$ rpki-client -vvf rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.mft File: 91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.mft (raw, json) Hash identifier: 54xYC3ajjjLLzy4VX1y1fLNGydh7rS5Hi5zVQ8Gogzs= Subject key identifier: 0A:F3:FF:AB:0B:97:8A:A1:4D:67:89:E6:16:88:25:13:B5:47:30:2A Authority key identifier: 91:CA:9B:A9:DC:2F:A0:AB:D8:0B:8D:D6:2B:48:5E:9B:6F:DB:00:E5 Certificate issuer: /CN=91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5 Certificate serial: 481C62B7253D9724558A8F96951854CDD3458B1B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.cer Subject info access: rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.mft Manifest number: 28 Signing time: Tue 04 Nov 2025 22:51:25 +0000 Manifest this update: Tue 04 Nov 2025 22:46:25 +0000 Manifest next update: Wed 05 Nov 2025 23:42:25 +0000 Files and hashes: 1: 34352e3136382e3131302e302f32342d3234203d3e20323638303537.roa (hash: P7BljvmuJqNRd9K9Eagn0tAf9y3EeppEZXsh5K18mGI=) 2: 91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.crl (hash: c8bEGcduJyNOrOymX2lXNDuLR/DTc+cVzxL/DhTe77c=) 3: 34352e3136382e3130382e302f32342d3234203d3e20323638303537.roa (hash: ml4hqc5VvZd1QBGLffQaNw1GMHKb9UPVQavARL51frE=) 4: 323830343a353734633a3a2f33322d3332203d3e20323638303537.roa (hash: D4fDiQS0N/bSn+j19KOgW9lK2ZaW4wnjU0Y641p5zC4=) 5: 34352e3136382e3130392e302f32342d3234203d3e20323638303537.roa (hash: DtobmpmrtnApTV02VGq+BHOznlqQxzpmMueStXgmZkc=) 6: 34352e3136382e3131312e302f32342d3234203d3e20323638303537.roa (hash: sZ1zBvZEpNPVDgv3rXIcpmkK8XtZkjiJBMgdgR+n0NE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.crl rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 23:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:1c:62:b7:25:3d:97:24:55:8a:8f:96:95:18:54:cd:d3:45:8b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5 Validity Not Before: Nov 4 22:46:25 2025 GMT Not After : Nov 5 23:42:25 2025 GMT Subject: CN=0AF3FFAB0B978AA14D6789E616882513B547302A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:35:62:c4:b5:f5:5c:dc:7e:9e:fc:56:39: 3d:cd:6b:28:4d:4c:0c:67:2a:28:e7:51:b7:3f:d2: b5:ce:53:0f:e7:e2:ec:c5:9c:e1:18:b7:7a:64:18: 72:07:1b:fe:84:7a:7d:fd:86:0a:b2:11:e6:dc:f5: bf:14:8a:e1:82:76:fe:b5:72:f3:7c:7d:9e:36:bf: 84:26:03:90:9e:27:29:5c:48:39:37:14:37:84:35: 85:ea:1c:4c:0d:53:74:4f:83:31:67:a3:5f:8a:cc: 45:43:f6:0f:3f:ec:8d:c1:68:4e:17:85:54:15:e1: 38:d2:78:85:06:0a:2c:08:69:c7:30:68:48:a4:48: 2a:49:0a:99:c8:26:a4:cb:eb:7b:67:d7:aa:3f:30: 7f:cc:7a:8e:54:63:18:63:c3:67:c4:94:ec:9b:7c: 85:19:8a:4f:81:ea:30:e4:50:ab:b1:c6:a6:e1:11: 7a:f4:89:65:8c:eb:67:f6:15:ea:b2:32:4d:00:21: 48:8d:65:fa:02:e0:14:8c:ae:31:12:24:68:fe:ca: 3a:a7:79:7d:d0:f5:e3:35:ff:44:9c:e4:83:50:00: 5c:0f:fe:27:3d:08:0e:ff:f4:57:72:f3:f8:f2:d2: 77:28:ae:14:bd:8c:c5:bf:e7:37:c3:2e:bb:a0:45: 9e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F3:FF:AB:0B:97:8A:A1:4D:67:89:E6:16:88:25:13:B5:47:30:2A X509v3 Authority Key Identifier: keyid:91:CA:9B:A9:DC:2F:A0:AB:D8:0B:8D:D6:2B:48:5E:9B:6F:DB:00:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:dd:f4:a9:9f:5b:56:be:86:53:c9:e9:11:a1:cb:d0:fd:5d: eb:2e:e9:84:e2:27:25:0d:7e:15:f6:ef:2c:3c:82:3c:ba:d0: 18:d0:04:01:55:db:65:bd:64:e9:14:c6:2f:d1:21:c2:a3:e3: fc:3a:fc:69:2d:15:d3:b4:08:5a:cb:fe:fa:35:dc:74:a7:93: 5b:76:b4:13:45:01:38:27:ff:b2:88:56:41:38:3e:a1:01:26: a5:b9:10:5d:c4:73:67:69:51:41:51:53:85:24:3a:4f:88:29: 44:ab:ba:db:9e:84:38:26:1f:c7:c9:2f:5a:6d:cc:f4:03:fe: 38:e7:83:de:fb:cb:55:dc:aa:8b:25:aa:2c:92:2f:e5:dd:3a: c1:66:4c:73:29:b0:e8:ff:ad:cd:4a:a8:c6:31:ff:cd:56:c3: 46:80:4c:e3:39:0c:c2:8f:f1:be:fb:30:2b:78:15:3c:63:66: 2a:18:35:26:4a:2b:0d:ac:33:3a:40:fd:0d:1f:40:77:df:27: 13:7a:ae:ac:f1:c3:80:1b:a4:40:96:2b:81:95:79:47:cf:e2: 57:ae:a7:a2:46:f4:04:b7:62:6a:fc:2b:c8:c0:5e:b1:37:b0: cf:cb:85:aa:56:d7:bc:b9:0f:47:c4:39:d5:95:d0:dc:49:d4: c7:7c:14:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSBxityU9lyRVio+WlRhUzdNFixswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDQTlCQTlEQzJGQTBBQkQ4MEI4REQ2MkI0ODVFOUI2 RkRCMDBFNTAeFw0yNTExMDQyMjQ2MjVaFw0yNTExMDUyMzQyMjVaMDMxMTAvBgNV BAMTKDBBRjNGRkFCMEI5NzhBQTE0RDY3ODlFNjE2ODgyNTEzQjU0NzMwMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAoDVixLX1XNx+nvxWOT3NayhN TAxnKijnUbc/0rXOUw/n4uzFnOEYt3pkGHIHG/6Een39hgqyEebc9b8UiuGCdv61 cvN8fZ42v4QmA5CeJylcSDk3FDeENYXqHEwNU3RPgzFno1+KzEVD9g8/7I3BaE4X hVQV4TjSeIUGCiwIaccwaEikSCpJCpnIJqTL63tn16o/MH/Meo5UYxhjw2fElOyb fIUZik+B6jDkUKuxxqbhEXr0iWWM62f2FeqyMk0AIUiNZfoC4BSMrjESJGj+yjqn eX3Q9eM1/0Sc5INQAFwP/ic9CA7/9Fdy8/jy0ncorhS9jMW/5zfDLrugRZ7hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCvP/qwuXiqFNZ4nmFoglE7VHMCowHwYDVR0j BBgwFoAUkcqbqdwvoKvYC43WK0hem2/bAOUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRW5IUkVzTnBMdmlLQ3diNUxBQWV5TEVhRFdLV1NZYzJrQmFuWUxxVzc5 NHYvMC85MUNBOUJBOURDMkZBMEFCRDgwQjhERDYyQjQ4NUU5QjZGREIwMEU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQ0E5QkE5REMyRkEwQUJE ODBCOERENjJCNDg1RTlCNkZEQjAwRTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RW5IUkVzTnBMdmlLQ3diNUxBQWV5TEVhRFdLV1NZYzJrQmFuWUxxVzc5NHYvMC85 MUNBOUJBOURDMkZBMEFCRDgwQjhERDYyQjQ4NUU5QjZGREIwMEU1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf930qZ9bVr6GU8npEaHL0P1d6y7phOInJQ1+FfbvLDyCPLrQGNAEAVXbZb1k 6RTGL9EhwqPj/Dr8aS0V07QIWsv++jXcdKeTW3a0E0UBOCf/sohWQTg+oQEmpbkQ XcRzZ2lRQVFThSQ6T4gpRKu6256EOCYfx8kvWm3M9AP+OOeD3vvLVdyqiyWqLJIv 5d06wWZMcymw6P+tzUqoxjH/zVbDRoBM4zkMwo/xvvswK3gVPGNmKhg1JkorDawz OkD9DR9Ad98nE3qurPHDgBukQJYrgZV5R8/iV66nokb0BLdiavwryMBesTewz8uF qlbXvLkPR8Q51ZXQ3EnUx3wUmg== -----END CERTIFICATE-----Generated at Wed Nov 5 00:49:26 2025 by rpki-client