$ rpki-client -vvf rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.mft File: 5002EE56B40431CA262F59717A16E5A8812286A5.mft (raw, json) Hash identifier: +tVv6e4/PlaJ61CPURkJJSatmd2NXy+9w341Trkf0L8= Subject key identifier: A3:E9:2A:DB:F7:9A:51:1E:9F:AD:14:B3:5F:2B:46:42:34:3B:32:8D Authority key identifier: 50:02:EE:56:B4:04:31:CA:26:2F:59:71:7A:16:E5:A8:81:22:86:A5 Certificate issuer: /CN=5002EE56B40431CA262F59717A16E5A8812286A5 Certificate serial: 6C5E35443B6081A9E3D6EDB41E709457C0422AF5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5002EE56B40431CA262F59717A16E5A8812286A5.cer Subject info access: rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.mft Manifest number: 7C Signing time: Wed 05 Nov 2025 08:08:42 +0000 Manifest this update: Wed 05 Nov 2025 08:03:42 +0000 Manifest next update: Thu 06 Nov 2025 09:51:42 +0000 Files and hashes: 1: 3138392e39302e32382e302f32322d3332203d3e20323632383334.roa (hash: L+tfe9pQxZQd/Y6KVA7n1IB/T5/Jk+cT3in4esS2zwo=) 2: 5002EE56B40431CA262F59717A16E5A8812286A5.crl (hash: UrPPKN9yitxx0mSLdwUjexL+XInGcfoxIohCsmGlWSw=) 3: 3138362e3235312e3139322e302f32312d3332203d3e20323632383334.roa (hash: hnKgVk2wpWgB/8wNQx/o1GayrTWmQ+FySDKckNiQ2YY=) 4: 323830343a3263303a3a2f33322d313238203d3e20323632383334.roa (hash: fKQIDHkLGSf57vkAV8EJp/qAuCCDKYsk2hRo+3WO9PQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.crl rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5002EE56B40431CA262F59717A16E5A8812286A5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:5e:35:44:3b:60:81:a9:e3:d6:ed:b4:1e:70:94:57:c0:42:2a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5002EE56B40431CA262F59717A16E5A8812286A5 Validity Not Before: Nov 5 08:03:42 2025 GMT Not After : Nov 6 09:51:42 2025 GMT Subject: CN=A3E92ADBF79A511E9FAD14B35F2B4642343B328D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fc:94:53:95:39:39:bd:4b:f2:bf:f2:0f:ac: 2a:36:09:2d:f4:83:54:67:63:1c:6a:41:05:22:55: b1:99:60:f7:52:bb:65:aa:fe:fc:d6:86:8c:67:d9: c9:eb:9e:e4:72:92:b0:86:92:79:59:4f:09:9b:e3: 72:2b:df:62:db:13:da:68:83:ab:86:4a:f3:e3:c1: 49:18:c9:c4:64:0f:b4:f5:3d:33:05:59:3f:b6:08: fd:97:90:13:84:bb:d8:fc:18:e2:4e:19:21:9c:78: 09:91:60:51:2f:b2:e1:74:fa:29:a5:b7:f6:98:7c: 56:00:82:8f:79:13:e3:89:2e:2e:81:71:4a:ec:e2: ee:e0:21:98:7c:8c:ef:ca:d1:f5:8f:8a:b1:11:1d: 13:c6:d6:0e:25:c1:63:99:b3:65:2c:3f:d6:a3:00: de:9d:8a:10:4c:17:ad:9d:eb:41:b6:72:d1:30:e6: 5c:43:0f:23:7e:0e:91:d8:5b:a0:15:a7:67:a6:67: 5c:04:01:dd:3b:7f:12:19:7c:29:e8:b9:a7:00:98: 9e:f1:90:86:fb:35:fe:9b:f7:a0:7f:05:49:10:31: 10:74:64:63:f1:e7:5a:f8:24:08:b9:88:58:59:13: 6a:49:da:d8:37:1c:40:7b:6a:a3:05:07:f0:9e:4e: cd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E9:2A:DB:F7:9A:51:1E:9F:AD:14:B3:5F:2B:46:42:34:3B:32:8D X509v3 Authority Key Identifier: keyid:50:02:EE:56:B4:04:31:CA:26:2F:59:71:7A:16:E5:A8:81:22:86:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5002EE56B40431CA262F59717A16E5A8812286A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ca:d5:66:5c:39:a9:74:00:24:16:55:eb:34:87:99:73:46: 24:ad:8f:63:cd:17:d9:88:96:18:69:85:68:20:b7:09:83:b8: cc:bf:e6:27:16:fe:c6:1a:21:44:88:ea:b5:fb:01:db:08:54: e6:04:75:66:7f:ff:0f:de:c6:21:14:c8:df:f6:a7:bd:a0:0d: 60:1b:a9:b2:65:ba:dd:76:c8:53:0a:7e:b3:65:f0:14:90:f9: e4:e3:9d:04:96:4f:9c:45:91:b7:35:19:a8:67:93:8f:3d:3e: bb:5c:3c:2e:3f:12:7d:ac:30:c2:33:87:e2:e7:e3:11:0c:44: 76:c0:f2:ff:ed:f1:58:98:2b:85:ab:f6:5e:9f:98:61:15:2e: 1e:60:6a:d6:79:3f:b3:77:bc:f5:77:79:39:2a:dd:c8:0f:63: b4:7d:3f:a8:df:c2:a9:1d:19:25:9f:b5:da:7f:d4:78:3a:df: 82:df:39:9b:14:dd:cd:66:d9:4c:62:cd:b6:27:4c:8b:1e:95: a2:5c:f2:6e:cc:86:0a:27:e4:53:fc:ec:9d:f1:65:cf:b5:36: 5c:fa:6a:6a:cb:25:e9:6d:f8:c3:1a:1c:82:3f:34:fe:da:f5: 9d:67:33:ff:dc:a9:c7:58:58:d0:70:b9:a6:71:64:94:92:6b: a1:32:8a:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbF41RDtgganj1u20HnCUV8BCKvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTAwMkVFNTZCNDA0MzFDQTI2MkY1OTcxN0ExNkU1QTg4 MTIyODZBNTAeFw0yNTExMDUwODAzNDJaFw0yNTExMDYwOTUxNDJaMDMxMTAvBgNV BAMTKEEzRTkyQURCRjc5QTUxMUU5RkFEMTRCMzVGMkI0NjQyMzQzQjMyOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg/JRTlTk5vUvyv/IPrCo2CS30 g1RnYxxqQQUiVbGZYPdSu2Wq/vzWhoxn2cnrnuRykrCGknlZTwmb43Ir32LbE9po g6uGSvPjwUkYycRkD7T1PTMFWT+2CP2XkBOEu9j8GOJOGSGceAmRYFEvsuF0+iml t/aYfFYAgo95E+OJLi6BcUrs4u7gIZh8jO/K0fWPirERHRPG1g4lwWOZs2UsP9aj AN6dihBMF62d60G2ctEw5lxDDyN+DpHYW6AVp2emZ1wEAd07fxIZfCnouacAmJ7x kIb7Nf6b96B/BUkQMRB0ZGPx51r4JAi5iFhZE2pJ2tg3HEB7aqMFB/CeTs3FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUo+kq2/eaUR6frRSzXytGQjQ7Mo0wHwYDVR0j BBgwFoAUUALuVrQEMcomL1lxehblqIEihqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEFIelpZNTNLUXJkcVdFV244ZFl1MWJvUW5LaDl2ZjlCZVI0bW5iTkU4 TlMvMC81MDAyRUU1NkI0MDQzMUNBMjYyRjU5NzE3QTE2RTVBODgxMjI4NkE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwMDJFRTU2QjQwNDMxQ0Ey NjJGNTk3MTdBMTZFNUE4ODEyMjg2QTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OEFIelpZNTNLUXJkcVdFV244ZFl1MWJvUW5LaDl2ZjlCZVI0bW5iTkU4TlMvMC81 MDAyRUU1NkI0MDQzMUNBMjYyRjU5NzE3QTE2RTVBODgxMjI4NkE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm8rVZlw5qXQAJBZV6zSHmXNGJK2PY80X2YiWGGmFaCC3CYO4zL/mJxb+xhoh RIjqtfsB2whU5gR1Zn//D97GIRTI3/anvaANYBupsmW63XbIUwp+s2XwFJD55OOd BJZPnEWRtzUZqGeTjz0+u1w8Lj8SfawwwjOH4ufjEQxEdsDy/+3xWJgrhav2Xp+Y YRUuHmBq1nk/s3e89Xd5OSrdyA9jtH0/qN/CqR0ZJZ+12n/UeDrfgt85mxTdzWbZ TGLNtidMix6VolzybsyGCifkU/zsnfFlz7U2XPpqassl6W34wxocgj80/tr1nWcz /9ypx1hY0HC5pnFklJJroTKKIQ== -----END CERTIFICATE-----Generated at Wed Nov 5 15:35:34 2025 by rpki-client