$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft File: 5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft (raw, json) Hash identifier: gTdDNyzambJKUygy0ntFRb0esuFHMUkBzpitUM/QDL8= Subject key identifier: E7:8F:C2:83:18:B2:8F:12:BE:37:36:46:11:BD:D8:89:0D:22:B7:DA Authority key identifier: 5D:C0:8B:C2:E7:CA:BC:11:B8:39:5E:55:BD:1B:E9:CD:DA:57:49:39 Certificate issuer: /CN=5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939 Certificate serial: 0E4FD1DAFA4091F77E4EC32AB869C6A82D4004D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer Subject info access: rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft Manifest number: 47 Signing time: Tue 04 Nov 2025 17:07:26 +0000 Manifest this update: Tue 04 Nov 2025 17:02:26 +0000 Manifest next update: Wed 05 Nov 2025 17:35:26 +0000 Files and hashes: 1: 323830343a386539383a3a2f33322d3438203d3e20323733343336.roa (hash: BxvAZqsINc17TFdRXILJwTm+FG+N9YG1areIiru28HI=) 2: 5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl (hash: WvVm091rlaXpMhtfT9yeSj8Ju7a1Qcnd+HRwiiww7ec=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 17:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:4f:d1:da:fa:40:91:f7:7e:4e:c3:2a:b8:69:c6:a8:2d:40:04:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939 Validity Not Before: Nov 4 17:02:26 2025 GMT Not After : Nov 5 17:35:26 2025 GMT Subject: CN=E78FC28318B28F12BE37364611BDD8890D22B7DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:45:5e:71:56:bb:a5:6a:ef:11:05:ed:cd:85: 60:be:5a:cc:da:2f:f9:f0:b1:58:8e:a0:0d:69:9f: 08:2e:11:55:a1:9f:79:8a:5d:0a:09:3d:b1:99:a8: 64:0b:54:0e:c7:a9:0d:fd:81:1b:dd:36:7e:c9:7e: 91:9b:0f:5f:c1:81:18:46:04:86:fa:62:91:59:61: 89:66:0c:28:e0:04:52:ca:ff:a1:bb:52:b4:c3:e4: 00:5b:30:e8:7f:22:79:fd:48:51:0f:51:5f:32:6a: 42:77:0a:32:93:6e:2c:39:55:20:3d:e5:39:c2:7e: 56:5a:2a:90:44:10:b9:de:e0:d0:7c:23:a1:56:f8: c6:df:46:11:2b:7f:4d:cc:b0:c9:ec:58:ad:5d:33: d7:a9:8a:dd:25:9b:08:75:2b:3f:bf:57:7e:ee:b3: 50:21:23:52:a1:dd:67:16:65:76:9e:2d:9c:51:78: 97:8e:52:0f:94:87:96:49:7d:e6:53:f4:3a:69:61: 5d:8c:b5:0b:48:ac:15:bb:34:ef:5e:3d:51:b7:af: ea:a4:7d:0a:cf:79:8c:f7:3a:7b:0d:c4:8b:81:d6: 0e:d5:7b:03:e9:5a:c2:0c:31:22:b6:dd:60:22:a7: 2f:81:bd:cb:f8:c5:7d:6d:a9:2b:00:c7:9e:b3:7f: d4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8F:C2:83:18:B2:8F:12:BE:37:36:46:11:BD:D8:89:0D:22:B7:DA X509v3 Authority Key Identifier: keyid:5D:C0:8B:C2:E7:CA:BC:11:B8:39:5E:55:BD:1B:E9:CD:DA:57:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:4a:7b:39:33:32:4e:cb:32:10:11:64:a2:22:8a:26:8f:23: 8c:ef:ac:2a:90:4f:ad:fb:7c:32:77:48:48:a8:da:31:73:d8: 34:a4:4f:00:9a:7d:0b:db:55:1a:f0:6c:c5:11:22:d3:15:c3: fe:34:0d:92:7a:8f:e8:20:30:cd:f1:f1:f6:37:14:e3:3a:9a: c1:46:03:d3:0f:a6:2b:46:0b:a3:8d:47:a9:fc:f4:25:aa:ec: 1b:a5:8c:d3:b2:73:b9:4e:25:0b:1e:f3:f5:4c:4a:99:f7:06: c8:ee:44:2e:55:8f:2b:d3:e1:00:90:6f:af:55:1b:14:7f:b4: 85:44:68:42:1d:65:6c:de:af:a4:66:73:8e:e8:40:72:7b:c7: 3d:bb:d3:1b:ff:ad:03:91:25:f6:e0:de:ab:cd:0b:12:13:be: b9:58:25:7a:d1:d1:2b:ef:7e:d7:0d:a6:b6:89:0a:5f:ed:dc: 47:b1:6b:a3:4b:0a:a8:eb:f4:9b:0f:c5:fc:65:f8:5b:f3:60: 3e:51:bf:c5:23:f2:7c:be:7e:30:56:65:26:3f:c9:3b:28:67: 01:f8:57:a6:13:35:51:e2:72:45:9f:b5:fb:a7:cc:05:13:41: 04:65:d9:36:6b:b7:d6:c0:3d:77:f9:1b:0c:d1:3d:f7:3c:18: 0b:0b:eb:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDk/R2vpAkfd+TsMquGnGqC1ABNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURDMDhCQzJFN0NBQkMxMUI4Mzk1RTU1QkQxQkU5Q0RE QTU3NDkzOTAeFw0yNTExMDQxNzAyMjZaFw0yNTExMDUxNzM1MjZaMDMxMTAvBgNV BAMTKEU3OEZDMjgzMThCMjhGMTJCRTM3MzY0NjExQkREODg5MEQyMkI3REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+RV5xVrulau8RBe3NhWC+Wsza L/nwsViOoA1pnwguEVWhn3mKXQoJPbGZqGQLVA7HqQ39gRvdNn7JfpGbD1/BgRhG BIb6YpFZYYlmDCjgBFLK/6G7UrTD5ABbMOh/Inn9SFEPUV8yakJ3CjKTbiw5VSA9 5TnCflZaKpBEELne4NB8I6FW+MbfRhErf03MsMnsWK1dM9epit0lmwh1Kz+/V37u s1AhI1Kh3WcWZXaeLZxReJeOUg+Uh5ZJfeZT9DppYV2MtQtIrBW7NO9ePVG3r+qk fQrPeYz3OnsNxIuB1g7VewPpWsIMMSK23WAipy+Bvcv4xX1tqSsAx56zf9QjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU54/CgxiyjxK+NzZGEb3YiQ0it9owHwYDVR0j BBgwFoAUXcCLwufKvBG4OV5VvRvpzdpXSTkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkgzWjhlUnBiYm5Cek1lUGJENkxvSHZUOFR2blY0TVkzenVaQUtzR2Ja cXAvMC81REMwOEJDMkU3Q0FCQzExQjgzOTVFNTVCRDFCRTlDRERBNTc0OTM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEQzA4QkMyRTdDQUJDMTFC ODM5NUU1NUJEMUJFOUNEREE1NzQ5MzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkgzWjhlUnBiYm5Cek1lUGJENkxvSHZUOFR2blY0TVkzenVaQUtzR2JacXAvMC81 REMwOEJDMkU3Q0FCQzExQjgzOTVFNTVCRDFCRTlDRERBNTc0OTM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX0p7OTMyTssyEBFkoiKKJo8jjO+sKpBPrft8MndISKjaMXPYNKRPAJp9C9tV GvBsxREi0xXD/jQNknqP6CAwzfHx9jcU4zqawUYD0w+mK0YLo41Hqfz0JarsG6WM 07JzuU4lCx7z9UxKmfcGyO5ELlWPK9PhAJBvr1UbFH+0hURoQh1lbN6vpGZzjuhA cnvHPbvTG/+tA5El9uDeq80LEhO+uVgletHRK+9+1w2mtokKX+3cR7Fro0sKqOv0 mw/F/GX4W/NgPlG/xSPyfL5+MFZlJj/JOyhnAfhXphM1UeJyRZ+1+6fMBRNBBGXZ Nmu31sA9d/kbDNE99zwYCwvrXA== -----END CERTIFICATE-----Generated at Wed Nov 5 03:25:18 2025 by rpki-client