$ rpki-client -vvf rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/5B02344955F090AA9E94D77E6A51E3ED2C7509E6.mft File: 5B02344955F090AA9E94D77E6A51E3ED2C7509E6.mft (raw, json) Hash identifier: kuPjpYpDk68H4R7WVs3cWEatw8RXQcCFGF8xPWv59zM= Subject key identifier: 24:9C:5F:25:19:4D:10:3E:A8:BC:91:01:3A:7E:A1:F7:0B:6C:85:45 Authority key identifier: 5B:02:34:49:55:F0:90:AA:9E:94:D7:7E:6A:51:E3:ED:2C:75:09:E6 Certificate issuer: /CN=5B02344955F090AA9E94D77E6A51E3ED2C7509E6 Certificate serial: 4E4CC9FFAA50EDF14482F7C1280073F14E9DFC08 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B02344955F090AA9E94D77E6A51E3ED2C7509E6.cer Subject info access: rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/5B02344955F090AA9E94D77E6A51E3ED2C7509E6.mft Manifest number: 0146 Signing time: Tue 04 Nov 2025 17:32:24 +0000 Manifest this update: Tue 04 Nov 2025 17:27:24 +0000 Manifest next update: Wed 05 Nov 2025 20:26:24 +0000 Files and hashes: 1: 323830343a383064303a3a2f33322d3438203d3e20323732343134.roa (hash: sh147tBt+YHbIwahGVX9LMNScdfcRqIUUGstylUkZzo=) 2: 5B02344955F090AA9E94D77E6A51E3ED2C7509E6.crl (hash: W1ZOxNYoY4iFI5+GhkYvObHJcHVROUe06y1qOnx6zMI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/5B02344955F090AA9E94D77E6A51E3ED2C7509E6.crl rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/5B02344955F090AA9E94D77E6A51E3ED2C7509E6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B02344955F090AA9E94D77E6A51E3ED2C7509E6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:4c:c9:ff:aa:50:ed:f1:44:82:f7:c1:28:00:73:f1:4e:9d:fc:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B02344955F090AA9E94D77E6A51E3ED2C7509E6 Validity Not Before: Nov 4 17:27:24 2025 GMT Not After : Nov 5 20:26:24 2025 GMT Subject: CN=249C5F25194D103EA8BC91013A7EA1F70B6C8545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:14:19:73:94:3d:74:d0:0e:0e:85:60:39: 89:40:81:69:98:3f:d4:ee:e1:93:87:70:a2:8b:e1: b0:f2:6a:43:7e:60:84:7b:9b:b7:36:e6:5c:fd:8c: 43:04:92:64:9e:22:82:2c:56:a5:b7:96:64:7c:1c: af:cd:39:e8:ca:7f:c0:1e:55:25:47:d0:90:84:a0: ae:8c:58:c0:58:e5:de:29:fa:9b:25:e4:bd:90:e1: 6a:1d:03:92:b2:9e:5d:aa:15:0e:f4:ec:92:ac:d0: bb:53:c6:b2:0f:91:cd:3b:e4:09:88:7f:e3:ff:bf: 45:35:06:73:ee:42:45:b8:fc:85:24:39:76:03:ea: 45:08:22:ce:d8:38:ef:00:29:d3:87:99:2f:74:ce: f9:7d:62:1d:57:77:90:8f:12:9b:07:35:52:98:ac: 5c:a9:75:bd:10:3a:b9:79:de:19:3b:ce:0c:e1:a9: 1a:ca:02:e0:86:09:d0:6b:d0:97:34:c9:82:fe:7c: fe:e6:07:22:1d:ad:2f:39:da:05:e7:9d:78:a0:2d: 4b:0f:64:61:84:f2:dc:38:54:61:fc:ea:e1:a9:32: 1d:17:db:34:3d:56:d3:ba:3d:d8:e1:b6:70:d0:cc: cf:36:8d:76:4c:26:26:88:b1:7b:a4:2e:ca:f1:f0: 66:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9C:5F:25:19:4D:10:3E:A8:BC:91:01:3A:7E:A1:F7:0B:6C:85:45 X509v3 Authority Key Identifier: keyid:5B:02:34:49:55:F0:90:AA:9E:94:D7:7E:6A:51:E3:ED:2C:75:09:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/5B02344955F090AA9E94D77E6A51E3ED2C7509E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B02344955F090AA9E94D77E6A51E3ED2C7509E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/5B02344955F090AA9E94D77E6A51E3ED2C7509E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:fa:6c:b0:b0:30:d5:85:90:33:1e:a9:ef:0d:c8:66:85:3f: 44:47:e9:d9:a4:21:ec:ea:78:89:84:85:b8:dd:96:75:a9:bd: 37:ca:64:2a:65:53:e5:a7:9a:06:d7:d8:00:1d:1a:82:08:d1: 85:28:f4:97:ba:b6:23:45:a3:3a:65:d5:c7:ed:5e:d8:f0:2c: 8c:62:4b:d5:34:04:48:6f:6a:ab:d1:b0:6c:59:32:14:4a:2d: 81:03:e5:00:30:95:f8:fb:15:f1:40:74:9d:05:c0:ba:80:42: 03:e8:48:51:b8:71:96:d5:69:99:06:9b:3b:cc:ef:d4:a6:d1: e2:79:cc:bf:e7:2f:55:da:15:6c:a1:d6:a3:78:1c:1b:34:87: 01:a1:05:9e:73:d8:e2:70:04:c8:ca:ee:34:d5:e6:ea:98:b8: 3d:ab:e9:f1:2a:e6:cf:fb:90:18:49:c4:ae:4a:46:53:27:8c: a3:6f:3a:f0:38:c1:da:72:c5:36:ae:8e:23:59:ec:b0:09:15: 1b:b1:ba:2f:eb:b3:b5:e4:20:a6:24:ef:4a:9d:47:1f:45:47: 44:59:f7:bd:20:9b:47:7a:a3:5f:9c:a0:37:17:2f:a7:d1:be: 3c:53:48:80:a0:92:f7:7a:7c:2c:11:af:23:67:05:76:95:6d: 05:bc:a8:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTkzJ/6pQ7fFEgvfBKABz8U6d/AgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIwMjM0NDk1NUYwOTBBQTlFOTRENzdFNkE1MUUzRUQy Qzc1MDlFNjAeFw0yNTExMDQxNzI3MjRaFw0yNTExMDUyMDI2MjRaMDMxMTAvBgNV BAMTKDI0OUM1RjI1MTk0RDEwM0VBOEJDOTEwMTNBN0VBMUY3MEI2Qzg1NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfRQZc5Q9dNAODoVgOYlAgWmY P9Tu4ZOHcKKL4bDyakN+YIR7m7c25lz9jEMEkmSeIoIsVqW3lmR8HK/NOejKf8Ae VSVH0JCEoK6MWMBY5d4p+psl5L2Q4WodA5Kynl2qFQ707JKs0LtTxrIPkc075AmI f+P/v0U1BnPuQkW4/IUkOXYD6kUIIs7YOO8AKdOHmS90zvl9Yh1Xd5CPEpsHNVKY rFypdb0QOrl53hk7zgzhqRrKAuCGCdBr0Jc0yYL+fP7mByIdrS852gXnnXigLUsP ZGGE8tw4VGH86uGpMh0X2zQ9VtO6PdjhtnDQzM82jXZMJiaIsXukLsrx8GatAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJJxfJRlNED6ovJEBOn6h9wtshUUwHwYDVR0j BBgwFoAUWwI0SVXwkKqelNd+alHj7Sx1CeYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1ZWaUhhaHByYzRYb2RYdjR6UzZrcWpCVlgxSDZLeEdEZDJBR3hHcW9a WksvMC81QjAyMzQ0OTU1RjA5MEFBOUU5NEQ3N0U2QTUxRTNFRDJDNzUwOUU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCMDIzNDQ5NTVGMDkwQUE5 RTk0RDc3RTZBNTFFM0VEMkM3NTA5RTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1ZWaUhhaHByYzRYb2RYdjR6UzZrcWpCVlgxSDZLeEdEZDJBR3hHcW9aWksvMC81 QjAyMzQ0OTU1RjA5MEFBOUU5NEQ3N0U2QTUxRTNFRDJDNzUwOUU2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlPpssLAw1YWQMx6p7w3IZoU/REfp2aQh7Op4iYSFuN2Wdam9N8pkKmVT5aea BtfYAB0aggjRhSj0l7q2I0WjOmXVx+1e2PAsjGJL1TQESG9qq9GwbFkyFEotgQPl ADCV+PsV8UB0nQXAuoBCA+hIUbhxltVpmQabO8zv1KbR4nnMv+cvVdoVbKHWo3gc GzSHAaEFnnPY4nAEyMruNNXm6pi4Pavp8Srmz/uQGEnErkpGUyeMo2868DjB2nLF Nq6OI1nssAkVG7G6L+uzteQgpiTvSp1HH0VHRFn3vSCbR3qjX5ygNxcvp9G+PFNI gKCS93p8LBGvI2cFdpVtBbyoJA== -----END CERTIFICATE-----Generated at Wed Nov 5 07:54:08 2025 by rpki-client