$ rpki-client -vvf rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft File: 5019A6C324130601793432FC2FAFF3DE1F1210C0.mft (raw, json) Hash identifier: /JvNI4YtPDu1+uKkcVyzdVEMDLrdXjXZFGBgNx0EI1s= Subject key identifier: B3:37:10:6B:1F:C9:2D:5C:8D:E0:8D:FB:18:54:0E:D6:16:49:A4:82 Authority key identifier: 50:19:A6:C3:24:13:06:01:79:34:32:FC:2F:AF:F3:DE:1F:12:10:C0 Certificate issuer: /CN=5019A6C324130601793432FC2FAFF3DE1F1210C0 Certificate serial: 6433CFB11671C5C69245FB1BA0177F8F87BD9D2A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer Subject info access: rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft Manifest number: 0303 Signing time: Tue 04 Nov 2025 21:51:37 +0000 Manifest this update: Tue 04 Nov 2025 21:46:37 +0000 Manifest next update: Thu 06 Nov 2025 01:34:37 +0000 Files and hashes: 1: 3137372e38342e32302e302f32322d3234203d3e203532373135.roa (hash: 8Jln5/8Uo9dSq+b7gMCxOW5PiC+lqOyIFD1Wuy3tzVw=) 2: 5019A6C324130601793432FC2FAFF3DE1F1210C0.crl (hash: vQ2UtPFv67zUQHvzum6rV/h9/Nv5zgS42DOVBTUT9X0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.crl rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:33:cf:b1:16:71:c5:c6:92:45:fb:1b:a0:17:7f:8f:87:bd:9d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5019A6C324130601793432FC2FAFF3DE1F1210C0 Validity Not Before: Nov 4 21:46:37 2025 GMT Not After : Nov 6 01:34:37 2025 GMT Subject: CN=B337106B1FC92D5C8DE08DFB18540ED61649A482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:a5:c7:fe:76:b4:ed:2f:9b:da:c4:ae:a3: cf:a1:a6:48:11:4a:59:a7:20:aa:0a:aa:87:9d:4b: 62:f7:d4:36:a7:05:06:89:f7:ab:0b:4c:f9:ba:31: 02:23:8d:eb:f0:d1:de:e0:19:27:68:fd:ed:bb:43: 7c:d4:fd:60:0b:f6:53:28:03:e4:62:a1:02:9c:c3: 23:25:4e:65:8d:81:36:15:11:93:44:02:9e:7c:72: 34:cb:04:b7:ea:88:58:0d:5f:0a:25:24:18:21:89: 53:51:e1:d5:9d:e9:6d:a6:94:c8:81:dc:38:ef:f0: 68:9f:03:24:ff:6f:89:7f:2a:0e:01:22:18:21:5c: 15:24:aa:8c:a9:97:da:ca:5b:2c:52:bd:03:35:b1: 87:7b:ba:42:f6:44:c8:46:0a:78:28:86:14:9b:d3: e9:6f:cb:12:f9:73:8b:4b:e6:d3:68:6e:cf:dc:dc: 95:36:c4:59:0d:75:0c:ba:41:34:03:4c:f6:64:d4: 5c:7d:b6:e1:4f:08:fe:77:9e:3d:e7:18:d6:50:40: 89:8d:f1:79:28:d4:8a:7e:c0:b9:96:d1:0f:4d:29: ff:b3:7e:e0:ff:fe:51:88:14:b3:56:31:44:15:16: 4d:f8:07:ab:07:d8:f5:56:f5:b7:e4:22:86:03:2b: d1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:37:10:6B:1F:C9:2D:5C:8D:E0:8D:FB:18:54:0E:D6:16:49:A4:82 X509v3 Authority Key Identifier: keyid:50:19:A6:C3:24:13:06:01:79:34:32:FC:2F:AF:F3:DE:1F:12:10:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:23:07:2e:d7:10:05:e8:22:da:c2:fd:90:bf:42:31:f1:46: 7c:b2:ef:4d:fd:48:4d:a7:66:ad:0b:4a:2e:f1:aa:e3:fa:46: dd:7a:fe:35:0c:61:9e:e6:6b:c7:1a:f4:69:2f:20:6f:8d:be: e4:26:ed:a0:2b:6c:33:2f:e6:ca:ba:ff:73:02:4c:67:79:77: 7c:4b:9c:d6:31:c3:8b:34:e2:99:30:e3:01:7c:6d:60:bc:c0: 1f:e9:5a:1b:da:0b:56:be:a4:d7:64:0f:2f:e4:39:a5:a9:5e: d8:e0:32:8a:d2:d8:77:0d:30:a9:ef:dc:82:4d:69:a9:2b:0d: 97:be:21:58:0b:19:68:b5:8e:89:86:b5:a2:a4:f9:d0:9f:99: 5c:7c:b7:84:2b:5f:4f:0b:9e:c7:ec:21:86:64:3f:dd:b0:80: 8c:32:db:70:5b:18:cb:eb:2f:db:0f:5d:32:53:d1:97:eb:fc: e9:79:af:6e:43:35:42:4a:47:7c:fe:2d:f1:cc:fb:c0:a8:47: f9:8e:8b:fd:09:b6:1a:3d:04:b5:d8:42:42:b3:e6:97:a6:c9: 52:9a:64:76:8f:20:a5:a2:d8:cf:6f:2c:07:12:58:c4:af:2e: af:c6:32:b0:05:e0:c0:eb:55:6e:eb:c9:92:91:4a:39:3f:09: 0d:d0:8f:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZDPPsRZxxcaSRfsboBd/j4e9nSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTAxOUE2QzMyNDEzMDYwMTc5MzQzMkZDMkZBRkYzREUx RjEyMTBDMDAeFw0yNTExMDQyMTQ2MzdaFw0yNTExMDYwMTM0MzdaMDMxMTAvBgNV BAMTKEIzMzcxMDZCMUZDOTJENUM4REUwOERGQjE4NTQwRUQ2MTY0OUE0ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5f6XH/na07S+b2sSuo8+hpkgR SlmnIKoKqoedS2L31DanBQaJ96sLTPm6MQIjjevw0d7gGSdo/e27Q3zU/WAL9lMo A+RioQKcwyMlTmWNgTYVEZNEAp58cjTLBLfqiFgNXwolJBghiVNR4dWd6W2mlMiB 3Djv8GifAyT/b4l/Kg4BIhghXBUkqoypl9rKWyxSvQM1sYd7ukL2RMhGCngohhSb 0+lvyxL5c4tL5tNobs/c3JU2xFkNdQy6QTQDTPZk1Fx9tuFPCP53nj3nGNZQQImN 8Xko1Ip+wLmW0Q9NKf+zfuD//lGIFLNWMUQVFk34B6sH2PVW9bfkIoYDK9FvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUszcQax/JLVyN4I37GFQO1hZJpIIwHwYDVR0j BBgwFoAUUBmmwyQTBgF5NDL8L6/z3h8SEMAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ25QS2MyOXdQWmdWeHY4UE1iQ3Z1M1lQQVhNTmVSUVlOZEZGWnZkU3lK a04vMS81MDE5QTZDMzI0MTMwNjAxNzkzNDMyRkMyRkFGRjNERTFGMTIxMEMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwMTlBNkMzMjQxMzA2MDE3 OTM0MzJGQzJGQUZGM0RFMUYxMjEwQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q25QS2MyOXdQWmdWeHY4UE1iQ3Z1M1lQQVhNTmVSUVlOZEZGWnZkU3lKa04vMS81 MDE5QTZDMzI0MTMwNjAxNzkzNDMyRkMyRkFGRjNERTFGMTIxMEMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuiMHLtcQBegi2sL9kL9CMfFGfLLvTf1ITadmrQtKLvGq4/pG3Xr+NQxhnuZr xxr0aS8gb42+5CbtoCtsMy/myrr/cwJMZ3l3fEuc1jHDizTimTDjAXxtYLzAH+la G9oLVr6k12QPL+Q5pale2OAyitLYdw0wqe/cgk1pqSsNl74hWAsZaLWOiYa1oqT5 0J+ZXHy3hCtfTwuex+whhmQ/3bCAjDLbcFsYy+sv2w9dMlPRl+v86XmvbkM1QkpH fP4t8cz7wKhH+Y6L/Qm2Gj0EtdhCQrPml6bJUppkdo8gpaLYz28sBxJYxK8ur8Yy sAXgwOtVbuvJkpFKOT8JDdCP/g== -----END CERTIFICATE-----Generated at Wed Nov 5 00:59:00 2025 by rpki-client