$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft File: 0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft (raw, json) Hash identifier: OYU8wP671lwIF1YibHk5hh+WDoQgPAYUT9suorY0fVQ= Subject key identifier: 7A:25:9F:01:BA:42:A9:43:B6:A1:ED:34:B3:3B:22:65:9B:FD:44:F0 Authority key identifier: 0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8 Certificate issuer: /CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8 Certificate serial: 3C46AC5DB0E9656732BEB8CC4E7D790AFEE859A3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft Manifest number: 02F6 Signing time: Mon 20 Oct 2025 11:15:32 +0000 Manifest this update: Mon 20 Oct 2025 11:10:32 +0000 Manifest next update: Tue 21 Oct 2025 13:43:32 +0000 Files and hashes: 1: 3134332e302e3136342e302f32322d3234203d3e20323634303134.roa (hash: CvPt6i/FKK2bJ2KHKaQ02WILQwDUCCrNQlOgIBapYng=) 2: 323830343a323936633a3a2f33322d3438203d3e20323634303134.roa (hash: 2dadztaER+9gyBL5gmUFWVyA0Rshw1nGZx22j2sUlE8=) 3: 0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl (hash: gRXU2qu0I8rjBoDc2OjOhPgbciPPYC8IPTeUA0Psug4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:46:ac:5d:b0:e9:65:67:32:be:b8:cc:4e:7d:79:0a:fe:e8:59:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8 Validity Not Before: Oct 20 11:10:32 2025 GMT Not After : Oct 21 13:43:32 2025 GMT Subject: CN=7A259F01BA42A943B6A1ED34B33B22659BFD44F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fe:b6:17:1d:b0:3e:88:48:0e:d7:7f:f0:03: e8:c6:3b:12:d8:b5:53:f7:ef:c3:15:d7:c7:39:26: 9d:cd:06:b2:05:82:28:9b:2a:9d:42:ad:c8:46:ca: 3a:51:e7:b9:de:54:14:99:a0:a8:40:2b:58:77:5c: 7d:3f:2b:0d:05:a1:51:f6:9d:db:c9:99:a7:51:eb: 96:41:b5:1c:76:e4:6d:d6:07:4b:47:dc:77:96:88: b6:ca:67:41:3f:e1:10:75:2d:ac:84:8d:53:6c:b1: 7e:06:ac:e9:2e:a9:57:1c:3d:5d:68:6d:0d:2b:7b: 2a:86:34:0f:16:d8:c2:3d:95:28:08:d6:6c:35:95: 98:2b:d1:42:06:7e:24:fd:5c:16:9d:2b:be:54:f4: 18:be:7c:3d:86:53:37:e0:00:12:6c:7a:67:d2:b4: f0:a8:97:cc:8e:07:d7:bb:a4:f9:79:1d:fd:a3:1e: 1d:1f:10:5f:d4:47:d6:85:42:87:8a:aa:63:d0:21: 38:70:e6:de:8b:d0:98:6c:2b:11:d0:0d:d4:c1:12: 42:f7:6e:a5:7f:c8:ca:d1:b3:da:20:c5:c2:92:d4: 1c:d6:33:91:01:10:6f:65:d8:5a:25:db:9f:83:a1: da:46:d2:36:5a:47:4d:72:c5:73:74:cc:6e:5a:40: 6b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:25:9F:01:BA:42:A9:43:B6:A1:ED:34:B3:3B:22:65:9B:FD:44:F0 X509v3 Authority Key Identifier: keyid:0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c6:d0:c5:a1:de:0e:92:0b:d9:23:3a:71:5a:e2:5a:23:81: 98:b4:bb:24:32:99:41:4e:05:0c:0e:6c:81:e3:f2:1d:90:9e: 1f:a2:56:2d:aa:fb:bb:44:d6:e1:ca:cb:15:92:49:d2:08:42: c6:0f:79:9b:b8:82:b0:32:53:19:e6:e3:3e:40:c1:97:ed:79: 94:1e:7d:8e:f8:38:8d:f7:33:5d:21:c0:7d:76:14:fa:3c:4a: 3f:83:ef:9a:b5:2c:67:82:26:97:af:db:40:ff:58:b1:be:1d: 1f:82:a2:73:98:68:35:be:0d:54:56:95:1c:66:e6:fc:66:fe: 5c:d6:65:06:2a:c6:a8:9c:f2:ee:5e:0e:bf:46:00:11:53:37: 01:81:c8:65:4f:db:9c:46:3b:76:86:2e:c1:65:91:57:1b:3f: 50:01:80:6f:60:d9:16:f5:72:59:3b:63:d8:d0:3c:06:af:5e: 32:e0:41:23:b2:21:bf:a3:7a:f5:1a:ff:10:06:1a:46:d0:ef: f7:25:10:04:06:ce:fd:b4:c1:8e:c4:dc:5b:04:93:93:0f:e4: 1e:f7:c1:75:e8:02:1e:ef:3b:e3:4a:41:6f:66:75:18:16:2a: d6:24:d1:b6:ee:4d:38:7b:a4:77:4c:fe:8e:07:3b:56:d3:04: 16:ac:a2:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPEasXbDpZWcyvrjMTn15Cv7oWaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE1QkZDNDQ5QkMwQUU5NEYyNjBDNTBBMzFEQ0JGQkMz MTgzOTFFODAeFw0yNTEwMjAxMTEwMzJaFw0yNTEwMjExMzQzMzJaMDMxMTAvBgNV BAMTKDdBMjU5RjAxQkE0MkE5NDNCNkExRUQzNEIzM0IyMjY1OUJGRDQ0RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/rYXHbA+iEgO13/wA+jGOxLY tVP378MV18c5Jp3NBrIFgiibKp1CrchGyjpR57neVBSZoKhAK1h3XH0/Kw0FoVH2 ndvJmadR65ZBtRx25G3WB0tH3HeWiLbKZ0E/4RB1LayEjVNssX4GrOkuqVccPV1o bQ0reyqGNA8W2MI9lSgI1mw1lZgr0UIGfiT9XBadK75U9Bi+fD2GUzfgABJsemfS tPCol8yOB9e7pPl5Hf2jHh0fEF/UR9aFQoeKqmPQIThw5t6L0JhsKxHQDdTBEkL3 bqV/yMrRs9ogxcKS1BzWM5EBEG9l2Fol25+DodpG0jZaR01yxXN0zG5aQGsVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUeiWfAbpCqUO2oe00szsiZZv9RPAwHwYDVR0j BBgwFoAUClv8RJvArpTyYMUKMdy/vDGDkegwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDRUc0ZIS3VNdmNmWVhUcHJYc1EzNVlXMVJQNkJ5Yk5MRmI3ZDJVN2hu THgvMS8wQTVCRkM0NDlCQzBBRTk0RjI2MEM1MEEzMURDQkZCQzMxODM5MUU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBNUJGQzQ0OUJDMEFFOTRG MjYwQzUwQTMxRENCRkJDMzE4MzkxRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDRUc0ZIS3VNdmNmWVhUcHJYc1EzNVlXMVJQNkJ5Yk5MRmI3ZDJVN2huTHgvMS8w QTVCRkM0NDlCQzBBRTk0RjI2MEM1MEEzMURDQkZCQzMxODM5MUU4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT8bQxaHeDpIL2SM6cVriWiOBmLS7JDKZQU4FDA5sgePyHZCeH6JWLar7u0TW 4crLFZJJ0ghCxg95m7iCsDJTGebjPkDBl+15lB59jvg4jfczXSHAfXYU+jxKP4Pv mrUsZ4Iml6/bQP9Ysb4dH4Kic5hoNb4NVFaVHGbm/Gb+XNZlBirGqJzy7l4Ov0YA EVM3AYHIZU/bnEY7doYuwWWRVxs/UAGAb2DZFvVyWTtj2NA8Bq9eMuBBI7Ihv6N6 9Rr/EAYaRtDv9yUQBAbO/bTBjsTcWwSTkw/kHvfBdegCHu8740pBb2Z1GBYq1iTR tu5NOHukd0z+jgc7VtMEFqyibQ== -----END CERTIFICATE-----Generated at Mon Oct 20 13:40:48 2025 by rpki-client