$ rpki-client -vvf rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft File: 928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft (raw, json) Hash identifier: 5tHiCdjRNDjrheN1Cot8ay1Aa0fCvRSfsHLZVObxh0c= Subject key identifier: 73:40:D7:B3:85:2B:4D:A5:0D:90:DD:DA:A2:91:B3:D9:59:3C:87:F6 Authority key identifier: 92:8F:3E:5F:CF:74:B2:47:98:29:DE:F0:B2:58:A8:F9:07:E5:00:8C Certificate issuer: /CN=928F3E5FCF74B2479829DEF0B258A8F907E5008C Certificate serial: 29577CBDA6105AEF4D331D4547E1F637E4F3EA80 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer Subject info access: rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft Manifest number: 25 Signing time: Wed 05 Nov 2025 17:10:47 +0000 Manifest this update: Wed 05 Nov 2025 17:05:47 +0000 Manifest next update: Thu 06 Nov 2025 19:56:47 +0000 Files and hashes: 1: 928F3E5FCF74B2479829DEF0B258A8F907E5008C.crl (hash: bvuZpbar7MIu+zZ7iV//X/Mek78jgJwwY20XWrGnEvM=) 2: 34352e3136382e39342e302f32342d3234203d3e20323733333932.roa (hash: RngRWQyawoEgPWd/npVxW/qgVMwVxWfaJ6c11tWcoXo=) 3: 323830343a386466343a3a2f33322d3332203d3e20323733333932.roa (hash: VS4osHeXlZ/Q4B1OAGutGiu5LExTcmGe3XvJymQp52c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.crl rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 19:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:57:7c:bd:a6:10:5a:ef:4d:33:1d:45:47:e1:f6:37:e4:f3:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=928F3E5FCF74B2479829DEF0B258A8F907E5008C Validity Not Before: Nov 5 17:05:47 2025 GMT Not After : Nov 6 19:56:47 2025 GMT Subject: CN=7340D7B3852B4DA50D90DDDAA291B3D9593C87F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:86:95:eb:57:e8:e0:30:66:6b:d1:25:be:d5: 70:f7:77:72:83:c3:1a:b5:3f:40:56:c5:ca:4b:ab: 69:0b:15:95:22:b5:b8:48:bc:9e:30:26:e7:18:31: 61:d7:5f:70:c9:6d:5a:18:b0:e1:23:d2:18:2f:9b: 8b:88:3d:47:98:03:69:01:2f:2c:3d:44:f2:54:aa: 58:f2:23:55:6a:42:f9:91:3e:af:99:cb:11:3e:72: 25:d1:74:4d:bd:f8:95:82:3b:0a:bf:b9:93:f5:37: eb:8f:7a:eb:ef:9a:c2:dd:d1:1d:f9:2a:8a:f7:8a: cd:ec:32:21:5b:50:52:b0:1f:d4:de:4d:f3:50:8c: 3d:7d:2e:37:7d:38:57:f6:b5:d7:db:33:9f:e8:be: 7f:d6:8b:d9:34:d4:4c:bb:65:89:61:0a:3f:f6:7d: 1b:30:76:f9:94:a4:1f:8f:05:ba:b2:d6:95:5d:94: 11:28:e5:b3:2b:92:7c:4f:84:05:ac:5b:0d:0d:6a: 3b:fc:35:83:82:83:37:47:ba:c3:55:22:58:f7:b6: 76:de:3a:d7:d7:13:36:a3:f9:c7:62:5e:c4:ca:02: 0d:a9:8a:fa:47:d3:fa:f3:ff:61:c4:0f:89:6c:4a: a0:df:31:e1:53:19:0f:48:64:c3:37:60:ca:61:d9: 92:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:40:D7:B3:85:2B:4D:A5:0D:90:DD:DA:A2:91:B3:D9:59:3C:87:F6 X509v3 Authority Key Identifier: keyid:92:8F:3E:5F:CF:74:B2:47:98:29:DE:F0:B2:58:A8:F9:07:E5:00:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1b:0b:ab:38:e6:89:95:96:68:e0:17:6b:df:c2:6c:f8:5e: 87:82:81:67:ca:c5:59:f9:51:8b:14:a5:78:6e:67:9a:cb:d9: 64:2b:61:05:9e:97:cf:1c:65:5c:dc:52:8b:9a:a7:53:f9:e6: a5:f0:8f:b9:f6:4f:15:38:20:36:29:f1:e1:2c:a1:8f:12:92: f1:b1:ec:89:62:76:32:02:83:d2:ae:ee:ea:30:d4:bc:e9:3f: 43:bf:ff:5a:e3:a8:b8:8d:21:df:18:f6:6d:c2:d9:2d:af:fe: eb:db:a3:0c:4d:37:10:60:71:7f:89:05:7b:37:5c:fb:4e:8c: f5:eb:83:bf:3a:b4:3c:87:51:99:77:6b:eb:ea:1f:86:72:4d: af:8e:56:24:9c:6d:bd:ed:44:dc:7a:61:e5:3c:d8:54:26:8c: b5:29:0c:24:11:47:92:c9:be:42:9d:c0:8e:a5:de:8f:28:86: 37:33:8f:aa:1b:87:6f:36:6d:47:92:7b:ee:fd:9d:56:79:40: 8b:9d:2e:d2:e2:89:76:1c:ca:60:af:7c:8c:0e:d6:c1:4b:06: e8:a8:e4:de:c2:a9:f6:c6:e3:a3:48:1e:60:86:d3:1c:8e:93: 55:86:cd:52:cd:34:77:52:1b:2f:0a:dc:b2:bb:f2:0f:ec:f5: 14:6a:9a:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKVd8vaYQWu9NMx1FR+H2N+Tz6oAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI4RjNFNUZDRjc0QjI0Nzk4MjlERUYwQjI1OEE4Rjkw N0U1MDA4QzAeFw0yNTExMDUxNzA1NDdaFw0yNTExMDYxOTU2NDdaMDMxMTAvBgNV BAMTKDczNDBEN0IzODUyQjREQTUwRDkwREREQUEyOTFCM0Q5NTkzQzg3RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hpXrV+jgMGZr0SW+1XD3d3KD wxq1P0BWxcpLq2kLFZUitbhIvJ4wJucYMWHXX3DJbVoYsOEj0hgvm4uIPUeYA2kB Lyw9RPJUqljyI1VqQvmRPq+ZyxE+ciXRdE29+JWCOwq/uZP1N+uPeuvvmsLd0R35 Kor3is3sMiFbUFKwH9TeTfNQjD19Ljd9OFf2tdfbM5/ovn/Wi9k01Ey7ZYlhCj/2 fRswdvmUpB+PBbqy1pVdlBEo5bMrknxPhAWsWw0Najv8NYOCgzdHusNVIlj3tnbe OtfXEzaj+cdiXsTKAg2pivpH0/rz/2HED4lsSqDfMeFTGQ9IZMM3YMph2ZK/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUc0DXs4UrTaUNkN3aopGz2Vk8h/YwHwYDVR0j BBgwFoAUko8+X890skeYKd7wslio+QflAIwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDVZV3VOVDFEMnFEU0Q0QThNSnpBYlQ3WXRQaUJoNlkxcmJRUGdBeHRS SFcvMC85MjhGM0U1RkNGNzRCMjQ3OTgyOURFRjBCMjU4QThGOTA3RTUwMDhDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyOEYzRTVGQ0Y3NEIyNDc5 ODI5REVGMEIyNThBOEY5MDdFNTAwOEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDVZV3VOVDFEMnFEU0Q0QThNSnpBYlQ3WXRQaUJoNlkxcmJRUGdBeHRSSFcvMC85 MjhGM0U1RkNGNzRCMjQ3OTgyOURFRjBCMjU4QThGOTA3RTUwMDhDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASxsLqzjmiZWWaOAXa9/CbPheh4KBZ8rFWflRixSleG5nmsvZZCthBZ6Xzxxl XNxSi5qnU/nmpfCPufZPFTggNinx4SyhjxKS8bHsiWJ2MgKD0q7u6jDUvOk/Q7// WuOouI0h3xj2bcLZLa/+69ujDE03EGBxf4kFezdc+06M9euDvzq0PIdRmXdr6+of hnJNr45WJJxtve1E3Hph5TzYVCaMtSkMJBFHksm+Qp3AjqXejyiGNzOPqhuHbzZt R5J77v2dVnlAi50u0uKJdhzKYK98jA7WwUsG6Kjk3sKp9sbjo0geYIbTHI6TVYbN Us00d1IbLwrcsrvyD+z1FGqalA== -----END CERTIFICATE-----Generated at Wed Nov 5 22:43:42 2025 by rpki-client