$ rpki-client -vvf rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft File: A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft (raw, json) Hash identifier: dWmW7dY9oZ8T+1FhXIlf5lywYLmG8zqvG2he/8AeJug= Subject key identifier: 53:7D:C0:32:62:B6:23:28:23:7D:C8:8A:18:AA:FB:24:82:BC:6C:C1 Authority key identifier: A8:D5:22:AC:61:89:85:62:D9:5E:A2:A9:86:B1:B1:C2:66:8D:51:B1 Certificate issuer: /CN=A8D522AC61898562D95EA2A986B1B1C2668D51B1 Certificate serial: 75EBD3C798189E4E74EDCE002288C3F6BC99B5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer Subject info access: rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft Manifest number: 01A5 Signing time: Wed 05 Nov 2025 07:16:11 +0000 Manifest this update: Wed 05 Nov 2025 07:11:11 +0000 Manifest next update: Thu 06 Nov 2025 08:16:11 +0000 Files and hashes: 1: A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl (hash: 5EEZj1ShkzNf9V5U1x8Z/235335LA8aKiCnIxebfgBk=) 2: 323830343a336230633a3a2f33322d3333203d3e20323636313236.roa (hash: b78eH9iE1lP2ssDkb0TNloMMWzmhsxuPlTJnnpjNVZo=) 3: 34352e362e37322e302f32322d3234203d3e20323636313236.roa (hash: fqgs2eFmIRLdUTGy5kMf68dcobrxQa4f6/bOtmUuRGc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:eb:d3:c7:98:18:9e:4e:74:ed:ce:00:22:88:c3:f6:bc:99:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8D522AC61898562D95EA2A986B1B1C2668D51B1 Validity Not Before: Nov 5 07:11:11 2025 GMT Not After : Nov 6 08:16:11 2025 GMT Subject: CN=537DC03262B62328237DC88A18AAFB2482BC6CC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cf:c9:39:b5:63:ba:da:64:0a:b0:89:c0:70: de:11:75:cc:df:5f:f4:94:35:a4:72:60:8b:92:3b: 26:b4:89:6b:7f:8b:bc:43:92:07:81:65:70:96:c4: 5f:45:01:38:48:af:45:87:a7:f8:a9:26:f2:a1:62: 2a:da:df:41:a3:52:3c:5c:65:85:fb:e5:59:a5:68: 00:70:8c:c3:86:b8:d1:be:cb:e6:8a:7f:4d:83:d3: 07:5b:45:b7:83:a5:7b:7d:d3:ee:b4:1c:02:aa:ab: b4:48:79:1b:81:f2:41:12:6d:4f:73:04:a6:90:e6: 54:41:3c:9b:89:93:a1:00:99:b1:b1:6e:4b:4c:dc: 98:38:ea:21:5a:09:a9:92:61:f1:00:be:23:64:9a: 2c:bd:60:d6:ae:27:66:19:6f:97:60:5b:c1:ef:f1: 74:71:29:6d:56:82:be:de:f8:31:28:4d:43:70:da: cc:d3:61:9c:0f:ce:14:1b:cf:27:d9:ad:0b:b2:08: a0:ee:ec:70:9d:c6:f0:77:7b:ba:a7:99:7a:6f:d5: 24:27:23:4e:21:7b:d6:dc:34:b4:05:ac:08:97:4c: 0c:27:b7:22:1f:4a:f2:85:7c:c9:4f:a9:ea:e7:1f: 9f:a4:12:e9:cc:a4:f4:24:38:7b:91:62:52:62:db: ae:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7D:C0:32:62:B6:23:28:23:7D:C8:8A:18:AA:FB:24:82:BC:6C:C1 X509v3 Authority Key Identifier: keyid:A8:D5:22:AC:61:89:85:62:D9:5E:A2:A9:86:B1:B1:C2:66:8D:51:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f9:31:ce:7f:7d:9e:53:6d:80:4c:0a:bf:b7:2f:c6:ad:c5: 9d:ed:99:42:df:6f:c7:a9:bf:5a:17:55:7c:1f:9f:4e:b1:cf: c3:cb:d2:23:26:5d:2d:4e:82:17:9c:83:d3:34:8b:3a:d7:75: cc:9d:fb:1b:f6:1f:e1:f4:f1:09:73:34:f0:38:95:7b:2a:92: 80:9c:be:bb:d5:e1:f3:5d:3f:cd:20:14:bf:e4:ac:1a:60:93: ae:ab:fd:d5:9f:74:a8:54:b3:0e:66:d7:d7:7b:47:9c:41:83: c3:73:67:e8:25:43:3c:9c:56:86:8e:c3:3f:fc:c5:5e:5d:54: 38:5f:36:93:f1:5c:ac:99:9b:91:08:7e:39:eb:90:c5:8c:17: c0:f6:0b:2f:2f:1c:53:17:f5:cc:ff:8d:e2:f1:6d:4e:88:9c: b8:19:60:9d:9b:41:3b:fb:21:72:5f:1f:75:32:2c:d0:3f:6f: ca:b4:7c:48:63:2a:d5:d1:2e:6c:2e:66:9d:75:2e:b6:a1:2f: ad:f2:14:b7:bf:db:67:6d:0c:c1:da:b0:90:bb:28:63:f3:ff: 5f:34:c2:68:46:cf:89:56:5c:e9:0b:a4:82:fa:9e:c8:74:75: 00:89:6c:a2:40:97:bd:8d:e7:1d:c8:c0:e3:a0:ad:8e:1c:1d: 79:ee:67:72 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgITdevTx5gYnk507c4AIojD9ryZtTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhBOEQ1MjJBQzYxODk4NTYyRDk1RUEyQTk4NkIxQjFDMjY2 OEQ1MUIxMB4XDTI1MTEwNTA3MTExMVoXDTI1MTEwNjA4MTYxMVowMzExMC8GA1UE AxMoNTM3REMwMzI2MkI2MjMyODIzN0RDODhBMThBQUZCMjQ4MkJDNkNDMTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANLPyTm1Y7raZAqwicBw3hF1zN9f 9JQ1pHJgi5I7JrSJa3+LvEOSB4FlcJbEX0UBOEivRYen+Kkm8qFiKtrfQaNSPFxl hfvlWaVoAHCMw4a40b7L5op/TYPTB1tFt4Ole33T7rQcAqqrtEh5G4HyQRJtT3ME ppDmVEE8m4mToQCZsbFuS0zcmDjqIVoJqZJh8QC+I2SaLL1g1q4nZhlvl2Bbwe/x dHEpbVaCvt74MShNQ3DazNNhnA/OFBvPJ9mtC7IIoO7scJ3G8Hd7uqeZem/VJCcj TiF71tw0tAWsCJdMDCe3Ih9K8oV8yU+p6ucfn6QS6cyk9CQ4e5FiUmLbrisCAwEA AaOCAlkwggJVMB0GA1UdDgQWBBRTfcAyYrYjKCN9yIoYqvskgrxswTAfBgNVHSME GDAWgBSo1SKsYYmFYtleoqmGsbHCZo1RsTAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9IVEh5RlNKaEVIMzlvTXJpdVBIY1lqdTNxQ2JoQ3dEVEhUZVR3UE1wb2Ni UC8wL0E4RDUyMkFDNjE4OTg1NjJEOTVFQTJBOTg2QjFCMUMyNjY4RDUxQjEuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvQThENTIyQUM2MTg5ODU2MkQ5 NUVBMkE5ODZCMUIxQzI2NjhENTFCMS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9I VEh5RlNKaEVIMzlvTXJpdVBIY1lqdTNxQ2JoQ3dEVEhUZVR3UE1wb2NiUC8wL0E4 RDUyMkFDNjE4OTg1NjJEOTVFQTJBOTg2QjFCMUMyNjY4RDUxQjEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAJ+THOf32eU22ATAq/ty/GrcWd7ZlC32/Hqb9aF1V8H59Osc/Dy9IjJl0tToIX nIPTNIs613XMnfsb9h/h9PEJczTwOJV7KpKAnL671eHzXT/NIBS/5KwaYJOuq/3V n3SoVLMOZtfXe0ecQYPDc2foJUM8nFaGjsM//MVeXVQ4XzaT8VysmZuRCH4565DF jBfA9gsvLxxTF/XM/43i8W1OiJy4GWCdm0E7+yFyXx91MizQP2/KtHxIYyrV0S5s LmaddS62oS+t8hS3v9tnbQzB2rCQuyhj8/9fNMJoRs+JVlzpC6SC+p7IdHUAiWyi QJe9jecdyMDjoK2OHB157mdy -----END CERTIFICATE-----Generated at Wed Nov 5 10:03:41 2025 by rpki-client