$ rpki-client -vvf rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.mft File: D44D50D076872C7AF0CA51E36D70020A681F7E30.mft (raw, json) Hash identifier: Zz0GMnEsMgmGA5dNubisxbU4nkGGuJpb2JWTGlcKfyg= Subject key identifier: AA:54:39:EC:29:34:AE:FF:B5:A4:0D:2C:59:E2:54:B1:76:B8:EB:6E Authority key identifier: D4:4D:50:D0:76:87:2C:7A:F0:CA:51:E3:6D:70:02:0A:68:1F:7E:30 Certificate issuer: /CN=D44D50D076872C7AF0CA51E36D70020A681F7E30 Certificate serial: 1EA845EC3EEE826E115FEF19E5DB963EAA0DA19D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D44D50D076872C7AF0CA51E36D70020A681F7E30.cer Subject info access: rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.mft Manifest number: BB Signing time: Tue 04 Nov 2025 23:56:38 +0000 Manifest this update: Tue 04 Nov 2025 23:51:38 +0000 Manifest next update: Thu 06 Nov 2025 02:37:38 +0000 Files and hashes: 1: D44D50D076872C7AF0CA51E36D70020A681F7E30.crl (hash: jfUtRIrgquanbJtQ2mas2Rkyagfyh1p2SVvJ75SSATI=) 2: 34352e3136372e3232342e302f32322d3234203d3e20323638313034.roa (hash: zdFqDTwU6sMyVYv8G6jfL9Y50Yu71K5+n8Nb7AkT9vU=) 3: 323830343a353831303a3a2f33322d3438203d3e20323638313034.roa (hash: h0v9+riMHdqkwtFuQSSEydv/fsiI0Ysz69HDjtIG1MU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.crl rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D44D50D076872C7AF0CA51E36D70020A681F7E30.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 02:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a8:45:ec:3e:ee:82:6e:11:5f:ef:19:e5:db:96:3e:aa:0d:a1:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D44D50D076872C7AF0CA51E36D70020A681F7E30 Validity Not Before: Nov 4 23:51:38 2025 GMT Not After : Nov 6 02:37:38 2025 GMT Subject: CN=AA5439EC2934AEFFB5A40D2C59E254B176B8EB6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:46:b8:83:db:68:53:3f:ad:2f:da:62:22:8c: 94:12:6e:ad:52:84:79:73:0d:a7:ea:81:86:0a:84: 6f:98:7a:91:37:c3:1b:09:8c:2d:9f:bf:9b:bd:10: ec:d1:18:a8:ad:23:20:fe:39:2c:a4:39:3d:98:85: 8d:61:b7:80:2a:1d:80:24:2b:3f:ed:e1:0e:29:cf: 69:60:ed:d1:4a:9c:33:f8:4b:f3:4d:2e:7a:d0:ba: e0:27:a5:bd:30:08:eb:2e:45:ed:e1:3a:db:91:59: 45:6e:7c:20:24:d8:b3:38:69:1f:3f:cc:49:e8:fc: db:76:39:8c:90:5b:02:60:1c:c5:b8:af:c0:b1:c6: 51:0d:1e:fb:5d:42:9e:fb:fc:c9:0a:49:94:f7:6c: ca:26:71:3e:98:7f:6a:2f:6f:ac:33:e9:a2:85:e4: ab:bd:cd:e9:bf:6c:45:4a:05:19:72:d7:b6:9a:41: 55:6b:9c:87:16:ab:d2:c7:15:be:cb:68:9c:01:fa: 59:37:cf:49:a2:26:70:fc:29:88:5f:53:97:8c:ab: ec:36:4d:2a:e2:e1:c5:e4:33:8b:95:53:f3:c4:6a: ff:b6:3f:e2:53:a3:8e:39:85:1e:90:e7:a7:1d:af: f6:85:fc:9d:87:4b:b7:3c:a4:8e:87:33:54:44:ac: 2f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:54:39:EC:29:34:AE:FF:B5:A4:0D:2C:59:E2:54:B1:76:B8:EB:6E X509v3 Authority Key Identifier: keyid:D4:4D:50:D0:76:87:2C:7A:F0:CA:51:E3:6D:70:02:0A:68:1F:7E:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D44D50D076872C7AF0CA51E36D70020A681F7E30.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:54:be:a6:05:6e:94:dc:c2:96:af:40:7a:2f:d1:38:c2:d4: 5b:86:57:95:52:c5:6b:c9:59:18:bf:83:c4:f2:3e:af:a1:1c: 76:ad:0d:8d:8f:00:79:23:0a:f1:29:74:b6:08:99:a2:ea:02: 82:38:d8:e3:b9:89:09:94:4c:48:7d:2e:dd:04:49:47:ba:fe: d8:d9:67:a7:a4:13:b9:99:9c:59:ea:67:20:81:14:b0:be:f9: 58:bd:2e:51:31:01:20:14:0e:e2:f9:e3:00:0f:20:90:28:7b: a4:d5:32:fc:a3:d3:42:bc:99:90:13:3c:fd:cc:00:a7:41:b2: 04:23:70:e9:f6:47:e7:42:24:f3:e6:3c:c7:e6:2b:b7:d1:2d: d7:2c:71:5f:f8:aa:bd:3a:b6:9c:90:d8:01:c6:14:3e:c6:9b: ab:8c:53:32:a8:f6:db:8d:a2:80:32:41:0e:46:04:fc:09:cd: df:b1:a9:b9:d0:45:b6:e1:9c:a0:8f:0d:49:45:83:d4:87:15: 42:34:6f:51:9a:c3:19:95:c2:c0:cd:aa:06:04:4f:60:cd:3f: ba:85:ce:f4:9f:0b:60:cd:72:a1:94:a3:02:f8:d1:a9:75:0a: 44:09:a4:fc:54:db:c7:13:d8:c4:e9:57:50:e5:a4:cb:b5:2d: eb:da:83:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHqhF7D7ugm4RX+8Z5duWPqoNoZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ0RDUwRDA3Njg3MkM3QUYwQ0E1MUUzNkQ3MDAyMEE2 ODFGN0UzMDAeFw0yNTExMDQyMzUxMzhaFw0yNTExMDYwMjM3MzhaMDMxMTAvBgNV BAMTKEFBNTQzOUVDMjkzNEFFRkZCNUE0MEQyQzU5RTI1NEIxNzZCOEVCNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdRriD22hTP60v2mIijJQSbq1S hHlzDafqgYYKhG+YepE3wxsJjC2fv5u9EOzRGKitIyD+OSykOT2YhY1ht4AqHYAk Kz/t4Q4pz2lg7dFKnDP4S/NNLnrQuuAnpb0wCOsuRe3hOtuRWUVufCAk2LM4aR8/ zEno/Nt2OYyQWwJgHMW4r8CxxlENHvtdQp77/MkKSZT3bMomcT6Yf2ovb6wz6aKF 5Ku9zem/bEVKBRly17aaQVVrnIcWq9LHFb7LaJwB+lk3z0miJnD8KYhfU5eMq+w2 TSri4cXkM4uVU/PEav+2P+JTo445hR6Q56cdr/aF/J2HS7c8pI6HM1RErC9bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqlQ57Ck0rv+1pA0sWeJUsXa4624wHwYDVR0j BBgwFoAU1E1Q0HaHLHrwylHjbXACCmgffjAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkhRUm01ZXJjRnFzS3NncktiQmhDWXBSeEdYZlh5WEhZb0h1UFZvOEp2 MWYvMC9ENDRENTBEMDc2ODcyQzdBRjBDQTUxRTM2RDcwMDIwQTY4MUY3RTMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NEQ1MEQwNzY4NzJDN0FG MENBNTFFMzZENzAwMjBBNjgxRjdFMzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkhRUm01ZXJjRnFzS3NncktiQmhDWXBSeEdYZlh5WEhZb0h1UFZvOEp2MWYvMC9E NDRENTBEMDc2ODcyQzdBRjBDQTUxRTM2RDcwMDIwQTY4MUY3RTMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX1S+pgVulNzClq9Aei/ROMLUW4ZXlVLFa8lZGL+DxPI+r6Ecdq0NjY8AeSMK 8Sl0tgiZouoCgjjY47mJCZRMSH0u3QRJR7r+2Nlnp6QTuZmcWepnIIEUsL75WL0u UTEBIBQO4vnjAA8gkCh7pNUy/KPTQryZkBM8/cwAp0GyBCNw6fZH50Ik8+Y8x+Yr t9Et1yxxX/iqvTq2nJDYAcYUPsabq4xTMqj2242igDJBDkYE/AnN37GpudBFtuGc oI8NSUWD1IcVQjRvUZrDGZXCwM2qBgRPYM0/uoXO9J8LYM1yoZSjAvjRqXUKRAmk /FTbxxPYxOlXUOWky7Ut69qDNg== -----END CERTIFICATE-----Generated at Wed Nov 5 08:59:31 2025 by rpki-client