$ rpki-client -vvf rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft File: A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft (raw, json) Hash identifier: sMhHzHUHDPK9i7Qi0vYmj8/pV5ORl/QDSzLnU5aUPEw= Subject key identifier: 8A:F2:96:B5:E0:AB:00:66:64:53:52:4F:2E:5A:91:76:2B:FA:0D:CB Authority key identifier: A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A Certificate issuer: /CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A Certificate serial: 69D7B01621B9FFB09B39F50086FCD9FD9E635C46 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer Subject info access: rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft Manifest number: CF Signing time: Wed 05 Nov 2025 04:05:16 +0000 Manifest this update: Wed 05 Nov 2025 04:00:16 +0000 Manifest next update: Thu 06 Nov 2025 05:13:16 +0000 Files and hashes: 1: 3133382e3131372e38382e302f32322d3234203d3e20323634323336.roa (hash: FY7AnqAx4uALtv3sW2I80UpMHissxv0FiwkefwWNfi8=) 2: 3136382e39302e33362e302f32322d3234203d3e20323634323336.roa (hash: HtqSGu9dBb0YYZ+ZbVBsu0Qzj5D0doY+P8Xbw0oRSSY=) 3: 323830343a323461383a3a2f33322d3438203d3e20323634323336.roa (hash: ibQcB0heJmCCHvRKHLau5TQQNa0nHWFomE8+cMwlq7M=) 4: A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl (hash: Id4nkqMMVeGKCCez61Zo0U0uujUg9zw8PCYrwpqxEZw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 05:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d7:b0:16:21:b9:ff:b0:9b:39:f5:00:86:fc:d9:fd:9e:63:5c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A Validity Not Before: Nov 5 04:00:16 2025 GMT Not After : Nov 6 05:13:16 2025 GMT Subject: CN=8AF296B5E0AB00666453524F2E5A91762BFA0DCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:9a:44:f2:16:95:f7:19:65:81:11:0c:cf: de:b6:8b:1e:2a:78:4d:59:28:e2:6a:44:2e:8e:e2: f0:bc:ee:f7:1e:97:1a:3a:92:f1:8d:07:05:03:28: 5a:91:5a:31:b0:3e:4a:20:53:22:56:a1:8b:ab:1e: d5:f0:0c:51:fc:17:ab:d6:67:39:a3:91:c0:ed:d2: 33:6d:3c:72:c2:51:5f:31:9e:3e:2e:b9:64:cc:26: 73:df:fb:8a:25:96:c4:eb:59:24:c0:86:ab:bb:fd: 2d:18:f6:bc:f7:76:fb:22:e1:a2:18:5f:f2:6d:46: 41:03:80:d7:c1:f1:5f:96:34:a6:f0:89:82:42:15: bd:0e:b2:b9:60:ae:fe:51:39:7e:ce:26:2e:f1:77: 8d:a5:22:3f:b7:43:23:ae:c9:3e:a7:15:7b:80:5e: 73:df:73:7c:a5:b2:9c:03:fa:25:d7:17:d7:c4:fd: 77:cd:5a:0f:3e:65:49:af:b8:c6:96:50:30:b5:6c: c2:86:70:b8:16:77:58:6a:c7:4c:4a:b1:02:3a:27: 87:1b:c5:bd:85:d0:d6:5c:05:78:43:5e:0e:15:5c: d5:fb:bf:63:4c:2a:46:2e:eb:ff:29:4d:dd:55:9f: c3:e1:ad:a3:53:bd:97:27:b7:e9:f3:82:a6:55:66: 57:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F2:96:B5:E0:AB:00:66:64:53:52:4F:2E:5A:91:76:2B:FA:0D:CB X509v3 Authority Key Identifier: keyid:A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:18:ee:c9:c3:58:f5:1c:b7:9f:9c:8f:e8:42:fd:7c:be:d4: 25:0c:b6:9c:0b:3e:df:c5:74:f5:d6:e8:51:80:16:54:51:e4: 9b:4a:13:0f:ef:eb:55:7b:6d:d5:30:a3:1e:35:91:40:4e:1b: 4c:74:05:d4:96:db:00:e4:97:fb:30:7f:e8:c0:8e:c3:34:c1: f9:b1:3c:c5:a7:b0:be:a4:67:a9:4e:7c:f0:ad:0e:f1:ac:93: 23:40:54:2d:46:44:de:02:be:d4:09:52:98:cd:23:3b:7b:a8: f2:0c:0b:91:f1:bf:57:61:8e:fc:51:e9:fb:c5:b0:02:d5:07: df:94:a2:e3:36:7d:5e:e1:86:b2:b8:8f:be:4b:48:05:6d:1c: 09:29:4e:fd:0c:a5:84:e9:0e:5d:02:19:a3:d7:9d:ef:55:df: cf:9d:62:bb:91:48:39:a2:a8:fe:bb:a0:44:3c:88:94:ec:43: 20:aa:da:88:af:14:bd:a9:a9:69:00:61:83:9a:da:15:59:53: e4:17:16:65:c2:c9:91:9d:b0:0a:3f:09:4c:42:f8:73:96:69: 10:e1:6e:b4:87:a2:e3:a2:10:48:b5:70:29:97:8f:3f:d4:c1: 4a:f7:9d:7e:50:42:3d:5d:3d:fd:73:f6:01:12:24:a7:a5:d8: aa:24:4a:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUadewFiG5/7CbOfUAhvzZ/Z5jXEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk0OEFCOTZGNkJCN0RBQzJDMTY3NkVGQkVFOEQ2MTA5 OUM2MUUwQTAeFw0yNTExMDUwNDAwMTZaFw0yNTExMDYwNTEzMTZaMDMxMTAvBgNV BAMTKDhBRjI5NkI1RTBBQjAwNjY2NDUzNTI0RjJFNUE5MTc2MkJGQTBEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBkZpE8haV9xllgREMz962ix4q eE1ZKOJqRC6O4vC87vcelxo6kvGNBwUDKFqRWjGwPkogUyJWoYurHtXwDFH8F6vW ZzmjkcDt0jNtPHLCUV8xnj4uuWTMJnPf+4ollsTrWSTAhqu7/S0Y9rz3dvsi4aIY X/JtRkEDgNfB8V+WNKbwiYJCFb0Osrlgrv5ROX7OJi7xd42lIj+3QyOuyT6nFXuA XnPfc3ylspwD+iXXF9fE/XfNWg8+ZUmvuMaWUDC1bMKGcLgWd1hqx0xKsQI6J4cb xb2F0NZcBXhDXg4VXNX7v2NMKkYu6/8pTd1Vn8PhraNTvZcnt+nzgqZVZlfXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUivKWteCrAGZkU1JPLlqRdiv6DcswHwYDVR0j BBgwFoAUqUirlva7fawsFnbvvujWEJnGHgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUFYYUI5S2JhZEhDU2oyTE10cEJSUW9IVUVKZG5yMjl3Z2R2dFoyTWZ2 RUovMC9BOTQ4QUI5NkY2QkI3REFDMkMxNjc2RUZCRUU4RDYxMDk5QzYxRTBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5NDhBQjk2RjZCQjdEQUMy QzE2NzZFRkJFRThENjEwOTlDNjFFMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUFYYUI5S2JhZEhDU2oyTE10cEJSUW9IVUVKZG5yMjl3Z2R2dFoyTWZ2RUovMC9B OTQ4QUI5NkY2QkI3REFDMkMxNjc2RUZCRUU4RDYxMDk5QzYxRTBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAehjuycNY9Ry3n5yP6EL9fL7UJQy2nAs+38V09dboUYAWVFHkm0oTD+/rVXtt 1TCjHjWRQE4bTHQF1JbbAOSX+zB/6MCOwzTB+bE8xaewvqRnqU588K0O8ayTI0BU LUZE3gK+1AlSmM0jO3uo8gwLkfG/V2GO/FHp+8WwAtUH35Si4zZ9XuGGsriPvktI BW0cCSlO/QylhOkOXQIZo9ed71Xfz51iu5FIOaKo/rugRDyIlOxDIKraiK8Uvamp aQBhg5raFVlT5BcWZcLJkZ2wCj8JTEL4c5ZpEOFutIei46IQSLVwKZePP9TBSved flBCPV09/XP2ARIkp6XYqiRK6g== -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:25 2025 by rpki-client