$ rpki-client -vvf rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.mft File: 84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.mft (raw, json) Hash identifier: cjAOfqnHArroYfjaUFMx1K8B9tsUOmn6ioNtNR4NsrM= Subject key identifier: 25:15:DC:E6:2D:CB:8B:12:F1:A8:D7:B1:EA:86:A2:37:11:6F:01:F1 Authority key identifier: 84:95:5A:3B:55:62:5C:35:E5:CD:6F:BE:13:80:1E:9A:8E:1F:1F:3B Certificate issuer: /CN=84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B Certificate serial: 7045D7DE33BFEFD8B6E8FDB28B2D693506520577 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.mft Manifest number: 2C Signing time: Tue 04 Nov 2025 10:36:48 +0000 Manifest this update: Tue 04 Nov 2025 10:31:48 +0000 Manifest next update: Wed 05 Nov 2025 11:28:48 +0000 Files and hashes: 1: 323830343a393330343a3a2f33332d313238203d3e20323734373439.roa (hash: znL8Hfcp8rJ9wnnT0OWu288Fz83zbxwtXxxzhx/aHeU=) 2: 323830343a393330343a383030303a3a2f33342d313238203d3e20323734373439.roa (hash: 8UlTE0PsRtnYcvuu7MFB/dcIM1uziu0AKGGwyH4carA=) 3: 84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.crl (hash: dBfFcswuKFeXd5MrnlXXgc/OZEjpue1ffgnmbr8GvF8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.crl rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 11:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:45:d7:de:33:bf:ef:d8:b6:e8:fd:b2:8b:2d:69:35:06:52:05:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B Validity Not Before: Nov 4 10:31:48 2025 GMT Not After : Nov 5 11:28:48 2025 GMT Subject: CN=2515DCE62DCB8B12F1A8D7B1EA86A237116F01F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:30:44:2e:8b:9f:93:fc:46:ae:a5:8f:58:48: 44:7d:ed:3a:90:b7:f1:eb:1b:67:db:e5:d1:92:4a: 78:c2:14:8b:67:66:53:95:3f:60:ad:fd:64:25:82: 4d:d3:3c:21:68:c0:a2:3e:29:d7:78:4f:f4:54:7f: 8c:12:5f:37:f3:1d:f4:a1:cc:61:03:37:f7:a2:0a: 61:34:11:2a:09:e2:7a:4c:15:2a:f1:d9:4e:05:36: 28:ab:08:a7:ae:d0:94:01:8e:50:d8:7b:d6:8b:9e: a1:ba:82:75:65:22:5a:41:c4:55:1c:e3:31:85:42: 8b:05:90:95:e8:d0:0b:f5:1f:98:a1:be:b8:d2:39: d0:98:a7:4a:8d:ef:4f:19:df:83:87:23:b1:ee:0d: 46:fc:ef:38:37:7e:99:1f:6f:fa:6b:ae:bb:5a:70: 82:3a:db:b2:df:41:a8:b4:87:d8:8b:6c:9d:7f:0c: e9:e0:49:43:9c:5b:df:5c:01:a9:6c:fb:06:43:dc: 51:ce:eb:50:d7:aa:a4:a5:7b:92:09:71:46:61:be: 02:d0:83:9d:b9:c3:34:af:d4:cc:4f:ce:f9:44:22: 30:b7:7c:a9:9a:b7:7b:4d:6d:cd:3e:d6:09:f8:b1: 42:77:48:ce:e6:11:5c:52:bb:f4:5b:2b:3e:c0:f0: ef:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:15:DC:E6:2D:CB:8B:12:F1:A8:D7:B1:EA:86:A2:37:11:6F:01:F1 X509v3 Authority Key Identifier: keyid:84:95:5A:3B:55:62:5C:35:E5:CD:6F:BE:13:80:1E:9A:8E:1F:1F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:72:75:b2:f8:3b:df:98:8e:84:3e:22:49:65:0d:90:73:94: ec:cc:60:3d:4c:60:78:0c:91:5d:c0:1d:01:4d:f9:88:c7:39: c4:3f:3d:16:81:23:8c:b7:fa:c2:5b:f4:87:ca:75:88:c3:58: 67:8e:99:e4:dd:15:e9:09:cf:9e:3f:15:8d:65:05:4c:46:63: 65:01:02:8d:f2:e1:39:bb:8c:54:57:42:13:ae:ff:ef:1a:05: 3b:40:e4:ad:4e:b5:49:cc:02:ee:4c:c6:24:c5:e8:03:3d:50: b8:44:0a:0c:14:fd:1f:2d:4a:2e:88:6a:22:30:e8:81:e0:d3: 4a:08:c6:6c:84:0d:1a:eb:0a:7f:29:eb:dc:4e:e4:36:bd:c1: 51:7e:ce:ae:62:89:47:eb:ad:78:43:7a:e4:0c:d6:f7:25:c6: 20:41:e1:c2:59:3c:96:9b:94:7b:f3:2b:82:62:34:37:39:48: 98:e9:b5:5d:4b:0d:07:e0:3f:bb:74:22:2e:7e:15:98:d5:41: e2:a6:dd:b5:b5:8b:7c:56:63:e1:78:b8:ff:b4:a4:38:eb:b3: 81:d0:bb:58:9e:27:a5:68:b1:56:dc:4e:f1:07:92:8e:7d:d5: 88:8d:72:81:db:ea:36:9d:77:3d:57:a6:98:c4:a7:04:a7:24: 86:58:76:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcEXX3jO/79i26P2yiy1pNQZSBXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5NTVBM0I1NTYyNUMzNUU1Q0Q2RkJFMTM4MDFFOUE4 RTFGMUYzQjAeFw0yNTExMDQxMDMxNDhaFw0yNTExMDUxMTI4NDhaMDMxMTAvBgNV BAMTKDI1MTVEQ0U2MkRDQjhCMTJGMUE4RDdCMUVBODZBMjM3MTE2RjAxRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuMEQui5+T/EaupY9YSER97TqQ t/HrG2fb5dGSSnjCFItnZlOVP2Ct/WQlgk3TPCFowKI+Kdd4T/RUf4wSXzfzHfSh zGEDN/eiCmE0ESoJ4npMFSrx2U4FNiirCKeu0JQBjlDYe9aLnqG6gnVlIlpBxFUc 4zGFQosFkJXo0Av1H5ihvrjSOdCYp0qN708Z34OHI7HuDUb87zg3fpkfb/prrrta cII627LfQai0h9iLbJ1/DOngSUOcW99cAals+wZD3FHO61DXqqSle5IJcUZhvgLQ g525wzSv1MxPzvlEIjC3fKmat3tNbc0+1gn4sUJ3SM7mEVxSu/RbKz7A8O9fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJRXc5i3LixLxqNex6oaiNxFvAfEwHwYDVR0j BBgwFoAUhJVaO1ViXDXlzW++E4Aemo4fHzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWlZOUZmd2llYm5ySlkySmFEaHA3RFNUZHBFM0pCSkdWemlCdzV4WHI1 Z0ovMC84NDk1NUEzQjU1NjI1QzM1RTVDRDZGQkUxMzgwMUU5QThFMUYxRjNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0OTU1QTNCNTU2MjVDMzVF NUNENkZCRTEzODAxRTlBOEUxRjFGM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWlZOUZmd2llYm5ySlkySmFEaHA3RFNUZHBFM0pCSkdWemlCdzV4WHI1Z0ovMC84 NDk1NUEzQjU1NjI1QzM1RTVDRDZGQkUxMzgwMUU5QThFMUYxRjNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmHJ1svg735iOhD4iSWUNkHOU7MxgPUxgeAyRXcAdAU35iMc5xD89FoEjjLf6 wlv0h8p1iMNYZ46Z5N0V6QnPnj8VjWUFTEZjZQECjfLhObuMVFdCE67/7xoFO0Dk rU61ScwC7kzGJMXoAz1QuEQKDBT9Hy1KLohqIjDogeDTSgjGbIQNGusKfynr3E7k Nr3BUX7OrmKJR+uteEN65AzW9yXGIEHhwlk8lpuUe/MrgmI0NzlImOm1XUsNB+A/ u3QiLn4VmNVB4qbdtbWLfFZj4Xi4/7SkOOuzgdC7WJ4npWixVtxO8QeSjn3ViI1y gdvqNp13PVemmMSnBKckhlh2cQ== -----END CERTIFICATE-----Generated at Wed Nov 5 02:14:18 2025 by rpki-client