$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.mft File: 18D2B9D6E54ED795E9B7828E042E38E75E901E9F.mft (raw, json) Hash identifier: zdpnY7hQo0Cec4oNjIdsGr3Ws9OoN7QBGzqm/HFZHSs= Subject key identifier: 8E:07:7E:17:4C:94:2F:3C:95:B2:CF:A5:69:91:D1:21:D3:2C:A9:6E Authority key identifier: 18:D2:B9:D6:E5:4E:D7:95:E9:B7:82:8E:04:2E:38:E7:5E:90:1E:9F Certificate issuer: /CN=18D2B9D6E54ED795E9B7828E042E38E75E901E9F Certificate serial: 3A7BE7332127BBF87F8B26347E2A44FC5F4F6DCB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.cer Subject info access: rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.mft Manifest number: 39 Signing time: Wed 05 Nov 2025 14:20:27 +0000 Manifest this update: Wed 05 Nov 2025 14:15:27 +0000 Manifest next update: Thu 06 Nov 2025 18:11:27 +0000 Files and hashes: 1: 3137372e37312e38382e302f32332d3233203d3e20323633363034.roa (hash: y3i+tL32Gt1MzIbujXnfGHhx+RPfsm1jXKbGTm4P450=) 2: 3134332e3230322e3131322e302f32332d3233203d3e20323633363034.roa (hash: d+F/MoZB9dIyvh9ZfCYZnxIIMgbORW/1yn8Ti89220g=) 3: 18D2B9D6E54ED795E9B7828E042E38E75E901E9F.crl (hash: zaPXxUu2BUGqBayTJNSL+gZ+VXFTALNU/nC9WcutmLc=) 4: 3137372e37312e39302e302f32332d3233203d3e20323633363034.roa (hash: rh97MAAWm3VkCmx9gUk9tJuUFAvZ6BW0aCVqK93ohx8=) 5: 3137372e37312e38382e302f32322d3232203d3e20323633363034.roa (hash: aVYZixEJOQPS3q3LNRf1+bi9wIOEct5Sgq5Pj4n1J2c=) 6: 3134332e3230322e3131342e302f32332d3233203d3e20323633363034.roa (hash: 1EPafl6/j4xS5Z9rsZ4zDN5lPIhIVttNgxoQkt7bNl4=) 7: 3134332e3230322e3131322e302f32322d3232203d3e20323633363034.roa (hash: np+an034q6da9/NJZqksyQdEHZlPOnhDi8N/bPfxYT4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.crl rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 17:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:7b:e7:33:21:27:bb:f8:7f:8b:26:34:7e:2a:44:fc:5f:4f:6d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18D2B9D6E54ED795E9B7828E042E38E75E901E9F Validity Not Before: Nov 5 14:15:27 2025 GMT Not After : Nov 6 18:11:27 2025 GMT Subject: CN=8E077E174C942F3C95B2CFA56991D121D32CA96E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a9:cb:de:7b:42:dc:6b:d9:4b:f6:1c:51:47: 59:6b:77:82:3d:a0:2f:ff:41:62:6b:0d:1b:ae:fc: 46:1e:5e:ed:c7:7d:86:76:bc:1d:f7:ed:16:4d:1e: b0:f6:a5:91:da:51:e4:27:11:1f:4f:3b:d8:3c:1c: b6:5f:39:4e:d9:05:d0:c3:62:a4:d8:f7:28:cd:7c: 57:3a:77:12:b4:f3:30:ad:dd:33:a9:58:04:24:ea: 1b:91:57:e6:42:ff:01:0a:d3:e8:ae:82:1a:e8:6a: 41:9e:4e:76:b5:8b:51:fa:61:b2:9c:86:6d:bf:76: 6c:6e:38:2c:49:70:f5:41:e6:26:7f:6a:56:75:c9: 7e:e7:60:b2:41:9a:b5:f0:62:42:b1:86:7d:e7:4e: 28:1f:62:47:f1:38:31:01:c7:8b:54:27:78:05:b9: 52:80:4c:e9:f6:12:db:e7:0d:cd:de:29:df:ea:b6: eb:63:d6:20:ab:2e:29:54:b3:7b:c3:57:76:e5:1f: 94:f4:a5:c6:56:d8:28:95:48:9d:56:f6:30:92:48: 5a:29:5b:6e:0e:b8:4d:dc:38:b6:e1:b6:be:e5:e1: 3e:70:db:de:f9:f9:94:27:bd:bf:be:25:40:46:4d: b1:6e:96:91:33:e1:90:a2:40:4d:80:b9:80:44:92: 93:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:07:7E:17:4C:94:2F:3C:95:B2:CF:A5:69:91:D1:21:D3:2C:A9:6E X509v3 Authority Key Identifier: keyid:18:D2:B9:D6:E5:4E:D7:95:E9:B7:82:8E:04:2E:38:E7:5E:90:1E:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:bf:6c:c1:a8:13:58:a3:cf:f6:2e:ea:ff:e5:b8:ec:3e:8a: 26:e4:f0:e0:71:fb:e4:fc:c7:b9:e8:d9:22:3c:e2:53:2b:2a: df:ac:e3:e1:f6:9e:4d:37:02:c2:f7:bf:2f:60:17:96:59:48: 58:9d:9f:cb:bc:8e:a7:d5:56:32:59:10:39:6e:aa:ce:af:44: 14:36:6f:16:52:d1:e7:52:ef:d3:b7:ea:ac:dc:e9:2d:a1:e4: 7a:26:b1:40:e6:19:f4:ec:2c:93:df:f5:9e:1b:13:20:a1:5c: 29:7d:30:db:8d:73:cb:7b:cc:81:62:87:0e:2d:2c:b1:84:05: e4:2e:42:6d:5f:03:0a:93:cd:79:27:e4:40:58:fd:38:bb:d0: 8a:81:8e:a1:01:8b:a3:9f:a8:ec:c3:cc:b0:15:1a:ad:b9:0b: 6a:29:02:ab:61:bd:aa:70:e7:59:ef:94:ee:f2:98:84:94:62: 36:eb:69:37:b5:64:72:6b:a9:fa:e3:93:63:44:c1:c4:3a:09: 36:cf:19:81:ef:2e:bc:8a:d7:79:b1:e3:73:d6:17:a7:79:fe: 5a:d6:59:04:31:50:9e:dd:29:cb:e4:74:5f:c2:4c:ee:8f:d6: 1a:c5:f4:b9:64:47:3a:b5:ed:40:58:cc:2e:9b:0b:67:1f:6c: e0:07:25:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOnvnMyEnu/h/iyY0fipE/F9PbcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThEMkI5RDZFNTRFRDc5NUU5Qjc4MjhFMDQyRTM4RTc1 RTkwMUU5RjAeFw0yNTExMDUxNDE1MjdaFw0yNTExMDYxODExMjdaMDMxMTAvBgNV BAMTKDhFMDc3RTE3NEM5NDJGM0M5NUIyQ0ZBNTY5OTFEMTIxRDMyQ0E5NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQqcvee0Lca9lL9hxRR1lrd4I9 oC//QWJrDRuu/EYeXu3HfYZ2vB337RZNHrD2pZHaUeQnER9PO9g8HLZfOU7ZBdDD YqTY9yjNfFc6dxK08zCt3TOpWAQk6huRV+ZC/wEK0+iughroakGeTna1i1H6YbKc hm2/dmxuOCxJcPVB5iZ/alZ1yX7nYLJBmrXwYkKxhn3nTigfYkfxODEBx4tUJ3gF uVKATOn2EtvnDc3eKd/qtutj1iCrLilUs3vDV3blH5T0pcZW2CiVSJ1W9jCSSFop W24OuE3cOLbhtr7l4T5w2975+ZQnvb++JUBGTbFulpEz4ZCiQE2AuYBEkpNbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjgd+F0yULzyVss+laZHRIdMsqW4wHwYDVR0j BBgwFoAUGNK51uVO15Xpt4KOBC44516QHp8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUxyZWpTNWpCdWF2YkY1ckVXem8yUmFNRnVhNThYU2lWdWVlcm5OVThx Z28vMC8xOEQyQjlENkU1NEVENzk1RTlCNzgyOEUwNDJFMzhFNzVFOTAxRTlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4RDJCOUQ2RTU0RUQ3OTVF OUI3ODI4RTA0MkUzOEU3NUU5MDFFOUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUxyZWpTNWpCdWF2YkY1ckVXem8yUmFNRnVhNThYU2lWdWVlcm5OVThxZ28vMC8x OEQyQjlENkU1NEVENzk1RTlCNzgyOEUwNDJFMzhFNzVFOTAxRTlGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU79swagTWKPP9i7q/+W47D6KJuTw4HH75PzHuejZIjziUysq36zj4faeTTcC wve/L2AXlllIWJ2fy7yOp9VWMlkQOW6qzq9EFDZvFlLR51Lv07fqrNzpLaHkeiax QOYZ9Owsk9/1nhsTIKFcKX0w241zy3vMgWKHDi0ssYQF5C5CbV8DCpPNeSfkQFj9 OLvQioGOoQGLo5+o7MPMsBUarbkLaikCq2G9qnDnWe+U7vKYhJRiNutpN7Vkcmup +uOTY0TBxDoJNs8Zge8uvIrXebHjc9YXp3n+WtZZBDFQnt0py+R0X8JM7o/WGsX0 uWRHOrXtQFjMLpsLZx9s4AcltA== -----END CERTIFICATE-----Generated at Wed Nov 5 16:55:19 2025 by rpki-client