$ rpki-client -vvf rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft File: 289C0FA8F74E8A496A1CF040353916504C4E789F.mft (raw, json) Hash identifier: Ek2igzQQIRxMOuNSw4NwGTaWT9K7p9lb9IVMKaZ1ylk= Subject key identifier: D6:D2:87:E1:E5:29:35:5F:75:05:E7:D4:D1:84:BC:FE:DF:E5:0B:35 Authority key identifier: 28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F Certificate issuer: /CN=289C0FA8F74E8A496A1CF040353916504C4E789F Certificate serial: 0E71A1EB246F3D0F530CA62A9C668C763B9461B3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer Subject info access: rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft Manifest number: 02ED Signing time: Wed 05 Nov 2025 00:36:01 +0000 Manifest this update: Wed 05 Nov 2025 00:31:01 +0000 Manifest next update: Thu 06 Nov 2025 02:46:01 +0000 Files and hashes: 1: 323830343a343764303a3a2f33322d313238203d3e20323637303738.roa (hash: +gP3s6w113DB3ZyjXxmKKAlbxghpSVPSj8Lqa0WGlnI=) 2: 289C0FA8F74E8A496A1CF040353916504C4E789F.crl (hash: luj4Cx/zxHArHv3XK4vyWcRTNp5NIdPtguciknJSqS4=) 3: 34352e3232382e3134382e302f32322d3234203d3e20323637303738.roa (hash: v1wrjfYs/XN4AL+meICElKQP9scnXquXOc/B2Xkm9JI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.crl rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 02:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:71:a1:eb:24:6f:3d:0f:53:0c:a6:2a:9c:66:8c:76:3b:94:61:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289C0FA8F74E8A496A1CF040353916504C4E789F Validity Not Before: Nov 5 00:31:01 2025 GMT Not After : Nov 6 02:46:01 2025 GMT Subject: CN=D6D287E1E529355F7505E7D4D184BCFEDFE50B35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a3:43:bb:1e:82:74:dc:f9:00:73:aa:5a:f2: f8:4a:51:f9:f9:f6:30:b8:af:fa:da:20:16:cb:63: 33:ba:db:02:09:df:d7:e2:ec:a1:83:a5:3e:9f:05: 0d:9a:89:b4:e5:7f:54:12:32:da:1f:33:5d:06:3b: 2c:b1:f3:5c:37:00:a7:a9:6f:38:07:2d:2d:0b:e6: 0c:2e:bf:4d:94:f8:83:ef:06:6b:52:13:aa:d0:e6: 2f:15:0e:99:1b:43:4d:8d:f7:05:10:3c:9c:30:fc: 61:79:68:59:4b:78:ba:ef:20:42:c3:e2:74:90:7e: ef:95:27:2a:4a:6e:ca:f6:c3:fc:1f:af:98:8b:6b: b5:74:6c:4f:6b:a7:36:a9:d6:86:c0:ba:39:cd:0c: cf:39:ae:ed:48:0d:1a:a4:34:00:60:a3:f8:0e:02: a8:38:ff:eb:19:7a:2e:02:f4:7b:30:d9:fa:81:5f: 2a:31:20:a0:d5:fe:e6:70:1d:c3:d0:ad:97:0c:b1: 58:72:b0:6c:17:14:0f:c3:42:8d:95:0e:a1:1f:63: 4d:8d:2b:0a:2a:a2:a4:a4:34:a6:0a:b7:a1:34:f1: 88:ef:bd:5d:d8:bc:04:65:f7:a1:b3:50:fa:58:1c: 9a:01:c1:7a:3e:44:6f:0e:25:32:15:f7:3c:b9:0a: a7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D2:87:E1:E5:29:35:5F:75:05:E7:D4:D1:84:BC:FE:DF:E5:0B:35 X509v3 Authority Key Identifier: keyid:28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:6a:e9:62:ad:f6:7e:68:4d:df:31:36:1f:24:67:e0:3a:1c: 8e:04:c1:7d:ef:f0:07:ae:8e:a5:ae:3b:4f:4e:d9:f3:39:44: d3:a6:61:25:a8:f9:7a:5a:23:9b:b3:7c:9f:29:a2:8c:46:95: 97:44:5e:c3:58:ba:dd:74:ab:2e:47:7d:16:39:ca:fc:b7:ed: 5d:07:99:6c:8e:62:1b:6b:8a:5c:05:00:e5:c7:38:53:ef:15: 43:99:d8:6b:d9:ea:42:88:3a:23:31:84:64:79:c7:a3:37:74: 4e:a8:80:62:cc:b1:41:e6:21:88:80:7a:0b:c3:fc:84:31:dd: 44:32:f8:db:60:e0:cf:ef:36:ac:06:8e:a3:57:5e:35:10:aa: 9a:41:57:fe:6b:5e:72:8f:aa:fe:60:6b:fd:cb:66:ab:fc:84: 29:73:4e:e2:8d:35:21:2a:e8:b9:69:c8:d4:a4:2f:53:ef:26: cf:78:59:da:f9:46:a5:cc:64:51:07:77:34:f1:97:21:d2:c0: 01:05:7a:4f:88:be:c3:36:ee:4e:1e:75:25:52:a8:4a:0d:63: 53:22:5c:e9:77:98:72:59:bc:df:f1:5f:d9:48:68:e4:7e:47: fb:6e:ea:d8:6b:6a:92:ee:df:5f:90:4c:aa:fc:34:64:bd:6c: ff:60:4f:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDnGh6yRvPQ9TDKYqnGaMdjuUYbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5QzBGQThGNzRFOEE0OTZBMUNGMDQwMzUzOTE2NTA0 QzRFNzg5RjAeFw0yNTExMDUwMDMxMDFaFw0yNTExMDYwMjQ2MDFaMDMxMTAvBgNV BAMTKEQ2RDI4N0UxRTUyOTM1NUY3NTA1RTdENEQxODRCQ0ZFREZFNTBCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBo0O7HoJ03PkAc6pa8vhKUfn5 9jC4r/raIBbLYzO62wIJ39fi7KGDpT6fBQ2aibTlf1QSMtofM10GOyyx81w3AKep bzgHLS0L5gwuv02U+IPvBmtSE6rQ5i8VDpkbQ02N9wUQPJww/GF5aFlLeLrvIELD 4nSQfu+VJypKbsr2w/wfr5iLa7V0bE9rpzap1obAujnNDM85ru1IDRqkNABgo/gO Aqg4/+sZei4C9Hsw2fqBXyoxIKDV/uZwHcPQrZcMsVhysGwXFA/DQo2VDqEfY02N KwoqoqSkNKYKt6E08YjvvV3YvARl96GzUPpYHJoBwXo+RG8OJTIV9zy5CqcJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1tKH4eUpNV91BefU0YS8/t/lCzUwHwYDVR0j BBgwFoAUKJwPqPdOiklqHPBANTkWUExOeJ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNTFwV05zeWkxc3pIbVJ5aDlxRG5leWlZSFBubktIZGpYU2k3MVBSeTJq YWMvMC8yODlDMEZBOEY3NEU4QTQ5NkExQ0YwNDAzNTM5MTY1MDRDNEU3ODlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4OUMwRkE4Rjc0RThBNDk2 QTFDRjA0MDM1MzkxNjUwNEM0RTc4OUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NTFwV05zeWkxc3pIbVJ5aDlxRG5leWlZSFBubktIZGpYU2k3MVBSeTJqYWMvMC8y ODlDMEZBOEY3NEU4QTQ5NkExQ0YwNDAzNTM5MTY1MDRDNEU3ODlGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABWrpYq32fmhN3zE2HyRn4DocjgTBfe/wB66Opa47T07Z8zlE06ZhJaj5eloj m7N8nymijEaVl0Rew1i63XSrLkd9FjnK/LftXQeZbI5iG2uKXAUA5cc4U+8VQ5nY a9nqQog6IzGEZHnHozd0TqiAYsyxQeYhiIB6C8P8hDHdRDL422Dgz+82rAaOo1de NRCqmkFX/mteco+q/mBr/ctmq/yEKXNO4o01ISrouWnI1KQvU+8mz3hZ2vlGpcxk UQd3NPGXIdLAAQV6T4i+wzbuTh51JVKoSg1jUyJc6XeYclm83/Ff2Uho5H5H+27q 2Gtqku7fX5BMqvw0ZL1s/2BPSA== -----END CERTIFICATE-----Generated at Wed Nov 5 16:44:25 2025 by rpki-client