$ rpki-client -vvf rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft File: B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft (raw, json) Hash identifier: Dz9mq1nHm1PzN63C86n/imbCjRjpDPvflc71Zvgh9/I= Subject key identifier: 9A:8E:21:8D:89:4F:35:65:04:7B:70:FB:C3:CA:D3:84:56:CB:C4:F3 Authority key identifier: B5:3B:C7:F8:E9:15:6B:14:E1:1D:55:FD:8D:35:8D:0A:91:FC:E8:E2 Certificate issuer: /CN=B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2 Certificate serial: 488778F4A86C7049044BA7FCADA52C1A1F86F689 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft Manifest number: 01E4 Signing time: Tue 04 Nov 2025 20:23:28 +0000 Manifest this update: Tue 04 Nov 2025 20:18:28 +0000 Manifest next update: Wed 05 Nov 2025 22:45:28 +0000 Files and hashes: 1: 323830343a366665383a3a2f33322d3438203d3e20323730363932.roa (hash: ctYl9J9TTj+GlVTx/djEI8ydQ4q/0hlaqEto9cd0hFQ=) 2: 3137372e3132382e35322e302f32322d3234203d3e20323730363932.roa (hash: VT2dIpvor0j1YnG2BQMLIN5CUYFFKwD7FsBUY9oYGtM=) 3: B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl (hash: jXZ0JBUjp/hu9iYYsTVqOLJvIVplUQPsjxtAza+txUs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:87:78:f4:a8:6c:70:49:04:4b:a7:fc:ad:a5:2c:1a:1f:86:f6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2 Validity Not Before: Nov 4 20:18:28 2025 GMT Not After : Nov 5 22:45:28 2025 GMT Subject: CN=9A8E218D894F3565047B70FBC3CAD38456CBC4F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d4:78:53:26:1e:85:9a:5e:5f:06:f0:8a:b6: 56:62:e7:5d:b8:a3:e8:3d:71:3d:b2:71:61:37:b6: 0d:cd:58:85:21:17:23:68:5c:0a:e8:9f:ad:e1:72: b0:aa:24:58:39:3d:b7:42:4e:34:09:e6:85:4d:82: 9c:b0:e4:a7:cb:b6:08:91:b0:c5:f7:e4:ad:a4:46: 7b:18:e3:6f:80:64:80:e5:28:a7:4d:73:eb:03:21: 92:ea:f9:df:85:b0:6e:18:27:9a:a1:4e:07:43:34: c7:19:eb:0a:7c:66:0a:98:75:0e:48:fd:cc:2e:f7: d9:fc:5a:7f:5a:3f:b6:6a:d6:b9:4f:d7:a7:e7:52: 03:88:f3:4b:75:39:96:29:2c:1d:5c:54:62:95:ec: 03:42:e4:06:0d:6f:b8:ca:1e:ec:98:0a:54:74:f9: 52:44:45:d9:58:38:ce:a8:94:bc:c2:10:5c:fb:f1: c0:85:f9:6c:aa:73:e9:bb:f4:f7:72:06:dd:f5:70: ac:5a:b5:39:a1:60:eb:b7:6a:40:a7:19:f5:57:50: 04:d5:48:d7:a9:cd:b9:11:11:8a:e6:e0:92:53:07: b8:0a:5b:51:af:48:4a:ff:75:1c:0a:a1:cf:56:38: 7d:c7:26:79:72:63:30:7b:11:24:d7:c8:b4:c3:d0: cb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8E:21:8D:89:4F:35:65:04:7B:70:FB:C3:CA:D3:84:56:CB:C4:F3 X509v3 Authority Key Identifier: keyid:B5:3B:C7:F8:E9:15:6B:14:E1:1D:55:FD:8D:35:8D:0A:91:FC:E8:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:56:e5:a3:f5:e8:2f:6c:8b:6c:e5:30:27:21:4f:91:2c:ba: 41:b0:2f:40:56:22:3e:68:ed:15:6f:0a:cc:a7:16:84:df:d7: 12:d8:5a:8f:fa:33:39:c4:c5:31:7e:75:bb:bf:c4:a8:e2:7b: 98:98:fb:e8:95:fa:e2:6e:ed:e6:e9:53:56:05:ef:de:ea:0f: 50:4e:54:ad:db:39:2a:3e:57:2d:5f:1b:27:91:54:58:ed:64: d7:cf:b6:5f:3a:c2:58:46:88:0a:21:e0:15:27:a7:77:eb:08: c9:48:6f:45:89:ab:21:23:1a:ae:e8:2d:2e:87:a7:0a:2a:3a: 3a:20:7a:35:44:21:76:b3:49:6e:b6:dd:bc:f7:5e:14:28:2a: 15:22:c4:0f:0b:c1:90:f3:6e:f8:32:3a:51:67:d5:17:08:90: cb:6b:39:31:b1:ce:c6:75:48:da:73:c5:ee:d7:69:cc:e5:d0: 10:7c:af:cd:88:8c:77:c5:1a:bf:20:7f:5a:cb:67:94:30:ca: 7f:16:fc:60:0c:8b:76:89:aa:fc:67:ed:1b:4a:62:3e:79:06: 77:2d:11:a2:90:91:07:6c:19:5d:20:41:85:3a:c6:7f:54:94: c1:29:5d:8b:d3:c6:f7:e6:6b:9d:dd:e1:1c:30:8c:83:06:7b: 82:2f:e7:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSId49KhscEkES6f8raUsGh+G9okwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUzQkM3RjhFOTE1NkIxNEUxMUQ1NUZEOEQzNThEMEE5 MUZDRThFMjAeFw0yNTExMDQyMDE4MjhaFw0yNTExMDUyMjQ1MjhaMDMxMTAvBgNV BAMTKDlBOEUyMThEODk0RjM1NjUwNDdCNzBGQkMzQ0FEMzg0NTZDQkM0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo1HhTJh6Fml5fBvCKtlZi5124 o+g9cT2ycWE3tg3NWIUhFyNoXAron63hcrCqJFg5PbdCTjQJ5oVNgpyw5KfLtgiR sMX35K2kRnsY42+AZIDlKKdNc+sDIZLq+d+FsG4YJ5qhTgdDNMcZ6wp8ZgqYdQ5I /cwu99n8Wn9aP7Zq1rlP16fnUgOI80t1OZYpLB1cVGKV7ANC5AYNb7jKHuyYClR0 +VJERdlYOM6olLzCEFz78cCF+Wyqc+m79PdyBt31cKxatTmhYOu3akCnGfVXUATV SNepzbkREYrm4JJTB7gKW1GvSEr/dRwKoc9WOH3HJnlyYzB7ESTXyLTD0MstAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmo4hjYlPNWUEe3D7w8rThFbLxPMwHwYDVR0j BBgwFoAUtTvH+OkVaxThHVX9jTWNCpH86OIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDIyUzJmRkQzdkJpR2dEYWpkYXY3WU5YeXhVcWpaZ1czeGV4amtWcHUy Tm0vMC9CNTNCQzdGOEU5MTU2QjE0RTExRDU1RkQ4RDM1OEQwQTkxRkNFOEUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1M0JDN0Y4RTkxNTZCMTRF MTFENTVGRDhEMzU4RDBBOTFGQ0U4RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDIyUzJmRkQzdkJpR2dEYWpkYXY3WU5YeXhVcWpaZ1czeGV4amtWcHUyTm0vMC9C NTNCQzdGOEU5MTU2QjE0RTExRDU1RkQ4RDM1OEQwQTkxRkNFOEUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAFblo/XoL2yLbOUwJyFPkSy6QbAvQFYiPmjtFW8KzKcWhN/XEthaj/ozOcTF MX51u7/EqOJ7mJj76JX64m7t5ulTVgXv3uoPUE5Urds5Kj5XLV8bJ5FUWO1k18+2 XzrCWEaICiHgFSend+sIyUhvRYmrISMarugtLoenCio6OiB6NUQhdrNJbrbdvPde FCgqFSLEDwvBkPNu+DI6UWfVFwiQy2s5MbHOxnVI2nPF7tdpzOXQEHyvzYiMd8Ua vyB/WstnlDDKfxb8YAyLdomq/GftG0piPnkGdy0RopCRB2wZXSBBhTrGf1SUwSld i9PG9+Zrnd3hHDCMgwZ7gi/n9A== -----END CERTIFICATE-----Generated at Wed Nov 5 10:10:15 2025 by rpki-client