$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft File: 85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft (raw, json) Hash identifier: 5GeGULOzEPKL8K5MhH2szzj4MEvZ3Q2bxvhOb5iJszY= Subject key identifier: 9C:D1:D1:1E:EA:05:8B:5B:7F:10:E3:26:F5:AE:F4:37:96:43:11:97 Authority key identifier: 85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95 Certificate issuer: /CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995 Certificate serial: 6F4E4B76745AECEDE8223085CFE1C3B930A70675 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer Subject info access: rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft Manifest number: 02F9 Signing time: Tue 04 Nov 2025 23:00:43 +0000 Manifest this update: Tue 04 Nov 2025 22:55:43 +0000 Manifest next update: Thu 06 Nov 2025 00:08:43 +0000 Files and hashes: 1: 85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl (hash: n2dMjjSUoS1wDH6D3vKDIgZLimAGdQ9zNlW0HgmfZFs=) 2: 323830343a6366303a3a2f33322d3438203d3e203532353736.roa (hash: wiHI9SrflkamLTOfmYBEaJJSlinTuLYPlmXxJbPhtpo=) 3: 3137372e38362e3230302e302f32312d3234203d3e203532353736.roa (hash: TI8fvU+DA9BGVyDJ2qm1cJltZ0I1E38L4u9tbujdTOY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:4e:4b:76:74:5a:ec:ed:e8:22:30:85:cf:e1:c3:b9:30:a7:06:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995 Validity Not Before: Nov 4 22:55:43 2025 GMT Not After : Nov 6 00:08:43 2025 GMT Subject: CN=9CD1D11EEA058B5B7F10E326F5AEF43796431197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:54:14:87:91:58:ce:d5:7a:b6:d2:a3:9c:8d: ba:d6:20:e6:45:53:cd:62:a9:82:d6:25:9d:c3:14: 33:f3:3c:cd:25:35:a3:5c:27:d4:24:e2:06:53:6d: 27:1b:a5:94:8a:5c:36:2e:10:b8:67:a1:b0:85:32: 38:85:f2:e3:e5:e5:72:b7:05:3c:cb:ef:26:d0:0b: 5b:34:cf:94:39:76:6b:a0:95:1a:19:f4:f2:91:91: 87:86:a3:cd:fb:71:c2:57:07:1e:11:de:8a:29:8c: 0d:05:88:00:4d:bc:42:39:3d:ab:fc:28:08:d4:ca: e8:be:d7:cf:27:58:57:7f:29:1d:52:84:75:c7:1b: df:13:ca:dd:78:a6:42:21:21:8a:5d:0e:af:de:11: b5:fc:1f:00:cb:09:21:0f:0b:54:b6:fe:b7:4b:12: b2:56:eb:da:d1:0d:56:7f:f2:9a:58:84:df:a2:81: 9d:91:7b:7d:8a:af:fd:87:1b:83:8c:3f:a4:a3:62: cd:67:c8:e1:a8:64:b8:19:37:85:67:68:ca:a7:58: 0d:4c:05:70:b7:28:7f:65:68:49:d3:b8:61:91:ee: 04:9b:b7:ab:b4:31:bd:b8:77:a0:93:dd:6d:4d:c0: 45:e6:8e:41:23:eb:ce:d3:17:7c:8f:eb:c5:2d:ac: 2d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D1:D1:1E:EA:05:8B:5B:7F:10:E3:26:F5:AE:F4:37:96:43:11:97 X509v3 Authority Key Identifier: keyid:85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:af:62:c4:59:3b:8e:4d:ef:31:13:b4:d0:b9:00:4b:8b:9f: b2:d8:bc:c3:6f:2d:7c:97:1e:9a:09:2e:d1:26:60:4c:56:b8: 1b:8b:43:30:d8:bc:bb:45:43:88:7d:f4:33:44:c5:c2:58:86: a4:01:fd:1f:c8:17:bc:65:18:5d:d0:be:7e:0b:33:ac:9c:1d: f6:58:94:25:0c:da:fc:1a:ec:34:29:f1:ec:69:18:5d:b0:40: 25:4a:c9:4e:f8:dc:21:29:b8:93:45:62:62:7d:0e:c7:0d:35: 96:0d:f7:28:89:45:39:65:71:ec:a8:bd:55:f1:ee:c5:f2:cc: f8:59:f6:44:6c:07:81:d7:4e:83:05:e4:cf:28:dd:22:bb:ed: d7:92:7d:18:1d:36:e6:55:18:12:ac:13:18:a2:d0:c3:65:88: 6d:af:7b:c1:41:1c:a3:54:7f:e0:f4:6c:5a:9e:b1:82:5a:f4: 29:2e:ab:36:55:86:74:f9:87:a0:78:dc:58:37:b9:0d:f5:ea: 3d:ca:0b:26:f7:b8:7f:df:5e:a3:3e:87:f4:68:53:0e:7e:47: 8c:05:ab:41:2d:a6:f7:79:34:b9:0a:1b:41:19:7c:84:fb:7f: 67:da:b9:9a:14:86:55:b1:36:22:55:38:ae:ac:56:ef:9a:97: 3b:c4:3b:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUb05LdnRa7O3oIjCFz+HDuTCnBnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVBQzdGRjA3MjI0MDkxMTZDMUUzQzQwRkU0N0VBQTYw M0RERDk5NTAeFw0yNTExMDQyMjU1NDNaFw0yNTExMDYwMDA4NDNaMDMxMTAvBgNV BAMTKDlDRDFEMTFFRUEwNThCNUI3RjEwRTMyNkY1QUVGNDM3OTY0MzExOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVBSHkVjO1Xq20qOcjbrWIOZF U81iqYLWJZ3DFDPzPM0lNaNcJ9Qk4gZTbScbpZSKXDYuELhnobCFMjiF8uPl5XK3 BTzL7ybQC1s0z5Q5dmuglRoZ9PKRkYeGo837ccJXBx4R3oopjA0FiABNvEI5Pav8 KAjUyui+188nWFd/KR1ShHXHG98Tyt14pkIhIYpdDq/eEbX8HwDLCSEPC1S2/rdL ErJW69rRDVZ/8ppYhN+igZ2Re32Kr/2HG4OMP6SjYs1nyOGoZLgZN4VnaMqnWA1M BXC3KH9laEnTuGGR7gSbt6u0Mb24d6CT3W1NwEXmjkEj687TF3yP68UtrC0JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnNHRHuoFi1t/EOMm9a70N5ZDEZcwHwYDVR0j BBgwFoAUhax/8HIkCRFsHjxA/kfqpgPd2ZUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdK WFIvMS84NUFDN0ZGMDcyMjQwOTExNkMxRTNDNDBGRTQ3RUFBNjAzREREOTk1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1QUM3RkYwNzIyNDA5MTE2 QzFFM0M0MEZFNDdFQUE2MDNEREQ5OTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdKWFIvMS84 NUFDN0ZGMDcyMjQwOTExNkMxRTNDNDBGRTQ3RUFBNjAzREREOTk1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs69ixFk7jk3vMRO00LkAS4ufsti8w28tfJcemgku0SZgTFa4G4tDMNi8u0VD iH30M0TFwliGpAH9H8gXvGUYXdC+fgszrJwd9liUJQza/BrsNCnx7GkYXbBAJUrJ TvjcISm4k0ViYn0Oxw01lg33KIlFOWVx7Ki9VfHuxfLM+Fn2RGwHgddOgwXkzyjd Irvt15J9GB025lUYEqwTGKLQw2WIba97wUEco1R/4PRsWp6xglr0KS6rNlWGdPmH oHjcWDe5DfXqPcoLJve4f99eoz6H9GhTDn5HjAWrQS2m93k0uQobQRl8hPt/Z9q5 mhSGVbE2IlU4rqxW75qXO8Q7pQ== -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:54 2025 by rpki-client