$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.mft File: 5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.mft (raw, json) Hash identifier: nynwUAVhJomU7spYLTzzSxTqNafbbYK6lvORu0dZ4Ug= Subject key identifier: AC:3A:E7:1F:1E:3D:C3:59:15:3A:08:E1:EC:D2:C2:5B:BA:9D:C7:67 Authority key identifier: 5F:A7:CB:BB:D1:D1:F7:95:13:C2:EF:D5:24:7C:3A:A4:2F:D0:E7:6F Certificate issuer: /CN=5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F Certificate serial: 5BE2E238E54F40FD81A74FF72E46060FFB1FB7DB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.cer Subject info access: rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.mft Manifest number: FF Signing time: Wed 05 Nov 2025 13:57:12 +0000 Manifest this update: Wed 05 Nov 2025 13:52:12 +0000 Manifest next update: Thu 06 Nov 2025 17:51:12 +0000 Files and hashes: 1: 5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.crl (hash: 4hvdcwgjRE4IZOccZFIZf1b2fD65rW5MuwLlKQBol58=) 2: 323830343a353864383a3a2f33322d313238203d3e20323638313533.roa (hash: mx0vkYOQMZWdzbKqGQFkGVwKZqeeZJFSr02Zit/ZTrM=) 3: 34352e3137302e37322e302f32322d3332203d3e20323638313533.roa (hash: qR2rNcyFmZctcb7Zjs8Bgf0DPfIkHyfE4SOblqc9CSQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.crl rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 17:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e2:e2:38:e5:4f:40:fd:81:a7:4f:f7:2e:46:06:0f:fb:1f:b7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F Validity Not Before: Nov 5 13:52:12 2025 GMT Not After : Nov 6 17:51:12 2025 GMT Subject: CN=AC3AE71F1E3DC359153A08E1ECD2C25BBA9DC767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:90:b0:39:dd:f9:1e:89:09:59:44:0b:64: 1e:bd:45:8c:25:ee:40:2d:dc:ef:1a:9f:20:74:53: 34:b8:66:6a:4e:72:03:be:cb:1e:72:a0:4f:f2:10: ec:e3:56:8f:16:62:57:57:2b:ad:be:a5:f1:88:33: 21:a5:39:36:75:a9:53:76:1c:f8:75:48:e2:c0:87: 4a:d5:7a:66:27:73:fe:39:82:0b:c0:dc:e6:cc:70: 69:08:01:21:c3:a3:67:6b:a8:e7:55:9b:36:48:b1: 98:4b:f8:5e:63:dd:ef:ad:d5:ee:01:8e:86:4b:fa: 0d:89:33:53:09:e9:10:a6:2e:4d:63:72:5d:d6:e8: fe:0b:56:e8:e6:17:21:a6:c4:c0:da:ba:1b:ea:5f: e8:23:2f:fe:60:83:47:d1:ae:d0:8a:64:1f:2f:2c: 73:a3:34:1c:4f:2e:3a:62:76:3f:da:4a:53:ac:e3: 42:5f:e9:b4:c9:10:f7:4c:80:55:e2:88:e4:e2:a9: 83:db:86:c9:6c:48:50:b1:3f:e8:2f:3d:13:5f:dc: 0c:9c:be:8c:d8:50:af:b9:62:fc:8a:98:6b:df:3e: 54:f7:a3:7f:ee:58:c4:0c:b6:c9:f0:e9:80:dc:a1: 06:ea:b0:f7:70:66:0d:84:08:c7:03:cf:4f:06:d3: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3A:E7:1F:1E:3D:C3:59:15:3A:08:E1:EC:D2:C2:5B:BA:9D:C7:67 X509v3 Authority Key Identifier: keyid:5F:A7:CB:BB:D1:D1:F7:95:13:C2:EF:D5:24:7C:3A:A4:2F:D0:E7:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:19:ad:f4:d5:d5:0f:ee:0c:c3:fb:10:b0:8d:89:00:9f:42: a6:7d:61:2d:e6:83:78:53:ed:ab:dc:b5:ea:3e:9e:28:67:b0: ce:be:b8:75:1c:ca:57:94:d1:4c:03:7e:a4:f8:48:d9:28:48: 58:e5:5e:16:e8:d4:01:c6:0c:d0:c4:28:23:f5:f3:37:b3:40: 69:6c:88:e3:8e:97:ff:99:72:35:cd:12:f6:7b:4f:fb:7c:9d: c6:20:8d:ab:0f:ec:d4:4b:8c:25:05:34:d8:93:26:02:9b:94: 70:5a:95:10:16:c0:ce:87:53:50:25:e0:86:52:e8:a4:14:e1: 47:7c:a4:28:da:5d:d2:1d:9e:b1:b7:b7:12:5b:5b:3d:8c:e5: 7e:48:c8:1d:0d:ec:41:a1:fe:0c:e1:6b:dc:f2:6f:40:67:99: 6e:b6:a4:0d:54:2d:3c:19:e7:cb:ed:00:54:29:b7:e5:db:df: 8e:b0:96:e6:98:57:9e:19:4c:b9:58:8c:54:56:6f:4e:de:c6: 28:a7:d3:40:60:83:19:5d:55:9d:ec:b5:1e:99:29:48:ba:af: c7:f3:dc:ef:66:bd:e1:43:23:bb:d8:ac:69:c9:0b:8c:b7:89: 96:99:b7:4b:43:7d:76:c2:e0:eb:09:55:8a:59:b0:60:a0:47: 8f:81:07:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUW+LiOOVPQP2Bp0/3LkYGD/sft9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZBN0NCQkJEMUQxRjc5NTEzQzJFRkQ1MjQ3QzNBQTQy RkQwRTc2RjAeFw0yNTExMDUxMzUyMTJaFw0yNTExMDYxNzUxMTJaMDMxMTAvBgNV BAMTKEFDM0FFNzFGMUUzREMzNTkxNTNBMDhFMUVDRDJDMjVCQkE5REM3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx75CwOd35HokJWUQLZB69RYwl 7kAt3O8anyB0UzS4ZmpOcgO+yx5yoE/yEOzjVo8WYldXK62+pfGIMyGlOTZ1qVN2 HPh1SOLAh0rVemYnc/45ggvA3ObMcGkIASHDo2drqOdVmzZIsZhL+F5j3e+t1e4B joZL+g2JM1MJ6RCmLk1jcl3W6P4LVujmFyGmxMDauhvqX+gjL/5gg0fRrtCKZB8v LHOjNBxPLjpidj/aSlOs40Jf6bTJEPdMgFXiiOTiqYPbhslsSFCxP+gvPRNf3Ayc vozYUK+5YvyKmGvfPlT3o3/uWMQMtsnw6YDcoQbqsPdwZg2ECMcDz08G0wb1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrDrnHx49w1kVOgjh7NLCW7qdx2cwHwYDVR0j BBgwFoAUX6fLu9HR95UTwu/VJHw6pC/Q528wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUQ2OG92UU1nS2ZTODVCN1Q1czZLb3dZY3FMMzRVZEh2RWgyY0J6azk4 SzEvMC81RkE3Q0JCQkQxRDFGNzk1MTNDMkVGRDUyNDdDM0FBNDJGRDBFNzZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGQTdDQkJCRDFEMUY3OTUx M0MyRUZENTI0N0MzQUE0MkZEMEU3NkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUQ2OG92UU1nS2ZTODVCN1Q1czZLb3dZY3FMMzRVZEh2RWgyY0J6azk4SzEvMC81 RkE3Q0JCQkQxRDFGNzk1MTNDMkVGRDUyNDdDM0FBNDJGRDBFNzZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwRmt9NXVD+4Mw/sQsI2JAJ9Cpn1hLeaDeFPtq9y16j6eKGewzr64dRzKV5TR TAN+pPhI2ShIWOVeFujUAcYM0MQoI/XzN7NAaWyI446X/5lyNc0S9ntP+3ydxiCN qw/s1EuMJQU02JMmApuUcFqVEBbAzodTUCXghlLopBThR3ykKNpd0h2esbe3Eltb PYzlfkjIHQ3sQaH+DOFr3PJvQGeZbrakDVQtPBnny+0AVCm35dvfjrCW5phXnhlM uViMVFZvTt7GKKfTQGCDGV1Vney1HpkpSLqvx/Pc72a94UMju9isackLjLeJlpm3 S0N9dsLg6wlVilmwYKBHj4EH5g== -----END CERTIFICATE-----Generated at Wed Nov 5 19:33:20 2025 by rpki-client