$ rpki-client -vvf rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.mft File: 0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.mft (raw, json) Hash identifier: yERS5dJF3OlL55p8UouRO98+lwU/aN/J+gzCWdBmD+w= Subject key identifier: BA:8D:AE:90:E7:B8:7D:A3:E8:B5:E6:00:EC:9F:8D:89:9F:22:11:DA Authority key identifier: 03:96:D7:1A:C4:DB:6D:BB:AE:1F:49:1E:E5:7B:3C:FF:D8:08:D7:4E Certificate issuer: /CN=0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E Certificate serial: 2AB74D6B18AE710569174EE121D70994B7AEE06E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.cer Subject info access: rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.mft Manifest number: 020A Signing time: Mon 20 Oct 2025 15:11:33 +0000 Manifest this update: Mon 20 Oct 2025 15:06:33 +0000 Manifest next update: Tue 21 Oct 2025 16:57:33 +0000 Files and hashes: 1: 323830343a356561383a633030303a3a2f33342d3334203d3e20323639303438.roa (hash: QqOT4/r41lekx6zonJHeE+UiWHF76t7DyLe0RMIrqlc=) 2: 323830343a356561383a383030303a3a2f33342d3334203d3e20323639303438.roa (hash: tocFNWxaKTnhB8JKVIr7eTzuQO1gtLm4zm+XD96AU2c=) 3: 34352e3137382e3232342e302f32332d3234203d3e20323639303438.roa (hash: ugOxZY37MMpJyzu0aZrg7On2n7A8Kfa32676hcyGlb8=) 4: 0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.crl (hash: aZtDz3K/uwDlciyYwDcqmlu+VCv+u07D2Rqb2Ohz9RU=) 5: 323830343a356561383a3a2f33322d3333203d3e20323639303438.roa (hash: 3Q6hhRb9nIMIWJlWalcyvs4LKb311+sAfS9D6fLOO8I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.crl rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 16:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b7:4d:6b:18:ae:71:05:69:17:4e:e1:21:d7:09:94:b7:ae:e0:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E Validity Not Before: Oct 20 15:06:33 2025 GMT Not After : Oct 21 16:57:33 2025 GMT Subject: CN=BA8DAE90E7B87DA3E8B5E600EC9F8D899F2211DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:47:ae:0f:52:3d:27:64:d6:7e:4e:03:b6:30: 17:f8:2d:fe:d1:7a:4f:53:3b:10:a9:64:cc:f4:38: 9c:21:7e:97:9a:a7:05:cb:3f:08:e9:5a:87:7b:1d: a6:64:b5:c1:db:a7:c9:9e:08:26:99:de:37:ff:07: df:b7:c6:53:24:10:0b:87:f1:ca:40:be:b1:74:cd: ac:08:7f:72:d3:ca:96:01:fa:e4:a9:c0:5a:ec:9c: 88:51:cb:60:83:d2:de:d6:dd:90:88:6a:54:d9:16: 35:22:f9:83:9d:53:b1:0c:15:3b:92:07:bc:67:0a: d6:4f:57:d8:3a:96:a1:c2:7a:16:13:51:37:07:e8: 6d:48:e6:86:a0:10:e0:86:b9:ff:b1:17:0d:c9:e2: 02:6c:05:36:b5:31:02:34:2e:e6:ab:6d:1a:62:ca: 91:32:b5:cf:e4:00:fa:92:37:ec:1c:b8:19:f7:00: 0f:c6:86:d5:2c:b6:07:3e:66:92:0f:96:60:85:99: de:f4:70:f2:42:79:11:dc:04:3e:1b:88:f7:9b:1b: 79:fd:b9:f8:ed:bb:1d:21:f1:31:90:12:e7:61:47: 62:86:e4:49:49:7e:ae:da:d9:d4:2c:81:c0:b5:3e: ee:0a:b5:be:45:e8:3b:96:fd:25:d6:dc:0f:d7:89: 95:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8D:AE:90:E7:B8:7D:A3:E8:B5:E6:00:EC:9F:8D:89:9F:22:11:DA X509v3 Authority Key Identifier: keyid:03:96:D7:1A:C4:DB:6D:BB:AE:1F:49:1E:E5:7B:3C:FF:D8:08:D7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0396D71AC4DB6DBBAE1F491EE57B3CFFD808D74E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:54:d5:87:47:b2:49:ae:b5:39:14:26:a9:6f:6e:8e:67:c0: c8:11:ba:43:aa:62:26:57:ff:8d:98:0c:89:12:5f:0b:59:dc: 3e:b3:94:30:58:ab:3e:ad:d0:d4:2c:40:d4:52:93:c9:11:47: f4:b6:c6:a1:41:e4:1e:1d:6d:99:3d:07:9c:c2:24:0b:d8:0c: 90:8b:0d:a3:03:b8:c4:9b:be:2d:a9:11:65:d2:16:46:c9:a3: 94:e4:77:5a:6e:8e:1c:f3:72:88:ad:d7:02:99:1e:15:2e:91: d2:b5:1e:79:35:9a:11:6b:cb:7b:64:f0:fb:4e:ff:71:69:0d: 84:30:d9:f8:1d:71:de:a4:8d:98:b7:98:ff:99:76:e0:95:22: 3c:68:5a:d1:1b:16:7b:08:ab:47:46:93:f1:df:a1:10:f9:84: 99:bb:75:48:34:42:db:4b:4d:a0:84:ea:6e:1e:c3:2f:81:7f: ac:92:6e:77:09:62:7f:d6:ff:8b:25:1a:35:94:31:fa:43:60: d0:3d:57:d3:8a:6d:32:26:db:2b:22:07:36:ad:7b:99:99:e7: bd:d4:34:fe:90:f7:e5:99:70:62:46:0b:81:40:a5:86:54:6b: 55:9b:f8:61:9f:71:eb:3c:65:3d:ba:1e:dd:4b:45:ea:87:0d: 18:03:6b:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKrdNaxiucQVpF07hIdcJlLeu4G4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM5NkQ3MUFDNERCNkRCQkFFMUY0OTFFRTU3QjNDRkZE ODA4RDc0RTAeFw0yNTEwMjAxNTA2MzNaFw0yNTEwMjExNjU3MzNaMDMxMTAvBgNV BAMTKEJBOERBRTkwRTdCODdEQTNFOEI1RTYwMEVDOUY4RDg5OUYyMjExREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7R64PUj0nZNZ+TgO2MBf4Lf7R ek9TOxCpZMz0OJwhfpeapwXLPwjpWod7HaZktcHbp8meCCaZ3jf/B9+3xlMkEAuH 8cpAvrF0zawIf3LTypYB+uSpwFrsnIhRy2CD0t7W3ZCIalTZFjUi+YOdU7EMFTuS B7xnCtZPV9g6lqHCehYTUTcH6G1I5oagEOCGuf+xFw3J4gJsBTa1MQI0LuarbRpi ypEytc/kAPqSN+wcuBn3AA/GhtUstgc+ZpIPlmCFmd70cPJCeRHcBD4biPebG3n9 ufjtux0h8TGQEudhR2KG5ElJfq7a2dQsgcC1Pu4Ktb5F6DuW/SXW3A/XiZW1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuo2ukOe4faPoteYA7J+NiZ8iEdowHwYDVR0j BBgwFoAUA5bXGsTbbbuuH0ke5Xs8/9gI104wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3FRU2JwUGtlYktGQTJLRnNiVGZOazVlRnhLRHE1VEZoNTdUWERUcFNI NXgvMC8wMzk2RDcxQUM0REI2REJCQUUxRjQ5MUVFNTdCM0NGRkQ4MDhENzRFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzOTZENzFBQzREQjZEQkJB RTFGNDkxRUU1N0IzQ0ZGRDgwOEQ3NEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N3FRU2JwUGtlYktGQTJLRnNiVGZOazVlRnhLRHE1VEZoNTdUWERUcFNINXgvMC8w Mzk2RDcxQUM0REI2REJCQUUxRjQ5MUVFNTdCM0NGRkQ4MDhENzRFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT1TVh0eySa61ORQmqW9ujmfAyBG6Q6piJlf/jZgMiRJfC1ncPrOUMFirPq3Q 1CxA1FKTyRFH9LbGoUHkHh1tmT0HnMIkC9gMkIsNowO4xJu+LakRZdIWRsmjlOR3 Wm6OHPNyiK3XApkeFS6R0rUeeTWaEWvLe2Tw+07/cWkNhDDZ+B1x3qSNmLeY/5l2 4JUiPGha0RsWewirR0aT8d+hEPmEmbt1SDRC20tNoITqbh7DL4F/rJJudwlif9b/ iyUaNZQx+kNg0D1X04ptMibbKyIHNq17mZnnvdQ0/pD35ZlwYkYLgUClhlRrVZv4 YZ9x6zxlPboe3UtF6ocNGANrhQ== -----END CERTIFICATE-----Generated at Mon Oct 20 20:59:24 2025 by rpki-client