$ rpki-client -vvf rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft File: 5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft (raw, json) Hash identifier: kmhMUf4ky3RfpQ5ZdAbAUVrlxo0oxoPpeon8/wft1q4= Subject key identifier: D5:58:67:65:30:C2:E9:2F:C2:1D:9B:99:D0:99:52:81:95:3A:1C:60 Authority key identifier: 5D:43:AF:2F:C3:A0:BD:09:5F:D0:62:62:5C:5E:CE:34:B8:4A:95:23 Certificate issuer: /CN=5D43AF2FC3A0BD095FD062625C5ECE34B84A9523 Certificate serial: 38AE4D418A9CF745DFB1C6624C9D6F2A00F84B5C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer Subject info access: rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft Manifest number: 0303 Signing time: Tue 04 Nov 2025 16:43:36 +0000 Manifest this update: Tue 04 Nov 2025 16:38:36 +0000 Manifest next update: Wed 05 Nov 2025 17:29:36 +0000 Files and hashes: 1: 5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl (hash: SM5EipkX04tfzP/9Y0XkQmx6rDpVoyeopvUvNJ7IcY4=) 2: 3137372e35322e3136382e302f32322d3232203d3e20323632343439.roa (hash: +7GsRgs7NRIZR5WPMQvqtfPP2hg4idIHIzt0q9r+wrk=) 3: 3137372e35322e3137302e302f32342d3234203d3e20323632343439.roa (hash: 7nYq6K8fdw4ZRybGXDs4Kkd0F3fRmBUFACD2hQSjlMM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 17:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ae:4d:41:8a:9c:f7:45:df:b1:c6:62:4c:9d:6f:2a:00:f8:4b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D43AF2FC3A0BD095FD062625C5ECE34B84A9523 Validity Not Before: Nov 4 16:38:36 2025 GMT Not After : Nov 5 17:29:36 2025 GMT Subject: CN=D558676530C2E92FC21D9B99D0995281953A1C60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:d5:b5:ca:4e:b1:83:56:65:5e:9e:3b:bd: 4f:d9:50:33:27:08:28:06:48:07:5c:ab:05:37:74: 55:39:ee:b2:49:f7:a6:b2:fa:a1:e9:00:e9:46:13: b9:ba:07:48:39:1c:99:f5:a8:47:d9:2d:d6:fc:6e: 1e:32:6b:b8:a6:ab:9e:87:6d:f9:0e:fc:a0:3f:84: 91:97:f1:fb:b7:23:a8:fd:85:18:0d:19:92:28:69: 6b:08:0e:ad:70:25:04:6b:6e:0c:58:27:8d:4a:be: 5e:43:5a:21:06:8e:90:c2:6e:73:43:d4:67:3d:c7: ee:cc:a1:10:08:78:e7:f9:4e:9e:60:46:bf:98:ca: 22:16:aa:a2:a9:8a:7e:1e:3e:69:a3:a4:34:32:e9: 9e:44:38:9b:6c:ff:bc:b3:ac:2f:9a:38:31:f7:44: 45:ce:39:ec:a8:dd:12:95:df:3e:ca:65:ed:18:fc: 4f:7a:e5:79:c5:4c:e6:e9:09:c5:66:09:0f:d6:52: 45:a9:8b:6b:79:8a:93:97:90:33:1d:2f:de:09:33: bd:66:66:f3:a9:cd:e8:77:45:42:ca:c0:3b:21:82: 4f:a9:8f:18:de:77:e8:d7:f2:fa:ff:7b:f1:e0:81: e1:42:52:eb:32:f2:16:5b:4f:80:20:c4:c2:99:79: cc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:58:67:65:30:C2:E9:2F:C2:1D:9B:99:D0:99:52:81:95:3A:1C:60 X509v3 Authority Key Identifier: keyid:5D:43:AF:2F:C3:A0:BD:09:5F:D0:62:62:5C:5E:CE:34:B8:4A:95:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:8b:0e:89:3e:a5:5b:5d:cd:8e:16:a5:5e:81:55:1a:5f:bd: cd:71:ef:7a:24:d9:43:ee:13:58:ea:c7:95:cf:c5:fa:90:95: 24:3c:67:43:95:a2:81:6f:70:77:f0:0b:28:b8:72:28:d4:66: 6f:f9:95:91:a9:e4:44:3e:f4:09:f2:05:32:ff:2a:e2:02:36: e5:90:a8:70:f9:22:47:54:bc:f3:97:e7:84:31:18:cf:64:1b: de:91:9a:33:1e:af:38:3c:9a:f0:98:d2:ee:92:6e:28:8d:37: f0:58:f2:56:61:c6:d1:9b:5e:21:bc:bc:cb:96:61:69:1a:31: 66:95:4a:4c:94:70:f0:2a:9f:b6:0a:89:e1:ec:84:0b:a3:2c: 27:73:90:70:a7:d2:74:27:cb:95:bc:bc:4d:37:37:62:1e:54: 43:75:e3:81:bb:97:db:f6:a9:4e:98:13:ce:56:a3:55:ab:db: a4:5d:dc:73:56:ce:91:fa:6f:65:82:9e:08:09:46:7d:7d:24: e9:6d:17:7f:e1:c4:2f:53:e9:49:c4:8c:8c:32:6e:60:1e:78: 96:95:55:bd:31:1b:b9:f4:73:43:b3:c3:a1:ad:d4:8e:c3:54: 2d:d3:f4:7f:6f:7d:e6:97:c8:2a:1a:c1:f0:50:08:1e:1e:e4: 1b:00:c3:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOK5NQYqc90XfscZiTJ1vKgD4S1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ0M0FGMkZDM0EwQkQwOTVGRDA2MjYyNUM1RUNFMzRC ODRBOTUyMzAeFw0yNTExMDQxNjM4MzZaFw0yNTExMDUxNzI5MzZaMDMxMTAvBgNV BAMTKEQ1NTg2NzY1MzBDMkU5MkZDMjFEOUI5OUQwOTk1MjgxOTUzQTFDNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLt9W1yk6xg1ZlXp47vU/ZUDMn CCgGSAdcqwU3dFU57rJJ96ay+qHpAOlGE7m6B0g5HJn1qEfZLdb8bh4ya7imq56H bfkO/KA/hJGX8fu3I6j9hRgNGZIoaWsIDq1wJQRrbgxYJ41Kvl5DWiEGjpDCbnND 1Gc9x+7MoRAIeOf5Tp5gRr+YyiIWqqKpin4ePmmjpDQy6Z5EOJts/7yzrC+aODH3 REXOOeyo3RKV3z7KZe0Y/E965XnFTObpCcVmCQ/WUkWpi2t5ipOXkDMdL94JM71m ZvOpzeh3RULKwDshgk+pjxjed+jX8vr/e/HggeFCUusy8hZbT4AgxMKZecx/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1VhnZTDC6S/CHZuZ0JlSgZU6HGAwHwYDVR0j BBgwFoAUXUOvL8OgvQlf0GJiXF7ONLhKlSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3NWc1huZ0dyamdaaWY0SEo3QllQMUd1anMzNURaWDZTRERqZUM1WWJR NkcvMS81RDQzQUYyRkMzQTBCRDA5NUZEMDYyNjI1QzVFQ0UzNEI4NEE5NTIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVENDNBRjJGQzNBMEJEMDk1 RkQwNjI2MjVDNUVDRTM0Qjg0QTk1MjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3NWc1huZ0dyamdaaWY0SEo3QllQMUd1anMzNURaWDZTRERqZUM1WWJRNkcvMS81 RDQzQUYyRkMzQTBCRDA5NUZEMDYyNjI1QzVFQ0UzNEI4NEE5NTIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXosOiT6lW13NjhalXoFVGl+9zXHveiTZQ+4TWOrHlc/F+pCVJDxnQ5WigW9w d/ALKLhyKNRmb/mVkankRD70CfIFMv8q4gI25ZCocPkiR1S885fnhDEYz2Qb3pGa Mx6vODya8JjS7pJuKI038FjyVmHG0ZteIby8y5ZhaRoxZpVKTJRw8CqftgqJ4eyE C6MsJ3OQcKfSdCfLlby8TTc3Yh5UQ3XjgbuX2/apTpgTzlajVavbpF3cc1bOkfpv ZYKeCAlGfX0k6W0Xf+HEL1PpScSMjDJuYB54lpVVvTEbufRzQ7PDoa3UjsNULdP0 f2995pfIKhrB8FAIHh7kGwDD8w== -----END CERTIFICATE-----Generated at Wed Nov 5 08:48:39 2025 by rpki-client