$ rpki-client -vvf rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft File: FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft (raw, json) Hash identifier: 5Q6VkBbXWWqm/5Ebhje2JMpwolgW+bR0/lUgqVq3t18= Subject key identifier: 57:18:D2:DB:BB:EA:5E:20:8C:43:9A:DD:03:B7:03:45:65:B8:C7:CB Authority key identifier: FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F Certificate issuer: /CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F Certificate serial: 5BA55AB54FA7DC648C31DA34C6DDD3354E0BD3B9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft Manifest number: 57 Signing time: Wed 05 Nov 2025 01:23:16 +0000 Manifest this update: Wed 05 Nov 2025 01:18:16 +0000 Manifest next update: Thu 06 Nov 2025 05:07:16 +0000 Files and hashes: 1: FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl (hash: 25eDGrbOOvDzu+jy0jM/q5WZINF5oR7K1rAX0Up5m3o=) 2: 3137302e3234362e3136382e302f32322d3332203d3e20323633393633.roa (hash: 3hBRIGCUqb3DIjYAKZm9OcITGyCs0TuU0X+4zHfoRVQ=) 3: 3133382e3231392e3232302e302f32322d3332203d3e20323633393633.roa (hash: dgQenF0SOCgMjKxMC4O4DFcfxi1LaXIDVtj0og24Gxc=) 4: 323830343a323837383a3a2f33322d313238203d3e20323633393633.roa (hash: hpg9sOEi3xaCO9v17zpfUf72FMO/U8MEML8fvgpIA8Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a5:5a:b5:4f:a7:dc:64:8c:31:da:34:c6:dd:d3:35:4e:0b:d3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F Validity Not Before: Nov 5 01:18:16 2025 GMT Not After : Nov 6 05:07:16 2025 GMT Subject: CN=5718D2DBBBEA5E208C439ADD03B7034565B8C7CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:eb:70:a6:9b:20:3d:49:b5:42:af:95:95:84: 45:1e:38:6d:03:33:2d:df:1b:23:99:fa:f9:0c:dc: 03:c5:e5:d6:1e:10:d9:9c:f3:b2:c9:38:60:85:98: 5e:62:65:58:ee:50:86:cc:8a:ce:c5:6f:e1:58:9c: 96:55:78:d5:88:1d:b1:18:39:b0:36:15:82:1e:0f: dc:06:54:55:ef:46:3d:a3:ab:35:c4:6d:b3:1e:c2: d4:9b:12:c8:9c:70:3c:58:6a:06:06:dc:bf:91:04: a5:bf:14:16:d8:44:c3:d9:ae:7a:b4:16:7e:e7:55: 97:8b:23:86:bb:6a:68:cd:0a:5c:54:18:c5:0a:fd: ce:2b:a7:77:fb:bb:fb:9e:f5:c6:20:ab:ad:10:07: 1f:b5:ba:2e:67:cd:3f:34:37:85:bd:aa:24:38:f8: 5e:9d:82:a1:0c:c0:87:fc:8f:b9:43:be:63:66:1c: c4:46:a5:91:4e:26:6d:dd:2d:fb:53:51:ae:19:2c: f2:14:da:d2:34:29:cf:33:9a:35:34:8a:38:3d:90: b3:50:8f:48:e8:d5:e2:e9:fd:e6:bd:80:b0:0a:96: b8:93:28:22:b4:56:83:ac:d6:5a:24:1f:c2:bf:8e: a5:f1:7e:53:50:b3:b5:a4:84:9b:d9:9d:eb:be:1d: 5b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:18:D2:DB:BB:EA:5E:20:8C:43:9A:DD:03:B7:03:45:65:B8:C7:CB X509v3 Authority Key Identifier: keyid:FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d0:38:87:f2:a5:8f:4f:a8:00:2b:00:45:dd:34:ac:13:01: 9a:0e:be:5b:9b:a8:79:a4:95:2c:2b:43:b8:0c:29:0d:6c:7a: c4:30:47:b4:bc:99:3d:c5:5a:10:7d:b2:df:84:b6:be:cb:eb: 0f:c5:90:21:cc:06:59:d9:c1:50:ce:d4:31:07:44:2d:b0:9a: 4b:ac:50:26:b9:fc:37:c9:4d:e2:c5:2b:8a:cb:25:03:4d:85: 1f:61:23:6c:88:59:d3:f0:cc:07:a8:e3:11:fd:26:1a:61:f8: 5a:0c:ce:33:69:54:91:46:07:3a:a0:0e:79:d8:c5:75:a5:7a: 68:a7:5c:e6:dd:f5:18:b4:16:ba:27:7f:3b:9d:1f:ca:b0:8a: d3:5a:22:ec:4b:05:21:39:63:da:b8:dc:95:fe:a5:86:5e:1c: 46:0e:1a:ea:d8:26:2d:f6:e8:e9:53:ae:d4:92:86:43:63:d5: 45:b0:92:e2:b2:fb:6e:a0:18:31:ba:25:17:22:66:26:69:66: f0:2b:70:55:00:7d:bf:eb:62:0b:bb:49:09:17:7d:5c:aa:20: 73:f4:5f:42:60:4c:66:e0:6f:48:d9:57:d4:aa:0c:bf:c1:c1: a9:4f:60:bc:29:09:36:f4:f1:c3:49:4e:ee:24:d4:54:4c:0a: 6b:23:9f:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUW6VatU+n3GSMMdo0xt3TNU4L07kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFBMjBEMDE3NkE4RTA5OTNFQjYzQzdGNTEwNzE2M0JC RTVEQkE4RjAeFw0yNTExMDUwMTE4MTZaFw0yNTExMDYwNTA3MTZaMDMxMTAvBgNV BAMTKDU3MThEMkRCQkJFQTVFMjA4QzQzOUFERDAzQjcwMzQ1NjVCOEM3Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE63CmmyA9SbVCr5WVhEUeOG0D My3fGyOZ+vkM3APF5dYeENmc87LJOGCFmF5iZVjuUIbMis7Fb+FYnJZVeNWIHbEY ObA2FYIeD9wGVFXvRj2jqzXEbbMewtSbEsiccDxYagYG3L+RBKW/FBbYRMPZrnq0 Fn7nVZeLI4a7amjNClxUGMUK/c4rp3f7u/ue9cYgq60QBx+1ui5nzT80N4W9qiQ4 +F6dgqEMwIf8j7lDvmNmHMRGpZFOJm3dLftTUa4ZLPIU2tI0Kc8zmjU0ijg9kLNQ j0jo1eLp/ea9gLAKlriTKCK0VoOs1lokH8K/jqXxflNQs7WkhJvZneu+HVvZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVxjS27vqXiCMQ5rdA7cDRWW4x8swHwYDVR0j BBgwFoAU+qINAXao4Jk+tjx/UQcWO75duo8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2FKQW5ENVBOS3B4S3hxOWRRSkdmMm5RTko1TXBUbnF3NVA3YTFYWHhI ZkcvMC9GQUEyMEQwMTc2QThFMDk5M0VCNjNDN0Y1MTA3MTYzQkJFNURCQThGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBQTIwRDAxNzZBOEUwOTkz RUI2M0M3RjUxMDcxNjNCQkU1REJBOEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2FKQW5ENVBOS3B4S3hxOWRRSkdmMm5RTko1TXBUbnF3NVA3YTFYWHhIZkcvMC9G QUEyMEQwMTc2QThFMDk5M0VCNjNDN0Y1MTA3MTYzQkJFNURCQThGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn9A4h/Klj0+oACsARd00rBMBmg6+W5uoeaSVLCtDuAwpDWx6xDBHtLyZPcVa EH2y34S2vsvrD8WQIcwGWdnBUM7UMQdELbCaS6xQJrn8N8lN4sUrisslA02FH2Ej bIhZ0/DMB6jjEf0mGmH4WgzOM2lUkUYHOqAOedjFdaV6aKdc5t31GLQWuid/O50f yrCK01oi7EsFITlj2rjclf6lhl4cRg4a6tgmLfbo6VOu1JKGQ2PVRbCS4rL7bqAY MbolFyJmJmlm8CtwVQB9v+tiC7tJCRd9XKogc/RfQmBMZuBvSNlX1KoMv8HBqU9g vCkJNvTxw0lO7iTUVEwKayOf5w== -----END CERTIFICATE-----Generated at Wed Nov 5 02:37:19 2025 by rpki-client