$ rpki-client -vvf rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.mft File: 070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.mft (raw, json) Hash identifier: dMXkNoUmpQ6aVSQJxDTJo2N9PynvleJOjnVKjgbzjRc= Subject key identifier: C8:61:37:CB:7F:66:8D:DC:DA:EE:21:37:D4:83:50:65:3A:DA:AE:D7 Authority key identifier: 07:08:45:DA:CC:1D:F7:8A:B0:DB:0A:E9:1C:C8:CF:8F:64:FF:A0:38 Certificate issuer: /CN=070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038 Certificate serial: 46C641417FB5AFC61874B1CB06E2563B4C01AE30 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.cer Subject info access: rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.mft Manifest number: 32 Signing time: Mon 20 Oct 2025 11:10:58 +0000 Manifest this update: Mon 20 Oct 2025 11:05:58 +0000 Manifest next update: Tue 21 Oct 2025 12:53:58 +0000 Files and hashes: 1: 34352e3137392e36382e302f32322d3332203d3e20323639313039.roa (hash: IyZcDTXDvP2kF3jftamqMhb06YANOArcauWrWN5LViw=) 2: 323830343a356639303a3a2f33322d313238203d3e20323639313039.roa (hash: gIHjJOToIbaIEN7HcuK340pC1HYXWvwb6Nzx/LOfIk8=) 3: 070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.crl (hash: 8dxHuZC+106zs+uNJgXox1PRdMEkCpRXMVJC+IM5FE8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.crl rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c6:41:41:7f:b5:af:c6:18:74:b1:cb:06:e2:56:3b:4c:01:ae:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038 Validity Not Before: Oct 20 11:05:58 2025 GMT Not After : Oct 21 12:53:58 2025 GMT Subject: CN=C86137CB7F668DDCDAEE2137D48350653ADAAED7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b0:43:4d:5e:4d:b0:3e:71:b6:a6:16:f8:66: 68:a3:70:c3:93:d0:a2:d4:75:0f:7b:f3:23:a5:fa: 70:84:3d:fd:a3:5f:8e:8f:46:1e:4e:7d:4b:95:b9: f1:a0:57:42:13:85:26:67:ed:31:8e:4d:11:6f:04: de:6d:db:a9:83:4d:35:b9:dc:00:9d:fb:ca:3d:3e: f2:27:ab:4b:79:68:c3:a5:de:ee:89:8e:35:b4:32: 05:81:06:01:68:62:6b:29:61:18:20:58:41:78:b2: 7d:e5:88:60:2d:87:33:21:d2:a0:f7:42:a3:76:51: 15:a3:75:27:e2:b7:5f:ee:b6:29:e2:92:b4:2e:b4: 56:69:0d:99:ec:03:63:d1:65:7e:70:a8:8f:49:38: c4:0a:47:30:b1:09:01:af:ea:98:9d:bd:49:40:21: 9c:60:7f:d9:47:41:47:ae:90:47:df:05:0c:e1:6e: ca:cf:01:90:ca:1b:1c:dc:e2:cb:32:61:5c:23:68: fa:7b:ae:c4:b4:3f:2e:0f:6d:3a:19:93:c4:e8:f0: da:5f:b5:11:0b:5b:de:b5:8a:ee:21:00:fb:25:2e: 5d:ac:00:3c:2a:36:1e:36:06:50:5c:70:d3:81:ae: d9:0a:08:e5:0a:8e:a0:44:5f:e8:a1:a5:4f:1f:24: af:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:61:37:CB:7F:66:8D:DC:DA:EE:21:37:D4:83:50:65:3A:DA:AE:D7 X509v3 Authority Key Identifier: keyid:07:08:45:DA:CC:1D:F7:8A:B0:DB:0A:E9:1C:C8:CF:8F:64:FF:A0:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:1b:ab:a9:d8:49:e5:84:25:d6:cd:79:ad:45:44:df:46:77: c1:b8:36:b3:72:8d:0e:0c:66:97:4b:af:7d:db:c4:cf:1c:80: cc:d9:a4:39:b2:b8:34:de:f6:0c:b9:99:bc:dc:24:f1:83:91: 1e:b5:c8:76:0c:5a:75:15:24:d0:e5:c2:40:03:07:44:05:09: 63:61:20:2f:9d:ab:d3:ca:62:1c:72:91:47:4e:b7:44:0b:30: 92:98:c0:42:25:04:14:81:e9:34:ba:ad:18:4f:2f:25:8d:6d: 7b:e6:a6:6a:d0:c3:c3:5f:ca:a2:a0:a4:99:13:3f:85:65:60: df:7f:4c:cf:f3:ce:b8:90:57:3e:13:b9:cb:30:25:17:2a:b2: 6b:c0:d7:26:ed:d6:7d:8c:dc:6f:a6:2c:de:30:e6:20:71:6e: 08:3d:cc:a1:4d:b8:2d:80:55:62:d5:5b:54:43:d3:f9:a1:3c: 73:54:26:9b:bc:8e:32:ff:38:4d:f1:c7:05:1b:d3:14:e7:bc: 2c:11:ec:f5:12:e5:43:bc:82:23:6a:74:42:58:91:c3:e8:2d: c2:66:3a:ab:4a:f9:f5:84:1c:b5:07:81:62:d0:c8:5a:fc:d5: 9b:92:ad:5c:a1:07:ee:5d:69:b2:a8:d3:04:6e:77:71:0d:05: da:85:db:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURsZBQX+1r8YYdLHLBuJWO0wBrjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwODQ1REFDQzFERjc4QUIwREIwQUU5MUNDOENGOEY2 NEZGQTAzODAeFw0yNTEwMjAxMTA1NThaFw0yNTEwMjExMjUzNThaMDMxMTAvBgNV BAMTKEM4NjEzN0NCN0Y2NjhERENEQUVFMjEzN0Q0ODM1MDY1M0FEQUFFRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVsENNXk2wPnG2phb4ZmijcMOT 0KLUdQ978yOl+nCEPf2jX46PRh5OfUuVufGgV0IThSZn7TGOTRFvBN5t26mDTTW5 3ACd+8o9PvInq0t5aMOl3u6JjjW0MgWBBgFoYmspYRggWEF4sn3liGAthzMh0qD3 QqN2URWjdSfit1/utinikrQutFZpDZnsA2PRZX5wqI9JOMQKRzCxCQGv6pidvUlA IZxgf9lHQUeukEffBQzhbsrPAZDKGxzc4ssyYVwjaPp7rsS0Py4PbToZk8To8Npf tRELW961iu4hAPslLl2sADwqNh42BlBccNOBrtkKCOUKjqBEX+ihpU8fJK9tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyGE3y39mjdza7iE31INQZTrartcwHwYDVR0j BBgwFoAUBwhF2swd94qw2wrpHMjPj2T/oDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREFYS1doNW11elZDZkFxUFRzYnRDTGpYYmlZZmU5ODFZVUVWejE3Rnox ZFQvMC8wNzA4NDVEQUNDMURGNzhBQjBEQjBBRTkxQ0M4Q0Y4RjY0RkZBMDM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA3MDg0NURBQ0MxREY3OEFC MERCMEFFOTFDQzhDRjhGNjRGRkEwMzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REFYS1doNW11elZDZkFxUFRzYnRDTGpYYmlZZmU5ODFZVUVWejE3RnoxZFQvMC8w NzA4NDVEQUNDMURGNzhBQjBEQjBBRTkxQ0M4Q0Y4RjY0RkZBMDM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANBurqdhJ5YQl1s15rUVE30Z3wbg2s3KNDgxml0uvfdvEzxyAzNmkObK4NN72 DLmZvNwk8YORHrXIdgxadRUk0OXCQAMHRAUJY2EgL52r08piHHKRR063RAswkpjA QiUEFIHpNLqtGE8vJY1te+amatDDw1/KoqCkmRM/hWVg339Mz/POuJBXPhO5yzAl Fyqya8DXJu3WfYzcb6Ys3jDmIHFuCD3MoU24LYBVYtVbVEPT+aE8c1Qmm7yOMv84 TfHHBRvTFOe8LBHs9RLlQ7yCI2p0QliRw+gtwmY6q0r59YQctQeBYtDIWvzVm5Kt XKEH7l1psqjTBG53cQ0F2oXb2Q== -----END CERTIFICATE-----Generated at Mon Oct 20 14:23:31 2025 by rpki-client