$ rpki-client -vvf rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft File: A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft (raw, json) Hash identifier: G8W3bQv+nYo0BkAf4UdUGoSOsXMNENGo9qJuJZA0Ulo= Subject key identifier: 3C:EA:AB:72:83:73:41:DF:89:F6:26:6B:41:0B:D1:19:8A:85:D8:6F Authority key identifier: A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41 Certificate issuer: /CN=A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041 Certificate serial: 6D6C5EAADBB8E5AB1403E56584C6112738FD7805 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer Subject info access: rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft Manifest number: 02EB Signing time: Tue 04 Nov 2025 17:00:59 +0000 Manifest this update: Tue 04 Nov 2025 16:55:59 +0000 Manifest next update: Wed 05 Nov 2025 20:44:59 +0000 Files and hashes: 1: 323830343a386162633a3a2f33322d313238203d3e20323733363839.roa (hash: ItHOB5NSOr3tcfc/B7XnxF4I381M7cjemmgQf3Y+EaI=) 2: A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl (hash: mD5p1arVNoUdgo27V0H2xSdAinmNcQrTGIzs5Fv5SFQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6c:5e:aa:db:b8:e5:ab:14:03:e5:65:84:c6:11:27:38:fd:78:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041 Validity Not Before: Nov 4 16:55:59 2025 GMT Not After : Nov 5 20:44:59 2025 GMT Subject: CN=3CEAAB72837341DF89F6266B410BD1198A85D86F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:10:65:cb:f8:46:f4:49:e7:f2:4a:c9:24:57: c4:c4:07:4b:5e:93:b3:bb:36:7d:9d:d4:6b:55:31: e0:80:16:7a:30:89:fc:36:c6:ca:ef:59:c3:94:d6: 80:73:86:6d:96:00:b6:31:b2:35:ec:32:f6:fc:ab: fd:ab:1c:88:4e:05:4d:1e:a8:43:81:37:42:34:bb: fd:1e:2b:94:b4:6b:ef:e5:b5:d7:96:73:aa:b7:e0: 11:93:35:52:68:c3:20:8f:f5:f4:b6:3f:d7:ee:af: a6:a8:b0:9f:96:26:f7:d2:df:72:1c:ba:70:39:3f: 6a:15:c4:63:dd:9d:19:39:92:08:2a:4e:c0:f9:2a: cd:52:af:31:2e:4b:b1:0c:5f:6f:bf:b5:d1:4d:10: e2:dd:a8:8e:e0:f6:cc:fa:65:41:fd:ec:4b:c6:b6: da:de:f6:15:4e:62:ac:ca:61:33:db:6c:33:8a:51: 4f:59:ab:99:ab:29:ca:12:f4:5b:41:9d:9e:13:27: 32:46:d8:af:bf:d5:9e:1b:91:bb:20:3e:ee:72:2d: 91:79:b7:01:27:a2:09:2e:2f:83:87:8a:39:e4:c8: e7:77:f3:c7:c9:c4:f4:a7:55:cf:d0:24:3d:47:cf: 7e:cc:0c:f0:ef:c2:f2:9b:1f:91:79:f8:6b:e8:99: f7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EA:AB:72:83:73:41:DF:89:F6:26:6B:41:0B:D1:19:8A:85:D8:6F X509v3 Authority Key Identifier: keyid:A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:77:1c:95:c0:0f:b1:0a:05:ed:db:0c:b9:47:b4:d7:e6:8e: d2:40:7b:5b:9d:bc:9e:84:44:bd:72:3c:42:9d:66:06:b2:39: 0b:9f:4c:35:d7:5c:9f:98:05:d0:66:25:73:ba:ba:8d:b9:a8: 17:23:d8:d6:64:ab:e8:f0:0e:e6:8e:59:17:11:a2:51:19:27: 6b:3d:74:34:85:46:36:fa:f3:42:56:f4:a9:4c:46:4c:e2:91: 38:9c:68:5e:09:34:f4:84:a1:08:ef:b4:3b:9c:44:fe:aa:ee: 5d:1c:c3:75:c5:49:76:32:98:71:92:a7:f7:c0:c7:5a:53:46: 37:9e:d1:13:c5:77:a5:7a:72:fb:73:72:78:52:be:82:30:6d: 4b:bb:0f:74:cf:1e:9f:63:32:57:df:a3:b6:f1:19:54:23:24: b6:81:a3:6f:d5:f8:b0:d2:07:6d:f3:0e:9d:b7:53:b4:df:af: 2c:63:f8:83:7a:e7:a3:cf:f8:fd:c7:2f:4f:56:3c:b5:b4:d9: 10:25:c6:d8:97:9f:05:34:94:34:e6:38:e6:cb:fb:1d:5c:a1: 8c:17:3e:20:e6:32:1c:83:ae:fa:48:d9:d9:31:54:21:a0:a2: fd:ce:85:af:6c:37:18:d8:f3:83:09:54:17:db:93:66:ea:48: df:3c:15:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbWxeqtu45asUA+VlhMYRJzj9eAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVBMzNDMkI5QjlCMUE1NjgzNDRDMTZFODlDRTg0RTdC Q0U1RjA0MTAeFw0yNTExMDQxNjU1NTlaFw0yNTExMDUyMDQ0NTlaMDMxMTAvBgNV BAMTKDNDRUFBQjcyODM3MzQxREY4OUY2MjY2QjQxMEJEMTE5OEE4NUQ4NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEGXL+Eb0SefySskkV8TEB0te k7O7Nn2d1GtVMeCAFnowifw2xsrvWcOU1oBzhm2WALYxsjXsMvb8q/2rHIhOBU0e qEOBN0I0u/0eK5S0a+/ltdeWc6q34BGTNVJowyCP9fS2P9fur6aosJ+WJvfS33Ic unA5P2oVxGPdnRk5kggqTsD5Ks1SrzEuS7EMX2+/tdFNEOLdqI7g9sz6ZUH97EvG ttre9hVOYqzKYTPbbDOKUU9Zq5mrKcoS9FtBnZ4TJzJG2K+/1Z4bkbsgPu5yLZF5 twEnogkuL4OHijnkyOd388fJxPSnVc/QJD1Hz37MDPDvwvKbH5F5+GvomffxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPOqrcoNzQd+J9iZrQQvRGYqF2G8wHwYDVR0j BBgwFoAUpaM8K5ubGlaDRMFuic6E57zl8EEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUU4bU1yYXBoRXNkR29QVThHSExMSG1rdm5zSGo0Ulp4dERYSktQOHY5 WlUvMC9BNUEzM0MyQjlCOUIxQTU2ODM0NEMxNkU4OUNFODRFN0JDRTVGMDQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1QTMzQzJCOUI5QjFBNTY4 MzQ0QzE2RTg5Q0U4NEU3QkNFNUYwNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUU4bU1yYXBoRXNkR29QVThHSExMSG1rdm5zSGo0Ulp4dERYSktQOHY5WlUvMC9B NUEzM0MyQjlCOUIxQTU2ODM0NEMxNkU4OUNFODRFN0JDRTVGMDQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc3cclcAPsQoF7dsMuUe01+aO0kB7W528noREvXI8Qp1mBrI5C59MNddcn5gF 0GYlc7q6jbmoFyPY1mSr6PAO5o5ZFxGiURknaz10NIVGNvrzQlb0qUxGTOKROJxo Xgk09IShCO+0O5xE/qruXRzDdcVJdjKYcZKn98DHWlNGN57RE8V3pXpy+3NyeFK+ gjBtS7sPdM8en2MyV9+jtvEZVCMktoGjb9X4sNIHbfMOnbdTtN+vLGP4g3rno8/4 /ccvT1Y8tbTZECXG2JefBTSUNOY45sv7HVyhjBc+IOYyHIOu+kjZ2TFUIaCi/c6F r2w3GNjzgwlUF9uTZupI3zwVcw== -----END CERTIFICATE-----Generated at Wed Nov 5 10:30:56 2025 by rpki-client