$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft File: 2942F22000F3A7315703CF3B13100D76386FCAD1.mft (raw, json) Hash identifier: R6YU177XxztjKOW8PfCef0bGPuBhpkmC6YeGbsXzxUo= Subject key identifier: 0D:41:D3:5A:41:DE:A3:86:66:70:80:4E:C5:77:19:39:E4:22:2F:61 Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1 Certificate issuer: /CN=2942F22000F3A7315703CF3B13100D76386FCAD1 Certificate serial: 3625B8416E6B22717E7F2A6B507653F3CC33B284 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer Subject info access: rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft Manifest number: 022E Signing time: Wed 05 Nov 2025 13:06:50 +0000 Manifest this update: Wed 05 Nov 2025 13:01:50 +0000 Manifest next update: Thu 06 Nov 2025 13:55:50 +0000 Files and hashes: 1: 2942F22000F3A7315703CF3B13100D76386FCAD1.crl (hash: /x3XXhv2lhb4D5iPLnjPjPh8lL2NRmK60QAT+L6c3Ew=) 2: 3139312e352e3232302e302f32322d3332203d3e203533323138.roa (hash: U9aEVaVfbCN4TWb4JyTorgv2xoRrXRGxv1uQWYpU+sM=) 3: 3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (hash: 3DMepOCJsB4RYYr4kz8XiRydllbiQu6BC/Dt9YVTrTI=) 4: 3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa (hash: d3yAWyibARFUG+HZzby8Z4svUHtKG4r21e/DyYGWSoU=) 5: 3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (hash: 5arLMvCsc280JhuRn9DGKcC5Do+QytmTiZqgSS31aVo=) 6: 323830343a6666343a3a2f33322d313238203d3e203533323138.roa (hash: iBr1MiWYW/lwYBnPl9PjYIN0TqmORmziogOjdaousGo=) 7: 3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (hash: +Akn/L1H09I4e3niGgqeQYFi/oJuhqEqLbE1F+LA0zI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 13:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:25:b8:41:6e:6b:22:71:7e:7f:2a:6b:50:76:53:f3:cc:33:b2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1 Validity Not Before: Nov 5 13:01:50 2025 GMT Not After : Nov 6 13:55:50 2025 GMT Subject: CN=0D41D35A41DEA3866670804EC5771939E4222F61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e2:24:8d:58:ec:e5:f6:8f:f4:da:7e:94:0a: 12:0c:95:7f:0d:b6:9e:70:f7:4b:85:96:19:be:d7: 70:e7:96:5d:02:1a:58:5b:c7:9f:cb:7f:33:ae:5e: 63:a8:c9:4d:3b:b5:5d:65:c3:7c:f8:61:3a:ce:3b: f3:38:d8:ab:52:fc:d4:44:37:a8:45:67:59:46:c5: 14:e2:1f:da:8c:0a:6d:53:58:b4:59:b1:a9:4b:e5: f5:6d:3b:6a:0f:e1:eb:26:ca:d6:4e:ff:75:09:b1: 1c:a4:35:b0:d4:3d:65:20:32:4f:23:e4:4c:97:71: df:8e:58:0a:f9:f7:4f:cb:b2:92:b4:e1:6b:da:0a: b6:f0:7e:f6:81:62:b9:71:9a:8f:d6:09:7b:35:ee: e8:f6:33:6a:a6:9d:07:3e:67:90:6d:b6:8d:33:1e: 78:3a:fa:ca:be:54:64:a3:87:e5:c1:e9:83:c1:33: fa:e6:9d:a8:fa:a2:0a:01:b0:ce:c3:c3:93:fb:fe: 14:19:1a:b2:af:20:80:4d:86:f1:f1:fb:92:50:26: 95:d0:b9:33:e0:92:64:64:a9:1e:fd:14:06:a6:a1: 2b:4a:82:8e:e8:9f:3d:ce:c6:e0:87:34:02:7f:e4: b9:5e:f7:e7:76:ad:af:f2:19:26:56:44:de:9e:65: c7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:41:D3:5A:41:DE:A3:86:66:70:80:4E:C5:77:19:39:E4:22:2F:61 X509v3 Authority Key Identifier: keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ad:93:dd:06:55:39:f5:9a:59:8a:38:73:ce:1b:6c:e4:50: 2a:9f:4c:b5:81:7d:88:00:88:bf:d0:9f:c7:47:18:1c:0a:dd: 75:27:29:c3:87:c9:1c:57:52:c6:fe:a0:a5:2d:94:3a:88:0d: ec:2e:0c:d3:f5:41:a3:d8:7b:71:3b:ac:7f:ac:31:a5:af:91: 40:e2:74:89:65:9c:f9:5e:0d:14:53:b9:70:95:69:a2:b8:97: d6:f9:bf:55:e5:9c:a9:cb:ca:4a:c5:fa:4f:c7:e4:43:c9:a7: 21:e9:40:49:0a:78:88:22:e2:f5:74:38:5a:9f:5f:29:07:ff: 5e:5b:fb:1b:44:97:c1:5a:0e:59:dd:76:8e:39:77:43:52:25: 98:1d:f8:77:ab:a7:4c:ab:b0:61:60:6e:25:f8:9e:84:a5:8e: e2:e7:a8:1c:82:2f:f0:2c:e2:66:8a:42:5a:6c:11:30:4f:18: d4:bf:59:8b:4a:56:79:6b:62:4b:d3:a7:63:c8:17:ce:83:c1: b6:cc:52:85:99:a4:4e:69:3c:e6:bf:4a:3e:32:d1:26:e5:52: ce:8e:07:c0:96:d2:19:93:e0:3d:a5:8b:89:27:ce:04:e6:3f: 84:4f:bb:a3:d1:31:6a:e1:2f:96:e3:7f:0c:f6:0a:9f:3d:d3: bf:a9:af:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNiW4QW5rInF+fyprUHZT88wzsoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0MkYyMjAwMEYzQTczMTU3MDNDRjNCMTMxMDBENzYz ODZGQ0FEMTAeFw0yNTExMDUxMzAxNTBaFw0yNTExMDYxMzU1NTBaMDMxMTAvBgNV BAMTKDBENDFEMzVBNDFERUEzODY2NjcwODA0RUM1NzcxOTM5RTQyMjJGNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4iSNWOzl9o/02n6UChIMlX8N tp5w90uFlhm+13Dnll0CGlhbx5/LfzOuXmOoyU07tV1lw3z4YTrOO/M42KtS/NRE N6hFZ1lGxRTiH9qMCm1TWLRZsalL5fVtO2oP4esmytZO/3UJsRykNbDUPWUgMk8j 5EyXcd+OWAr590/LspK04WvaCrbwfvaBYrlxmo/WCXs17uj2M2qmnQc+Z5Btto0z Hng6+sq+VGSjh+XB6YPBM/rmnaj6ogoBsM7Dw5P7/hQZGrKvIIBNhvHx+5JQJpXQ uTPgkmRkqR79FAamoStKgo7onz3OxuCHNAJ/5Lle9+d2ra/yGSZWRN6eZcdDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDUHTWkHeo4ZmcIBOxXcZOeQiL2EwHwYDVR0j BBgwFoAUKULyIADzpzFXA887ExANdjhvytEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVk5aFliZ2tvOEFYRkFibzZUUjIzWHRVdUFDUXdHODZVNGdkU0pZM3hV Z3gvMC8yOTQyRjIyMDAwRjNBNzMxNTcwM0NGM0IxMzEwMEQ3NjM4NkZDQUQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NDJGMjIwMDBGM0E3MzE1 NzAzQ0YzQjEzMTAwRDc2Mzg2RkNBRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVk5aFliZ2tvOEFYRkFibzZUUjIzWHRVdUFDUXdHODZVNGdkU0pZM3hVZ3gvMC8y OTQyRjIyMDAwRjNBNzMxNTcwM0NGM0IxMzEwMEQ3NjM4NkZDQUQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADq2T3QZVOfWaWYo4c84bbORQKp9MtYF9iACIv9Cfx0cYHArddScpw4fJHFdS xv6gpS2UOogN7C4M0/VBo9h7cTusf6wxpa+RQOJ0iWWc+V4NFFO5cJVporiX1vm/ VeWcqcvKSsX6T8fkQ8mnIelASQp4iCLi9XQ4Wp9fKQf/Xlv7G0SXwVoOWd12jjl3 Q1IlmB34d6unTKuwYWBuJfiehKWO4ueoHIIv8CziZopCWmwRME8Y1L9Zi0pWeWti S9OnY8gXzoPBtsxShZmkTmk85r9KPjLRJuVSzo4HwJbSGZPgPaWLiSfOBOY/hE+7 o9ExauEvluN/DPYKnz3Tv6mv2g== -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:39 2025 by rpki-client