$ rpki-client -vvf rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/910800F18E96181F4CD878BAE067D0CFA1814220.mft File: 910800F18E96181F4CD878BAE067D0CFA1814220.mft (raw, json) Hash identifier: EtQ6BR2pCWR0yNZdJ2ZBQ4HJIx8pjzHeE5REhSBPlCY= Subject key identifier: 58:70:57:1A:52:C8:D5:0E:1E:51:11:D7:00:BB:9F:F2:74:5A:45:AB Authority key identifier: 91:08:00:F1:8E:96:18:1F:4C:D8:78:BA:E0:67:D0:CF:A1:81:42:20 Certificate issuer: /CN=910800F18E96181F4CD878BAE067D0CFA1814220 Certificate serial: 104914C14D017DF2ADFD6045CCC4EAF85204A318 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910800F18E96181F4CD878BAE067D0CFA1814220.cer Subject info access: rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/910800F18E96181F4CD878BAE067D0CFA1814220.mft Manifest number: 0215 Signing time: Wed 05 Nov 2025 00:00:58 +0000 Manifest this update: Tue 04 Nov 2025 23:55:58 +0000 Manifest next update: Thu 06 Nov 2025 01:09:58 +0000 Files and hashes: 1: 910800F18E96181F4CD878BAE067D0CFA1814220.crl (hash: OTDKB5yoKCA551u3lIXRgbnwJIBHSrZcWJwTJVz5h1U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/910800F18E96181F4CD878BAE067D0CFA1814220.crl rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/910800F18E96181F4CD878BAE067D0CFA1814220.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910800F18E96181F4CD878BAE067D0CFA1814220.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:49:14:c1:4d:01:7d:f2:ad:fd:60:45:cc:c4:ea:f8:52:04:a3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=910800F18E96181F4CD878BAE067D0CFA1814220 Validity Not Before: Nov 4 23:55:58 2025 GMT Not After : Nov 6 01:09:58 2025 GMT Subject: CN=5870571A52C8D50E1E5111D700BB9FF2745A45AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:76:c2:7d:5d:fb:5b:5c:7d:d4:f7:de:d3:9c: 5b:eb:cc:7f:9d:36:a6:eb:9a:1a:a9:4e:0d:7e:cf: 8f:77:5c:7f:fa:6d:21:fb:ec:47:99:84:1a:85:3d: e7:b6:5c:82:f1:43:5f:fb:ee:be:58:6d:3a:07:1a: 6e:b6:79:e1:c8:91:37:b0:ad:9e:3b:b0:e7:c1:c0: ba:c3:bc:c8:e1:88:84:3b:a7:68:4b:2f:56:80:0a: 6a:1d:09:24:3a:87:42:0d:5a:66:f9:71:53:da:2f: 9f:b1:e7:fc:70:65:a8:b8:8d:d0:1b:f2:04:0d:02: 30:07:9b:df:51:d5:8a:44:02:1c:3b:a5:e1:78:67: a5:89:59:e9:4c:9a:7a:bf:7c:9d:92:e2:ce:45:49: a1:02:b7:18:e1:87:c9:63:13:34:e4:60:8a:9b:f9: 05:4d:55:8c:65:73:73:1d:4c:0d:65:1f:ed:79:28: bf:e1:7b:66:a8:26:c7:57:22:f3:c8:ae:54:9f:d9: 21:04:7a:0b:1c:18:36:3c:9a:3f:4e:8b:23:ef:cf: d1:14:76:df:fb:8b:70:e2:9a:c9:2f:ef:60:e3:b0: 52:21:42:9e:58:f8:8c:9b:67:af:d1:14:7b:24:d4: 8a:21:a6:45:fd:21:a9:3d:c4:46:6f:7a:69:7d:19: 8a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:70:57:1A:52:C8:D5:0E:1E:51:11:D7:00:BB:9F:F2:74:5A:45:AB X509v3 Authority Key Identifier: keyid:91:08:00:F1:8E:96:18:1F:4C:D8:78:BA:E0:67:D0:CF:A1:81:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/910800F18E96181F4CD878BAE067D0CFA1814220.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910800F18E96181F4CD878BAE067D0CFA1814220.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/910800F18E96181F4CD878BAE067D0CFA1814220.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b4:1d:0f:a3:4d:78:7d:cc:a2:3e:f4:da:02:f8:5e:35:da: ce:6b:2c:b0:07:c4:0a:35:3f:34:ed:6f:60:16:f0:84:0d:d4: a1:b4:40:6f:7d:5a:b1:fd:c6:4f:6a:0b:d8:93:b0:f0:2a:61: cc:f7:df:de:4b:f1:14:6b:70:39:3e:bf:1d:f7:e6:63:20:dc: 10:2b:06:ff:9b:70:c3:9b:45:70:74:5f:81:16:ff:4f:de:ec: 91:13:48:67:1e:04:01:03:d8:43:ca:ff:b5:d5:8f:a7:a4:2c: f6:b0:d9:01:93:cf:63:d0:81:75:73:16:ce:80:fc:f1:cb:1f: 19:c1:8f:04:66:28:01:ac:4d:26:07:f4:b1:fe:a9:db:da:e7: 2d:b4:82:ce:81:0e:12:f8:f0:a0:7e:c3:e6:fc:06:61:48:94: b6:80:66:bd:ab:86:f4:89:aa:0d:04:56:4f:6a:17:45:f4:42: f0:0a:35:fa:37:34:02:ab:21:36:c7:cf:9d:ac:32:8b:12:31: 20:e7:29:d6:51:14:9b:2c:dc:82:8b:36:09:2b:58:95:27:4b: 31:24:51:b5:f6:33:36:fb:cb:a4:16:c4:6d:45:13:64:e6:d3: f1:11:09:06:03:58:9f:13:30:29:81:88:f4:df:36:0b:5b:d5: 19:0d:cb:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEEkUwU0BffKt/WBFzMTq+FIEoxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTEwODAwRjE4RTk2MTgxRjRDRDg3OEJBRTA2N0QwQ0ZB MTgxNDIyMDAeFw0yNTExMDQyMzU1NThaFw0yNTExMDYwMTA5NThaMDMxMTAvBgNV BAMTKDU4NzA1NzFBNTJDOEQ1MEUxRTUxMTFENzAwQkI5RkYyNzQ1QTQ1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqdsJ9XftbXH3U997TnFvrzH+d NqbrmhqpTg1+z493XH/6bSH77EeZhBqFPee2XILxQ1/77r5YbToHGm62eeHIkTew rZ47sOfBwLrDvMjhiIQ7p2hLL1aACmodCSQ6h0INWmb5cVPaL5+x5/xwZai4jdAb 8gQNAjAHm99R1YpEAhw7peF4Z6WJWelMmnq/fJ2S4s5FSaECtxjhh8ljEzTkYIqb +QVNVYxlc3MdTA1lH+15KL/he2aoJsdXIvPIrlSf2SEEegscGDY8mj9OiyPvz9EU dt/7i3Dimskv72DjsFIhQp5Y+IybZ6/RFHsk1IohpkX9Iak9xEZveml9GYr/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWHBXGlLI1Q4eURHXALuf8nRaRaswHwYDVR0j BBgwFoAUkQgA8Y6WGB9M2Hi64GfQz6GBQiAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlVtYnJaVm1KdzVrV3B2Wkh2M3lDTHZHZWlMZjk2ODFqM0R1Ujl0bXY4 RXgvMC85MTA4MDBGMThFOTYxODFGNENEODc4QkFFMDY3RDBDRkExODE0MjIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxMDgwMEYxOEU5NjE4MUY0 Q0Q4NzhCQUUwNjdEMENGQTE4MTQyMjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlVtYnJaVm1KdzVrV3B2Wkh2M3lDTHZHZWlMZjk2ODFqM0R1Ujl0bXY4RXgvMC85 MTA4MDBGMThFOTYxODFGNENEODc4QkFFMDY3RDBDRkExODE0MjIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW7QdD6NNeH3Moj702gL4XjXazmsssAfECjU/NO1vYBbwhA3UobRAb31asf3G T2oL2JOw8CphzPff3kvxFGtwOT6/HffmYyDcECsG/5tww5tFcHRfgRb/T97skRNI Zx4EAQPYQ8r/tdWPp6Qs9rDZAZPPY9CBdXMWzoD88csfGcGPBGYoAaxNJgf0sf6p 29rnLbSCzoEOEvjwoH7D5vwGYUiUtoBmvauG9ImqDQRWT2oXRfRC8Ao1+jc0Aqsh NsfPnawyixIxIOcp1lEUmyzcgos2CStYlSdLMSRRtfYzNvvLpBbEbUUTZObT8REJ BgNYnxMwKYGI9N82C1vVGQ3L1A== -----END CERTIFICATE-----Generated at Wed Nov 5 12:21:44 2025 by rpki-client