$ rpki-client -vvf rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft File: 52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft (raw, json) Hash identifier: NwWV9MrjYLLLDcP/YZiEWHbYIgv0QuhQTJZLbM6d9kA= Subject key identifier: F1:2D:C7:5B:CC:77:2A:7E:48:92:3A:7F:F5:C9:13:DF:8D:76:18:48 Authority key identifier: 52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E Certificate issuer: /CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E Certificate serial: 57D7F1E46DE96CCF96862DAFFA9C41E6AFE903FC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft Manifest number: CF Signing time: Tue 04 Nov 2025 17:16:41 +0000 Manifest this update: Tue 04 Nov 2025 17:11:41 +0000 Manifest next update: Wed 05 Nov 2025 20:38:41 +0000 Files and hashes: 1: 323830343a386538633a3a2f33322d3332203d3e20323733343333.roa (hash: GKQiZSRTggPaFx/yFhowb4IhNVU02HJ7y8OaPzs+f/0=) 2: 52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl (hash: FCD9U8sYODRU174A5bJljBQ5oamp0ipQeH4iwpP+WNg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d7:f1:e4:6d:e9:6c:cf:96:86:2d:af:fa:9c:41:e6:af:e9:03:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E Validity Not Before: Nov 4 17:11:41 2025 GMT Not After : Nov 5 20:38:41 2025 GMT Subject: CN=F12DC75BCC772A7E48923A7FF5C913DF8D761848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:67:bc:e2:17:0e:3a:aa:1e:85:8d:6d:fd: 79:e9:45:5e:06:26:bd:95:db:ad:1c:c5:53:77:16: 86:c3:73:b9:08:26:bf:9e:e5:a7:6f:a5:48:4e:da: 32:07:bc:13:6c:eb:74:0f:50:91:71:a0:82:07:08: 9d:d0:31:f1:8e:58:64:43:04:6f:5e:ee:41:97:0f: b9:fa:31:4c:a9:5a:34:e0:06:fb:65:c2:99:f9:95: fd:36:55:a5:5f:93:e8:f2:c1:35:43:19:d3:98:48: f1:3c:b4:47:0a:f0:ba:39:a5:c7:73:4b:f7:f7:0f: 35:87:42:66:b5:aa:b6:e5:d1:f7:72:f1:d8:99:d0: 59:4b:a7:e7:3c:7a:54:96:6d:e1:11:94:3d:fd:64: 57:1b:e9:42:48:63:2e:dc:66:00:05:4f:df:4f:0a: 13:d9:52:ba:31:bf:91:83:c2:d7:b8:83:5a:d2:a0: e9:15:52:75:22:11:3c:13:8f:55:84:4c:26:79:42: 4b:2f:26:25:b1:e1:91:46:3c:6c:44:82:48:f5:6b: 63:df:34:c1:f3:4a:67:09:89:d9:ae:af:4e:90:62: e7:fe:77:ac:47:f1:82:37:48:65:b1:00:90:05:51: 66:b6:d7:6e:34:af:72:f3:ce:86:65:82:a0:ec:78: 6a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2D:C7:5B:CC:77:2A:7E:48:92:3A:7F:F5:C9:13:DF:8D:76:18:48 X509v3 Authority Key Identifier: keyid:52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ae:9d:c9:04:e4:53:ba:0c:57:c8:5a:60:9f:3f:dc:73:ff: c9:f9:d8:92:61:04:ca:49:34:38:24:a6:22:f3:c2:18:11:3d: bd:a2:d3:37:bf:28:a4:99:06:8d:41:6a:60:f5:4e:ce:13:4c: 13:a6:71:9e:1f:b3:ab:41:71:a2:60:95:e1:c0:dc:a7:ed:3e: 17:3d:95:35:0c:3f:3e:82:7b:8f:d9:c6:b9:b1:2e:12:b0:9d: ec:c9:ef:46:09:9c:4a:62:01:48:f2:86:51:c7:72:d3:4e:1b: ea:8a:0c:f9:3b:b6:bf:50:f2:dc:d4:aa:8b:a6:8e:50:73:c7: e2:4c:2b:9e:e2:34:90:a5:5a:9f:3a:3d:82:a7:92:de:6c:2a: a2:1a:b7:c1:fc:63:f4:18:3e:aa:65:b7:84:68:cb:1f:3b:28: 99:48:b6:05:57:62:4f:64:c1:7f:3b:fd:ad:1b:fe:fe:aa:6e: 80:93:bc:a0:0c:8f:c0:86:a5:2d:4e:8e:8b:f5:95:73:3d:0e: c7:d2:35:70:90:ca:e4:2c:33:3f:3c:68:94:68:79:f4:d9:f8: 34:f3:b0:42:46:c4:11:57:a0:c1:f3:79:7a:f0:00:53:80:84: 80:f3:82:40:d4:cf:de:3c:45:9d:1b:a7:fe:ae:38:e3:c7:4e: c9:d2:e2:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUV9fx5G3pbM+Whi2v+pxB5q/pA/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGRDM4QzVEMERGMzY1Q0Q4REUzQkQxREQwRTkyQzFB NkI2OUY3RTAeFw0yNTExMDQxNzExNDFaFw0yNTExMDUyMDM4NDFaMDMxMTAvBgNV BAMTKEYxMkRDNzVCQ0M3NzJBN0U0ODkyM0E3RkY1QzkxM0RGOEQ3NjE4NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjbWe84hcOOqoehY1t/XnpRV4G Jr2V260cxVN3FobDc7kIJr+e5advpUhO2jIHvBNs63QPUJFxoIIHCJ3QMfGOWGRD BG9e7kGXD7n6MUypWjTgBvtlwpn5lf02VaVfk+jywTVDGdOYSPE8tEcK8Lo5pcdz S/f3DzWHQma1qrbl0fdy8diZ0FlLp+c8elSWbeERlD39ZFcb6UJIYy7cZgAFT99P ChPZUroxv5GDwte4g1rSoOkVUnUiETwTj1WETCZ5QksvJiWx4ZFGPGxEgkj1a2Pf NMHzSmcJidmur06QYuf+d6xH8YI3SGWxAJAFUWa21240r3LzzoZlgqDseGqNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8S3HW8x3Kn5Ikjp/9ckT3412GEgwHwYDVR0j BBgwFoAUUv04xdDfNlzY3jvR3Q6Swaa2n34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1lOeGVGVjU2elNOdkthZDR6WnZIeUtiallYd1BLM0NGTFNkWHExVUxn TUovMC81MkZEMzhDNUQwREYzNjVDRDhERTNCRDFERDBFOTJDMUE2QjY5RjdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyRkQzOEM1RDBERjM2NUNE OERFM0JEMUREMEU5MkMxQTZCNjlGN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1lOeGVGVjU2elNOdkthZDR6WnZIeUtiallYd1BLM0NGTFNkWHExVUxnTUovMC81 MkZEMzhDNUQwREYzNjVDRDhERTNCRDFERDBFOTJDMUE2QjY5RjdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJa6dyQTkU7oMV8haYJ8/3HP/yfnYkmEEykk0OCSmIvPCGBE9vaLTN78opJkG jUFqYPVOzhNME6Zxnh+zq0FxomCV4cDcp+0+Fz2VNQw/PoJ7j9nGubEuErCd7Mnv RgmcSmIBSPKGUcdy004b6ooM+Tu2v1Dy3NSqi6aOUHPH4kwrnuI0kKVanzo9gqeS 3mwqohq3wfxj9Bg+qmW3hGjLHzsomUi2BVdiT2TBfzv9rRv+/qpugJO8oAyPwIal LU6Oi/WVcz0Ox9I1cJDK5CwzPzxolGh59Nn4NPOwQkbEEVegwfN5evAAU4CEgPOC QNTP3jxFnRun/q4448dOydLi7A== -----END CERTIFICATE-----Generated at Wed Nov 5 09:22:03 2025 by rpki-client