$ rpki-client -vvf rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft File: 5068952903F5F17C21FA5B2EC1BE472DF306072C.mft (raw, json) Hash identifier: q38Wk43x51TDj+c2KZG0uKjcKn71JOZfcJNrMPv2wrg= Subject key identifier: DA:E6:5D:44:4E:64:4A:79:1B:DA:C5:5D:36:A7:75:68:EC:F7:DB:C1 Authority key identifier: 50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C Certificate issuer: /CN=5068952903F5F17C21FA5B2EC1BE472DF306072C Certificate serial: 7EE0E19A3B6BDEA2795EA9EB7CF083D4C65A112F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft Manifest number: 02BA Signing time: Tue 04 Nov 2025 20:01:27 +0000 Manifest this update: Tue 04 Nov 2025 19:56:27 +0000 Manifest next update: Wed 05 Nov 2025 22:05:27 +0000 Files and hashes: 1: 5068952903F5F17C21FA5B2EC1BE472DF306072C.crl (hash: C6TBfJyGRfVm4o813/zWY5vH6nwM/oyjEQYct6zYsm0=) 2: 3137302e37392e302e302f32322d3332203d3e20323636323839.roa (hash: 3UcJp+sAAG3um4LkAt+wonBgw14MEtXK+Iy70mF7x7c=) 3: 323830343a333537633a3a2f33322d313238203d3e20323636323839.roa (hash: BXkrp2Mvx2nWGCFFgusdd+uwhU+HbeeOijlRUAvUL8s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e0:e1:9a:3b:6b:de:a2:79:5e:a9:eb:7c:f0:83:d4:c6:5a:11:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5068952903F5F17C21FA5B2EC1BE472DF306072C Validity Not Before: Nov 4 19:56:27 2025 GMT Not After : Nov 5 22:05:27 2025 GMT Subject: CN=DAE65D444E644A791BDAC55D36A77568ECF7DBC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:59:7a:10:8a:eb:03:db:94:c2:0b:2d:8f:17: ef:26:2a:d5:8a:4b:8b:6c:1c:28:fe:21:b1:77:76: f3:55:f4:06:f4:e7:86:e6:d5:62:b4:8d:54:99:f4: bf:49:5d:1a:75:1a:2b:16:0d:89:b9:74:c4:35:1c: 11:75:68:93:da:90:ef:dd:f9:74:e4:ec:ea:83:f5: db:19:54:8e:bf:b1:69:16:38:b7:ba:21:0b:bd:00: 56:46:8d:f0:d1:b3:40:76:78:02:b3:32:a2:a5:eb: 98:d7:27:cc:f8:dd:68:8d:81:80:dc:90:c8:2e:0a: 18:48:0c:86:b6:18:16:43:7b:64:bb:d5:a1:5c:17: da:f9:89:9c:f8:da:72:ec:04:ae:3c:a7:0f:ca:a4: b0:da:b3:f7:f9:8f:c5:28:6b:4c:1e:69:ac:64:81: a9:40:2a:89:0e:32:b8:13:c6:85:be:dc:9a:1a:9b: 8d:e8:f7:1c:3c:bc:4e:9a:16:0f:3e:26:e7:6f:61: cd:d4:f7:5a:2b:d2:e7:b5:a8:47:99:f1:31:d1:74: f0:2b:ac:45:52:b0:71:c8:90:bb:59:60:e9:06:41: db:a4:fa:3d:88:95:bd:f2:72:76:58:f7:96:8a:99: 37:28:23:d2:dc:1e:6b:54:26:fe:d3:30:f5:02:9d: 53:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E6:5D:44:4E:64:4A:79:1B:DA:C5:5D:36:A7:75:68:EC:F7:DB:C1 X509v3 Authority Key Identifier: keyid:50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:41:00:e5:00:db:95:14:6b:b6:ff:11:6a:69:3c:2f:1c:b7: e7:22:3f:d9:c2:2d:ef:3c:3a:3f:79:88:ce:96:ab:34:2f:bc: aa:06:ba:cc:48:83:be:49:e9:d6:22:1b:31:49:dd:40:af:b6: 5c:3b:04:70:f0:fc:92:39:21:87:71:ea:01:1d:7e:a5:97:f1: 65:a1:85:fc:65:fc:ff:21:2c:1f:83:0f:ef:58:b8:52:d9:28: 08:4e:70:b2:fa:5d:28:96:b1:dc:8f:13:fe:e6:25:4c:a0:b7: db:d8:b7:e6:51:f9:50:3f:fc:4f:f8:47:a9:41:82:82:bb:e7: db:69:e5:1f:40:88:79:d0:69:6c:94:72:18:47:79:f1:08:b8: 88:5d:21:fd:7f:56:35:41:c1:aa:d4:a9:70:93:ec:b6:39:6c: f0:c5:fd:27:2c:d5:c6:19:43:37:9f:f9:ad:02:c8:78:0e:a0: 69:5f:a5:93:40:f6:c7:e4:3b:88:6b:fb:20:02:3d:16:fa:39: 7d:28:d3:6f:eb:fb:10:6f:a6:04:53:7f:64:cc:7e:08:dc:3e: 6b:66:29:9f:78:0a:e5:97:37:53:c1:08:99:f9:b1:d8:a3:c0: eb:d5:7f:81:c7:64:7d:02:5d:bb:21:fb:0a:18:ee:88:11:b6: ea:b8:16:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfuDhmjtr3qJ5XqnrfPCD1MZaES8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA2ODk1MjkwM0Y1RjE3QzIxRkE1QjJFQzFCRTQ3MkRG MzA2MDcyQzAeFw0yNTExMDQxOTU2MjdaFw0yNTExMDUyMjA1MjdaMDMxMTAvBgNV BAMTKERBRTY1RDQ0NEU2NDRBNzkxQkRBQzU1RDM2QTc3NTY4RUNGN0RCQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYWXoQiusD25TCCy2PF+8mKtWK S4tsHCj+IbF3dvNV9Ab054bm1WK0jVSZ9L9JXRp1GisWDYm5dMQ1HBF1aJPakO/d +XTk7OqD9dsZVI6/sWkWOLe6IQu9AFZGjfDRs0B2eAKzMqKl65jXJ8z43WiNgYDc kMguChhIDIa2GBZDe2S71aFcF9r5iZz42nLsBK48pw/KpLDas/f5j8Uoa0weaaxk galAKokOMrgTxoW+3Joam43o9xw8vE6aFg8+JudvYc3U91or0ue1qEeZ8THRdPAr rEVSsHHIkLtZYOkGQduk+j2Ilb3ycnZY95aKmTcoI9LcHmtUJv7TMPUCnVPpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2uZdRE5kSnkb2sVdNqd1aOz328EwHwYDVR0j BBgwFoAUUGiVKQP18Xwh+lsuwb5HLfMGBywwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2o1bzY5S1lHa3dmWFBvcDR3SE5CUzVpdFVMQ3hSUFl0aXpyWktEdWh1 SFcvMC81MDY4OTUyOTAzRjVGMTdDMjFGQTVCMkVDMUJFNDcyREYzMDYwNzJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwNjg5NTI5MDNGNUYxN0My MUZBNUIyRUMxQkU0NzJERjMwNjA3MkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2o1bzY5S1lHa3dmWFBvcDR3SE5CUzVpdFVMQ3hSUFl0aXpyWktEdWh1SFcvMC81 MDY4OTUyOTAzRjVGMTdDMjFGQTVCMkVDMUJFNDcyREYzMDYwNzJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwkEA5QDblRRrtv8Ramk8Lxy35yI/2cIt7zw6P3mIzparNC+8qga6zEiDvknp 1iIbMUndQK+2XDsEcPD8kjkhh3HqAR1+pZfxZaGF/GX8/yEsH4MP71i4UtkoCE5w svpdKJax3I8T/uYlTKC329i35lH5UD/8T/hHqUGCgrvn22nlH0CIedBpbJRyGEd5 8Qi4iF0h/X9WNUHBqtSpcJPstjls8MX9JyzVxhlDN5/5rQLIeA6gaV+lk0D2x+Q7 iGv7IAI9Fvo5fSjTb+v7EG+mBFN/ZMx+CNw+a2Ypn3gK5Zc3U8EImfmx2KPA69V/ gcdkfQJduyH7ChjuiBG26rgWOg== -----END CERTIFICATE-----Generated at Wed Nov 5 11:36:13 2025 by rpki-client