$ rpki-client -vvf rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft File: 71238E97CC73F492E8BD23DB6B3EA12536850E88.mft (raw, json) Hash identifier: rFjb/PsrfHKQCZ4TuE+vLbdaVLJqixtJnMJmcdb8nwQ= Subject key identifier: D7:B9:85:80:A9:91:2D:A7:66:BD:95:5C:2B:76:DA:FE:32:C1:95:58 Authority key identifier: 71:23:8E:97:CC:73:F4:92:E8:BD:23:DB:6B:3E:A1:25:36:85:0E:88 Certificate issuer: /CN=71238E97CC73F492E8BD23DB6B3EA12536850E88 Certificate serial: 4ABA0E24589BE6C090F5846C51664674118E55BB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer Subject info access: rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft Manifest number: 01D0 Signing time: Mon 20 Oct 2025 08:45:00 +0000 Manifest this update: Mon 20 Oct 2025 08:40:00 +0000 Manifest next update: Tue 21 Oct 2025 10:12:00 +0000 Files and hashes: 1: 71238E97CC73F492E8BD23DB6B3EA12536850E88.crl (hash: S3p2ZBCWY0vTCPypQGUWyf3YNZY9+uL7Pphr9e9xlv0=) 2: 323830343a343866343a3a2f33322d3634203d3e20323637313535.roa (hash: yXnnsOV19PP7dYa4WTWInOHdG2GRhu4PLnG5X9h7/aA=) 3: 34352e3232392e3134342e302f32322d3234203d3e20323637313535.roa (hash: ST5sKKJMcOBgKpX2M249j1DXH+kY2hJv5oEFgqx1pOo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.crl rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ba:0e:24:58:9b:e6:c0:90:f5:84:6c:51:66:46:74:11:8e:55:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71238E97CC73F492E8BD23DB6B3EA12536850E88 Validity Not Before: Oct 20 08:40:00 2025 GMT Not After : Oct 21 10:12:00 2025 GMT Subject: CN=D7B98580A9912DA766BD955C2B76DAFE32C19558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:29:64:3a:32:e2:d2:62:4a:e7:1d:0b:67: 51:e8:04:de:0f:a0:d8:80:50:46:28:fb:e3:7f:24: 97:80:b7:72:0b:9d:1c:b4:a9:23:c3:3c:f0:c3:45: 0e:18:59:f6:2e:71:de:50:20:a7:2d:1c:8e:0b:40: b6:b8:e1:26:4f:e9:85:9e:dc:46:21:39:87:11:8a: c0:e1:33:22:1c:8a:7e:a1:df:e8:11:ca:bc:d8:90: 1d:e0:05:42:89:64:cb:20:c9:ea:1e:05:84:59:52: 05:a4:78:3c:eb:06:2d:53:19:39:90:25:ce:bb:e1: e3:3e:33:2f:28:fc:46:8f:dd:e4:60:82:78:f8:3a: d3:4f:7e:14:d2:24:12:40:fa:46:99:94:71:e3:77: 38:35:c0:fe:b5:c7:bf:b4:f5:29:73:18:55:52:73: 24:39:c0:eb:8d:c1:43:53:46:8b:31:9a:86:ce:ea: ef:11:eb:c8:fb:b8:23:36:8d:3d:5d:c2:80:d3:64: 2b:41:b5:ce:0c:b2:c9:e1:32:cd:03:7d:91:f5:66: 3b:be:f9:da:78:96:df:8d:45:8d:03:18:ec:96:12: 4b:f2:89:7e:a5:3f:ac:33:97:84:84:e6:1a:6e:ca: 5b:8c:25:5a:ca:1d:52:bc:50:3c:28:b1:2e:39:8e: 14:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B9:85:80:A9:91:2D:A7:66:BD:95:5C:2B:76:DA:FE:32:C1:95:58 X509v3 Authority Key Identifier: keyid:71:23:8E:97:CC:73:F4:92:E8:BD:23:DB:6B:3E:A1:25:36:85:0E:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ed:a3:83:db:31:fb:9a:d9:e5:60:8c:d3:99:a8:b0:d9:89: 9d:0b:98:d1:ac:9d:30:1a:70:8e:ab:c2:ad:d9:92:77:2d:10: 37:b4:0f:a9:83:28:22:e7:a0:93:25:f4:6f:1d:76:fe:62:a3: 74:f9:e0:4f:4c:b1:12:40:92:10:d4:a7:8f:a1:3f:b6:8c:18: ce:64:ee:3e:19:5f:1d:c6:a2:f2:79:19:57:2e:50:30:2e:fe: 1c:bc:24:95:07:57:a0:80:c0:d8:75:83:d5:27:d9:f3:b8:89: 6c:08:b1:b4:7a:65:f3:c9:f3:53:44:c4:d5:2a:be:9d:09:b5: 48:90:85:5e:2b:c4:a6:0a:37:a4:5c:69:52:2a:f9:a0:13:8f: a8:9a:46:f6:d2:31:79:cd:ee:0e:18:d1:b9:27:60:42:1e:21: 41:26:1c:eb:5c:66:a7:dd:f0:f9:f5:66:e7:b1:c1:4d:00:a9: 14:57:09:b4:27:ad:33:88:fa:25:ee:d7:6f:8d:d3:b0:be:68: 6c:02:ac:bd:c5:ab:8b:22:32:ff:4f:c9:5e:ac:9c:5c:fc:c5: 80:20:4d:9d:c2:59:70:4a:56:86:24:a5:61:b3:d8:93:2d:e3: 21:f6:dc:b6:56:7e:25:b4:5c:3f:90:38:11:75:16:00:29:ef: 1b:c0:3e:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSroOJFib5sCQ9YRsUWZGdBGOVbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEyMzhFOTdDQzczRjQ5MkU4QkQyM0RCNkIzRUExMjUz Njg1MEU4ODAeFw0yNTEwMjAwODQwMDBaFw0yNTEwMjExMDEyMDBaMDMxMTAvBgNV BAMTKEQ3Qjk4NTgwQTk5MTJEQTc2NkJEOTU1QzJCNzZEQUZFMzJDMTk1NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmSlkOjLi0mJK5x0LZ1HoBN4P oNiAUEYo++N/JJeAt3ILnRy0qSPDPPDDRQ4YWfYucd5QIKctHI4LQLa44SZP6YWe 3EYhOYcRisDhMyIcin6h3+gRyrzYkB3gBUKJZMsgyeoeBYRZUgWkeDzrBi1TGTmQ Jc674eM+My8o/EaP3eRggnj4OtNPfhTSJBJA+kaZlHHjdzg1wP61x7+09SlzGFVS cyQ5wOuNwUNTRosxmobO6u8R68j7uCM2jT1dwoDTZCtBtc4MssnhMs0DfZH1Zju+ +dp4lt+NRY0DGOyWEkvyiX6lP6wzl4SE5hpuyluMJVrKHVK8UDwosS45jhTtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU17mFgKmRLadmvZVcK3ba/jLBlVgwHwYDVR0j BBgwFoAUcSOOl8xz9JLovSPbaz6hJTaFDogwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0FOOVZNZjNqMmlMaHNqZEZibk5zNWh3NU4xQXI5V0NNSzFxQTluY3VZ WHIvMC83MTIzOEU5N0NDNzNGNDkyRThCRDIzREI2QjNFQTEyNTM2ODUwRTg4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxMjM4RTk3Q0M3M0Y0OTJF OEJEMjNEQjZCM0VBMTI1MzY4NTBFODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0FOOVZNZjNqMmlMaHNqZEZibk5zNWh3NU4xQXI5V0NNSzFxQTluY3VZWHIvMC83 MTIzOEU5N0NDNzNGNDkyRThCRDIzREI2QjNFQTEyNTM2ODUwRTg4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoO2jg9sx+5rZ5WCM05mosNmJnQuY0aydMBpwjqvCrdmSdy0QN7QPqYMoIueg kyX0bx12/mKjdPngT0yxEkCSENSnj6E/towYzmTuPhlfHcai8nkZVy5QMC7+HLwk lQdXoIDA2HWD1SfZ87iJbAixtHpl88nzU0TE1Sq+nQm1SJCFXivEpgo3pFxpUir5 oBOPqJpG9tIxec3uDhjRuSdgQh4hQSYc61xmp93w+fVm57HBTQCpFFcJtCetM4j6 Je7Xb43TsL5obAKsvcWriyIy/0/JXqycXPzFgCBNncJZcEpWhiSlYbPYky3jIfbc tlZ+JbRcP5A4EXUWACnvG8A+oA== -----END CERTIFICATE-----Generated at Mon Oct 20 13:59:06 2025 by rpki-client