$ rpki-client -vvf rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft File: 8013DE498C2B907A3EF2E48332493039E7A2F953.mft (raw, json) Hash identifier: SbeoDWPpzOKZSKEKsyW6pFRd2uztWmdnE3YYcSqTUY4= Subject key identifier: 96:F8:22:1A:9A:BE:EE:52:39:BA:08:6C:7A:35:05:1B:8F:84:CE:DC Authority key identifier: 80:13:DE:49:8C:2B:90:7A:3E:F2:E4:83:32:49:30:39:E7:A2:F9:53 Certificate issuer: /CN=8013DE498C2B907A3EF2E48332493039E7A2F953 Certificate serial: 2983D58929713BA2B12C434F74943136EEFD1EDE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer Subject info access: rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft Manifest number: 0201 Signing time: Tue 04 Nov 2025 19:51:34 +0000 Manifest this update: Tue 04 Nov 2025 19:46:34 +0000 Manifest next update: Wed 05 Nov 2025 21:00:34 +0000 Files and hashes: 1: 323830343a343531303a3a2f33322d3332203d3e20323637363730.roa (hash: h88mpkh7qxBNgN9HD7X4gl7QQ9E2VicVIuavbpmWbrg=) 2: 8013DE498C2B907A3EF2E48332493039E7A2F953.crl (hash: q/Ey9K3+83aYy+p78sPyqltY2rpS57R2UuAS7bbbTKg=) 3: 34352e3232342e3138372e302f32342d3234203d3e20323637363730.roa (hash: l9yWCd/pjyuJABxFiVXdl4lyno3VoXEL7hL/eJbCOVQ=) 4: 34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa (hash: EtPGuSZH3vRBmX/qwPL6+UH0DlEpBn2eWiAs0yBsA2A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.crl rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 21:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:83:d5:89:29:71:3b:a2:b1:2c:43:4f:74:94:31:36:ee:fd:1e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8013DE498C2B907A3EF2E48332493039E7A2F953 Validity Not Before: Nov 4 19:46:34 2025 GMT Not After : Nov 5 21:00:34 2025 GMT Subject: CN=96F8221A9ABEEE5239BA086C7A35051B8F84CEDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7b:97:06:4b:4a:12:6d:6b:e6:c2:66:50:fa: 9a:43:d9:1b:90:55:7e:71:bb:30:99:71:8b:65:e1: bd:8f:a9:ee:39:de:d7:95:5a:38:d1:bc:50:bb:f2: 9a:61:f9:f7:ec:eb:f2:52:bf:06:f0:22:f8:2e:62: 9f:81:f3:14:f5:97:06:34:13:41:60:17:16:d6:b5: 6b:32:7e:2e:07:22:69:6e:23:ce:ef:f5:a5:ed:3e: 55:8b:fc:80:dd:cc:25:5a:ea:69:e7:a4:4a:f6:77: 0d:e4:5f:3e:e3:c8:48:7a:a3:40:60:9d:e4:c7:f5: ea:67:69:41:1c:35:b8:e9:a1:9a:77:a2:59:f8:0f: a3:ec:5b:ed:a3:96:f0:0e:f0:d4:1d:19:77:f7:7e: 52:c5:e7:10:a5:c2:85:f6:42:44:e0:a7:be:b2:ba: aa:9a:db:d5:d7:a5:c4:a7:99:8f:13:77:89:36:e4: 9b:ea:c2:2d:28:e4:6b:65:62:8f:b3:20:40:4a:65: 66:49:d4:e2:c0:b8:55:01:d9:33:50:11:d0:a3:3d: 18:5d:c4:8f:9b:d5:a8:11:b8:00:f8:03:49:13:1e: db:26:f4:56:a3:83:b2:80:5c:78:ba:3a:bd:e2:02: 23:1a:8b:86:4c:64:3c:fc:a1:11:bf:30:30:2b:cf: 0f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F8:22:1A:9A:BE:EE:52:39:BA:08:6C:7A:35:05:1B:8F:84:CE:DC X509v3 Authority Key Identifier: keyid:80:13:DE:49:8C:2B:90:7A:3E:F2:E4:83:32:49:30:39:E7:A2:F9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:2d:88:93:99:2d:b3:07:91:ba:a7:e6:67:a3:3b:8d:6b:13: 9a:5b:32:f2:ec:9b:61:1e:36:74:f1:53:2d:9e:45:7b:bc:82: ed:b3:bb:5b:74:de:a7:6a:bc:57:76:84:a7:c5:ff:35:15:0e: 81:2b:1a:47:71:d4:f2:6b:e2:5e:e3:70:ca:e7:ad:fa:b6:3a: e2:1c:7a:0b:28:e5:60:1c:90:ab:56:ca:d8:e2:22:f2:c3:d3: 6f:6d:a8:db:21:01:49:8f:88:66:57:5c:79:14:b7:30:15:08: f6:e2:9e:23:3c:d9:29:d9:45:9e:15:4a:b5:fc:a2:ee:19:b8: e5:f6:99:6a:2c:13:70:1d:0a:a2:0c:6a:e5:fe:25:ba:a5:ff: bb:23:a6:bb:64:32:64:a4:a6:eb:fa:cb:29:5e:02:55:0d:3c: dd:25:0d:b4:d2:61:d0:88:b2:d3:55:f8:4d:ea:12:73:67:62: 36:4a:44:49:2b:44:f5:fc:33:74:3a:de:9e:9f:e0:82:1f:80: 99:81:5f:ba:0d:01:62:eb:c2:6f:cf:a1:33:58:8d:14:33:02: aa:f7:b5:0c:52:91:3d:05:cd:53:d4:2a:26:60:42:b5:c6:9b: 29:32:ef:ae:5b:f1:12:7e:71:c9:1f:9c:3c:32:14:59:74:43: e3:a9:94:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKYPViSlxO6KxLENPdJQxNu79Ht4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAxM0RFNDk4QzJCOTA3QTNFRjJFNDgzMzI0OTMwMzlF N0EyRjk1MzAeFw0yNTExMDQxOTQ2MzRaFw0yNTExMDUyMTAwMzRaMDMxMTAvBgNV BAMTKDk2RjgyMjFBOUFCRUVFNTIzOUJBMDg2QzdBMzUwNTFCOEY4NENFREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWe5cGS0oSbWvmwmZQ+ppD2RuQ VX5xuzCZcYtl4b2Pqe453teVWjjRvFC78pph+ffs6/JSvwbwIvguYp+B8xT1lwY0 E0FgFxbWtWsyfi4HImluI87v9aXtPlWL/IDdzCVa6mnnpEr2dw3kXz7jyEh6o0Bg neTH9epnaUEcNbjpoZp3oln4D6PsW+2jlvAO8NQdGXf3flLF5xClwoX2QkTgp76y uqqa29XXpcSnmY8Td4k25Jvqwi0o5GtlYo+zIEBKZWZJ1OLAuFUB2TNQEdCjPRhd xI+b1agRuAD4A0kTHtsm9Fajg7KAXHi6Or3iAiMai4ZMZDz8oRG/MDArzw/dAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlvgiGpq+7lI5ughsejUFG4+EztwwHwYDVR0j BBgwFoAUgBPeSYwrkHo+8uSDMkkwOeei+VMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWF2dExlQW9odE1BTEVjUXBxakVtZEZnYVZlaTkxRWhNVmhFa3pRRHNu Z2ovMS84MDEzREU0OThDMkI5MDdBM0VGMkU0ODMzMjQ5MzAzOUU3QTJGOTUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMTNERTQ5OEMyQjkwN0Ez RUYyRTQ4MzMyNDkzMDM5RTdBMkY5NTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWF2dExlQW9odE1BTEVjUXBxakVtZEZnYVZlaTkxRWhNVmhFa3pRRHNuZ2ovMS84 MDEzREU0OThDMkI5MDdBM0VGMkU0ODMzMjQ5MzAzOUU3QTJGOTUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkC2Ik5ktsweRuqfmZ6M7jWsTmlsy8uybYR42dPFTLZ5Fe7yC7bO7W3Tep2q8 V3aEp8X/NRUOgSsaR3HU8mviXuNwyuet+rY64hx6CyjlYByQq1bK2OIi8sPTb22o 2yEBSY+IZldceRS3MBUI9uKeIzzZKdlFnhVKtfyi7hm45faZaiwTcB0Kogxq5f4l uqX/uyOmu2QyZKSm6/rLKV4CVQ083SUNtNJh0Iiy01X4TeoSc2diNkpESStE9fwz dDrenp/ggh+AmYFfug0BYuvCb8+hM1iNFDMCqve1DFKRPQXNU9QqJmBCtcabKTLv rlvxEn5xyR+cPDIUWXRD46mU8w== -----END CERTIFICATE-----Generated at Wed Nov 5 04:47:23 2025 by rpki-client