$ rpki-client -vvf rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.mft File: 64EE45FF4E73BCB7FEE37731DE1088660B5851F8.mft (raw, json) Hash identifier: nqhVerCsbjWZrGfcdaqbsFX+n1epFcEllHF8p6UYamM= Subject key identifier: 70:70:83:88:BB:22:C2:02:89:10:16:AE:94:06:76:8F:8A:56:A0:3D Authority key identifier: 64:EE:45:FF:4E:73:BC:B7:FE:E3:77:31:DE:10:88:66:0B:58:51:F8 Certificate issuer: /CN=64EE45FF4E73BCB7FEE37731DE1088660B5851F8 Certificate serial: 39CF6085DC0EBCA23CE3E0F501D946837117BAB6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.cer Subject info access: rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.mft Manifest number: 13 Signing time: Wed 05 Nov 2025 04:28:58 +0000 Manifest this update: Wed 05 Nov 2025 04:23:58 +0000 Manifest next update: Thu 06 Nov 2025 07:56:58 +0000 Files and hashes: 1: 3137372e3135342e38302e302f32322d3332203d3e20323632393439.roa (hash: obVLbFBlD1kxbpny0GXq8wk0hN/KhjWe7WeqtCHWKwc=) 2: 64EE45FF4E73BCB7FEE37731DE1088660B5851F8.crl (hash: Qzvt1RE6Vz/48/Hx/fIgbb12AZRHlYgLNH1Nd+vUltY=) 3: 3137372e3135342e38342e302f32322d3332203d3e20323632393439.roa (hash: 1d3tUWLajSTTOvZLqwd5mEbvDy4l89GnNAeXH9kRVmA=) 4: 323830343a6534383a3a2f33322d313238203d3e20323632393439.roa (hash: ZP7LxRSY9e7An77Rzk9cRX4tKzfidV+jAXvMsYBInSM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.crl rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:cf:60:85:dc:0e:bc:a2:3c:e3:e0:f5:01:d9:46:83:71:17:ba:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EE45FF4E73BCB7FEE37731DE1088660B5851F8 Validity Not Before: Nov 5 04:23:58 2025 GMT Not After : Nov 6 07:56:58 2025 GMT Subject: CN=70708388BB22C202891016AE9406768F8A56A03D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0c:9c:f5:51:f1:55:75:77:bb:19:7d:59:a8: 10:42:5c:3d:32:c4:13:6f:5e:f9:bc:b3:f1:9a:bd: 97:2d:23:37:7c:1d:be:bf:52:8b:54:95:fa:3a:d8: 84:d7:ca:a8:f2:73:be:89:2a:c4:48:62:0f:cc:98: fe:ff:f5:db:ca:5f:fe:f4:9d:9a:58:41:4e:00:a9: 72:2e:42:65:ca:27:bb:77:b8:ba:ea:22:02:6d:44: 06:49:b8:b7:a6:25:4f:2e:5a:d3:ba:84:14:90:34: 6e:97:ad:3c:48:1c:09:ad:72:d7:ac:28:91:09:a1: 7d:e1:31:64:68:a4:b7:d0:30:bc:6b:de:b2:7c:0b: cc:0e:e5:0e:58:af:65:a2:38:35:1e:f5:d4:7b:7a: 85:1a:a4:cd:2c:e0:92:9f:f8:cd:0b:8a:e7:e4:b9: 15:17:bf:77:ec:94:08:95:1c:8c:ac:71:40:f5:56: 65:a8:88:2d:42:0b:51:88:07:1c:62:aa:b2:53:76: 85:50:1e:41:1b:fe:a8:5d:be:6e:71:16:87:e6:93: 74:74:07:c8:7c:e0:6b:8c:d4:ee:1a:57:7f:8c:d4: d3:a3:d2:aa:b1:40:81:62:d6:78:42:c7:03:c8:b9: 67:9b:06:ff:b0:07:05:f8:c3:c8:54:9f:26:56:a5: f6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:70:83:88:BB:22:C2:02:89:10:16:AE:94:06:76:8F:8A:56:A0:3D X509v3 Authority Key Identifier: keyid:64:EE:45:FF:4E:73:BC:B7:FE:E3:77:31:DE:10:88:66:0B:58:51:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:37:6c:49:c2:55:02:a3:86:ea:6e:06:18:16:4b:dc:ac:18: e6:ad:f9:b0:ed:6a:d9:be:e8:c7:96:84:ec:55:21:fe:66:70: ad:7e:43:eb:41:1e:02:85:d9:9f:0a:93:80:37:da:7d:8d:79: 61:45:ab:aa:b0:b5:64:77:ca:71:79:fd:bb:0d:9c:63:24:78: 23:37:91:8b:d8:10:23:c1:85:af:f4:13:f9:ae:9c:83:d8:4e: 2a:c9:ed:94:cf:ec:61:34:e5:33:c1:03:a8:5c:e5:bb:f2:13: a2:cd:77:2c:f6:55:27:04:d2:4f:42:fd:c6:3f:ac:8d:21:3c: a7:70:b3:38:84:32:69:66:ca:e8:2e:84:eb:70:38:a8:74:7b: dc:74:03:cb:8c:c3:83:9d:ec:80:2e:e4:2f:f9:97:8b:b1:35: 45:ad:8f:b7:71:4a:97:9e:11:b4:ad:4b:27:b2:90:30:48:a4: 4c:7f:2e:3b:fb:ca:79:47:10:5b:6b:13:85:0b:73:24:88:cd: 88:84:22:47:22:56:03:e4:d7:d4:73:00:dc:4a:71:b7:0b:9d: 9d:9f:43:bf:84:e4:b3:f1:6a:34:65:39:12:42:40:3f:d9:37: b2:37:fa:ff:30:97:13:43:1e:37:9e:01:9a:bc:2b:a6:26:13: b5:17:f7:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOc9ghdwOvKI84+D1AdlGg3EXurYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFRTQ1RkY0RTczQkNCN0ZFRTM3NzMxREUxMDg4NjYw QjU4NTFGODAeFw0yNTExMDUwNDIzNThaFw0yNTExMDYwNzU2NThaMDMxMTAvBgNV BAMTKDcwNzA4Mzg4QkIyMkMyMDI4OTEwMTZBRTk0MDY3NjhGOEE1NkEwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0DJz1UfFVdXe7GX1ZqBBCXD0y xBNvXvm8s/GavZctIzd8Hb6/UotUlfo62ITXyqjyc76JKsRIYg/MmP7/9dvKX/70 nZpYQU4AqXIuQmXKJ7t3uLrqIgJtRAZJuLemJU8uWtO6hBSQNG6XrTxIHAmtctes KJEJoX3hMWRopLfQMLxr3rJ8C8wO5Q5Yr2WiODUe9dR7eoUapM0s4JKf+M0Liufk uRUXv3fslAiVHIyscUD1VmWoiC1CC1GIBxxiqrJTdoVQHkEb/qhdvm5xFofmk3R0 B8h84GuM1O4aV3+M1NOj0qqxQIFi1nhCxwPIuWebBv+wBwX4w8hUnyZWpfbhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcHCDiLsiwgKJEBaulAZ2j4pWoD0wHwYDVR0j BBgwFoAUZO5F/05zvLf+43cx3hCIZgtYUfgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVA1Q1Y5QjZOOHozUFVXc0NzU0VqTTdGVjlvUm92RmN5cndtYUJqbXNV SkgvMC82NEVFNDVGRjRFNzNCQ0I3RkVFMzc3MzFERTEwODg2NjBCNTg1MUY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0RUU0NUZGNEU3M0JDQjdG RUUzNzczMURFMTA4ODY2MEI1ODUxRjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVA1Q1Y5QjZOOHozUFVXc0NzU0VqTTdGVjlvUm92RmN5cndtYUJqbXNVSkgvMC82 NEVFNDVGRjRFNzNCQ0I3RkVFMzc3MzFERTEwODg2NjBCNTg1MUY4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGjdsScJVAqOG6m4GGBZL3KwY5q35sO1q2b7ox5aE7FUh/mZwrX5D60EeAoXZ nwqTgDfafY15YUWrqrC1ZHfKcXn9uw2cYyR4IzeRi9gQI8GFr/QT+a6cg9hOKsnt lM/sYTTlM8EDqFzlu/ITos13LPZVJwTST0L9xj+sjSE8p3CzOIQyaWbK6C6E63A4 qHR73HQDy4zDg53sgC7kL/mXi7E1Ra2Pt3FKl54RtK1LJ7KQMEikTH8uO/vKeUcQ W2sThQtzJIjNiIQiRyJWA+TX1HMA3EpxtwudnZ9Dv4Tks/FqNGU5EkJAP9k3sjf6 /zCXE0MeN54BmrwrpiYTtRf31g== -----END CERTIFICATE-----Generated at Wed Nov 5 10:14:38 2025 by rpki-client