$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft File: 433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft (raw, json) Hash identifier: FyOcVisl19CPMUrk33FvLnUGNGCeQj13/bg42gps74k= Subject key identifier: 97:7D:8D:84:F3:BA:C0:1C:3F:35:19:71:E0:06:A6:E6:95:CA:B2:C8 Authority key identifier: 43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72 Certificate issuer: /CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72 Certificate serial: 0C7EF72B87C112A926F7D9205492529768DA4FEB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer Subject info access: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft Manifest number: 02EA Signing time: Mon 20 Oct 2025 12:31:44 +0000 Manifest this update: Mon 20 Oct 2025 12:26:44 +0000 Manifest next update: Tue 21 Oct 2025 12:38:44 +0000 Files and hashes: 1: 34352e3232392e37302e302f32332d3233203d3e20323637323232.roa (hash: YImMQr+RMDsH/GDqY6kCVtep65OxcR2ekjIL8Y2gbew=) 2: 34352e3232392e36382e302f32332d3233203d3e20323637323232.roa (hash: UifxwEG7vJxx646ArwKrEjuPH/DVz2naB23cASE80ZE=) 3: 34352e3232392e37312e302f32342d3234203d3e20323637323232.roa (hash: uFzjyJPTQCmSwhW7HJ86POCK4QcKTF3sb1TVogNfEdw=) 4: 34352e3232392e37302e302f32342d3234203d3e20323637323232.roa (hash: 2CIXDHlG3wiwLu0oPaWa0tJIZ6+F0sTe9D4EQaQ59wc=) 5: 34352e3232392e36382e302f32322d3232203d3e20323637323232.roa (hash: Nsf+Md4t/x2sYg0OO0lur7GyFGxQJtAf2WVPKyN2VSE=) 6: 323830343a346132633a3a2f33322d3438203d3e20323637323232.roa (hash: K65c6CQDYmeBQFWU/ufGUImXBQEHhvkmt5bgL91Dh7s=) 7: 34352e3232392e36392e302f32342d3234203d3e20323637323232.roa (hash: KB81wjFs9ztD8dGkHE2D/VsScjjuO/L+1/K7dgHU48I=) 8: 34352e3232392e36382e302f32342d3234203d3e20323637323232.roa (hash: OqeJB+mozeDEhDovDsxXjuzpU5+h4/FmiYTzQoaLAFc=) 9: 433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl (hash: 1t9Y6O5BmFTxVkOs+Hw1SyGVASipwJoxY/6GOyUexnM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:7e:f7:2b:87:c1:12:a9:26:f7:d9:20:54:92:52:97:68:da:4f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72 Validity Not Before: Oct 20 12:26:44 2025 GMT Not After : Oct 21 12:38:44 2025 GMT Subject: CN=977D8D84F3BAC01C3F351971E006A6E695CAB2C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:b5:a9:74:24:8c:d8:03:08:c9:f3:ae:45: 4d:4e:d0:57:cc:c5:8e:ce:a3:a9:4b:60:0b:43:67: ee:81:7d:ce:a6:7b:b4:93:bc:16:89:85:4f:7a:77: 16:2e:df:c5:23:4f:f1:38:25:97:b8:00:51:33:45: ce:59:e0:08:e1:f3:f3:65:08:c6:6e:b3:71:3d:04: 2f:51:b0:0a:f2:f7:a6:27:c9:79:40:5b:9c:1b:ce: db:c6:f1:b7:35:55:cc:a8:cf:1d:c3:25:22:0c:89: c4:c1:38:20:2a:e9:bc:3b:f5:22:24:fb:71:2c:c5: 4c:e5:cc:db:d2:c9:d0:08:4f:ea:40:80:3a:21:2c: 52:e4:a2:f7:54:8f:d8:07:70:aa:9a:cc:4b:b7:8b: 8a:ff:4a:af:b1:6d:5c:5d:00:81:66:bb:bc:ab:fa: ba:62:13:96:b8:a2:83:03:99:88:ed:ec:7a:6a:e3: ae:b8:9a:17:02:a2:3a:98:7d:2e:a4:f3:2a:8a:7c: be:43:b2:9b:84:a9:6e:fc:48:64:ce:74:a5:b5:5a: 1e:ef:e5:c8:96:de:b5:6f:28:53:73:2b:44:d3:52: 4b:74:ca:e5:7e:21:25:97:4a:24:05:90:16:1c:10: af:6b:7a:fc:f0:d9:b9:6e:cc:c9:4c:37:18:49:7b: 6a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7D:8D:84:F3:BA:C0:1C:3F:35:19:71:E0:06:A6:E6:95:CA:B2:C8 X509v3 Authority Key Identifier: keyid:43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f3:c9:4e:ea:17:ef:3d:81:7f:c5:52:42:32:23:0c:ea:90: dc:e9:4b:83:1c:f2:54:2a:39:06:08:f3:8c:0c:2c:ad:29:3a: f9:a1:bd:ad:34:8a:41:c5:ef:6c:15:02:18:67:27:ba:21:19: fd:dc:dd:1c:21:66:5b:37:a4:3f:6a:09:af:65:cc:98:6c:e3: f3:1a:ff:ac:d2:9b:d6:4c:88:2e:1e:d3:6a:70:9b:1b:89:ae: 22:75:b2:bc:d3:92:de:79:4d:c2:c2:50:70:dd:85:69:34:22: 3b:c9:b6:e5:b9:6a:ce:42:0c:ff:28:74:33:9c:a1:4b:94:83: 4d:b7:d9:d4:e6:4e:ff:2b:7a:9f:75:d6:a8:3a:e5:ba:a0:a0: 60:44:62:4a:eb:8d:11:df:39:f3:4d:9c:05:fa:91:60:0d:5e: cd:97:9c:cb:54:c7:2f:76:6c:6e:92:22:2a:25:fa:cf:a1:59: b6:bc:62:f5:50:d6:be:9c:1a:7d:75:e2:40:0d:7f:cd:b9:0e: a9:d8:32:e6:fb:28:22:8a:a0:a4:8e:5d:85:41:ef:5a:c0:e5: 43:eb:5b:ae:92:3b:f6:c4:ee:38:b7:ab:c6:23:84:fe:92:cb: 83:18:61:f4:f6:a4:44:91:d2:75:df:46:ee:26:1d:61:72:9f: d1:b2:3e:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDH73K4fBEqkm99kgVJJSl2jaT+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzQkQ0Njk0ODQ1QkE2NUNBNEFFMUJGNjIyQTFDNTk5 Q0I1M0Y3MjAeFw0yNTEwMjAxMjI2NDRaFw0yNTEwMjExMjM4NDRaMDMxMTAvBgNV BAMTKDk3N0Q4RDg0RjNCQUMwMUMzRjM1MTk3MUUwMDZBNkU2OTVDQUIyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOrWpdCSM2AMIyfOuRU1O0FfM xY7Oo6lLYAtDZ+6Bfc6me7STvBaJhU96dxYu38UjT/E4JZe4AFEzRc5Z4Ajh8/Nl CMZus3E9BC9RsAry96YnyXlAW5wbztvG8bc1Vcyozx3DJSIMicTBOCAq6bw79SIk +3EsxUzlzNvSydAIT+pAgDohLFLkovdUj9gHcKqazEu3i4r/Sq+xbVxdAIFmu7yr +rpiE5a4ooMDmYjt7Hpq4664mhcCojqYfS6k8yqKfL5DspuEqW78SGTOdKW1Wh7v 5ciW3rVvKFNzK0TTUkt0yuV+ISWXSiQFkBYcEK9revzw2bluzMlMNxhJe2obAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUl32NhPO6wBw/NRlx4Aam5pXKssgwHwYDVR0j BBgwFoAUQzvUaUhFumXKSuG/YiocWZy1P3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1o a2UvMS80MzNCRDQ2OTQ4NDVCQTY1Q0E0QUUxQkY2MjJBMUM1OTlDQjUzRjcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzM0JENDY5NDg0NUJBNjVD QTRBRTFCRjYyMkExQzU5OUNCNTNGNzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1oa2UvMS80 MzNCRDQ2OTQ4NDVCQTY1Q0E0QUUxQkY2MjJBMUM1OTlDQjUzRjcyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbPPJTuoX7z2Bf8VSQjIjDOqQ3OlLgxzyVCo5BgjzjAwsrSk6+aG9rTSKQcXv bBUCGGcnuiEZ/dzdHCFmWzekP2oJr2XMmGzj8xr/rNKb1kyILh7TanCbG4muInWy vNOS3nlNwsJQcN2FaTQiO8m25blqzkIM/yh0M5yhS5SDTbfZ1OZO/yt6n3XWqDrl uqCgYERiSuuNEd85802cBfqRYA1ezZecy1THL3ZsbpIiKiX6z6FZtrxi9VDWvpwa fXXiQA1/zbkOqdgy5vsoIoqgpI5dhUHvWsDlQ+tbrpI79sTuOLerxiOE/pLLgxhh 9PakRJHSdd9G7iYdYXKf0bI+Cg== -----END CERTIFICATE-----Generated at Mon Oct 20 16:06:53 2025 by rpki-client