$ rpki-client -vvf rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.mft File: A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.mft (raw, json) Hash identifier: TubRQviRK70p63gKVyX9RK566H8Jz4cUjEDx4MXU0vU= Subject key identifier: 5A:0B:CE:4F:54:01:7B:3D:F2:2C:6F:6C:95:FF:97:6A:92:7D:2C:3E Authority key identifier: A5:FC:97:8C:4C:40:DF:A7:29:31:51:8F:A4:0A:D7:A2:3C:E7:D3:3E Certificate issuer: /CN=A5FC978C4C40DFA72931518FA40AD7A23CE7D33E Certificate serial: 4C563E0E7DE4881627114E4EE95B95526503FFF0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.cer Subject info access: rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.mft Manifest number: 0209 Signing time: Tue 04 Nov 2025 20:10:42 +0000 Manifest this update: Tue 04 Nov 2025 20:05:41 +0000 Manifest next update: Wed 05 Nov 2025 20:46:41 +0000 Files and hashes: 1: 323830343a343437383a3a2f33322d313238203d3e20323637363334.roa (hash: 6TqsiGa8AosgXfH6Zs3pJ+hHhzsY+sPLOU+nVcukOjA=) 2: 34352e37312e34302e302f32332d3332203d3e20323637363334.roa (hash: Yne/jO6oKAtpmYKcsVbGc7r3empMgLQD6wQlbyLX9kc=) 3: A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.crl (hash: vB9K4YToOSkwggZVos9csGxxNQ9d/8h3Ph0rIRiQ9Qc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.crl rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:56:3e:0e:7d:e4:88:16:27:11:4e:4e:e9:5b:95:52:65:03:ff:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5FC978C4C40DFA72931518FA40AD7A23CE7D33E Validity Not Before: Nov 4 20:05:41 2025 GMT Not After : Nov 5 20:46:41 2025 GMT Subject: CN=5A0BCE4F54017B3DF22C6F6C95FF976A927D2C3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:82:e1:7f:6c:46:2d:91:47:35:e1:a4:be: d7:91:d1:18:55:68:f0:3c:ac:ed:f0:29:2b:ba:5f: bd:03:cd:94:99:77:e2:70:6d:71:b5:8f:c7:67:84: b0:9c:95:f3:ea:dc:f2:d2:e5:d9:ee:3e:d0:3f:f1: 6a:04:7d:44:c0:8b:54:b5:be:63:98:54:f9:40:ea: 2e:68:ab:35:d8:12:72:10:f5:65:33:7a:79:e1:a3: 33:c9:18:8a:eb:6a:ac:ad:e4:10:55:74:55:68:08: 9f:a0:93:2a:14:8c:22:b0:34:ac:72:3d:41:33:1b: 29:a6:21:45:96:ff:94:aa:b4:b5:07:1f:3c:3d:e9: 2d:92:eb:4b:95:cb:c8:9f:eb:42:b9:9f:0b:86:3b: 72:2b:5e:da:45:64:8e:cd:df:f0:a0:0a:48:4c:65: 3e:56:70:82:31:f2:99:cd:38:a2:62:dd:3c:63:98: c4:20:25:b9:2e:da:0a:16:e0:da:87:ee:cc:b6:01: 4b:42:63:0e:82:31:94:ac:81:f7:fc:96:02:85:b3: 0c:9a:59:ff:7e:9b:b3:c8:69:18:1e:59:1a:16:6b: f5:cf:1a:31:09:88:5c:2b:f1:9f:24:ef:7c:1a:0f: ce:80:93:e8:bc:4d:46:e5:57:5a:5b:5e:14:3f:92: b0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0B:CE:4F:54:01:7B:3D:F2:2C:6F:6C:95:FF:97:6A:92:7D:2C:3E X509v3 Authority Key Identifier: keyid:A5:FC:97:8C:4C:40:DF:A7:29:31:51:8F:A4:0A:D7:A2:3C:E7:D3:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6b:62:97:2c:05:41:05:12:28:6b:26:c1:c3:2a:26:32:ef: 75:3c:39:d3:75:a1:e7:7e:c9:1b:95:fd:8c:d1:a4:d9:af:ee: 9b:4a:9c:db:93:2e:5a:5e:36:32:c8:b4:d3:91:cb:64:c6:62: 0c:ef:16:65:5d:d4:c0:9e:bc:23:43:48:a5:d6:7a:89:51:0b: 6d:a8:17:47:62:a7:0c:15:f6:e4:15:3c:7a:cc:a6:dc:be:55: 4d:f1:82:ae:e3:07:ac:2e:1c:38:96:05:c2:81:94:83:ba:72: a7:e0:02:f1:e8:03:9d:51:cc:4e:41:9d:fa:ab:11:51:df:15: d5:bb:4b:9a:63:26:1b:53:57:f4:89:03:9c:84:46:24:fc:38: f5:75:73:77:0c:20:db:39:c7:e5:e9:1c:f4:7d:60:d2:2c:b0: 59:40:69:86:5a:11:66:1c:1f:a8:6a:6d:2c:08:fb:05:df:fa: fa:34:9e:cd:0b:9a:95:5a:d8:ca:b5:8f:72:c1:4b:ef:1d:1a: 90:4b:5d:61:78:4d:70:50:59:c9:cc:15:b4:14:e3:f2:dd:49: 37:2f:28:d8:78:e6:3b:ed:3b:21:8d:bf:ed:cb:94:66:5a:42: de:9c:31:0d:f2:c9:b5:fa:c1:cd:18:1a:a1:bb:67:07:53:41: 2e:0f:be:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTFY+Dn3kiBYnEU5O6VuVUmUD//AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVGQzk3OEM0QzQwREZBNzI5MzE1MThGQTQwQUQ3QTIz Q0U3RDMzRTAeFw0yNTExMDQyMDA1NDFaFw0yNTExMDUyMDQ2NDFaMDMxMTAvBgNV BAMTKDVBMEJDRTRGNTQwMTdCM0RGMjJDNkY2Qzk1RkY5NzZBOTI3RDJDM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCeYLhf2xGLZFHNeGkvteR0RhV aPA8rO3wKSu6X70DzZSZd+JwbXG1j8dnhLCclfPq3PLS5dnuPtA/8WoEfUTAi1S1 vmOYVPlA6i5oqzXYEnIQ9WUzennhozPJGIrraqyt5BBVdFVoCJ+gkyoUjCKwNKxy PUEzGymmIUWW/5SqtLUHHzw96S2S60uVy8if60K5nwuGO3IrXtpFZI7N3/CgCkhM ZT5WcIIx8pnNOKJi3TxjmMQgJbku2goW4NqH7sy2AUtCYw6CMZSsgff8lgKFswya Wf9+m7PIaRgeWRoWa/XPGjEJiFwr8Z8k73waD86Ak+i8TUblV1pbXhQ/krCfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWgvOT1QBez3yLG9slf+XapJ9LD4wHwYDVR0j BBgwFoAUpfyXjExA36cpMVGPpArXojzn0z4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFY4ZjVqUENkQkZ0UkY2Nk1GaldESzI0bnFURXp6OWZ2RFhBR2RNaU5h d28vMC9BNUZDOTc4QzRDNDBERkE3MjkzMTUxOEZBNDBBRDdBMjNDRTdEMzNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1RkM5NzhDNEM0MERGQTcy OTMxNTE4RkE0MEFEN0EyM0NFN0QzM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFY4ZjVqUENkQkZ0UkY2Nk1GaldESzI0bnFURXp6OWZ2RFhBR2RNaU5hd28vMC9B NUZDOTc4QzRDNDBERkE3MjkzMTUxOEZBNDBBRDdBMjNDRTdEMzNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXWtilywFQQUSKGsmwcMqJjLvdTw503Wh537JG5X9jNGk2a/um0qc25MuWl42 Msi005HLZMZiDO8WZV3UwJ68I0NIpdZ6iVELbagXR2KnDBX25BU8esym3L5VTfGC ruMHrC4cOJYFwoGUg7pyp+AC8egDnVHMTkGd+qsRUd8V1btLmmMmG1NX9IkDnIRG JPw49XVzdwwg2znH5ekc9H1g0iywWUBphloRZhwfqGptLAj7Bd/6+jSezQualVrY yrWPcsFL7x0akEtdYXhNcFBZycwVtBTj8t1JNy8o2HjmO+07IY2/7cuUZlpC3pwx DfLJtfrBzRgaobtnB1NBLg++Mw== -----END CERTIFICATE-----Generated at Wed Nov 5 07:54:08 2025 by rpki-client