$ rpki-client -vvf rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft File: B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft (raw, json) Hash identifier: TOu/rmmKeJvf0VLLrZnDz7s3mwKWyTj943W6cXKMU4U= Subject key identifier: 87:9D:7B:46:D9:D0:A6:3A:66:9C:B2:F9:F7:12:B2:F0:8F:BA:E3:C1 Authority key identifier: B5:D1:33:C4:C7:CD:B2:87:64:5E:4A:A0:27:A4:9A:E2:3A:77:B8:F4 Certificate issuer: /CN=B5D133C4C7CDB287645E4AA027A49AE23A77B8F4 Certificate serial: 3C1C08DA46CD330A330374DF31FD45186753924F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.cer Subject info access: rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft Manifest number: 02F3 Signing time: Wed 05 Nov 2025 09:50:35 +0000 Manifest this update: Wed 05 Nov 2025 09:45:35 +0000 Manifest next update: Thu 06 Nov 2025 13:31:35 +0000 Files and hashes: 1: B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.crl (hash: PsQCLeEvGnlsJUWjo+Ux3kqKLqFvr3TtzNhm3vi6orQ=) 2: 323830343a386661383a3a2f33322d3438203d3e203631363137.roa (hash: lNIOdL2aKxnS8NlOzIaP7/ySJO/apvdxQI14jcwE3/0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.crl rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 13:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:1c:08:da:46:cd:33:0a:33:03:74:df:31:fd:45:18:67:53:92:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5D133C4C7CDB287645E4AA027A49AE23A77B8F4 Validity Not Before: Nov 5 09:45:35 2025 GMT Not After : Nov 6 13:31:35 2025 GMT Subject: CN=879D7B46D9D0A63A669CB2F9F712B2F08FBAE3C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:19:89:c6:7b:59:61:66:bd:2b:e7:16:e9:84: 2c:d1:72:79:7b:9e:84:82:42:6d:c4:5c:b5:84:72: 67:33:ba:68:2d:8d:bd:13:63:9c:37:f0:53:43:7e: e0:47:21:bc:0b:03:d8:15:a2:a0:f9:07:71:ca:58: d5:25:9a:23:3b:44:6c:c9:4f:8c:88:5f:69:e8:47: 51:e6:38:2c:0d:59:79:9c:b2:3d:e4:15:05:a5:37: ac:6b:17:3b:dd:0e:26:98:08:64:43:c4:f0:a7:aa: b4:23:f7:c3:e5:0c:4d:a4:38:a1:f3:51:14:09:55: 71:5b:ec:fa:03:2a:7d:68:66:30:5f:61:a6:aa:d6: f0:61:b6:d2:76:29:75:89:ac:bf:dd:dc:0d:c9:83: 23:57:1d:69:6e:cb:ad:d3:7e:6d:69:61:4c:5b:13: 4d:d5:39:56:39:47:0d:57:13:a7:21:49:83:df:65: e9:4d:8f:c9:92:0f:56:ae:09:0f:48:8c:1f:31:a4: 8c:39:1d:75:ef:e8:e1:1c:4b:2f:52:04:f5:ef:1a: 6a:4e:82:2c:f3:f4:df:6c:f3:57:1f:1c:58:2e:49: 3b:b5:93:9f:3c:9e:4d:d0:0c:76:1d:1b:3a:c8:76: d6:f2:a7:37:64:c4:03:bf:5d:14:a1:89:a8:31:39: 63:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9D:7B:46:D9:D0:A6:3A:66:9C:B2:F9:F7:12:B2:F0:8F:BA:E3:C1 X509v3 Authority Key Identifier: keyid:B5:D1:33:C4:C7:CD:B2:87:64:5E:4A:A0:27:A4:9A:E2:3A:77:B8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:90:68:49:0d:6d:fb:d8:7f:71:2c:ef:81:16:74:b1:86:af: 16:f3:03:90:6a:0c:92:ae:f7:3e:5b:3b:ca:d3:3d:cb:df:f8: e3:e0:1a:9d:2f:1c:5b:25:83:03:9b:83:24:6f:73:84:6e:ff: d7:fe:d2:c1:de:a3:73:df:57:bc:21:ca:6b:2a:90:2b:ae:d4: 00:8f:8b:c5:fd:35:70:aa:32:54:ba:e4:5d:44:9e:40:9f:f5: f0:5f:2e:b2:7f:aa:25:28:76:87:46:13:28:cf:c7:9e:ee:d1: 9d:b7:57:ce:e7:50:90:7f:c3:6c:ac:af:ed:3b:bc:de:98:f5: 6d:7c:90:11:58:68:a5:f1:3c:f3:9b:ea:1b:f9:24:1c:a5:58: 10:8b:84:85:58:bd:d2:1b:70:bc:0c:99:35:b4:14:24:b7:48: 9a:5e:fe:39:12:cd:ee:3a:9a:f4:50:98:a7:dd:91:2f:9c:ae: d6:c1:20:a3:27:87:86:8b:e8:3d:19:d4:d4:84:3c:02:d6:02: 14:60:73:59:31:79:19:a4:76:da:da:23:a9:95:44:c6:74:32: 41:f8:29:86:37:a8:8b:a1:0e:c7:45:0f:90:32:e9:06:bb:af: 51:36:39:dd:d7:b2:ba:86:98:fe:fa:3c:d6:4d:4d:d6:10:b5: 9a:1e:ba:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPBwI2kbNMwozA3TfMf1FGGdTkk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVEMTMzQzRDN0NEQjI4NzY0NUU0QUEwMjdBNDlBRTIz QTc3QjhGNDAeFw0yNTExMDUwOTQ1MzVaFw0yNTExMDYxMzMxMzVaMDMxMTAvBgNV BAMTKDg3OUQ3QjQ2RDlEMEE2M0E2NjlDQjJGOUY3MTJCMkYwOEZCQUUzQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9GYnGe1lhZr0r5xbphCzRcnl7 noSCQm3EXLWEcmczumgtjb0TY5w38FNDfuBHIbwLA9gVoqD5B3HKWNUlmiM7RGzJ T4yIX2noR1HmOCwNWXmcsj3kFQWlN6xrFzvdDiaYCGRDxPCnqrQj98PlDE2kOKHz URQJVXFb7PoDKn1oZjBfYaaq1vBhttJ2KXWJrL/d3A3JgyNXHWluy63Tfm1pYUxb E03VOVY5Rw1XE6chSYPfZelNj8mSD1auCQ9IjB8xpIw5HXXv6OEcSy9SBPXvGmpO gizz9N9s81cfHFguSTu1k588nk3QDHYdGzrIdtbypzdkxAO/XRShiagxOWOpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUh517RtnQpjpmnLL59xKy8I+648EwHwYDVR0j BBgwFoAUtdEzxMfNsodkXkqgJ6Sa4jp3uPQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjNoTlpSTW5qdFh1QzN3TGJadTlNek5vZDRDcXBCSmFoZTl4SlNxc0JD NWMvMS9CNUQxMzNDNEM3Q0RCMjg3NjQ1RTRBQTAyN0E0OUFFMjNBNzdCOEY0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDEzM0M0QzdDREIyODc2 NDVFNEFBMDI3QTQ5QUUyM0E3N0I4RjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SjNoTlpSTW5qdFh1QzN3TGJadTlNek5vZDRDcXBCSmFoZTl4SlNxc0JDNWMvMS9C NUQxMzNDNEM3Q0RCMjg3NjQ1RTRBQTAyN0E0OUFFMjNBNzdCOEY0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQZBoSQ1t+9h/cSzvgRZ0sYavFvMDkGoMkq73Pls7ytM9y9/44+AanS8cWyWD A5uDJG9zhG7/1/7Swd6jc99XvCHKayqQK67UAI+Lxf01cKoyVLrkXUSeQJ/18F8u sn+qJSh2h0YTKM/Hnu7RnbdXzudQkH/DbKyv7Tu83pj1bXyQEVhopfE885vqG/kk HKVYEIuEhVi90htwvAyZNbQUJLdIml7+ORLN7jqa9FCYp92RL5yu1sEgoyeHhovo PRnU1IQ8AtYCFGBzWTF5GaR22tojqZVExnQyQfgphjeoi6EOx0UPkDLpBruvUTY5 3deyuoaY/vo81k1N1hC1mh66uA== -----END CERTIFICATE-----Generated at Wed Nov 5 14:32:26 2025 by rpki-client