$ rpki-client -vvf rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.mft File: 5A26C85C73E6B8570445B0D41258C0AE86AFF28B.mft (raw, json) Hash identifier: 4bYjcpmLRoVYZwxrpKDNFcUdd99BIhQPB15dlIL98CA= Subject key identifier: 8D:B7:30:ED:62:73:7E:95:78:B6:07:10:FD:68:53:83:80:51:5A:2C Authority key identifier: 5A:26:C8:5C:73:E6:B8:57:04:45:B0:D4:12:58:C0:AE:86:AF:F2:8B Certificate issuer: /CN=5A26C85C73E6B8570445B0D41258C0AE86AFF28B Certificate serial: 30E55EDFD6BEE2F9ACBC35F54FFD3773B0033040 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.cer Subject info access: rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.mft Manifest number: 02A2 Signing time: Wed 05 Nov 2025 08:23:41 +0000 Manifest this update: Wed 05 Nov 2025 08:18:41 +0000 Manifest next update: Thu 06 Nov 2025 09:27:41 +0000 Files and hashes: 1: 5A26C85C73E6B8570445B0D41258C0AE86AFF28B.crl (hash: qSihkHBmQuJ+bxg9MOaewJ4N5+PKjzshINbN2ZnQgz0=) 2: 323830343a386666343a3a2f33322d3332203d3e20323733353234.roa (hash: Q/zh1Dbe0v/Id4jNOBy0FEio6tPBZ2jDdZ5A3fA+Fpw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.crl rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e5:5e:df:d6:be:e2:f9:ac:bc:35:f5:4f:fd:37:73:b0:03:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A26C85C73E6B8570445B0D41258C0AE86AFF28B Validity Not Before: Nov 5 08:18:41 2025 GMT Not After : Nov 6 09:27:41 2025 GMT Subject: CN=8DB730ED62737E9578B60710FD68538380515A2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:41:b8:f2:87:d1:51:d3:89:cd:21:d0:2c: 14:83:e2:22:3a:98:ce:40:ba:45:a4:5d:c6:4f:af: 8c:8c:b8:89:f7:f6:cb:03:79:a7:90:f0:75:e8:ac: 18:8b:10:cb:5f:2b:04:70:05:c1:f3:90:11:96:37: 32:37:14:27:65:a2:88:33:61:71:d9:4a:94:10:1a: f2:67:fb:fb:04:d3:fd:6f:ee:74:57:c4:0f:4c:09: c1:ce:ee:5a:c1:f4:cb:23:c3:32:62:b5:89:6e:9c: 4b:f5:be:5b:53:9e:0c:9d:86:bb:e6:e5:3a:e2:29: 93:f3:66:e3:e8:cb:01:f6:0f:ae:a1:1d:ef:84:b5: 77:7f:a3:cc:25:6c:49:d6:74:e9:fe:72:57:e0:96: 82:13:c7:3a:41:04:6e:a7:e1:fb:5d:7a:af:1f:fa: b4:d2:9a:57:a9:d6:f0:91:41:5f:c0:14:e2:b2:83: d5:41:85:a0:1a:d3:0e:62:65:77:53:39:ff:99:18: da:a1:3d:17:85:cc:30:5a:2f:00:b2:da:11:15:34: cb:62:81:da:cf:16:80:ad:c9:aa:be:ea:ce:07:1b: 91:7d:47:c9:79:fe:d3:e4:bd:64:91:f9:f9:01:f7: 26:bf:10:87:f9:74:0d:64:72:05:ee:24:c1:8d:2a: f9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B7:30:ED:62:73:7E:95:78:B6:07:10:FD:68:53:83:80:51:5A:2C X509v3 Authority Key Identifier: keyid:5A:26:C8:5C:73:E6:B8:57:04:45:B0:D4:12:58:C0:AE:86:AF:F2:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:3d:0a:b6:ef:58:09:7b:24:b6:0e:d1:97:49:d8:f6:dd:d1: 78:77:e3:17:99:39:b1:30:b9:38:3c:0a:c8:2b:d9:d0:c5:02: f0:c0:89:fe:7d:05:46:c7:d7:91:27:c8:ff:b2:67:fb:8c:ce: 01:d3:62:6e:af:2e:28:fc:f7:cf:17:99:92:37:d9:b7:0d:4a: c8:e0:5a:87:f0:0f:ea:82:5a:43:1d:c0:5d:1c:00:70:d8:2a: 50:b5:b9:b7:e7:1a:92:6a:5b:26:a8:52:15:15:2a:91:4e:ed: 64:a8:3b:c7:1c:a0:95:5b:12:89:d9:a8:7c:8e:85:f9:7c:d6: cf:f6:25:d0:5f:d8:63:38:16:d2:47:cf:71:46:1f:82:2d:04: 5d:98:1f:ee:b5:af:f7:0e:e6:d0:f0:66:76:9e:35:5b:36:49: 2a:6a:d1:62:da:f3:43:18:85:90:1d:a9:d5:ff:99:99:ed:c9: c3:78:7b:dd:41:4c:00:b3:a1:f1:fb:cc:9c:7a:7d:83:ce:0d: 82:16:5e:82:4e:d4:48:d4:80:3e:8f:e1:99:de:60:79:13:ef: 0f:50:bf:4e:b3:57:94:87:31:30:dd:cd:b4:67:4d:5c:b6:c7: aa:4d:fd:f2:8e:d1:cd:16:20:8e:28:5b:f9:5b:45:b0:07:f7: 32:9a:28:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMOVe39a+4vmsvDX1T/03c7ADMEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEyNkM4NUM3M0U2Qjg1NzA0NDVCMEQ0MTI1OEMwQUU4 NkFGRjI4QjAeFw0yNTExMDUwODE4NDFaFw0yNTExMDYwOTI3NDFaMDMxMTAvBgNV BAMTKDhEQjczMEVENjI3MzdFOTU3OEI2MDcxMEZENjg1MzgzODA1MTVBMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9vkG48ofRUdOJzSHQLBSD4iI6 mM5AukWkXcZPr4yMuIn39ssDeaeQ8HXorBiLEMtfKwRwBcHzkBGWNzI3FCdloogz YXHZSpQQGvJn+/sE0/1v7nRXxA9MCcHO7lrB9MsjwzJitYlunEv1vltTngydhrvm 5TriKZPzZuPoywH2D66hHe+EtXd/o8wlbEnWdOn+clfgloITxzpBBG6n4ftdeq8f +rTSmlep1vCRQV/AFOKyg9VBhaAa0w5iZXdTOf+ZGNqhPReFzDBaLwCy2hEVNMti gdrPFoCtyaq+6s4HG5F9R8l5/tPkvWSR+fkB9ya/EIf5dA1kcgXuJMGNKvl1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjbcw7WJzfpV4tgcQ/WhTg4BRWiwwHwYDVR0j BBgwFoAUWibIXHPmuFcERbDUEljAroav8oswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOU1iblNZdTRwaUJFTnlrWlhIOFNZNkQ4Q2kya28zNnRVMXF2YVZMOWth OG4vMC81QTI2Qzg1QzczRTZCODU3MDQ0NUIwRDQxMjU4QzBBRTg2QUZGMjhCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBMjZDODVDNzNFNkI4NTcw NDQ1QjBENDEyNThDMEFFODZBRkYyOEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OU1iblNZdTRwaUJFTnlrWlhIOFNZNkQ4Q2kya28zNnRVMXF2YVZMOWthOG4vMC81 QTI2Qzg1QzczRTZCODU3MDQ0NUIwRDQxMjU4QzBBRTg2QUZGMjhCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFj0Ktu9YCXsktg7Rl0nY9t3ReHfjF5k5sTC5ODwKyCvZ0MUC8MCJ/n0FRsfX kSfI/7Jn+4zOAdNibq8uKPz3zxeZkjfZtw1KyOBah/AP6oJaQx3AXRwAcNgqULW5 t+cakmpbJqhSFRUqkU7tZKg7xxyglVsSidmofI6F+XzWz/Yl0F/YYzgW0kfPcUYf gi0EXZgf7rWv9w7m0PBmdp41WzZJKmrRYtrzQxiFkB2p1f+Zme3Jw3h73UFMALOh 8fvMnHp9g84NghZegk7USNSAPo/hmd5geRPvD1C/TrNXlIcxMN3NtGdNXLbHqk39 8o7RzRYgjihb+VtFsAf3Mpoo4g== -----END CERTIFICATE-----Generated at Wed Nov 5 10:03:23 2025 by rpki-client