$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft File: A601CC15A099E546A3DCBD53AF497300DAA65598.mft (raw, json) Hash identifier: 1N7OcI8phyLqS3UdnJ54JHvANm+sznC17XEnnoTWc0M= Subject key identifier: FD:72:E2:F3:4A:38:F2:C7:AA:C2:AD:AF:DF:39:7C:F1:5C:7B:61:D0 Authority key identifier: A6:01:CC:15:A0:99:E5:46:A3:DC:BD:53:AF:49:73:00:DA:A6:55:98 Certificate issuer: /CN=A601CC15A099E546A3DCBD53AF497300DAA65598 Certificate serial: 38B18D52EA27082A9F830FB981F4CDE304B82EBE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer Subject info access: rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft Manifest number: 02EC Signing time: Mon 20 Oct 2025 02:45:32 +0000 Manifest this update: Mon 20 Oct 2025 02:40:32 +0000 Manifest next update: Tue 21 Oct 2025 03:08:32 +0000 Files and hashes: 1: 323830343a6235343a3a2f33322d3438203d3e203532373635.roa (hash: 38mXIeA6gDD6kINv9tTGlOrmKBcV1t+K9YLKIquI5ew=) 2: 3137372e33392e3132302e302f32312d3234203d3e203532373635.roa (hash: opY7h3WsRkaqXfV3NlGmTGs/HlokTSJ+NhDP3JYVlqI=) 3: A601CC15A099E546A3DCBD53AF497300DAA65598.crl (hash: wYILYfmZ7m7GLNETpnBJN5LEAoVTrSiQpS9QKTB6oOQ=) 4: 3137302e3233392e37322e302f32322d3234203d3e203532373635.roa (hash: YG8MK5i53pOtSjSF2swhO2zvKt0n8IMFMMP94C9iVgU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.crl rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b1:8d:52:ea:27:08:2a:9f:83:0f:b9:81:f4:cd:e3:04:b8:2e:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A601CC15A099E546A3DCBD53AF497300DAA65598 Validity Not Before: Oct 20 02:40:32 2025 GMT Not After : Oct 21 03:08:32 2025 GMT Subject: CN=FD72E2F34A38F2C7AAC2ADAFDF397CF15C7B61D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:01:59:62:bc:1f:57:25:8e:86:a0:be:c3: 95:3e:5d:c7:6b:3d:c5:f5:da:2c:c6:d3:a7:24:dd: d9:76:ae:b4:c0:2d:c4:b7:72:8d:9e:85:59:d1:4a: 5e:f4:b3:35:15:04:9d:5f:20:37:40:e0:79:6e:05: 0e:57:b3:7d:f2:3b:3b:36:7d:07:81:3f:40:26:7d: db:55:2a:49:6b:93:87:ea:68:0c:cf:e0:d0:30:8c: d8:47:2e:eb:4d:d2:2a:c2:59:40:fe:97:0a:dd:72: 05:40:b2:97:d5:00:24:cc:a8:5b:b8:23:dc:2c:af: f4:a7:95:a9:0e:19:00:43:40:3d:87:f4:a3:6a:dd: 0e:ef:fa:3d:d6:dd:89:43:11:9d:b4:44:e1:d5:f0: d9:94:17:58:79:f2:94:1c:38:ff:e8:74:8c:84:73: 00:06:2a:13:10:b8:9c:fb:16:26:87:fb:fa:a1:4f: 66:d0:b1:64:85:68:43:92:7c:1e:9f:e7:58:4a:eb: 31:68:e4:57:6f:5c:a8:4e:96:2a:c1:95:f8:b0:3a: 63:33:80:7b:52:a9:e4:81:43:73:37:df:e3:e3:83: 3d:f2:bf:43:cc:24:72:74:bc:7d:2b:82:8e:54:15: 7f:9b:52:f5:38:e2:64:78:e1:dc:4d:c2:b3:5b:f4: 64:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:72:E2:F3:4A:38:F2:C7:AA:C2:AD:AF:DF:39:7C:F1:5C:7B:61:D0 X509v3 Authority Key Identifier: keyid:A6:01:CC:15:A0:99:E5:46:A3:DC:BD:53:AF:49:73:00:DA:A6:55:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:51:eb:8d:43:0c:8a:3e:2d:17:d2:a2:a0:32:34:16:56:23: d1:88:08:35:b6:41:78:f9:00:a3:7e:57:5b:2e:04:28:be:d6: cf:0e:68:b8:d2:0c:49:c3:d4:2a:18:1f:f3:07:32:29:18:e5: 13:18:dd:85:29:e0:ae:40:41:d6:04:8b:b4:4b:d6:83:7c:49: 77:c2:11:f7:0c:5c:a3:a0:1f:2d:40:bd:6c:7f:9b:90:ff:c8: 88:11:b9:a1:f5:e9:80:89:f5:3b:02:5b:37:a0:ee:60:b7:c3: f0:31:38:61:47:6a:95:a5:76:18:89:69:e3:8e:c3:af:2a:95: 27:0d:f6:38:6e:92:3d:6a:6e:d0:db:e2:a1:af:a0:de:e7:8a: 41:1e:96:e4:8e:3a:33:91:52:c9:15:d6:bd:cb:3c:fd:62:93: 4f:9b:0e:fc:ac:99:a7:1d:62:01:4e:03:5e:f1:25:d6:e1:63: 7e:5b:3d:a1:7a:4a:b8:0d:e7:57:80:3b:70:3b:f0:d6:88:ab: 0f:7e:2a:55:b7:3a:b9:ea:f0:36:d5:16:87:23:15:f2:5c:7b: 03:80:68:e5:4e:d3:e0:95:b9:b4:cb:51:fd:87:89:49:01:a5: ab:12:f2:a3:34:d9:71:3c:06:06:29:eb:14:9b:20:73:92:4c: 71:81:c2:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOLGNUuonCCqfgw+5gfTN4wS4Lr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwMUNDMTVBMDk5RTU0NkEzRENCRDUzQUY0OTczMDBE QUE2NTU5ODAeFw0yNTEwMjAwMjQwMzJaFw0yNTEwMjEwMzA4MzJaMDMxMTAvBgNV BAMTKEZENzJFMkYzNEEzOEYyQzdBQUMyQURBRkRGMzk3Q0YxNUM3QjYxRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65gFZYrwfVyWOhqC+w5U+Xcdr PcX12izG06ck3dl2rrTALcS3co2ehVnRSl70szUVBJ1fIDdA4HluBQ5Xs33yOzs2 fQeBP0AmfdtVKklrk4fqaAzP4NAwjNhHLutN0irCWUD+lwrdcgVAspfVACTMqFu4 I9wsr/SnlakOGQBDQD2H9KNq3Q7v+j3W3YlDEZ20ROHV8NmUF1h58pQcOP/odIyE cwAGKhMQuJz7FiaH+/qhT2bQsWSFaEOSfB6f51hK6zFo5FdvXKhOlirBlfiwOmMz gHtSqeSBQ3M33+Pjgz3yv0PMJHJ0vH0rgo5UFX+bUvU44mR44dxNwrNb9GS5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/XLi80o48seqwq2v3zl88Vx7YdAwHwYDVR0j BBgwFoAUpgHMFaCZ5Uaj3L1Tr0lzANqmVZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlJobXg3WWV1U1hOdjJITjNoOG4yYmFxM2l6bXlNOWZKSGhjeFNWVmFl U1kvMS9BNjAxQ0MxNUEwOTlFNTQ2QTNEQ0JENTNBRjQ5NzMwMERBQTY1NTk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MDFDQzE1QTA5OUU1NDZB M0RDQkQ1M0FGNDk3MzAwREFBNjU1OTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlJobXg3WWV1U1hOdjJITjNoOG4yYmFxM2l6bXlNOWZKSGhjeFNWVmFlU1kvMS9B NjAxQ0MxNUEwOTlFNTQ2QTNEQ0JENTNBRjQ5NzMwMERBQTY1NTk4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAolHrjUMMij4tF9KioDI0FlYj0YgINbZBePkAo35XWy4EKL7Wzw5ouNIMScPU Khgf8wcyKRjlExjdhSngrkBB1gSLtEvWg3xJd8IR9wxco6AfLUC9bH+bkP/IiBG5 ofXpgIn1OwJbN6DuYLfD8DE4YUdqlaV2GIlp447DryqVJw32OG6SPWpu0Nvioa+g 3ueKQR6W5I46M5FSyRXWvcs8/WKTT5sO/KyZpx1iAU4DXvEl1uFjfls9oXpKuA3n V4A7cDvw1oirD34qVbc6uerwNtUWhyMV8lx7A4Bo5U7T4JW5tMtR/YeJSQGlqxLy ozTZcTwGBinrFJsgc5JMcYHCVg== -----END CERTIFICATE-----Generated at Mon Oct 20 10:13:27 2025 by rpki-client