$ rpki-client -vvf rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft File: 54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft (raw, json) Hash identifier: tk9C0SpMkRVtS9OLaYXpDeWA7XOEnBgCnrgEPqnCQh4= Subject key identifier: C3:84:52:63:DC:DF:F6:6F:81:C9:3E:4F:61:A9:9A:F7:79:A2:5D:E1 Authority key identifier: 54:65:48:55:AF:7A:47:FA:3E:E5:E7:AF:D4:22:FF:D3:DB:BF:EC:4A Certificate issuer: /CN=54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A Certificate serial: 0A3956FB00B7D13AB913268A2F264947CF8FE7CB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer Subject info access: rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft Manifest number: 02E1 Signing time: Wed 05 Nov 2025 16:17:04 +0000 Manifest this update: Wed 05 Nov 2025 16:12:04 +0000 Manifest next update: Thu 06 Nov 2025 19:14:04 +0000 Files and hashes: 1: 54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl (hash: yXgKP8oUFevYa+UWHjZr/Kqo+KifopJH0IiDryS5zUk=) 2: 323830343a333932383a3a2f33322d313238203d3e20323636303135.roa (hash: 6mQqP6vwEYKsyAizhYGj/YcrcMRHF+AZmBDLXF0Fj1I=) 3: 3137302e3234352e37362e302f32322d3332203d3e20323636303135.roa (hash: FMts0WWmRfv3uIJr6sQoqG85fvB8sMOGzi7yG5qk4oU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 17:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:39:56:fb:00:b7:d1:3a:b9:13:26:8a:2f:26:49:47:cf:8f:e7:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A Validity Not Before: Nov 5 16:12:04 2025 GMT Not After : Nov 6 19:14:04 2025 GMT Subject: CN=C3845263DCDFF66F81C93E4F61A99AF779A25DE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:aa:d6:3f:93:65:54:d9:e7:5b:21:b5:4a:d2: bf:c8:0a:44:a2:c5:d9:33:75:fd:e8:e0:a9:38:62: 72:26:89:bd:b6:f9:31:67:5c:40:3f:34:c8:35:bb: ce:89:db:db:32:07:12:ab:79:39:e8:9f:d9:dd:10: 61:b4:46:72:f8:f5:55:71:3c:0f:39:50:ff:02:7d: f4:52:49:d2:02:d8:68:5b:2f:9b:d8:16:28:8a:72: e9:cd:07:9e:f2:6d:c3:53:67:a7:38:3a:4f:45:ac: 03:d1:c9:e7:3f:43:77:04:dc:76:03:8b:66:50:fa: dd:47:20:8b:eb:87:3a:8d:13:0d:bf:29:7c:72:a3: 73:83:6d:a3:46:da:8f:23:62:b4:bd:9f:c6:2a:34: d2:64:52:59:b0:42:5d:53:af:65:22:71:99:7e:51: d8:65:d6:6b:aa:c7:74:ef:7f:87:99:bd:68:0f:a3: d4:53:59:dd:9d:e3:3a:c5:c3:a8:95:eb:74:a1:c0: 4b:43:2e:57:fd:21:14:ee:58:45:15:d2:0f:4c:ca: 45:e2:60:b6:fc:36:f5:b0:14:e1:5e:38:61:c5:0c: 0f:02:27:f5:fa:a9:73:3e:1a:f2:a9:17:13:31:29: fa:b8:e3:e2:78:1c:cd:7f:76:7b:0c:c7:ac:10:58: b0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:84:52:63:DC:DF:F6:6F:81:C9:3E:4F:61:A9:9A:F7:79:A2:5D:E1 X509v3 Authority Key Identifier: keyid:54:65:48:55:AF:7A:47:FA:3E:E5:E7:AF:D4:22:FF:D3:DB:BF:EC:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:6b:87:3b:8a:16:72:f7:12:75:e6:e8:b1:16:50:08:74:bb: e1:4f:6b:35:df:a9:71:f9:28:cc:5e:6d:21:cd:a5:43:9e:45: 86:f6:0b:70:bb:38:53:1a:94:29:ba:3a:e4:b2:d5:80:58:5e: ca:78:ab:8a:5c:f8:43:54:ef:6c:88:60:87:12:9b:c9:7a:7b: cb:3d:3b:c7:8f:5a:5c:ad:aa:36:c9:f4:48:be:d5:70:52:6d: 25:db:3b:67:d9:32:98:b2:44:94:38:1d:9e:1b:28:7d:32:f2: f8:3e:3c:2e:98:66:db:26:85:cb:58:37:06:da:2c:ce:a1:52: 1d:15:1f:54:d7:03:24:10:db:2f:37:50:90:de:6b:6c:62:1b: 1f:66:27:b0:9f:be:ce:17:87:79:95:62:e6:84:c2:71:5d:94: 92:73:2b:69:1f:2e:72:94:f5:1a:c3:74:a0:80:5f:0c:22:f1: 9c:94:81:7d:9d:88:0a:34:c0:fb:2c:d9:47:68:40:ed:32:5d: 0c:77:eb:ff:55:60:57:5d:d3:9f:0c:81:da:87:ff:00:0b:74: 3e:a0:50:69:55:d9:5e:09:59:8c:45:5a:ca:b2:90:6e:ea:f6: b0:2f:23:8a:0e:6e:63:c9:08:97:c2:93:d2:58:a0:6c:f0:9f: 41:ca:53:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCjlW+wC30Tq5EyaKLyZJR8+P58swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ2NTQ4NTVBRjdBNDdGQTNFRTVFN0FGRDQyMkZGRDNE QkJGRUM0QTAeFw0yNTExMDUxNjEyMDRaFw0yNTExMDYxOTE0MDRaMDMxMTAvBgNV BAMTKEMzODQ1MjYzRENERkY2NkY4MUM5M0U0RjYxQTk5QUY3NzlBMjVERTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKqtY/k2VU2edbIbVK0r/ICkSi xdkzdf3o4Kk4YnImib22+TFnXEA/NMg1u86J29syBxKreTnon9ndEGG0RnL49VVx PA85UP8CffRSSdIC2GhbL5vYFiiKcunNB57ybcNTZ6c4Ok9FrAPRyec/Q3cE3HYD i2ZQ+t1HIIvrhzqNEw2/KXxyo3ODbaNG2o8jYrS9n8YqNNJkUlmwQl1Tr2UicZl+ Udhl1muqx3Tvf4eZvWgPo9RTWd2d4zrFw6iV63ShwEtDLlf9IRTuWEUV0g9MykXi YLb8NvWwFOFeOGHFDA8CJ/X6qXM+GvKpFxMxKfq44+J4HM1/dnsMx6wQWLC/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUw4RSY9zf9m+ByT5PYama93miXeEwHwYDVR0j BBgwFoAUVGVIVa96R/o+5eev1CL/09u/7EowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWNQaEVzTFYzMW9XNDNFVmFRNGg4ekw4M2RLYXJBcHB4Z2ZMS2RZOTJy ZU4vMC81NDY1NDg1NUFGN0E0N0ZBM0VFNUU3QUZENDIyRkZEM0RCQkZFQzRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0NjU0ODU1QUY3QTQ3RkEz RUU1RTdBRkQ0MjJGRkQzREJCRkVDNEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWNQaEVzTFYzMW9XNDNFVmFRNGg4ekw4M2RLYXJBcHB4Z2ZMS2RZOTJyZU4vMC81 NDY1NDg1NUFGN0E0N0ZBM0VFNUU3QUZENDIyRkZEM0RCQkZFQzRBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQmuHO4oWcvcSdebosRZQCHS74U9rNd+pcfkozF5tIc2lQ55FhvYLcLs4UxqU Kbo65LLVgFheynirilz4Q1TvbIhghxKbyXp7yz07x49aXK2qNsn0SL7VcFJtJds7 Z9kymLJElDgdnhsofTLy+D48Lphm2yaFy1g3BtoszqFSHRUfVNcDJBDbLzdQkN5r bGIbH2YnsJ++zheHeZVi5oTCcV2UknMraR8ucpT1GsN0oIBfDCLxnJSBfZ2ICjTA +yzZR2hA7TJdDHfr/1VgV13TnwyB2of/AAt0PqBQaVXZXglZjEVayrKQbur2sC8j ig5uY8kIl8KT0ligbPCfQcpT7A== -----END CERTIFICATE-----Generated at Wed Nov 5 17:50:13 2025 by rpki-client