$ rpki-client -vvf rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft File: 421509EE0B333FF7D576BF479ED0155BADFB2A90.mft (raw, json) Hash identifier: On45vvdjISq874JRGPufctfFfgZiaB/bSdO3RnI7ra4= Subject key identifier: CD:52:D1:09:32:CD:F4:E3:87:99:29:5C:83:7D:BF:B1:D0:C0:22:70 Authority key identifier: 42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90 Certificate issuer: /CN=421509EE0B333FF7D576BF479ED0155BADFB2A90 Certificate serial: 235EFC8BEB3F2799B9EAAFE884A73BAC33F08509 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer Subject info access: rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft Manifest number: 0139 Signing time: Wed 05 Nov 2025 17:25:59 +0000 Manifest this update: Wed 05 Nov 2025 17:20:59 +0000 Manifest next update: Thu 06 Nov 2025 18:25:59 +0000 Files and hashes: 1: 34352e3136362e39362e302f32342d3234203d3e20323637393539.roa (hash: HmIVPaWFHQDFb9ehHmUe+M86a5PovezP3h348KDU/vg=) 2: 421509EE0B333FF7D576BF479ED0155BADFB2A90.crl (hash: CFSsd0zwxi9MI5kQ9JoxF5Dy7zQCc6BzruKfF7g+e+s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 18:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:5e:fc:8b:eb:3f:27:99:b9:ea:af:e8:84:a7:3b:ac:33:f0:85:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421509EE0B333FF7D576BF479ED0155BADFB2A90 Validity Not Before: Nov 5 17:20:59 2025 GMT Not After : Nov 6 18:25:59 2025 GMT Subject: CN=CD52D10932CDF4E38799295C837DBFB1D0C02270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cc:e8:ae:ef:26:f9:60:7f:b2:eb:54:fc:b1: 94:59:e6:29:cd:ca:f0:37:29:7c:e1:6a:e2:28:c0: d2:06:0c:61:1d:dd:a3:43:2d:0f:8a:0e:72:ec:ed: ab:c0:82:9f:d6:95:ca:0c:39:25:18:ca:8c:55:f4: 32:4f:6f:f0:76:f9:ed:ee:2c:a2:0b:e0:4b:ac:c5: 2b:8f:93:41:d8:79:e7:6e:49:eb:13:4a:b1:5b:8a: 8b:9a:68:e2:5a:2d:d7:a9:f0:0f:5f:44:ea:08:4d: 82:00:a0:4f:64:b6:bc:18:4f:42:dc:a1:0c:cc:51: 7e:e6:01:5d:38:fd:6a:77:4a:4e:40:34:b3:68:34: 94:04:ee:a8:48:b3:d7:4c:46:27:c1:e2:e6:a9:37: 7e:51:2d:3d:1d:20:da:ff:32:8d:8b:b1:86:d9:f2: 68:39:49:b1:76:45:49:4e:79:7d:b8:bb:05:79:d8: be:7c:e3:d1:82:9d:c9:f4:ab:97:c9:3b:9e:05:7e: 1e:40:4c:7c:74:e7:b5:28:84:ba:eb:e4:26:1d:43: a2:30:c9:88:1e:12:38:8c:29:98:f9:13:7e:42:ca: 9c:9a:d9:c4:63:f2:5a:20:0e:9f:cc:1d:96:71:86: 57:3c:ba:e4:79:57:20:35:36:c9:f0:7c:af:65:03: 40:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:52:D1:09:32:CD:F4:E3:87:99:29:5C:83:7D:BF:B1:D0:C0:22:70 X509v3 Authority Key Identifier: keyid:42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:4e:17:46:49:07:b5:ab:ef:67:57:3a:05:75:25:e5:54:12: 9e:22:5d:24:f1:3f:f4:57:f3:ac:db:91:3a:e7:26:1f:e1:59: 04:94:16:84:b8:4d:92:22:ad:ab:54:a3:93:78:df:03:67:ff: 1e:ed:f4:f7:6e:a3:16:e4:82:44:c3:74:19:65:c5:bc:e5:3f: ee:13:02:73:78:4c:cc:1c:65:0e:c7:5e:15:58:c6:1c:36:67: ce:48:a6:0a:2d:01:7d:12:83:ca:e8:81:99:b0:dc:e0:d7:e7: f7:3b:9d:f7:c5:7b:ce:08:7b:6f:8c:a2:47:6a:b3:36:c6:b0: 42:3c:4f:60:92:39:91:5e:34:64:5e:3a:51:cb:3e:12:1a:0e: b4:89:13:8c:a0:33:30:73:6d:d3:79:32:3c:14:54:53:58:1e: 6b:f5:56:ca:65:b1:0e:b7:76:19:b7:ae:40:33:83:f1:35:52: a1:9b:89:e8:e2:5b:bd:da:9b:63:60:ea:4c:31:c1:8b:04:20: 93:97:68:35:d9:7f:11:72:de:46:dc:8c:fc:48:b5:f9:6f:10: 6c:61:ab:ec:67:ae:6d:10:3b:ca:39:59:61:d0:a2:87:2c:d6: e6:26:49:e7:24:f1:8a:01:6f:0f:12:ba:a9:4c:32:0d:b0:a6: 19:cd:c1:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI178i+s/J5m56q/ohKc7rDPwhQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxNTA5RUUwQjMzM0ZGN0Q1NzZCRjQ3OUVEMDE1NUJB REZCMkE5MDAeFw0yNTExMDUxNzIwNTlaFw0yNTExMDYxODI1NTlaMDMxMTAvBgNV BAMTKENENTJEMTA5MzJDREY0RTM4Nzk5Mjk1QzgzN0RCRkIxRDBDMDIyNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zOiu7yb5YH+y61T8sZRZ5inN yvA3KXzhauIowNIGDGEd3aNDLQ+KDnLs7avAgp/WlcoMOSUYyoxV9DJPb/B2+e3u LKIL4EusxSuPk0HYeeduSesTSrFbiouaaOJaLdep8A9fROoITYIAoE9ktrwYT0Lc oQzMUX7mAV04/Wp3Sk5ANLNoNJQE7qhIs9dMRifB4uapN35RLT0dINr/Mo2LsYbZ 8mg5SbF2RUlOeX24uwV52L5849GCncn0q5fJO54Ffh5ATHx057UohLrr5CYdQ6Iw yYgeEjiMKZj5E35Cypya2cRj8logDp/MHZZxhlc8uuR5VyA1NsnwfK9lA0BPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzVLRCTLN9OOHmSlcg32/sdDAInAwHwYDVR0j BBgwFoAUQhUJ7gszP/fVdr9HntAVW637KpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRG1UdmJYVVZtTVR2WnJGbjFvd0U5RXhHUDV6ekxOYW1kc3o1b2FwdUxL NVovMC80MjE1MDlFRTBCMzMzRkY3RDU3NkJGNDc5RUQwMTU1QkFERkIyQTkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyMTUwOUVFMEIzMzNGRjdE NTc2QkY0NzlFRDAxNTVCQURGQjJBOTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RG1UdmJYVVZtTVR2WnJGbjFvd0U5RXhHUDV6ekxOYW1kc3o1b2FwdUxLNVovMC80 MjE1MDlFRTBCMzMzRkY3RDU3NkJGNDc5RUQwMTU1QkFERkIyQTkwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEU4XRkkHtavvZ1c6BXUl5VQSniJdJPE/9FfzrNuROucmH+FZBJQWhLhNkiKt q1Sjk3jfA2f/Hu30926jFuSCRMN0GWXFvOU/7hMCc3hMzBxlDsdeFVjGHDZnzkim Ci0BfRKDyuiBmbDc4Nfn9zud98V7zgh7b4yiR2qzNsawQjxPYJI5kV40ZF46Ucs+ EhoOtIkTjKAzMHNt03kyPBRUU1gea/VWymWxDrd2GbeuQDOD8TVSoZuJ6OJbvdqb Y2DqTDHBiwQgk5doNdl/EXLeRtyM/Ei1+W8QbGGr7GeubRA7yjlZYdCihyzW5iZJ 5yTxigFvDxK6qUwyDbCmGc3BLw== -----END CERTIFICATE-----Generated at Wed Nov 5 23:48:53 2025 by rpki-client