$ rpki-client -vvf rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft File: 72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft (raw, json) Hash identifier: Usv1aMe+371xyu3lMkd1U3dka/alOvtyiKFzj1AvKJg= Subject key identifier: 39:8D:A8:80:C8:12:D4:30:8B:20:B2:89:13:D2:04:DC:C8:E7:68:A9 Authority key identifier: 72:CB:F8:70:1C:7C:0A:ED:63:F7:B6:95:5F:D6:EA:C6:5C:E3:2E:C5 Certificate issuer: /CN=72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5 Certificate serial: 376EC5C2EFDDA200EA4E7D528A8791D05A867891 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.cer Subject info access: rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft Manifest number: 0165 Signing time: Wed 05 Nov 2025 08:55:57 +0000 Manifest this update: Wed 05 Nov 2025 08:50:57 +0000 Manifest next update: Thu 06 Nov 2025 10:42:57 +0000 Files and hashes: 1: 72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.crl (hash: LVgCNzyoYg3CJWOdOPMT4be4qUXLTKSfGtoNsVCfCSE=) 2: 323830343a393264633a3a2f33322d3336203d3e20323734373337.roa (hash: rKtywLS1zxT4+jk+4qBxZeJh+sNRpKnf9wjGS48HysM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.crl rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 10:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:6e:c5:c2:ef:dd:a2:00:ea:4e:7d:52:8a:87:91:d0:5a:86:78:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5 Validity Not Before: Nov 5 08:50:57 2025 GMT Not After : Nov 6 10:42:57 2025 GMT Subject: CN=398DA880C812D4308B20B28913D204DCC8E768A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:26:cb:84:43:d3:d7:90:2d:3a:4d:91:6f:25: 18:b1:2a:e8:06:29:4a:27:31:d5:bf:4d:30:55:41: 18:16:59:48:0f:5d:8b:d7:af:45:84:c9:b2:c4:ab: 37:12:e9:3c:4e:be:f6:21:b4:62:c6:a4:71:ff:41: 0a:d4:0f:e7:db:84:cd:1c:61:86:d2:a8:d3:b7:3f: bd:32:32:e4:00:3b:b9:81:aa:aa:f9:87:5c:fb:5b: 76:cf:45:e2:74:10:be:88:49:e3:b3:ea:6a:e4:e3: a9:f3:a1:0f:45:8a:68:bb:81:97:1d:09:61:eb:f5: ac:28:9f:1e:f4:19:88:d4:63:19:17:c3:50:cf:42: 5b:d0:a9:4f:52:5f:a4:3a:61:48:df:bb:0b:fe:0b: 6a:8c:88:9d:ed:ae:1d:11:b8:82:a0:38:ff:aa:10: ed:07:bf:84:f1:b7:5c:1b:69:92:22:fb:1b:9f:c7: 28:b1:0f:11:39:5a:4c:b0:00:16:3d:0e:d3:e5:57: b8:5b:ce:c1:c2:d4:65:ab:0b:44:3f:01:19:43:66: 13:fd:4e:16:92:37:af:5d:5e:26:ac:02:f6:5f:4b: f0:31:ad:c2:40:53:59:dc:4f:03:bf:1f:58:f2:70: f6:df:78:6b:66:49:9f:e9:7b:f1:5e:c8:9d:b9:2f: de:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8D:A8:80:C8:12:D4:30:8B:20:B2:89:13:D2:04:DC:C8:E7:68:A9 X509v3 Authority Key Identifier: keyid:72:CB:F8:70:1C:7C:0A:ED:63:F7:B6:95:5F:D6:EA:C6:5C:E3:2E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:32:bb:b4:1c:3b:ad:04:65:44:04:3f:3b:d2:67:c3:08:4d: 9d:95:3e:70:88:e9:52:90:d0:fb:45:93:42:d3:76:3a:49:e3: 7f:34:04:38:72:b6:e3:20:d1:ad:05:6b:42:fa:cf:51:cb:b2: ea:8a:4f:01:bf:f4:de:41:a4:8c:bd:fa:cb:40:13:fe:4e:31: 53:3e:d1:d8:d7:b3:d1:6f:cb:db:6d:7c:0e:94:39:39:d9:b7: 6d:73:45:64:78:2a:7b:26:6b:33:6b:09:13:b6:92:18:32:04: e5:d7:b8:e6:22:a2:ad:2a:bd:40:60:b6:0f:c1:d7:92:3c:17: d1:ee:0a:3a:1f:60:fc:c0:64:fa:18:fd:46:72:69:c1:33:e2: 48:48:14:9d:94:88:3a:ed:0e:d1:ef:a7:26:b4:b9:20:f9:13: 97:98:ee:fa:5a:c9:98:92:78:25:5c:cd:2b:46:3e:d3:00:4b: b6:12:38:99:20:40:70:f5:46:3a:e7:9d:78:4a:25:c2:0d:c3: f9:4e:2f:ba:41:86:0a:9a:3f:e9:26:d8:6a:8c:2b:aa:a5:e0: 7f:60:bf:dd:40:0c:40:2d:1f:1e:df:e2:b2:e9:9a:1f:e9:c6: c2:44:c9:f6:bb:91:8f:21:a7:9e:e2:28:21:0a:a9:ac:1b:6d: 27:d0:e7:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN27Fwu/dogDqTn1SioeR0FqGeJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJDQkY4NzAxQzdDMEFFRDYzRjdCNjk1NUZENkVBQzY1 Q0UzMkVDNTAeFw0yNTExMDUwODUwNTdaFw0yNTExMDYxMDQyNTdaMDMxMTAvBgNV BAMTKDM5OERBODgwQzgxMkQ0MzA4QjIwQjI4OTEzRDIwNERDQzhFNzY4QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6JsuEQ9PXkC06TZFvJRixKugG KUonMdW/TTBVQRgWWUgPXYvXr0WEybLEqzcS6TxOvvYhtGLGpHH/QQrUD+fbhM0c YYbSqNO3P70yMuQAO7mBqqr5h1z7W3bPReJ0EL6ISeOz6mrk46nzoQ9Fimi7gZcd CWHr9awonx70GYjUYxkXw1DPQlvQqU9SX6Q6YUjfuwv+C2qMiJ3trh0RuIKgOP+q EO0Hv4Txt1wbaZIi+xufxyixDxE5WkywABY9DtPlV7hbzsHC1GWrC0Q/ARlDZhP9 ThaSN69dXiasAvZfS/AxrcJAU1ncTwO/H1jycPbfeGtmSZ/pe/FeyJ25L94rAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOY2ogMgS1DCLILKJE9IE3MjnaKkwHwYDVR0j BBgwFoAUcsv4cBx8Cu1j97aVX9bqxlzjLsUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREFObkQzVkhvYWlOWkx5dWNpS3NHQzc4S05KZzNpTVh3QTZCdk56bW4y dkYvMC83MkNCRjg3MDFDN0MwQUVENjNGN0I2OTU1RkQ2RUFDNjVDRTMyRUM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyQ0JGODcwMUM3QzBBRUQ2 M0Y3QjY5NTVGRDZFQUM2NUNFMzJFQzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REFObkQzVkhvYWlOWkx5dWNpS3NHQzc4S05KZzNpTVh3QTZCdk56bW4ydkYvMC83 MkNCRjg3MDFDN0MwQUVENjNGN0I2OTU1RkQ2RUFDNjVDRTMyRUM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPDK7tBw7rQRlRAQ/O9JnwwhNnZU+cIjpUpDQ+0WTQtN2OknjfzQEOHK24yDR rQVrQvrPUcuy6opPAb/03kGkjL36y0AT/k4xUz7R2Nez0W/L2218DpQ5Odm3bXNF ZHgqeyZrM2sJE7aSGDIE5de45iKirSq9QGC2D8HXkjwX0e4KOh9g/MBk+hj9RnJp wTPiSEgUnZSIOu0O0e+nJrS5IPkTl5ju+lrJmJJ4JVzNK0Y+0wBLthI4mSBAcPVG OuedeEolwg3D+U4vukGGCpo/6SbYaowrqqXgf2C/3UAMQC0fHt/isumaH+nGwkTJ 9ruRjyGnnuIoIQqprBttJ9DnSA== -----END CERTIFICATE-----Generated at Wed Nov 5 11:57:27 2025 by rpki-client