$ rpki-client -vvf rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.mft File: 99FE4DC5DC920594D9EDE67156A7135EA88CAADD.mft (raw, json) Hash identifier: vodBt/ZOaaTAkG8EGGc4AlRp5hjcmo3m4WgALslIbWU= Subject key identifier: A9:06:D2:F5:F4:FF:0C:01:5A:AD:FD:D2:0B:3D:5C:1F:11:87:A1:B4 Authority key identifier: 99:FE:4D:C5:DC:92:05:94:D9:ED:E6:71:56:A7:13:5E:A8:8C:AA:DD Certificate issuer: /CN=99FE4DC5DC920594D9EDE67156A7135EA88CAADD Certificate serial: 342C7570DBBC4147DA2C00C75826A148A07F4B08 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.cer Subject info access: rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.mft Manifest number: 64 Signing time: Tue 04 Nov 2025 14:09:19 +0000 Manifest this update: Tue 04 Nov 2025 14:04:19 +0000 Manifest next update: Wed 05 Nov 2025 18:05:19 +0000 Files and hashes: 1: 3139322e3134312e3233382e302f32342d3234203d3e20323637343833.roa (hash: YPg6yzHo+3Bmj4ilv/CxzyyiVfA6eUFnFrVPY6LCKhw=) 2: 3139322e3134312e3233382e302f32332d3233203d3e20323637343833.roa (hash: rQPH+WKyQbClptDS0QgKDvuodA2NiLLxvb74Ygqt1Sc=) 3: 99FE4DC5DC920594D9EDE67156A7135EA88CAADD.crl (hash: sDGl2blc5bGkDFHA78wU3YbnwEoaaYpH1oVqzr5TG2U=) 4: 3139322e3134312e3233392e302f32342d3234203d3e20323637343833.roa (hash: EAKZHuvEsQkF/DLyePRGA30cvmaM23it5Qsk+jYG/ic=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.crl rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 18:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:2c:75:70:db:bc:41:47:da:2c:00:c7:58:26:a1:48:a0:7f:4b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99FE4DC5DC920594D9EDE67156A7135EA88CAADD Validity Not Before: Nov 4 14:04:19 2025 GMT Not After : Nov 5 18:05:19 2025 GMT Subject: CN=A906D2F5F4FF0C015AADFDD20B3D5C1F1187A1B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ae:48:a6:f0:a7:47:fe:99:06:d4:af:c9:77: 55:53:f4:78:85:1e:c6:d2:e8:10:68:c0:51:68:7e: fe:b6:b3:96:f9:d0:db:b3:86:82:cf:56:52:5b:ff: 9c:cd:dc:d0:62:c4:6d:28:99:f6:31:27:55:cb:25: 72:99:4c:5b:1a:a5:b7:ff:a0:04:8a:53:ab:2b:9f: bb:d8:95:7b:85:b5:82:c2:68:59:21:b7:b2:01:1c: 8f:38:42:d5:e9:e6:18:fa:a8:2a:d0:23:8a:f9:f7: c7:9e:0d:a2:7f:14:01:56:5c:d8:86:bc:eb:6a:4a: 71:6b:d1:ca:c1:ca:af:0e:e7:9c:89:88:50:02:ac: 44:e4:21:9a:48:29:64:16:b4:5d:fd:fb:6e:e3:00: 72:28:04:48:d6:9a:fa:6c:09:f7:90:0b:6a:78:99: 19:58:fc:ca:eb:11:a9:b0:87:68:63:7a:90:59:53: 59:cf:36:47:9e:d2:fc:f9:c2:3d:c3:f2:b2:ee:65: a3:3b:5d:10:b1:e5:b0:27:fa:bb:b9:b1:fc:b4:ab: 22:0d:20:72:18:55:6c:4d:1f:51:2f:b7:05:76:49: 84:64:5b:49:66:05:17:17:08:45:38:41:00:9f:f6: 68:db:b0:3d:45:a5:ea:04:6b:a9:a1:fd:29:5b:bc: c2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:06:D2:F5:F4:FF:0C:01:5A:AD:FD:D2:0B:3D:5C:1F:11:87:A1:B4 X509v3 Authority Key Identifier: keyid:99:FE:4D:C5:DC:92:05:94:D9:ED:E6:71:56:A7:13:5E:A8:8C:AA:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:2f:f9:cf:ed:9a:61:b7:df:39:02:e4:57:e3:d2:71:6c:6a: fe:d5:1a:55:13:b8:25:e7:b3:37:15:55:99:90:6c:68:f1:bb: 69:c6:95:ab:78:0d:5c:58:7c:b8:99:b3:e5:6e:a4:98:55:67: 0b:ee:d0:b0:97:1b:7a:45:7f:f7:1c:1b:6e:dc:dd:9e:77:0b: 77:44:69:f2:68:6f:c2:93:40:75:b2:31:34:5b:29:93:5c:32: 52:27:9c:10:66:78:99:4d:38:17:4d:c3:8c:b5:97:b0:c7:8f: 68:cf:6c:9c:41:35:b9:a0:90:0b:95:71:97:f5:8a:fd:39:68: 7f:1a:b3:69:2c:53:08:de:d0:6a:06:b8:99:9b:2c:74:86:46: c7:da:16:e4:90:07:39:4f:1f:01:81:20:8e:95:a0:4e:58:97: 47:48:9f:d1:98:94:80:9d:c6:62:ab:f4:2b:61:38:72:31:c3: c8:64:de:c5:7f:5c:b3:af:f6:cc:98:84:ca:0f:55:bc:c1:03: 09:73:de:35:4f:62:c2:0d:10:01:6d:04:3a:91:f5:00:87:e4: 7b:1a:f9:fa:8f:5d:49:53:0c:da:6b:d0:89:92:60:2c:c6:a6: 62:4c:e8:8d:cf:2e:be:ba:aa:5d:7b:f6:b0:5c:8a:0e:bb:7b: a2:d8:9d:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNCx1cNu8QUfaLADHWCahSKB/SwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlGRTREQzVEQzkyMDU5NEQ5RURFNjcxNTZBNzEzNUVB ODhDQUFERDAeFw0yNTExMDQxNDA0MTlaFw0yNTExMDUxODA1MTlaMDMxMTAvBgNV BAMTKEE5MDZEMkY1RjRGRjBDMDE1QUFERkREMjBCM0Q1QzFGMTE4N0ExQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDErkim8KdH/pkG1K/Jd1VT9HiF HsbS6BBowFFofv62s5b50NuzhoLPVlJb/5zN3NBixG0omfYxJ1XLJXKZTFsapbf/ oASKU6srn7vYlXuFtYLCaFkht7IBHI84QtXp5hj6qCrQI4r598eeDaJ/FAFWXNiG vOtqSnFr0crByq8O55yJiFACrETkIZpIKWQWtF39+27jAHIoBEjWmvpsCfeQC2p4 mRlY/MrrEamwh2hjepBZU1nPNkee0vz5wj3D8rLuZaM7XRCx5bAn+ru5sfy0qyIN IHIYVWxNH1EvtwV2SYRkW0lmBRcXCEU4QQCf9mjbsD1FpeoEa6mh/SlbvMI3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqQbS9fT/DAFarf3SCz1cHxGHobQwHwYDVR0j BBgwFoAUmf5NxdySBZTZ7eZxVqcTXqiMqt0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNTc5bWFmdUtyM0s5TVFSR1FDWTU3TnNyRmFjOVBqNFBUb1RjaFpkd2o0 ZFgvMC85OUZFNERDNURDOTIwNTk0RDlFREU2NzE1NkE3MTM1RUE4OENBQURELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5RkU0REM1REM5MjA1OTRE OUVERTY3MTU2QTcxMzVFQTg4Q0FBREQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NTc5bWFmdUtyM0s5TVFSR1FDWTU3TnNyRmFjOVBqNFBUb1RjaFpkd2o0ZFgvMC85 OUZFNERDNURDOTIwNTk0RDlFREU2NzE1NkE3MTM1RUE4OENBQURELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiS/5z+2aYbffOQLkV+PScWxq/tUaVRO4JeezNxVVmZBsaPG7acaVq3gNXFh8 uJmz5W6kmFVnC+7QsJcbekV/9xwbbtzdnncLd0Rp8mhvwpNAdbIxNFspk1wyUiec EGZ4mU04F03DjLWXsMePaM9snEE1uaCQC5Vxl/WK/TlofxqzaSxTCN7Qaga4mZss dIZGx9oW5JAHOU8fAYEgjpWgTliXR0if0ZiUgJ3GYqv0K2E4cjHDyGTexX9cs6/2 zJiEyg9VvMEDCXPeNU9iwg0QAW0EOpH1AIfkexr5+o9dSVMM2mvQiZJgLMamYkzo jc8uvrqqXXv2sFyKDrt7otidUg== -----END CERTIFICATE-----Generated at Wed Nov 5 07:42:06 2025 by rpki-client