303a3a2f33322d3438203d3e20323634313132.roa (hash: XUkg/RMARH1Dfo0HXIe/VkwDxry1vLL6HTSa7WxxHKM=) 4: 3133382e39372e32302e302f32322d3234203d3e20323634313132.roa (hash: vaPBjNRU5cLfNq4Ajf17RP29ZF8znjhebKhB7JEHAqE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 21:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:11:e2:eb:4b:8c:72:38:39:1d:72:9a:36:5b:3e:f4:22:b0:2a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3 Validity Not Before: Oct 19 20:00:21 2025 GMT Not After : Oct 20 21:32:21 2025 GMT Subject: CN=3FAB5522052A366B8966DCF18418004BE4DEA057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1e:f1:29:1f:a1:5a:f2:4c:72:80:19:4b:6a: 49:b9:d2:f1:50:31:50:8c:5b:c4:d8:bc:c8:35:ca: 98:e4:37:cb:2e:e5:ee:84:e0:10:a7:93:70:15:2a: 1e:a9:84:e7:3d:eb:eb:d2:11:33:59:83:1c:f1:ac: 71:79:3e:02:e2:44:6a:b8:f8:c8:b5:a8:33:de:69: f7:46:4e:e1:e3:e2:24:45:4f:a7:ba:07:ea:ab:0e: 67:31:38:6f:38:5e:cd:71:d7:01:eb:79:da:8b:53: 18:0b:2c:78:a7:55:a8:e1:43:70:31:b6:20:f5:e4: ac:ad:65:56:37:5d:a0:86:29:40:13:8b:38:4b:25: 96:fc:f6:0d:f9:c5:8f:57:64:6c:c2:d3:08:11:20: aa:75:aa:7e:05:c7:3b:7d:8c:c5:b6:e2:25:a9:93: 78:65:23:6b:4b:b5:67:59:99:62:03:a2:82:e1:66: 59:d0:9d:6e:fc:cd:50:24:ea:e8:cf:73:e7:e1:38: 8c:96:6f:39:29:e6:53:a0:6e:22:2e:c4:9a:26:65: f3:f4:a7:9e:4c:2d:0c:f0:59:4f:21:68:72:bf:13: 76:a2:d1:e4:29:db:25:51:88:f7:e9:0f:1c:75:a6: 55:29:69:b4:ce:b2:8d:1b:ad:7d:fb:ed:5f:e4:e8: c7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AB:55:22:05:2A:36:6B:89:66:DC:F1:84:18:00:4B:E4:DE:A0:57 X509v3 Authority Key Identifier: keyid:A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:07:9e:28:af:5a:1c:0b:7a:6e:ab:95:c1:36:dc:1c:f5:bd: de:fc:29:91:db:b7:15:ce:e8:0e:6f:30:ad:c5:1d:1b:18:ab: 35:a7:f3:26:e2:3f:ba:a0:01:2c:ae:d9:50:55:ee:4a:d1:6a: 22:11:12:a2:4b:63:6a:fd:bd:8e:f1:11:f2:63:65:7e:e4:1d: b1:ca:e0:90:66:82:03:f2:e7:13:11:70:d8:2b:fd:a9:50:e4: 1e:b1:55:71:f7:cd:5c:e5:11:1d:4a:fd:ad:dc:c5:5c:f1:83: ef:9a:fa:4b:1d:6e:f5:f5:3b:47:d1:9b:6a:28:33:f0:bb:47: d2:6f:15:b6:77:bc:1a:d0:c6:ad:c7:f1:4a:de:58:bb:84:db: db:b4:52:69:02:35:39:77:36:0d:7a:ec:e0:e6:8c:80:89:6d: 2a:59:ef:2f:89:68:af:d9:5b:b4:ae:9b:fa:eb:86:2f:13:7d: ab:01:e1:1e:50:91:18:55:94:e6:fe:f8:ed:64:e6:2b:e6:b6: 80:09:df:97:ad:26:ca:84:07:99:66:21:24:f2:4d:a8:5e:3e: 68:f6:88:6d:5b:3b:cf:ae:59:4c:13:03:4c:57:f8:5c:78:7b: 2f:77:63:b8:b9:8b:86:35:09:00:17:88:03:a4:fe:67:d3:a3: e2:fc:5c:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNxHi60uMcjg5HXKaNls+9CKwKnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA5RkZCMEZEQzM0REQwNzk2MUZFREJCNzlEODU5M0ZD MjgxMTJGMzAeFw0yNTEwMTkyMDAwMjFaFw0yNTEwMjAyMTMyMjFaMDMxMTAvBgNV BAMTKDNGQUI1NTIyMDUyQTM2NkI4OTY2RENGMTg0MTgwMDRCRTRERUEwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWHvEpH6Fa8kxygBlLakm50vFQ MVCMW8TYvMg1ypjkN8su5e6E4BCnk3AVKh6phOc96+vSETNZgxzxrHF5PgLiRGq4 +Mi1qDPeafdGTuHj4iRFT6e6B+qrDmcxOG84Xs1x1wHredqLUxgLLHinVajhQ3Ax tiD15KytZVY3XaCGKUATizhLJZb89g35xY9XZGzC0wgRIKp1qn4Fxzt9jMW24iWp k3hlI2tLtWdZmWIDooLhZlnQnW78zVAk6ujPc+fhOIyWbzkp5lOgbiIuxJomZfP0 p55MLQzwWU8haHK/E3ai0eQp2yVRiPfpDxx1plUpabTOso0brX377V/k6McbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUP6tVIgUqNmuJZtzxhBgAS+TeoFcwHwYDVR0j BBgwFoAUoJ/7D9w03QeWH+27edhZP8KBEvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE1zTkRwZUFodnY4d2RqV0hnajR5SHR0VkRjVk04UFh5eWR0ellUOWly VVAvMC9BMDlGRkIwRkRDMzRERDA3OTYxRkVEQkI3OUQ4NTkzRkMyODExMkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwOUZGQjBGREMzNEREMDc5 NjFGRURCQjc5RDg1OTNGQzI4MTEyRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE1zTkRwZUFodnY4d2RqV0hnajR5SHR0VkRjVk04UFh5eWR0ellUOWlyVVAvMC9B MDlGRkIwRkRDMzRERDA3OTYxRkVEQkI3OUQ4NTkzRkMyODExMkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsAeeKK9aHAt6bquVwTbcHPW93vwpkdu3Fc7oDm8wrcUdGxirNafzJuI/uqAB LK7ZUFXuStFqIhESoktjav29jvER8mNlfuQdscrgkGaCA/LnExFw2Cv9qVDkHrFV cffNXOURHUr9rdzFXPGD75r6Sx1u9fU7R9Gbaigz8LtH0m8Vtne8GtDGrcfxSt5Y u4Tb27RSaQI1OXc2DXrs4OaMgIltKlnvL4lor9lbtK6b+uuGLxN9qwHhHlCRGFWU 5v747WTmK+a2gAnfl60myoQHmWYhJPJNqF4+aPaIbVs7z65ZTBMDTFf4XHh7L3dj uLmLhjUJABeIA6T+Z9Oj4vxcWQ== -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:43 2025 by rpki-client