$ rpki-client -vvf rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.mft File: 1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.mft (raw, json) Hash identifier: yPYcW18cFGwHaPlngffGthIc+1pHY2g2xfZuP80Mkt8= Subject key identifier: 8D:EB:A0:FD:E4:43:3F:76:90:3D:91:BE:51:06:00:01:60:C8:58:19 Authority key identifier: 1F:B4:EC:E4:CB:57:9B:6C:A9:CD:1E:DC:FD:D7:1D:77:1A:EC:14:D2 Certificate issuer: /CN=1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2 Certificate serial: 71DE2C26199F5013D57CD6E2ED5AC7C42D172DE0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.cer Subject info access: rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.mft Manifest number: 014F Signing time: Tue 21 Oct 2025 08:00:49 +0000 Manifest this update: Tue 21 Oct 2025 07:55:49 +0000 Manifest next update: Wed 22 Oct 2025 10:54:49 +0000 Files and hashes: 1: 1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.crl (hash: ntfZEau2FtemUjoLnoXNC/siZi/3PHjn4R27VsFjpzw=) 2: 323830343a363832383a3a2f33322d3438203d3e20323639363732.roa (hash: bxNhRoXMfpn1FbPJKJVqvJapv+XDNUebyk31e+kAmKQ=) 3: 34352e3139312e3133322e302f32322d3234203d3e20323639363732.roa (hash: nfoNs+L6hUcu/vUUnZlOg7Dp+nNHqd5mGfOmJVxxHxk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.crl rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Oct 2025 10:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:de:2c:26:19:9f:50:13:d5:7c:d6:e2:ed:5a:c7:c4:2d:17:2d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2 Validity Not Before: Oct 21 07:55:49 2025 GMT Not After : Oct 22 10:54:49 2025 GMT Subject: CN=8DEBA0FDE4433F76903D91BE5106000160C85819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:0e:10:a7:4a:0c:2c:b8:3b:33:1b:b6:48: a0:75:df:dd:93:18:71:2b:f5:c8:0a:17:d5:48:0d: ac:f4:1a:a5:f1:e2:53:2a:65:ff:fe:be:a2:8d:bb: 71:a6:e2:15:78:3b:45:85:3d:8e:5e:04:84:9f:f3: a9:ea:60:72:83:02:fc:3c:10:a9:eb:ef:39:f3:84: 79:42:22:79:ad:2b:11:94:69:74:0d:67:0a:76:67: ba:e1:fc:5f:bb:90:a7:55:01:a2:72:8b:8c:49:a5: 80:db:d2:6d:be:5f:29:75:a3:01:92:91:9c:08:44: 8a:57:53:51:48:21:f5:c7:80:5f:76:e4:a0:17:81: a0:b0:7b:a3:c0:53:18:c9:60:35:6e:db:40:88:23: a1:aa:ab:69:e6:3a:fd:a4:6a:81:05:c3:19:9e:1a: a3:76:c5:9c:ac:0d:36:41:fd:be:22:7c:3a:04:45: 1f:06:f3:96:69:ba:39:f7:de:d6:6c:e2:11:74:2a: 6c:f8:af:45:ce:cd:c8:06:62:3a:ad:1e:2f:ac:ae: 95:95:64:63:27:e0:03:1f:3a:08:0a:45:2d:07:f0: eb:db:cc:49:e9:9f:ee:cd:56:3c:e2:cf:f1:1e:90: 8d:25:12:02:c3:63:4c:72:40:a2:4e:1e:e5:28:21: 9a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EB:A0:FD:E4:43:3F:76:90:3D:91:BE:51:06:00:01:60:C8:58:19 X509v3 Authority Key Identifier: keyid:1F:B4:EC:E4:CB:57:9B:6C:A9:CD:1E:DC:FD:D7:1D:77:1A:EC:14:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:44:02:95:f9:b1:03:d3:3a:89:15:e9:cd:0d:7d:fb:76:47: 8c:71:29:95:04:d9:38:7b:4d:a9:6f:a5:c5:59:e9:68:fe:8a: 11:f4:74:39:61:65:93:a1:4a:35:3b:e2:02:58:7b:a4:59:7d: c4:89:f4:86:65:18:97:8b:e3:d7:a9:c3:d8:d7:eb:4d:af:a8: 4d:39:79:27:2f:99:fb:26:7a:de:cb:5a:7c:be:d0:54:0c:b5: a1:eb:ff:4c:32:c8:86:ce:0e:bd:88:12:9a:a1:a3:96:05:bc: ac:fb:40:45:d6:35:8b:a4:0c:38:2e:ad:4f:3e:d6:d2:a6:5c: 50:70:ce:42:8a:6c:cd:a3:d0:aa:52:fa:f8:0b:db:5d:e3:ae: 9f:2e:57:b8:36:59:d5:01:f2:bc:b6:58:03:b5:03:f7:55:e5: 5f:9c:e1:c3:0e:bf:26:92:04:03:e9:74:84:71:5b:a0:88:51: 79:2f:aa:82:ec:8a:65:f3:a6:f2:4b:95:6c:ca:4b:bf:7f:f1: 9a:00:e4:50:0c:aa:94:71:64:be:de:1d:b8:b4:0e:9d:d4:7e: 05:91:a6:09:fd:e1:86:6c:e8:31:45:0f:a7:71:9d:ee:ad:4a: 83:e8:36:cf:46:13:7d:0e:38:b3:93:75:25:39:40:e4:3b:bd: a4:81:03:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcd4sJhmfUBPVfNbi7VrHxC0XLeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZCNEVDRTRDQjU3OUI2Q0E5Q0QxRURDRkRENzFENzcx QUVDMTREMjAeFw0yNTEwMjEwNzU1NDlaFw0yNTEwMjIxMDU0NDlaMDMxMTAvBgNV BAMTKDhERUJBMEZERTQ0MzNGNzY5MDNEOTFCRTUxMDYwMDAxNjBDODU4MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6yw4Qp0oMLLg7Mxu2SKB1392T GHEr9cgKF9VIDaz0GqXx4lMqZf/+vqKNu3Gm4hV4O0WFPY5eBISf86nqYHKDAvw8 EKnr7znzhHlCInmtKxGUaXQNZwp2Z7rh/F+7kKdVAaJyi4xJpYDb0m2+Xyl1owGS kZwIRIpXU1FIIfXHgF925KAXgaCwe6PAUxjJYDVu20CII6Gqq2nmOv2kaoEFwxme GqN2xZysDTZB/b4ifDoERR8G85Zpujn33tZs4hF0Kmz4r0XOzcgGYjqtHi+srpWV ZGMn4AMfOggKRS0H8OvbzEnpn+7NVjziz/EekI0lEgLDY0xyQKJOHuUoIZqJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjeug/eRDP3aQPZG+UQYAAWDIWBkwHwYDVR0j BBgwFoAUH7Ts5MtXm2ypzR7c/dcddxrsFNIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREU5WThIRG9SQ0NYRG1vcWtZdDJ6Mmp3OWNmdVZnenpCYzJ1WW9WOVBa TWEvMC8xRkI0RUNFNENCNTc5QjZDQTlDRDFFRENGREQ3MUQ3NzFBRUMxNEQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGQjRFQ0U0Q0I1NzlCNkNB OUNEMUVEQ0ZERDcxRDc3MUFFQzE0RDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REU5WThIRG9SQ0NYRG1vcWtZdDJ6Mmp3OWNmdVZnenpCYzJ1WW9WOVBaTWEvMC8x RkI0RUNFNENCNTc5QjZDQTlDRDFFRENGREQ3MUQ3NzFBRUMxNEQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ0QClfmxA9M6iRXpzQ19+3ZHjHEplQTZOHtNqW+lxVnpaP6KEfR0OWFlk6FK NTviAlh7pFl9xIn0hmUYl4vj16nD2NfrTa+oTTl5Jy+Z+yZ63stafL7QVAy1oev/ TDLIhs4OvYgSmqGjlgW8rPtARdY1i6QMOC6tTz7W0qZcUHDOQopszaPQqlL6+Avb XeOuny5XuDZZ1QHyvLZYA7UD91XlX5zhww6/JpIEA+l0hHFboIhReS+qguyKZfOm 8kuVbMpLv3/xmgDkUAyqlHFkvt4duLQOndR+BZGmCf3hhmzoMUUPp3Gd7q1Kg+g2 z0YTfQ44s5N1JTlA5Du9pIEDWQ== -----END CERTIFICATE-----Generated at Tue Oct 21 13:53:38 2025 by rpki-client