$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft File: 5429A630D95311C5AADAF5AC62BF18BF86863194.mft (raw, json) Hash identifier: CrnfMrF3i0cEM6sAHXuRA6NX7rlbnhUG94K5VpULg/k= Subject key identifier: 74:D1:B8:81:F6:36:32:26:7E:94:4D:86:06:05:74:F5:CE:6D:15:07 Authority key identifier: 54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94 Certificate issuer: /CN=5429A630D95311C5AADAF5AC62BF18BF86863194 Certificate serial: 2B55D6481DF970477055FF16AADF8CC58F9A8C49 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft Manifest number: 01B4 Signing time: Wed 05 Nov 2025 10:32:18 +0000 Manifest this update: Wed 05 Nov 2025 10:27:18 +0000 Manifest next update: Thu 06 Nov 2025 14:21:18 +0000 Files and hashes: 1: 3137302e38332e3230382e302f32322d3234203d3e203532353933.roa (hash: 8vwwo/SaNUCndqLG1W6S/xt9MVBLLG9Ywm1/OLdTEj8=) 2: 323830343a6431303a3a2f33322d3438203d3e203532353933.roa (hash: nSOaWesuogq30r5VD09Dk6DV/wQidOLKt4u2pW7jz6k=) 3: 3137372e38372e3233322e302f32322d3234203d3e203532353933.roa (hash: d5DI6/HlpfZKGZTJE1cimx+rFHCSUvIx3f28vzYvW6U=) 4: 5429A630D95311C5AADAF5AC62BF18BF86863194.crl (hash: xOzoaHqomyonln4hnGTf+eW0Vm3Rr45+bf5UajgJn+c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.crl rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:55:d6:48:1d:f9:70:47:70:55:ff:16:aa:df:8c:c5:8f:9a:8c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5429A630D95311C5AADAF5AC62BF18BF86863194 Validity Not Before: Nov 5 10:27:18 2025 GMT Not After : Nov 6 14:21:18 2025 GMT Subject: CN=74D1B881F63632267E944D86060574F5CE6D1507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:aa:81:fd:ff:6a:ef:f4:58:31:93:f9:8b: 6a:55:da:45:94:b8:b0:c1:d3:ae:8b:1f:ad:b5:87: e5:c8:6d:7f:3e:6e:23:eb:21:23:a6:93:59:34:25: d0:ac:0e:bb:48:18:71:be:d1:05:ef:76:9c:13:35: 4a:07:58:b2:bd:22:04:15:f6:11:62:ff:36:5a:cd: 20:57:3f:dd:b6:62:a3:6b:3a:5e:44:3f:bd:8b:b5: 39:6f:f3:47:94:71:e3:09:b2:21:b4:e7:7f:1f:64: b0:6d:e5:0d:bb:f8:97:11:b3:3b:fe:1d:9a:f1:fb: ba:db:3d:29:88:c5:7b:b2:f1:7b:45:9b:31:41:ac: 09:c3:7c:57:dd:c8:73:7b:b2:fb:2a:da:db:ed:82: 7f:2a:47:dd:1d:35:c5:92:21:17:fc:bc:d6:23:f4: 0f:f4:36:18:20:db:be:fa:70:cd:bf:ac:38:5d:c4: 95:bb:b0:e7:76:b4:66:76:4b:81:b2:37:1b:e4:4f: 2d:1d:02:fa:8d:f6:f5:4a:e9:3e:c6:6e:48:ec:c2: 0c:70:e4:ad:b4:48:5e:12:b5:d0:df:ab:87:68:4a: b5:39:69:6d:e9:24:18:3b:7e:3e:20:ea:22:b8:08: ca:61:b7:4e:ff:4d:f5:f2:12:fd:8a:6a:16:10:3a: 3e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D1:B8:81:F6:36:32:26:7E:94:4D:86:06:05:74:F5:CE:6D:15:07 X509v3 Authority Key Identifier: keyid:54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ed:f7:95:b7:87:bb:46:4a:25:ed:72:3c:2b:f9:8f:3f:a1: 74:51:3f:7e:51:80:c3:f8:59:d3:92:c6:61:d2:d2:cf:a6:05: 56:53:13:1b:a8:b2:99:41:25:b3:7f:54:f1:f6:33:5f:02:ec: 3c:06:dc:09:ee:1b:9c:89:92:c2:ea:f2:a8:c0:78:b1:ae:88: 02:74:6c:7a:b7:42:41:97:1c:10:08:ab:88:37:6f:9c:5a:1d: 2e:df:ba:e9:ee:4c:43:11:61:fc:f8:d8:c5:75:f0:49:8e:1a: e7:64:f7:8b:1a:6d:15:66:48:4b:16:7e:f4:2a:e7:ac:eb:68: 4f:3d:82:93:ae:cb:ae:14:de:22:fa:b4:f0:e5:3d:10:e7:45: 91:f0:dd:b9:82:cc:7d:64:9c:7c:5c:02:e7:6a:b1:ee:79:45: 08:ed:85:a1:88:9d:d5:df:1b:06:0a:8d:e1:00:de:19:e4:15: d4:c4:90:ec:b0:75:59:15:fc:ee:dd:de:20:94:59:fe:a0:51: 43:cf:c9:4a:49:6a:1a:de:e2:51:dd:ba:a9:37:79:78:03:37: 92:57:8f:51:a1:8f:3d:2c:a4:71:4a:f4:be:d4:f4:40:df:0b: 70:7d:0e:b3:f1:f3:ab:00:ab:f1:e5:20:6a:73:73:51:26:2f: 47:ca:fd:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUK1XWSB35cEdwVf8Wqt+MxY+ajEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQyOUE2MzBEOTUzMTFDNUFBREFGNUFDNjJCRjE4QkY4 Njg2MzE5NDAeFw0yNTExMDUxMDI3MThaFw0yNTExMDYxNDIxMThaMDMxMTAvBgNV BAMTKDc0RDFCODgxRjYzNjMyMjY3RTk0NEQ4NjA2MDU3NEY1Q0U2RDE1MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3h6qB/f9q7/RYMZP5i2pV2kWU uLDB066LH621h+XIbX8+biPrISOmk1k0JdCsDrtIGHG+0QXvdpwTNUoHWLK9IgQV 9hFi/zZazSBXP922YqNrOl5EP72LtTlv80eUceMJsiG0538fZLBt5Q27+JcRszv+ HZrx+7rbPSmIxXuy8XtFmzFBrAnDfFfdyHN7svsq2tvtgn8qR90dNcWSIRf8vNYj 9A/0Nhgg2776cM2/rDhdxJW7sOd2tGZ2S4GyNxvkTy0dAvqN9vVK6T7Gbkjswgxw 5K20SF4StdDfq4doSrU5aW3pJBg7fj4g6iK4CMpht07/TfXyEv2KahYQOj4jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdNG4gfY2MiZ+lE2GBgV09c5tFQcwHwYDVR0j BBgwFoAUVCmmMNlTEcWq2vWsYr8Yv4aGMZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1TVlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdN SDcvMC81NDI5QTYzMEQ5NTMxMUM1QUFEQUY1QUM2MkJGMThCRjg2ODYzMTk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0MjlBNjMwRDk1MzExQzVB QURBRjVBQzYyQkYxOEJGODY4NjMxOTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OE1TVlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdNSDcvMC81 NDI5QTYzMEQ5NTMxMUM1QUFEQUY1QUM2MkJGMThCRjg2ODYzMTk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAje33lbeHu0ZKJe1yPCv5jz+hdFE/flGAw/hZ05LGYdLSz6YFVlMTG6iymUEl s39U8fYzXwLsPAbcCe4bnImSwuryqMB4sa6IAnRserdCQZccEAiriDdvnFodLt+6 6e5MQxFh/PjYxXXwSY4a52T3ixptFWZISxZ+9CrnrOtoTz2Ck67LrhTeIvq08OU9 EOdFkfDduYLMfWScfFwC52qx7nlFCO2FoYid1d8bBgqN4QDeGeQV1MSQ7LB1WRX8 7t3eIJRZ/qBRQ8/JSklqGt7iUd26qTd5eAM3klePUaGPPSykcUr0vtT0QN8LcH0O s/HzqwCr8eUganNzUSYvR8r9vQ== -----END CERTIFICATE-----Generated at Wed Nov 5 13:06:10 2025 by rpki-client