$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft File: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft (raw, json) Hash identifier: dYl6COIC+iRO7wyxcYLQfxNaNrwvUUp2LrfK0BZVyqg= Subject key identifier: 0D:E1:E4:0B:30:15:9F:17:21:DF:5A:6A:3F:58:63:26:00:C5:82:26 Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 Certificate issuer: /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Certificate serial: 6B49C399AB2BCB22FB9C6C1CC9163DE833276BED Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft Manifest number: 02CE Signing time: Tue 04 Nov 2025 16:31:35 +0000 Manifest this update: Tue 04 Nov 2025 16:26:35 +0000 Manifest next update: Wed 05 Nov 2025 19:14:35 +0000 Files and hashes: 1: 323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (hash: 0xs1tTdh2Qke0fip6d1TEfj28igzF6NdDvyXj3IPtmI=) 2: 3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (hash: Bv6Lyj5+VhdPqvZ/TGH9M1sdk0ISaNwfb7BbI7c/FPE=) 3: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl (hash: jSuLEaEPSRgxCkVCfGpDcRD6LzRH39l08mhjj0PjHpM=) 4: 3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (hash: WqEYa1LHKO/TdU02rXFXLwns464zC4VFuzHF7wOxsfA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:49:c3:99:ab:2b:cb:22:fb:9c:6c:1c:c9:16:3d:e8:33:27:6b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Validity Not Before: Nov 4 16:26:35 2025 GMT Not After : Nov 5 19:14:35 2025 GMT Subject: CN=0DE1E40B30159F1721DF5A6A3F58632600C58226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:18:5e:d8:5f:21:a6:57:ab:36:10:d8:97:c3: 17:67:76:f6:f3:70:ef:fe:fd:eb:17:9e:07:2a:2f: 04:21:63:30:78:54:63:22:13:f3:d3:c1:82:f3:78: 6c:28:7f:75:c0:5d:18:9f:00:25:cf:2c:df:20:c2: d0:dd:e2:a5:e5:12:79:88:0a:42:09:67:e8:00:65: 6a:ff:1c:73:7c:29:15:e2:8f:7e:d0:87:bb:24:b5: e5:0b:0b:79:a4:59:0b:18:0b:2a:61:f7:3e:7d:70: 6d:fb:1c:46:52:ec:9b:cb:37:5f:78:0e:13:59:4a: 6e:d8:21:13:6d:ed:86:06:9e:89:19:81:e4:76:f1: e7:82:c0:85:85:ab:87:0f:68:6b:0b:ca:1d:dd:df: 28:2a:12:73:96:92:58:42:af:2d:39:16:b7:29:78: be:44:c6:1f:58:f1:66:37:0b:a3:a0:a1:6a:df:50: ad:0c:10:85:e3:38:ba:df:02:0f:e4:6e:a3:e3:69: f7:8b:8f:19:10:2b:60:fd:23:b3:12:58:38:9d:de: 96:45:a9:7d:75:88:e8:c2:f7:a3:2c:f0:14:04:91: c8:1a:aa:ca:b7:ec:9d:ba:37:f1:1a:1e:a8:97:e6: 5b:5c:73:93:1f:dc:2d:bc:54:33:ef:e1:aa:ea:08: 93:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E1:E4:0B:30:15:9F:17:21:DF:5A:6A:3F:58:63:26:00:C5:82:26 X509v3 Authority Key Identifier: keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:32:fe:26:d5:ec:06:be:ea:a2:a6:71:fd:37:39:32:42:f9: 92:c2:21:dd:2e:c5:8c:c7:18:17:e4:05:92:bd:46:5a:dc:77: 2c:83:98:84:7e:f3:d4:f2:f2:78:de:3e:2a:9c:a6:89:ab:f9: 23:48:33:ed:6d:41:da:10:f9:8b:46:f7:aa:e0:63:ec:9d:6e: 75:d5:26:10:82:8a:57:1e:1e:b8:56:a5:2b:5c:95:33:96:40: db:a3:57:b4:fc:8a:52:a3:3a:e1:85:97:93:21:eb:7e:ba:78: dd:b8:f5:11:c8:d7:dd:f6:96:ca:76:a6:f8:85:17:cb:d7:e9: 48:79:fa:d9:3b:26:91:aa:d9:9a:8d:a4:6d:06:35:36:58:48: a4:7f:c2:54:dd:f4:3b:71:ec:2f:84:c1:c6:c0:7b:14:87:d2: 3d:ad:b5:96:8d:15:0b:2e:48:f6:39:a8:2b:78:ab:3e:e5:74: 21:e7:1a:40:46:34:14:bb:0b:84:19:6c:fa:da:e5:af:95:13: d2:be:74:74:b9:dc:21:87:cc:8d:ca:ad:e5:74:9f:c9:e5:01: 50:cd:7b:ac:61:d4:50:10:32:9c:f7:7e:46:6a:8d:fe:1a:54: d4:4a:a4:a8:be:14:04:00:36:c9:ad:df:94:f3:52:43:24:1c: e4:52:e0:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa0nDmasryyL7nGwcyRY96DMna+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVF MDZBMjdFMjAeFw0yNTExMDQxNjI2MzVaFw0yNTExMDUxOTE0MzVaMDMxMTAvBgNV BAMTKDBERTFFNDBCMzAxNTlGMTcyMURGNUE2QTNGNTg2MzI2MDBDNTgyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIGF7YXyGmV6s2ENiXwxdndvbz cO/+/esXngcqLwQhYzB4VGMiE/PTwYLzeGwof3XAXRifACXPLN8gwtDd4qXlEnmI CkIJZ+gAZWr/HHN8KRXij37Qh7skteULC3mkWQsYCyph9z59cG37HEZS7JvLN194 DhNZSm7YIRNt7YYGnokZgeR28eeCwIWFq4cPaGsLyh3d3ygqEnOWklhCry05Frcp eL5Exh9Y8WY3C6OgoWrfUK0MEIXjOLrfAg/kbqPjafeLjxkQK2D9I7MSWDid3pZF qX11iOjC96Ms8BQEkcgaqsq37J26N/EaHqiX5ltcc5Mf3C28VDPv4arqCJN5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDeHkCzAVnxch31pqP1hjJgDFgiYwHwYDVR0j BBgwFoAUZTg31+yh/hFF0M4V4L+JXuBqJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZl UFMvMC82NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MzgzN0Q3RUNBMUZFMTE0 NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC82 NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMDL+JtXsBr7qoqZx/Tc5MkL5ksIh3S7FjMcYF+QFkr1GWtx3LIOYhH7z1PLy eN4+Kpymiav5I0gz7W1B2hD5i0b3quBj7J1uddUmEIKKVx4euFalK1yVM5ZA26NX tPyKUqM64YWXkyHrfrp43bj1EcjX3faWynam+IUXy9fpSHn62TsmkarZmo2kbQY1 NlhIpH/CVN30O3HsL4TBxsB7FIfSPa21lo0VCy5I9jmoK3irPuV0IecaQEY0FLsL hBls+trlr5UT0r50dLncIYfMjcqt5XSfyeUBUM17rGHUUBAynPd+RmqN/hpU1Eqk qL4UBAA2ya3flPNSQyQc5FLgOQ== -----END CERTIFICATE-----Generated at Wed Nov 5 11:44:57 2025 by rpki-client