$ rpki-client -vvf rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.mft File: 5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.mft (raw, json) Hash identifier: GDLICrW4D6uBvTyfT0bp4Cg3B1EYNVW/RVCrG5jmDS8= Subject key identifier: 38:76:88:60:DA:47:2B:C6:01:49:98:CC:45:53:50:96:7C:87:F7:27 Authority key identifier: 5D:C4:02:BA:39:7E:7E:F1:50:69:B3:A4:F7:A6:67:F0:2B:1F:EA:E4 Certificate issuer: /CN=5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4 Certificate serial: 68222D1BD18F3E196506AEA695F870C1E8B3AE3D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.cer Subject info access: rsync://rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.mft Manifest number: 0174 Signing time: Tue 04 Nov 2025 22:18:36 +0000 Manifest this update: Tue 04 Nov 2025 22:13:36 +0000 Manifest next update: Thu 06 Nov 2025 01:58:36 +0000 Files and hashes: 1: 5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.crl (hash: stcRTXrRi4zVZW1Esn28F5pzrsdNGjIhZyVsG/LnB+E=) 2: 323830343a393166633a3a2f33322d3438203d3e20323734363830.roa (hash: c3izLnr/OjGSKZRUHX4OgLQfnL+AKWg5KAzv3FJvdjk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.crl rsync://rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:22:2d:1b:d1:8f:3e:19:65:06:ae:a6:95:f8:70:c1:e8:b3:ae:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4 Validity Not Before: Nov 4 22:13:36 2025 GMT Not After : Nov 6 01:58:36 2025 GMT Subject: CN=38768860DA472BC6014998CC455350967C87F727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:6b:18:d9:11:bd:fd:35:b6:e9:48:08:c5: 62:7c:8e:a0:9d:e2:6e:e4:31:35:0b:35:7e:83:ee: 13:c2:c0:38:52:a3:88:49:e3:ca:6c:dc:76:39:83: 7e:0f:ca:b6:67:9f:48:fe:49:15:4c:03:27:9d:c6: 46:cb:a7:17:eb:30:84:a8:54:0c:fb:06:0d:ae:cd: 49:74:4a:90:02:17:2d:da:2d:08:88:82:e7:59:31: e5:d8:12:a8:c3:78:ce:7d:4b:bb:17:30:50:65:5d: 48:6a:f5:9f:fa:08:b2:16:79:63:45:df:b3:40:ad: 1e:22:4d:4b:99:a5:0c:f0:a9:3a:b5:e7:e7:4f:be: a0:70:2b:96:12:2b:0f:ee:2b:37:03:5b:9b:51:80: 8a:87:47:9d:98:6c:fa:8f:5c:3b:2a:1c:cb:d7:41: ae:f9:c5:84:c3:04:0b:b3:1d:5e:11:9e:85:4d:e4: 1d:f6:01:5f:91:ba:f0:f6:f3:ff:1c:cf:6b:5d:73: a7:06:16:ed:b2:68:ae:d4:52:af:d2:00:a3:6d:a1: 6e:d7:ab:34:ce:81:45:32:cc:31:f3:34:92:93:21: 32:38:58:1e:70:11:06:cf:c5:d0:41:1b:75:21:52: 87:ef:cb:f4:ff:bb:84:c4:fe:43:c2:13:cf:65:a6: 2b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:76:88:60:DA:47:2B:C6:01:49:98:CC:45:53:50:96:7C:87:F7:27 X509v3 Authority Key Identifier: keyid:5D:C4:02:BA:39:7E:7E:F1:50:69:B3:A4:F7:A6:67:F0:2B:1F:EA:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fb:e3:4c:5e:15:c7:41:7b:42:84:d5:8c:6c:38:a9:75:a0: 2b:34:28:28:d7:00:92:a4:ed:74:55:82:7a:80:a4:91:6a:a5: 5d:32:df:5e:ef:b5:c3:8e:9e:84:66:95:46:fe:76:2c:b9:62: 3e:29:c2:43:2a:60:fc:68:f7:10:7a:2c:19:cf:19:aa:33:36: 4d:08:99:c1:31:5f:35:90:dd:44:f5:e1:1b:53:6b:83:86:0d: 27:c6:c4:b6:fc:ff:3b:f0:d0:2d:b9:43:27:25:0a:2c:fb:44: 00:1c:e5:28:6e:d9:33:3a:96:44:a5:5d:83:36:43:d5:6c:17: 16:b3:59:55:93:74:82:39:a6:9a:8d:46:13:79:8d:8a:e9:9d: f3:d4:7d:d8:a8:ef:56:7b:5e:b7:fe:bd:bc:c3:59:c5:63:d1: c5:a2:b4:45:b7:a9:a1:23:24:3f:30:f2:a8:3c:f3:c8:a1:4a: fc:ba:b1:16:d1:a5:56:9f:bc:55:4c:c9:35:18:b8:3a:f6:70: c0:6c:0b:6a:e9:07:fc:6e:eb:f4:49:b1:51:21:36:37:79:98: ac:e0:1a:bd:96:05:37:67:4a:c7:e5:73:8e:63:5f:a0:28:f1: e4:29:64:a8:18:ea:d6:24:5f:13:23:77:0e:7f:22:80:ae:ba: 44:cb:4e:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaCItG9GPPhllBq6mlfhwweizrj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURDNDAyQkEzOTdFN0VGMTUwNjlCM0E0RjdBNjY3RjAy QjFGRUFFNDAeFw0yNTExMDQyMjEzMzZaFw0yNTExMDYwMTU4MzZaMDMxMTAvBgNV BAMTKDM4NzY4ODYwREE0NzJCQzYwMTQ5OThDQzQ1NTM1MDk2N0M4N0Y3MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7S2sY2RG9/TW26UgIxWJ8jqCd 4m7kMTULNX6D7hPCwDhSo4hJ48ps3HY5g34PyrZnn0j+SRVMAyedxkbLpxfrMISo VAz7Bg2uzUl0SpACFy3aLQiIgudZMeXYEqjDeM59S7sXMFBlXUhq9Z/6CLIWeWNF 37NArR4iTUuZpQzwqTq15+dPvqBwK5YSKw/uKzcDW5tRgIqHR52YbPqPXDsqHMvX Qa75xYTDBAuzHV4RnoVN5B32AV+RuvD28/8cz2tdc6cGFu2yaK7UUq/SAKNtoW7X qzTOgUUyzDHzNJKTITI4WB5wEQbPxdBBG3UhUofvy/T/u4TE/kPCE89lpitvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOHaIYNpHK8YBSZjMRVNQlnyH9ycwHwYDVR0j BBgwFoAUXcQCujl+fvFQabOk96Zn8Csf6uQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWR3YTlGQmNhRkY1UFhjVTljSlc2MzZWUURON1hvb0NOSEFIcDQ4cjVX OW4vMC81REM0MDJCQTM5N0U3RUYxNTA2OUIzQTRGN0E2NjdGMDJCMUZFQUU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEQzQwMkJBMzk3RTdFRjE1 MDY5QjNBNEY3QTY2N0YwMkIxRkVBRTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWR3YTlGQmNhRkY1UFhjVTljSlc2MzZWUURON1hvb0NOSEFIcDQ4cjVXOW4vMC81 REM0MDJCQTM5N0U3RUYxNTA2OUIzQTRGN0E2NjdGMDJCMUZFQUU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALPvjTF4Vx0F7QoTVjGw4qXWgKzQoKNcAkqTtdFWCeoCkkWqlXTLfXu+1w46e hGaVRv52LLliPinCQypg/Gj3EHosGc8ZqjM2TQiZwTFfNZDdRPXhG1Nrg4YNJ8bE tvz/O/DQLblDJyUKLPtEABzlKG7ZMzqWRKVdgzZD1WwXFrNZVZN0gjmmmo1GE3mN iumd89R92KjvVntet/69vMNZxWPRxaK0RbepoSMkPzDyqDzzyKFK/LqxFtGlVp+8 VUzJNRi4OvZwwGwLaukH/G7r9EmxUSE2N3mYrOAavZYFN2dKx+VzjmNfoCjx5Clk qBjq1iRfEyN3Dn8igK66RMtOTw== -----END CERTIFICATE-----Generated at Wed Nov 5 11:44:21 2025 by rpki-client