$ rpki-client -vvf rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/E62F8545624AB68EBF7211B6A74DE746D6123457.mft File: E62F8545624AB68EBF7211B6A74DE746D6123457.mft (raw, json) Hash identifier: eefP+geHX3foIJBvv9YHovv8szl6CRwCBodcnBZyWQ0= Subject key identifier: C5:89:A7:1C:32:6E:07:E1:02:C2:0C:DF:F3:81:16:3D:D9:CC:C0:8F Authority key identifier: E6:2F:85:45:62:4A:B6:8E:BF:72:11:B6:A7:4D:E7:46:D6:12:34:57 Certificate issuer: /CN=E62F8545624AB68EBF7211B6A74DE746D6123457 Certificate serial: 7F4A5C96C06927C32D753630B93A7FC66942012A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F8545624AB68EBF7211B6A74DE746D6123457.cer Subject info access: rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/E62F8545624AB68EBF7211B6A74DE746D6123457.mft Manifest number: 01B2 Signing time: Wed 05 Nov 2025 08:47:15 +0000 Manifest this update: Wed 05 Nov 2025 08:42:15 +0000 Manifest next update: Thu 06 Nov 2025 09:55:15 +0000 Files and hashes: 1: 3136382e302e3134302e302f32322d3234203d3e20323632353635.roa (hash: Von5/DYjQ/CiJ50gAV/4rjtUkiiUXsb4eT+imr015Io=) 2: 323830343a3631303a3a2f33322d3438203d3e20323632353635.roa (hash: Q15IE3X00anBWbt3Q/Mwdi9nkf8gfWhkbr3iZXnZfZw=) 3: E62F8545624AB68EBF7211B6A74DE746D6123457.crl (hash: x+yX0FdAp8pshMtw5rA9SrPkHKvHN9RluXoivyHJots=) 4: 3137372e37332e34382e302f32312d3234203d3e20323632353635.roa (hash: WzO1vlYLvp+TJ49Y3kWvM94xd3tClyffKK8JqL0hTpM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/E62F8545624AB68EBF7211B6A74DE746D6123457.crl rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/E62F8545624AB68EBF7211B6A74DE746D6123457.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F8545624AB68EBF7211B6A74DE746D6123457.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:4a:5c:96:c0:69:27:c3:2d:75:36:30:b9:3a:7f:c6:69:42:01:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E62F8545624AB68EBF7211B6A74DE746D6123457 Validity Not Before: Nov 5 08:42:15 2025 GMT Not After : Nov 6 09:55:15 2025 GMT Subject: CN=C589A71C326E07E102C20CDFF381163DD9CCC08F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0a:56:d4:be:ac:05:ca:ed:f4:dd:91:b3:be: f9:bc:0b:1e:6f:2d:68:40:e9:09:85:33:c1:74:1b: 61:f8:77:17:f4:fa:fd:35:73:c6:a0:30:68:ef:6d: a9:1a:b4:f7:13:d4:8c:9c:98:59:80:5f:5b:3b:c1: 81:6c:21:88:e2:e3:d4:c8:1f:1f:36:26:32:09:56: 38:2c:f0:55:dd:45:a3:f4:4b:4c:73:48:2e:b6:31: b2:bd:ef:30:ee:12:4c:92:97:34:3b:f5:5e:8c:0a: 86:c0:45:ce:4b:4b:2b:c6:53:48:cb:86:e9:22:d8: 9a:f4:88:16:d5:93:14:4f:a2:4f:2d:19:e6:25:0e: 9e:19:9e:43:a9:3f:35:0b:19:bf:a6:81:4f:a8:10: c7:8c:c2:21:38:76:2a:d1:52:90:a8:b3:a5:d1:47: 35:92:a8:f3:36:61:28:ee:8d:b2:24:c3:58:d0:47: 30:ac:19:a2:9f:1e:0e:a9:01:6e:c8:bc:c7:2e:fe: 81:1d:fb:8f:45:5f:a6:b5:f6:14:f1:f5:c3:0d:c8: 39:2d:14:c1:2e:4d:fb:e0:a0:e5:8e:43:d0:d5:87: 87:5b:25:68:a6:30:37:4c:7b:eb:11:43:42:23:4a: 1c:a2:be:28:69:d7:85:4e:54:9b:9a:bb:a4:f3:cd: 69:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:89:A7:1C:32:6E:07:E1:02:C2:0C:DF:F3:81:16:3D:D9:CC:C0:8F X509v3 Authority Key Identifier: keyid:E6:2F:85:45:62:4A:B6:8E:BF:72:11:B6:A7:4D:E7:46:D6:12:34:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/E62F8545624AB68EBF7211B6A74DE746D6123457.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F8545624AB68EBF7211B6A74DE746D6123457.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/E62F8545624AB68EBF7211B6A74DE746D6123457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a2:e9:5b:f3:99:ab:7c:f2:4e:eb:0f:aa:5b:08:8d:fd:7f: 47:ba:6b:b1:10:aa:d9:78:be:34:a5:f4:49:b0:66:5b:16:d4: 0e:94:4c:8d:5a:4a:f7:58:6e:38:a1:d4:69:a1:b4:b6:c5:7b: fb:b5:2e:cf:d5:25:a6:db:a7:eb:1b:76:0e:6d:45:53:56:11: 09:9f:e7:ef:a6:df:e5:6f:42:f9:29:ce:7b:cc:bb:b6:62:55: 69:18:d5:45:60:13:ae:58:2c:00:1f:46:ab:29:31:16:d7:9f: 79:c9:5d:4c:8d:68:46:b0:7d:67:f7:26:31:a4:c6:60:c7:c1: 0a:44:f4:15:86:b3:24:df:1c:9c:6e:01:2d:89:5d:76:22:ac: b6:66:0d:af:80:89:59:8f:eb:4f:a7:ad:d8:45:9c:55:a8:96: 39:89:ee:ac:47:16:0f:3f:9f:91:97:42:4d:36:ae:c9:a2:32: 14:ad:5f:8d:fc:f8:5b:4d:59:2a:66:77:91:02:8b:c9:fc:00: 15:10:73:1f:1c:f8:cb:65:9c:f9:cf:2f:ed:04:38:35:d9:85: 04:99:89:54:01:c3:f9:e7:19:c5:8c:79:f0:ec:c2:31:51:da: 45:d4:20:60:f6:86:d7:93:91:b0:ef:d0:d7:bc:47:83:bd:18: fd:ed:35:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUf0pclsBpJ8MtdTYwuTp/xmlCASowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTYyRjg1NDU2MjRBQjY4RUJGNzIxMUI2QTc0REU3NDZE NjEyMzQ1NzAeFw0yNTExMDUwODQyMTVaFw0yNTExMDYwOTU1MTVaMDMxMTAvBgNV BAMTKEM1ODlBNzFDMzI2RTA3RTEwMkMyMENERkYzODExNjNERDlDQ0MwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUClbUvqwFyu303ZGzvvm8Cx5v LWhA6QmFM8F0G2H4dxf0+v01c8agMGjvbakatPcT1IycmFmAX1s7wYFsIYji49TI Hx82JjIJVjgs8FXdRaP0S0xzSC62MbK97zDuEkySlzQ79V6MCobARc5LSyvGU0jL huki2Jr0iBbVkxRPok8tGeYlDp4ZnkOpPzULGb+mgU+oEMeMwiE4dirRUpCos6XR RzWSqPM2YSjujbIkw1jQRzCsGaKfHg6pAW7IvMcu/oEd+49FX6a19hTx9cMNyDkt FMEuTfvgoOWOQ9DVh4dbJWimMDdMe+sRQ0IjShyivihp14VOVJuau6TzzWlPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxYmnHDJuB+ECwgzf84EWPdnMwI8wHwYDVR0j BBgwFoAU5i+FRWJKto6/chG2p03nRtYSNFcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzg1MllBNVFOVnF0cTM1ZmNOY21NTlU4OUFDNkVSNW9VZ0dlblBMWlhk OTkvMC9FNjJGODU0NTYyNEFCNjhFQkY3MjExQjZBNzRERTc0NkQ2MTIzNDU3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2MkY4NTQ1NjI0QUI2OEVC RjcyMTFCNkE3NERFNzQ2RDYxMjM0NTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rzg1MllBNVFOVnF0cTM1ZmNOY21NTlU4OUFDNkVSNW9VZ0dlblBMWlhkOTkvMC9F NjJGODU0NTYyNEFCNjhFQkY3MjExQjZBNzRERTc0NkQ2MTIzNDU3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXqLpW/OZq3zyTusPqlsIjf1/R7prsRCq2Xi+NKX0SbBmWxbUDpRMjVpK91hu OKHUaaG0tsV7+7Uuz9Ulptun6xt2Dm1FU1YRCZ/n76bf5W9C+SnOe8y7tmJVaRjV RWATrlgsAB9GqykxFtefecldTI1oRrB9Z/cmMaTGYMfBCkT0FYazJN8cnG4BLYld diKstmYNr4CJWY/rT6et2EWcVaiWOYnurEcWDz+fkZdCTTauyaIyFK1fjfz4W01Z KmZ3kQKLyfwAFRBzHxz4y2Wc+c8v7QQ4NdmFBJmJVAHD+ecZxYx58OzCMVHaRdQg YPaG15ORsO/Q17xHg70Y/e01QA== -----END CERTIFICATE-----Generated at Wed Nov 5 11:48:24 2025 by rpki-client