$ rpki-client -vvf rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.mft File: 66335F04863CA1159D16D18E655231764F6FB821.mft (raw, json) Hash identifier: aVKuGjTiiVDgrUmAejDMlUhhbrFunRCCGnzj5gXTSEE= Subject key identifier: D4:16:8B:E9:D3:BB:38:B7:42:77:53:02:FA:7A:B0:08:71:E7:AC:69 Authority key identifier: 66:33:5F:04:86:3C:A1:15:9D:16:D1:8E:65:52:31:76:4F:6F:B8:21 Certificate issuer: /CN=66335F04863CA1159D16D18E655231764F6FB821 Certificate serial: 2D1B58FBC3B536CA261B0190C3E9C300961E85C0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66335F04863CA1159D16D18E655231764F6FB821.cer Subject info access: rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.mft Manifest number: 0305 Signing time: Wed 05 Nov 2025 01:17:09 +0000 Manifest this update: Wed 05 Nov 2025 01:12:09 +0000 Manifest next update: Thu 06 Nov 2025 02:51:09 +0000 Files and hashes: 1: 323830343a6566343a3a2f33322d3438203d3e203238363432.roa (hash: JzjGQK1M4rtVwprTOjmnKYKUuAzDPuYVn8oR4j2kpmA=) 2: 3136382e3232382e3138302e302f32322d3234203d3e203238363432.roa (hash: Jy39sA4HsaYhDh6y327yqdbHmULPvcMkyktzNWwPFFo=) 3: 3137302e3234362e3132382e302f32322d3234203d3e203238363432.roa (hash: p2QY/V40D+eIZtIiB9Mj08/mwuLWPUOkeaollMWU7z0=) 4: 66335F04863CA1159D16D18E655231764F6FB821.crl (hash: W/mu8W5rgIvcTL4XuSGwMVLXpjNci5v5ejcJkmvPirE=) 5: 3230312e37362e302e302f32302d3234203d3e203238363432.roa (hash: pCqSftwOk08b00LRMKmI5zfL8Teo7trQmQpUcYowpAk=) 6: 3137392e3130382e3136302e302f32302d3234203d3e203238363432.roa (hash: j3+0C1NJ7Br17r/BvrZWggscC9kgoQgX0ncAFit9f5Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.crl rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66335F04863CA1159D16D18E655231764F6FB821.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 02:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:1b:58:fb:c3:b5:36:ca:26:1b:01:90:c3:e9:c3:00:96:1e:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66335F04863CA1159D16D18E655231764F6FB821 Validity Not Before: Nov 5 01:12:09 2025 GMT Not After : Nov 6 02:51:09 2025 GMT Subject: CN=D4168BE9D3BB38B742775302FA7AB00871E7AC69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9c:b3:9a:10:6c:6c:5a:ae:24:e8:e6:81:84: f0:ba:a6:2a:cc:c7:04:83:5b:92:1e:e1:70:36:8c: 4d:0d:f2:57:0b:d8:1a:8d:aa:6b:40:6e:a9:be:74: 73:50:8a:be:68:36:b9:96:47:a2:22:b0:2b:4b:93: 4d:38:e5:a9:e9:a5:a1:1f:09:2b:cb:2a:42:3a:5a: 22:43:bd:47:8b:85:f7:3f:7b:d2:fc:b5:8e:ed:c9: d3:84:b9:f4:fd:d4:eb:df:58:86:f3:89:3b:05:3e: 93:c1:69:6b:59:c7:98:80:38:bb:f2:63:60:9d:04: 43:a6:6e:85:84:2b:74:da:b1:5e:51:87:f3:53:32: d4:77:47:71:05:0a:db:81:f4:7b:44:e7:89:6a:c9: 7e:42:dd:ce:1a:44:1a:93:4b:5f:45:41:57:ff:b3: c3:5b:92:ca:85:7e:7c:9f:e2:c1:ef:f6:be:0b:83: d1:7e:57:39:42:4f:65:e3:94:d2:6f:fd:c3:f5:c7: d9:e5:45:fa:2f:05:6b:6d:f9:dd:d8:b5:2d:26:cf: de:5d:2e:db:19:61:6f:41:a7:42:cd:97:04:64:a0: 28:d0:91:ea:41:e1:bb:b0:7a:65:99:04:2c:46:0f: 0d:bc:59:ea:24:46:db:4a:16:c6:73:db:79:20:12: 7d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:16:8B:E9:D3:BB:38:B7:42:77:53:02:FA:7A:B0:08:71:E7:AC:69 X509v3 Authority Key Identifier: keyid:66:33:5F:04:86:3C:A1:15:9D:16:D1:8E:65:52:31:76:4F:6F:B8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66335F04863CA1159D16D18E655231764F6FB821.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:1f:0d:e0:5d:0b:56:6d:f0:78:dc:0f:b1:37:21:52:97:b8: 9d:7e:4f:63:b2:a3:02:b4:03:28:6b:a8:3f:b8:c6:2a:4f:f3: 10:cc:7d:41:96:c2:68:92:5f:b9:f8:dd:bb:59:65:e1:0d:7f: d7:0b:8d:90:03:5e:65:01:bb:1f:5d:91:f8:b1:21:08:57:6d: e5:b7:0e:53:a9:3f:1b:55:e8:37:a2:06:0b:43:80:d3:0f:6e: eb:05:2c:c2:54:49:97:6f:be:47:4c:f5:2d:bc:e2:e0:0f:31: fb:97:d7:59:e3:00:78:27:c9:02:e2:75:de:01:26:3a:43:14: a9:eb:e7:7d:65:3b:1c:ec:ba:79:df:36:82:00:9f:d4:28:d1: d2:35:89:69:5c:79:e2:d4:bc:1c:39:4d:ce:19:85:cd:2c:a4: 9f:bd:27:b6:91:41:e3:9e:a5:15:50:5c:63:51:7e:8f:53:15: 8b:49:8c:c1:4c:34:6e:58:54:62:5f:ee:0b:ea:9b:23:32:b3: 24:14:c2:58:9f:32:14:f9:cd:1d:03:ef:45:93:43:ed:0d:c2: f8:71:11:26:dd:78:34:2a:38:b2:84:26:51:f1:53:78:fc:17: 36:eb:9c:b6:01:26:cf:31:e8:b3:7c:e4:f9:72:1b:0a:05:17: 81:24:bf:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULRtY+8O1NsomGwGQw+nDAJYehcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYzMzVGMDQ4NjNDQTExNTlEMTZEMThFNjU1MjMxNzY0 RjZGQjgyMTAeFw0yNTExMDUwMTEyMDlaFw0yNTExMDYwMjUxMDlaMDMxMTAvBgNV BAMTKEQ0MTY4QkU5RDNCQjM4Qjc0Mjc3NTMwMkZBN0FCMDA4NzFFN0FDNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTnLOaEGxsWq4k6OaBhPC6pirM xwSDW5Ie4XA2jE0N8lcL2BqNqmtAbqm+dHNQir5oNrmWR6IisCtLk0045anppaEf CSvLKkI6WiJDvUeLhfc/e9L8tY7tydOEufT91OvfWIbziTsFPpPBaWtZx5iAOLvy Y2CdBEOmboWEK3TasV5Rh/NTMtR3R3EFCtuB9HtE54lqyX5C3c4aRBqTS19FQVf/ s8NbksqFfnyf4sHv9r4Lg9F+VzlCT2XjlNJv/cP1x9nlRfovBWtt+d3YtS0mz95d LtsZYW9Bp0LNlwRkoCjQkepB4buwemWZBCxGDw28WeokRttKFsZz23kgEn23AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1BaL6dO7OLdCd1MC+nqwCHHnrGkwHwYDVR0j BBgwFoAUZjNfBIY8oRWdFtGOZVIxdk9vuCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVhRdkdOMlhabVd0b0d4a24zc1JzblhYQ1M2U3haSEZRcngzaEdhNjlF QWQvMS82NjMzNUYwNDg2M0NBMTE1OUQxNkQxOEU2NTUyMzE3NjRGNkZCODIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2MzM1RjA0ODYzQ0ExMTU5 RDE2RDE4RTY1NTIzMTc2NEY2RkI4MjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVhRdkdOMlhabVd0b0d4a24zc1JzblhYQ1M2U3haSEZRcngzaEdhNjlFQWQvMS82 NjMzNUYwNDg2M0NBMTE1OUQxNkQxOEU2NTUyMzE3NjRGNkZCODIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtx8N4F0LVm3weNwPsTchUpe4nX5PY7KjArQDKGuoP7jGKk/zEMx9QZbCaJJf ufjdu1ll4Q1/1wuNkANeZQG7H12R+LEhCFdt5bcOU6k/G1XoN6IGC0OA0w9u6wUs wlRJl2++R0z1Lbzi4A8x+5fXWeMAeCfJAuJ13gEmOkMUqevnfWU7HOy6ed82ggCf 1CjR0jWJaVx54tS8HDlNzhmFzSykn70ntpFB456lFVBcY1F+j1MVi0mMwUw0blhU Yl/uC+qbIzKzJBTCWJ8yFPnNHQPvRZND7Q3C+HERJt14NCo4soQmUfFTePwXNuuc tgEmzzHos3zk+XIbCgUXgSS/Ug== -----END CERTIFICATE-----Generated at Wed Nov 5 13:07:18 2025 by rpki-client