$ rpki-client -vvf rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft File: D95EAB9296B47F53E06E1370749CCDB5566F072F.mft (raw, json) Hash identifier: Cid0Sz9oJ4WBOtWUvTJytbfmqEOFTx3O5SXyswvYPWQ= Subject key identifier: A4:3B:7B:13:7C:F4:1C:4F:87:ED:22:6A:16:34:B2:D8:9E:8E:2D:FE Authority key identifier: D9:5E:AB:92:96:B4:7F:53:E0:6E:13:70:74:9C:CD:B5:56:6F:07:2F Certificate issuer: /CN=D95EAB9296B47F53E06E1370749CCDB5566F072F Certificate serial: 2DC616F64A3C3725214E49DB8310A2209ED38EBC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95EAB9296B47F53E06E1370749CCDB5566F072F.cer Subject info access: rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft Manifest number: 012A Signing time: Wed 05 Nov 2025 00:17:59 +0000 Manifest this update: Wed 05 Nov 2025 00:12:59 +0000 Manifest next update: Thu 06 Nov 2025 01:54:59 +0000 Files and hashes: 1: D95EAB9296B47F53E06E1370749CCDB5566F072F.crl (hash: DjQs9ouRaUclb0cxK6ybEzc6OOMGhJKiFYLNbpxrw1Q=) 2: 3136382e3139372e3137362e302f32322d3234203d3e20323635343838.roa (hash: jExsfog9IFzuMeux5ajiGsQ/P3fwEZzxI5InNQT4MkE=) 3: 323830343a333465633a3a2f33322d3336203d3e20323635343838.roa (hash: EoIQWpAtn9W4dgL7mYd8yyBRPUlI0HBl+UrrQT4TK+c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.crl rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95EAB9296B47F53E06E1370749CCDB5566F072F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c6:16:f6:4a:3c:37:25:21:4e:49:db:83:10:a2:20:9e:d3:8e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D95EAB9296B47F53E06E1370749CCDB5566F072F Validity Not Before: Nov 5 00:12:59 2025 GMT Not After : Nov 6 01:54:59 2025 GMT Subject: CN=A43B7B137CF41C4F87ED226A1634B2D89E8E2DFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b3:56:1f:84:46:e8:f4:7c:42:c8:9f:89:c6: 67:76:22:c5:8f:18:c2:31:70:a3:22:86:ba:93:06: 5a:36:5c:56:9b:48:d9:03:d2:a0:ee:a6:83:19:18: 0e:32:21:4e:2a:d0:23:e6:9a:11:4c:29:87:d9:7f: ee:b3:25:3b:65:f9:b4:15:b8:f5:f4:ec:16:52:88: 06:ed:fa:b3:32:b6:39:bf:67:f4:14:d3:58:4e:fe: 17:c5:88:e4:de:b8:80:cb:0e:33:89:6d:2f:64:b2: e0:11:52:cc:77:12:11:4a:dc:75:21:9b:5d:d7:63: 7c:8e:3b:65:85:26:3d:39:ac:63:1a:37:2d:54:cc: 5c:a9:f5:cf:fd:08:1f:94:24:7f:6a:14:fc:f2:22: fd:ae:55:b4:57:fa:4b:a9:5b:b9:16:fe:33:89:f1: 95:2b:64:5c:c7:ae:97:51:25:46:31:ac:db:24:e8: c6:15:47:b8:1f:db:42:40:37:82:3b:56:d8:14:79: 9c:6d:12:3a:a8:e6:0e:f1:c4:f8:6e:30:ca:45:d5: 37:df:c6:75:5f:7d:6b:6f:76:55:73:27:86:1b:0c: 6d:66:2d:a4:10:a3:a1:fb:96:ba:b2:ec:b2:39:d0: ef:0d:d9:58:56:aa:f0:af:72:56:6b:ee:93:58:8d: 6e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3B:7B:13:7C:F4:1C:4F:87:ED:22:6A:16:34:B2:D8:9E:8E:2D:FE X509v3 Authority Key Identifier: keyid:D9:5E:AB:92:96:B4:7F:53:E0:6E:13:70:74:9C:CD:B5:56:6F:07:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95EAB9296B47F53E06E1370749CCDB5566F072F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:40:03:e2:7e:77:bd:ef:5d:40:c5:7a:d3:c0:65:df:a6:e8: 02:75:88:1f:ed:04:df:12:e2:e7:0d:07:ea:76:5e:99:ec:ed: 7f:78:85:d2:3c:7f:2c:06:d1:0f:5a:bb:62:bf:75:80:1f:49: 44:f2:04:0b:ae:7c:d1:d8:c5:38:62:32:10:c9:32:31:b2:36: 9e:ea:e9:82:72:22:38:3f:76:c4:e8:b5:2b:99:64:4a:1f:cb: 2b:08:51:16:a7:a9:b5:ae:f0:0d:66:a1:bd:1e:c2:4d:06:3a: 9d:93:4d:d5:d9:e4:c8:bc:a8:8d:a1:eb:eb:9f:80:4a:2a:23: 83:80:75:29:16:b7:15:e5:00:e8:12:16:53:57:3a:da:6f:3b: 2b:eb:f8:ab:b1:b6:cd:ed:fb:b7:cb:34:fe:40:97:59:99:c9: f9:16:84:4d:02:47:11:55:71:06:6f:5c:53:40:d5:5f:68:e4: 7d:ef:08:00:b5:07:7f:8e:f5:22:ba:6e:51:74:fe:3d:c1:ed: 61:f6:99:7c:1d:a1:bb:d4:ef:a4:b2:c8:38:de:ec:15:7d:8b: a6:53:20:41:d0:7d:92:03:eb:08:2a:36:71:16:40:ae:92:9b: 03:4e:e9:42:1f:dd:f0:7f:14:d4:1e:75:a1:d7:7f:13:f3:5e: 2e:90:09:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULcYW9ko8NyUhTknbgxCiIJ7TjrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk1RUFCOTI5NkI0N0Y1M0UwNkUxMzcwNzQ5Q0NEQjU1 NjZGMDcyRjAeFw0yNTExMDUwMDEyNTlaFw0yNTExMDYwMTU0NTlaMDMxMTAvBgNV BAMTKEE0M0I3QjEzN0NGNDFDNEY4N0VEMjI2QTE2MzRCMkQ4OUU4RTJERkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUs1YfhEbo9HxCyJ+Jxmd2IsWP GMIxcKMihrqTBlo2XFabSNkD0qDupoMZGA4yIU4q0CPmmhFMKYfZf+6zJTtl+bQV uPX07BZSiAbt+rMytjm/Z/QU01hO/hfFiOTeuIDLDjOJbS9ksuARUsx3EhFK3HUh m13XY3yOO2WFJj05rGMaNy1UzFyp9c/9CB+UJH9qFPzyIv2uVbRX+kupW7kW/jOJ 8ZUrZFzHrpdRJUYxrNsk6MYVR7gf20JAN4I7VtgUeZxtEjqo5g7xxPhuMMpF1Tff xnVffWtvdlVzJ4YbDG1mLaQQo6H7lrqy7LI50O8N2VhWqvCvclZr7pNYjW4FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpDt7E3z0HE+H7SJqFjSy2J6OLf4wHwYDVR0j BBgwFoAU2V6rkpa0f1PgbhNwdJzNtVZvBy8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRTZYcThSRno4Y2RWcEJONk5WY0ZqOUpkMUdZb0RxdHVFenpSemZGcTVK QjUvMC9EOTVFQUI5Mjk2QjQ3RjUzRTA2RTEzNzA3NDlDQ0RCNTU2NkYwNzJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NUVBQjkyOTZCNDdGNTNF MDZFMTM3MDc0OUNDREI1NTY2RjA3MkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RTZYcThSRno4Y2RWcEJONk5WY0ZqOUpkMUdZb0RxdHVFenpSemZGcTVKQjUvMC9E OTVFQUI5Mjk2QjQ3RjUzRTA2RTEzNzA3NDlDQ0RCNTU2NkYwNzJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvUAD4n53ve9dQMV608Bl36boAnWIH+0E3xLi5w0H6nZemeztf3iF0jx/LAbR D1q7Yr91gB9JRPIEC6580djFOGIyEMkyMbI2nurpgnIiOD92xOi1K5lkSh/LKwhR Fqepta7wDWahvR7CTQY6nZNN1dnkyLyojaHr65+ASiojg4B1KRa3FeUA6BIWU1c6 2m87K+v4q7G2ze37t8s0/kCXWZnJ+RaETQJHEVVxBm9cU0DVX2jkfe8IALUHf471 IrpuUXT+PcHtYfaZfB2hu9TvpLLION7sFX2LplMgQdB9kgPrCCo2cRZArpKbA07p Qh/d8H8U1B51odd/E/NeLpAJjg== -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:27 2025 by rpki-client