$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft File: D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft (raw, json) Hash identifier: vGPwb9yypjnBeXLjrlFBUQ6Ig2x+OcBC4vfc8UzXtPs= Subject key identifier: BA:D8:D7:71:CA:5F:DD:AE:A3:A0:3F:D4:A7:68:63:BB:90:25:04:A4 Authority key identifier: D5:A0:07:F1:72:9C:F7:7E:57:90:54:C4:8F:61:B1:DD:7A:66:52:AC Certificate issuer: /CN=D5A007F1729CF77E579054C48F61B1DD7A6652AC Certificate serial: 6AF81D4257774B8A42F11C992A586E58F4238DD8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A007F1729CF77E579054C48F61B1DD7A6652AC.cer Subject info access: rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft Manifest number: 60 Signing time: Tue 04 Nov 2025 10:08:33 +0000 Manifest this update: Tue 04 Nov 2025 10:03:33 +0000 Manifest next update: Wed 05 Nov 2025 12:15:33 +0000 Files and hashes: 1: D5A007F1729CF77E579054C48F61B1DD7A6652AC.crl (hash: eV/GuJGea4YsGC1Ox6FpIq7FZe7w2po87ZuXlB/njck=) 2: 323830343a393138383a3a2f33322d3438203d3e20323734363437.roa (hash: Bni/gewlTpvsi/d7y06XdboHoggaWC2Q8LtTu0dJx4Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.crl rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A007F1729CF77E579054C48F61B1DD7A6652AC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 12:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f8:1d:42:57:77:4b:8a:42:f1:1c:99:2a:58:6e:58:f4:23:8d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5A007F1729CF77E579054C48F61B1DD7A6652AC Validity Not Before: Nov 4 10:03:33 2025 GMT Not After : Nov 5 12:15:33 2025 GMT Subject: CN=BAD8D771CA5FDDAEA3A03FD4A76863BB902504A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:c4:8b:93:ad:ad:a1:12:23:7f:21:3f:ba: d2:11:d5:3b:e0:cf:3b:8e:0d:33:a4:5e:91:92:bd: 42:dc:2e:95:dd:40:f1:45:bb:c8:01:7b:9e:b2:e1: 8f:aa:ff:57:30:4c:eb:af:30:c6:7e:51:64:14:60: 00:4a:95:16:99:62:bc:ff:be:eb:c1:fd:c3:8e:4b: 67:5d:ec:71:86:a1:0c:01:a1:c3:7c:7f:90:a6:ba: 09:d6:c0:51:a5:b5:07:20:12:ff:c4:51:49:12:3d: 31:32:fb:d5:16:93:e9:b5:bc:25:52:da:c2:54:7d: 37:05:a0:3b:c1:f6:b8:cb:c7:25:97:b1:5c:8c:c1: 56:51:f5:56:1d:fc:74:2d:d6:6d:7b:5c:0f:a8:4a: 7b:6c:c4:ca:9d:9e:39:b5:ec:ea:4d:63:7a:12:09: 27:ed:69:cb:c1:cf:6a:4d:55:a4:5b:8a:04:1f:29: 77:ff:96:48:43:fd:56:6a:b4:fe:36:08:11:7b:b9: ef:74:30:6a:e5:54:f3:29:6d:49:f4:91:83:af:2e: 6e:cd:07:d4:a1:12:e1:47:c5:d1:c1:33:ee:20:5f: c6:29:3e:2e:7e:d6:80:12:1b:8c:c6:5d:43:e6:3e: f4:df:3d:a1:a0:26:a4:3e:8b:b8:ff:74:c5:bc:46: 49:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D8:D7:71:CA:5F:DD:AE:A3:A0:3F:D4:A7:68:63:BB:90:25:04:A4 X509v3 Authority Key Identifier: keyid:D5:A0:07:F1:72:9C:F7:7E:57:90:54:C4:8F:61:B1:DD:7A:66:52:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A007F1729CF77E579054C48F61B1DD7A6652AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:12:a4:86:8b:82:39:3a:b8:61:6d:6d:26:d3:77:3a:6d:87: 60:7d:a2:a9:1c:48:06:7c:17:d0:74:89:04:ac:18:17:53:a5: cb:ae:06:7a:9f:5b:13:3e:94:75:d4:df:b3:1b:a9:08:ad:d1: b4:67:a8:93:4c:d3:bc:ed:09:6a:71:d4:d9:63:9f:de:90:5e: 7c:33:de:26:db:86:87:be:6b:16:4a:71:09:c2:74:47:f6:4d: 60:b0:02:7c:a6:c8:ee:d9:6c:f5:1c:50:93:f7:da:0b:a8:a0: 33:75:8a:84:10:b3:49:b6:8b:fa:4a:42:11:f8:7b:20:9e:9f: 9a:66:1e:b7:53:cc:a7:df:4e:fd:5e:eb:67:15:73:48:71:ce: 04:04:16:47:a1:8e:30:27:2f:a3:2b:5a:9f:fc:9c:44:01:d8: ae:1f:32:c0:07:4c:30:79:70:f8:d8:a5:07:e4:4d:1b:8d:81: cc:5f:bf:bb:d9:36:f0:be:66:30:f5:eb:ce:70:d8:10:8a:68: 5e:3d:1c:fc:9a:60:7f:08:b4:40:d2:99:2b:c7:f7:4b:18:36: 6e:4f:c7:21:f7:2a:90:15:c3:ce:6e:47:fb:d6:86:d2:93:ce: 21:01:44:fc:c5:74:27:a2:52:60:cd:c8:b2:22:89:dd:e3:c0: a9:f1:ab:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUavgdQld3S4pC8RyZKlhuWPQjjdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVBMDA3RjE3MjlDRjc3RTU3OTA1NEM0OEY2MUIxREQ3 QTY2NTJBQzAeFw0yNTExMDQxMDAzMzNaFw0yNTExMDUxMjE1MzNaMDMxMTAvBgNV BAMTKEJBRDhENzcxQ0E1RkREQUVBM0EwM0ZENEE3Njg2M0JCOTAyNTA0QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNtMSLk62toRIjfyE/utIR1Tvg zzuODTOkXpGSvULcLpXdQPFFu8gBe56y4Y+q/1cwTOuvMMZ+UWQUYABKlRaZYrz/ vuvB/cOOS2dd7HGGoQwBocN8f5CmugnWwFGltQcgEv/EUUkSPTEy+9UWk+m1vCVS 2sJUfTcFoDvB9rjLxyWXsVyMwVZR9VYd/HQt1m17XA+oSntsxMqdnjm17OpNY3oS CSftacvBz2pNVaRbigQfKXf/lkhD/VZqtP42CBF7ue90MGrlVPMpbUn0kYOvLm7N B9ShEuFHxdHBM+4gX8YpPi5+1oASG4zGXUPmPvTfPaGgJqQ+i7j/dMW8RkmtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUutjXccpf3a6joD/Up2hju5AlBKQwHwYDVR0j BBgwFoAU1aAH8XKc935XkFTEj2Gx3XpmUqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSENHTXJESjViRkFZVEw2bk1rVHREYzFKdmZnd3l0WmN3ck1SbjFrclJ6 akcvMC9ENUEwMDdGMTcyOUNGNzdFNTc5MDU0QzQ4RjYxQjFERDdBNjY1MkFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1QTAwN0YxNzI5Q0Y3N0U1 NzkwNTRDNDhGNjFCMUREN0E2NjUyQUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SENHTXJESjViRkFZVEw2bk1rVHREYzFKdmZnd3l0WmN3ck1SbjFrclJ6akcvMC9E NUEwMDdGMTcyOUNGNzdFNTc5MDU0QzQ4RjYxQjFERDdBNjY1MkFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACRKkhouCOTq4YW1tJtN3Om2HYH2iqRxIBnwX0HSJBKwYF1Oly64Gep9bEz6U ddTfsxupCK3RtGeok0zTvO0JanHU2WOf3pBefDPeJtuGh75rFkpxCcJ0R/ZNYLAC fKbI7tls9RxQk/faC6igM3WKhBCzSbaL+kpCEfh7IJ6fmmYet1PMp99O/V7rZxVz SHHOBAQWR6GOMCcvoytan/ycRAHYrh8ywAdMMHlw+NilB+RNG42BzF+/u9k28L5m MPXrznDYEIpoXj0c/Jpgfwi0QNKZK8f3Sxg2bk/HIfcqkBXDzm5H+9aG0pPOIQFE /MV0J6JSYM3IsiKJ3ePAqfGr/w== -----END CERTIFICATE-----Generated at Wed Nov 5 05:00:01 2025 by rpki-client