$ rpki-client -vvf rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft File: 71238E97CC73F492E8BD23DB6B3EA12536850E88.mft (raw, json) Hash identifier: 1RiS73mSf4V9RpdZhshexBGylHxvoPwJd35afCurYb0= Subject key identifier: 41:7D:F7:2C:95:D9:38:E2:AC:16:71:14:51:39:8B:F4:D6:12:03:99 Authority key identifier: 71:23:8E:97:CC:73:F4:92:E8:BD:23:DB:6B:3E:A1:25:36:85:0E:88 Certificate issuer: /CN=71238E97CC73F492E8BD23DB6B3EA12536850E88 Certificate serial: 34AF5C78A65782321FD58D59DB5653F7E32ABB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer Subject info access: rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft Manifest number: 01E5 Signing time: Wed 05 Nov 2025 00:50:44 +0000 Manifest this update: Wed 05 Nov 2025 00:45:44 +0000 Manifest next update: Thu 06 Nov 2025 01:43:44 +0000 Files and hashes: 1: 71238E97CC73F492E8BD23DB6B3EA12536850E88.crl (hash: grWWscMCnpdflqlkjESwZj3SK4EsZFX/VV8pi6liu54=) 2: 34352e3232392e3134342e302f32322d3234203d3e20323637313535.roa (hash: ST5sKKJMcOBgKpX2M249j1DXH+kY2hJv5oEFgqx1pOo=) 3: 323830343a343866343a3a2f33322d3634203d3e20323637313535.roa (hash: yXnnsOV19PP7dYa4WTWInOHdG2GRhu4PLnG5X9h7/aA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.crl rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:af:5c:78:a6:57:82:32:1f:d5:8d:59:db:56:53:f7:e3:2a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71238E97CC73F492E8BD23DB6B3EA12536850E88 Validity Not Before: Nov 5 00:45:44 2025 GMT Not After : Nov 6 01:43:44 2025 GMT Subject: CN=417DF72C95D938E2AC16711451398BF4D6120399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:14:56:fa:c5:e5:ad:ed:dc:ad:ce:66:8c:66: 2b:8a:c3:b0:2d:a9:89:69:31:78:92:8a:b3:a3:79: bf:24:c2:37:73:27:07:ec:68:e7:0e:91:7d:55:5c: be:2e:13:ee:78:fb:05:a4:eb:37:76:3c:0f:ac:bb: 38:96:fe:b6:9e:7b:6f:51:23:4d:18:0c:ca:1f:c9: 89:11:91:9c:b7:32:5d:38:05:21:d2:94:6d:fc:4b: 08:17:67:84:89:8d:11:ce:7e:32:e2:cd:f7:ae:5c: ed:30:f8:4b:15:06:bf:2b:e8:20:1a:ef:2d:1d:2b: 28:68:55:af:81:36:b9:2c:1f:2c:37:af:fb:6d:6f: e8:01:ee:d8:bd:28:95:43:a7:77:f8:e7:c6:99:ac: 90:4a:76:fc:0c:b7:44:96:2b:c1:69:b4:0a:39:e8: f7:32:6e:c6:3c:b6:a0:64:95:93:77:99:86:32:ea: 2a:7b:84:34:64:92:03:4e:06:68:1e:f1:35:4b:aa: 3b:b1:cc:86:29:35:f3:57:8e:ad:de:08:e5:d2:f1: 93:96:a3:18:80:7b:2f:46:6d:0b:42:27:be:87:e5: 75:e6:95:d8:a5:02:6f:be:d3:d6:56:7e:66:7a:52: 65:16:9c:cd:7a:2e:c0:73:2d:ec:76:d3:c7:0e:79: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7D:F7:2C:95:D9:38:E2:AC:16:71:14:51:39:8B:F4:D6:12:03:99 X509v3 Authority Key Identifier: keyid:71:23:8E:97:CC:73:F4:92:E8:BD:23:DB:6B:3E:A1:25:36:85:0E:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:32:0e:5c:1c:9b:3f:5f:cc:47:21:19:c1:8e:69:07:21:8c: fb:3f:45:d0:7c:14:8f:a4:6a:3e:31:45:d0:23:67:0b:d0:23: cb:bd:0a:bc:6e:43:63:24:0e:e2:3f:34:d4:33:12:33:0f:cd: ed:f0:32:38:3f:95:c0:b7:d8:75:0c:91:c2:dc:c3:bb:81:25: 10:43:97:e8:7a:84:fa:f2:80:fa:42:c2:e8:a7:0c:1d:70:65: 5b:78:2b:65:9a:79:77:58:19:b8:0a:2c:65:5b:f8:59:36:5b: 80:b4:1e:53:e9:c6:a5:71:29:8c:f8:c9:45:3d:c1:a3:5d:43: bd:68:c1:9f:3e:8c:32:5c:20:8e:18:95:3d:37:bc:b8:ba:00: 64:7b:fc:98:b0:c3:de:9d:98:c9:ef:1f:05:58:7b:9b:98:be: 72:7f:b2:19:23:c8:02:47:26:a1:be:39:05:61:92:6f:c2:86: 3e:47:cb:5b:72:36:ac:08:59:af:00:1b:6c:fc:18:12:5a:ea: e3:5d:79:65:f2:a8:bc:ad:5b:60:80:e8:e2:86:d1:13:63:4a: ed:5d:0d:e8:f0:fe:a2:c1:a4:af:bf:c6:34:0e:83:88:41:24: ee:84:37:13:91:79:63:92:f8:dc:c2:0f:15:7b:74:83:f1:69: c2:a3:ee:61 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgITNK9ceKZXgjIf1Y1Z21ZT9+MquzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg3MTIzOEU5N0NDNzNGNDkyRThCRDIzREI2QjNFQTEyNTM2 ODUwRTg4MB4XDTI1MTEwNTAwNDU0NFoXDTI1MTEwNjAxNDM0NFowMzExMC8GA1UE AxMoNDE3REY3MkM5NUQ5MzhFMkFDMTY3MTE0NTEzOThCRjRENjEyMDM5OTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALgUVvrF5a3t3K3OZoxmK4rDsC2p iWkxeJKKs6N5vyTCN3MnB+xo5w6RfVVcvi4T7nj7BaTrN3Y8D6y7OJb+tp57b1Ej TRgMyh/JiRGRnLcyXTgFIdKUbfxLCBdnhImNEc5+MuLN965c7TD4SxUGvyvoIBrv LR0rKGhVr4E2uSwfLDev+21v6AHu2L0olUOnd/jnxpmskEp2/Ay3RJYrwWm0Cjno 9zJuxjy2oGSVk3eZhjLqKnuENGSSA04GaB7xNUuqO7HMhik181eOrd4I5dLxk5aj GIB7L0ZtC0InvofldeaV2KUCb77T1lZ+ZnpSZRaczXouwHMt7HbTxw555PcCAwEA AaOCAlkwggJVMB0GA1UdDgQWBBRBffcsldk44qwWcRRROYv01hIDmTAfBgNVHSME GDAWgBRxI46XzHP0kui9I9trPqElNoUOiDAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby83QU45Vk1mM2oyaUxoc2pkRmJuTnM1aHc1TjFBcjlXQ01LMXFBOW5jdVlY ci8wLzcxMjM4RTk3Q0M3M0Y0OTJFOEJEMjNEQjZCM0VBMTI1MzY4NTBFODguY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNzEyMzhFOTdDQzczRjQ5MkU4 QkQyM0RCNkIzRUExMjUzNjg1MEU4OC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83 QU45Vk1mM2oyaUxoc2pkRmJuTnM1aHc1TjFBcjlXQ01LMXFBOW5jdVlYci8wLzcx MjM4RTk3Q0M3M0Y0OTJFOEJEMjNEQjZCM0VBMTI1MzY4NTBFODgubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCVMg5cHJs/X8xHIRnBjmkHIYz7P0XQfBSPpGo+MUXQI2cL0CPLvQq8bkNjJA7i PzTUMxIzD83t8DI4P5XAt9h1DJHC3MO7gSUQQ5foeoT68oD6QsLopwwdcGVbeCtl mnl3WBm4CixlW/hZNluAtB5T6calcSmM+MlFPcGjXUO9aMGfPowyXCCOGJU9N7y4 ugBke/yYsMPenZjJ7x8FWHubmL5yf7IZI8gCRyahvjkFYZJvwoY+R8tbcjasCFmv ABts/BgSWurjXXll8qi8rVtggOjihtETY0rtXQ3o8P6iwaSvv8Y0DoOIQSTuhDcT kXljkvjcwg8Ve3SD8WnCo+5h -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:49 2025 by rpki-client