$ rpki-client -vvf rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft File: 598DA71AEBD137B402470BB062F68BE6315A8ABF.mft (raw, json) Hash identifier: WaQIg8N6nHyt2sCXYj1ULa3r7X3MD8F6bBoSjnL2nkA= Subject key identifier: CA:72:8B:B4:DE:F0:1E:7B:03:31:50:8B:31:84:E9:B2:07:96:1A:97 Authority key identifier: 59:8D:A7:1A:EB:D1:37:B4:02:47:0B:B0:62:F6:8B:E6:31:5A:8A:BF Certificate issuer: /CN=598DA71AEBD137B402470BB062F68BE6315A8ABF Certificate serial: 09CC243B38C5DB0FD9FE50A7FB65FAB3C9413008 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer Subject info access: rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft Manifest number: 01C3 Signing time: Mon 20 Oct 2025 06:43:01 +0000 Manifest this update: Mon 20 Oct 2025 06:38:01 +0000 Manifest next update: Tue 21 Oct 2025 20:42:01 +0000 Files and hashes: 1: 3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa (hash: baNFhgbFTdOx+2Bsp14GMKfBsYT5picsrzlhIPnrFF0=) 2: 323830343a323965343a3a2f33322d313238203d3e20323634303432.roa (hash: 6a4hW4PLh2F8bHNJZDD/PfOVLrWZfxA4WKw3HFkFXTk=) 3: 598DA71AEBD137B402470BB062F68BE6315A8ABF.crl (hash: N/SJEnOUplFgvJbEdxMsvG5DCDTgONGkFPdQ0MpIPAU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.crl rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:cc:24:3b:38:c5:db:0f:d9:fe:50:a7:fb:65:fa:b3:c9:41:30:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=598DA71AEBD137B402470BB062F68BE6315A8ABF Validity Not Before: Oct 20 06:38:01 2025 GMT Not After : Oct 21 20:42:01 2025 GMT Subject: CN=CA728BB4DEF01E7B0331508B3184E9B207961A97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:16:73:71:1b:fb:31:c7:39:60:bc:24:47:03: ea:10:e0:05:55:c7:26:cb:47:f0:19:15:78:85:43: 28:66:9e:c2:d7:a5:98:8c:b4:be:71:02:91:c3:67: 86:c3:aa:1b:1e:c0:5e:39:51:dc:5e:0d:f0:ed:7d: 2a:13:85:ea:eb:11:0e:dd:f6:ab:cf:69:79:b8:09: 4b:91:e4:9d:8f:50:64:1f:06:78:76:a0:fd:4e:a0: 3a:a5:ac:91:06:94:97:9b:f8:f7:9a:cc:5c:ec:b1: ed:be:9f:7c:b7:4f:1b:99:30:da:97:7b:75:cf:55: 0d:97:3d:f0:c3:9b:78:65:23:aa:e6:5e:a3:80:45: 49:e3:67:1e:af:f7:30:7c:e3:68:95:95:85:c6:3e: a8:60:80:44:a2:7e:1d:a2:70:d5:9a:a4:b3:cc:c6: 40:af:86:22:ad:c1:5c:c6:5e:f1:d0:01:a8:4e:c7: e9:90:44:76:d1:08:9a:5b:5b:1b:3f:f4:87:66:c5: c7:1a:bc:42:73:7d:13:be:6b:fc:5f:f1:6c:2a:11: 51:f4:34:58:94:80:9d:fa:46:ba:fd:c4:6e:97:75: 8c:19:03:1a:be:74:4f:7e:11:3b:70:ea:6c:6e:73: 72:86:89:7d:60:c5:7b:96:43:10:8d:6c:2f:63:6e: 42:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:72:8B:B4:DE:F0:1E:7B:03:31:50:8B:31:84:E9:B2:07:96:1A:97 X509v3 Authority Key Identifier: keyid:59:8D:A7:1A:EB:D1:37:B4:02:47:0B:B0:62:F6:8B:E6:31:5A:8A:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f9:7c:e2:05:73:e6:5f:77:de:ea:bc:55:2d:7c:c8:d2:fc: 44:c0:cc:f8:88:1b:2a:13:93:35:65:62:c9:2a:9f:e0:b0:e9: 6b:9f:00:2a:52:d3:24:3a:79:84:ba:6b:21:a3:e2:11:0f:a2: db:b1:28:00:8a:c7:04:97:f1:9e:8e:85:39:de:5b:bf:48:f5: 92:3f:32:1e:7c:75:da:f8:01:b5:71:0f:c6:22:14:72:19:34: 04:8e:e3:ad:fd:c5:32:77:d3:dd:a0:76:e1:04:64:08:2d:ea: 1d:54:2d:f4:ec:be:36:f0:d0:db:8b:c0:c3:1d:4e:69:c4:59: 70:ac:9a:f2:65:51:58:4f:f5:a4:12:47:7c:0c:4c:a6:ae:88: 87:cd:0d:97:05:e3:1c:54:46:fd:32:ef:fb:12:cf:46:b5:ce: f0:f8:7e:23:44:2f:2e:91:68:d2:43:dd:4e:c3:6c:f4:de:fa: 4b:20:a7:6a:b4:0b:2a:96:8d:94:c4:3c:41:d9:70:ad:ec:20: 34:1d:b0:28:c2:a3:60:9f:12:b7:fe:74:a9:ba:e7:cd:a9:b9: fa:0d:a3:94:74:de:59:54:b0:92:ea:f7:57:2f:6a:72:bd:92: 88:49:30:2a:17:1f:03:3f:77:a9:01:59:33:ba:10:90:84:12: 13:c7:0d:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCcwkOzjF2w/Z/lCn+2X6s8lBMAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk4REE3MUFFQkQxMzdCNDAyNDcwQkIwNjJGNjhCRTYz MTVBOEFCRjAeFw0yNTEwMjAwNjM4MDFaFw0yNTEwMjEyMDQyMDFaMDMxMTAvBgNV BAMTKENBNzI4QkI0REVGMDFFN0IwMzMxNTA4QjMxODRFOUIyMDc5NjFBOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHFnNxG/sxxzlgvCRHA+oQ4AVV xybLR/AZFXiFQyhmnsLXpZiMtL5xApHDZ4bDqhsewF45UdxeDfDtfSoTherrEQ7d 9qvPaXm4CUuR5J2PUGQfBnh2oP1OoDqlrJEGlJeb+PeazFzsse2+n3y3TxuZMNqX e3XPVQ2XPfDDm3hlI6rmXqOARUnjZx6v9zB842iVlYXGPqhggESifh2icNWapLPM xkCvhiKtwVzGXvHQAahOx+mQRHbRCJpbWxs/9IdmxccavEJzfRO+a/xf8WwqEVH0 NFiUgJ36Rrr9xG6XdYwZAxq+dE9+ETtw6mxuc3KGiX1gxXuWQxCNbC9jbkJ1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUynKLtN7wHnsDMVCLMYTpsgeWGpcwHwYDVR0j BBgwFoAUWY2nGuvRN7QCRwuwYvaL5jFair8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXFaRzdMZ01makVSamZiNDNjMzE4akg1dlBpeWoySzRTMUpnZFlTRGtR WmIvMS81OThEQTcxQUVCRDEzN0I0MDI0NzBCQjA2MkY2OEJFNjMxNUE4QUJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU5OERBNzFBRUJEMTM3QjQw MjQ3MEJCMDYyRjY4QkU2MzE1QThBQkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXFaRzdMZ01makVSamZiNDNjMzE4akg1dlBpeWoySzRTMUpnZFlTRGtRWmIvMS81 OThEQTcxQUVCRDEzN0I0MDI0NzBCQjA2MkY2OEJFNjMxNUE4QUJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJfl84gVz5l933uq8VS18yNL8RMDM+IgbKhOTNWViySqf4LDpa58AKlLTJDp5 hLprIaPiEQ+i27EoAIrHBJfxno6FOd5bv0j1kj8yHnx12vgBtXEPxiIUchk0BI7j rf3FMnfT3aB24QRkCC3qHVQt9Oy+NvDQ24vAwx1OacRZcKya8mVRWE/1pBJHfAxM pq6Ih80NlwXjHFRG/TLv+xLPRrXO8Ph+I0QvLpFo0kPdTsNs9N76SyCnarQLKpaN lMQ8QdlwrewgNB2wKMKjYJ8St/50qbrnzam5+g2jlHTeWVSwkur3Vy9qcr2SiEkw KhcfAz93qQFZM7oQkIQSE8cNTg== -----END CERTIFICATE-----Generated at Mon Oct 20 11:36:41 2025 by rpki-client