$ rpki-client -vvf rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft File: 5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft (raw, json) Hash identifier: ftEVBgUHa7bLI9DRGF2eYzHRqzh/V0zuSgF5FcSbU9k= Subject key identifier: 46:23:BE:2C:3E:5C:AE:7B:72:C8:77:BF:06:AE:6E:11:06:61:BD:CB Authority key identifier: 5A:1E:4C:0F:6F:96:E5:93:3B:E0:09:91:E3:86:C3:F9:65:E7:C3:E9 Certificate issuer: /CN=5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9 Certificate serial: 01958CE428403DE40FECE99835C2B76B718E512D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.cer Subject info access: rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft Manifest number: 2A Signing time: Wed 05 Nov 2025 09:29:27 +0000 Manifest this update: Wed 05 Nov 2025 09:24:27 +0000 Manifest next update: Thu 06 Nov 2025 11:52:27 +0000 Files and hashes: 1: 34352e37302e3235322e302f32322d3332203d3e20323637363131.roa (hash: yRi1SXpN/dv/T/K6SaSvoW/LDkoILoiPkENVWXL0Ftc=) 2: 5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.crl (hash: n940aZ3HYVJ4AGLb0HG260NhWtEqWNEUBd69/4GK51E=) 3: 323830343a343433633a3a2f33322d313238203d3e20323637363131.roa (hash: bL/3cJavWtCjzV3M2Smxs5oF64TchmbOwc08G5LhIYM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.crl rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:8c:e4:28:40:3d:e4:0f:ec:e9:98:35:c2:b7:6b:71:8e:51:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9 Validity Not Before: Nov 5 09:24:27 2025 GMT Not After : Nov 6 11:52:27 2025 GMT Subject: CN=4623BE2C3E5CAE7B72C877BF06AE6E110661BDCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e1:c9:d7:04:38:52:a1:4e:36:91:d3:4a:d8: 24:01:c3:06:59:ea:1c:34:aa:7d:7d:0a:b3:1e:40: ac:80:b2:02:80:d6:25:08:d0:48:da:79:85:5d:00: 3e:66:81:1b:8c:d0:83:28:90:7e:67:a9:cb:0e:dd: 1c:d1:57:99:60:7c:48:56:ac:69:96:7c:6e:52:7b: 23:b5:04:3a:72:b7:40:97:4d:50:49:8e:da:6a:75: 9a:36:e9:89:44:fb:99:fa:76:99:8c:fb:45:ac:a8: 5f:6b:e2:ac:9f:75:c1:ad:ec:60:57:42:9f:13:4d: 7f:21:d9:f9:a7:03:bc:f3:8e:1b:0a:f4:f8:94:d6: 11:14:7f:2e:68:c3:93:15:f8:f9:80:8b:00:5c:13: 23:97:a6:1c:da:95:a5:d4:fc:f3:73:a1:9d:dd:41: 27:2c:70:be:1d:6d:5b:62:ad:4c:ec:35:bc:8f:90: 4c:22:df:ae:37:83:dc:21:92:b3:ea:5f:0d:6d:9a: f5:4f:6e:db:d5:20:47:16:92:33:0b:0d:7f:bf:cd: b7:59:b7:19:18:18:5e:64:45:a4:f1:2f:a7:fe:55: c5:03:8a:10:c4:ff:39:1d:58:24:a3:ee:44:7a:9c: ca:72:f7:b6:aa:7e:86:c6:28:18:3b:2e:85:ea:53: b1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:23:BE:2C:3E:5C:AE:7B:72:C8:77:BF:06:AE:6E:11:06:61:BD:CB X509v3 Authority Key Identifier: keyid:5A:1E:4C:0F:6F:96:E5:93:3B:E0:09:91:E3:86:C3:F9:65:E7:C3:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:8b:46:7b:7f:34:11:15:eb:b8:1b:dc:86:16:38:bc:1e:6d: 0d:43:97:64:6b:3a:c9:13:1e:f4:82:f2:a5:dc:ac:cb:9d:d0: 32:6d:98:a3:2b:49:69:87:9d:c2:88:d3:a6:07:26:ea:1d:b8: ba:84:ad:a4:e2:0a:0f:f7:84:92:7e:53:17:da:ee:67:30:21: e8:30:d0:0e:ba:16:07:0f:c9:ff:b2:50:76:71:9e:18:e3:36: 00:e0:3c:f4:94:7f:06:89:dc:b5:05:92:23:bd:31:6e:c5:20: 5c:8e:62:bc:54:da:70:7b:25:3a:04:1d:5e:c3:8e:cb:16:45: 08:e5:af:d8:9b:15:b6:aa:c9:23:eb:82:9c:37:a0:39:6d:2b: d1:a5:04:34:db:69:e4:a4:17:da:c2:30:f0:15:e3:ee:d6:f2: f8:17:db:05:f7:91:89:59:ab:88:f1:bf:b6:3f:81:2f:39:eb: cf:ec:03:0d:93:7c:0c:84:c3:48:fe:2a:61:23:50:50:e1:30: e0:41:a3:1c:61:20:84:5f:17:e5:cc:fa:4d:19:cc:a3:9e:25: d4:6d:8c:76:2c:29:cb:92:cb:78:b1:74:34:2a:76:d9:ad:63: 2e:54:f9:ad:9d:ea:57:77:22:a7:6d:a9:74:ca:03:4f:e9:ce: b0:a1:d8:1b -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUAZWM5ChAPeQP7OmYNcK3a3GOUS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExRTRDMEY2Rjk2RTU5MzNCRTAwOTkxRTM4NkMzRjk2 NUU3QzNFOTAeFw0yNTExMDUwOTI0MjdaFw0yNTExMDYxMTUyMjdaMDMxMTAvBgNV BAMTKDQ2MjNCRTJDM0U1Q0FFN0I3MkM4NzdCRjA2QUU2RTExMDY2MUJEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4cnXBDhSoU42kdNK2CQBwwZZ 6hw0qn19CrMeQKyAsgKA1iUI0EjaeYVdAD5mgRuM0IMokH5nqcsO3RzRV5lgfEhW rGmWfG5SeyO1BDpyt0CXTVBJjtpqdZo26YlE+5n6dpmM+0WsqF9r4qyfdcGt7GBX Qp8TTX8h2fmnA7zzjhsK9PiU1hEUfy5ow5MV+PmAiwBcEyOXphzalaXU/PNzoZ3d QScscL4dbVtirUzsNbyPkEwi3643g9whkrPqXw1tmvVPbtvVIEcWkjMLDX+/zbdZ txkYGF5kRaTxL6f+VcUDihDE/zkdWCSj7kR6nMpy97aqfobGKBg7LoXqU7FzAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQURiO+LD5crntyyHe/Bq5uEQZhvcswHwYDVR0j BBgwFoAUWh5MD2+W5ZM74AmR44bD+WXnw+kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9uM2JSeDVqaFJDVUYzOU1QZVpLN2pKOFpZTFNTS283MWNLMmZzQURZdGMx LzAvNUExRTRDMEY2Rjk2RTU5MzNCRTAwOTkxRTM4NkMzRjk2NUU3QzNFOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81QTFFNEMwRjZGOTZFNTkzM0JF MDA5OTFFMzg2QzNGOTY1RTdDM0U5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL24z YlJ4NWpoUkNVRjM5TVBlWks3ako4WllMU1NLbzcxY0syZnNBRFl0YzEvMC81QTFF NEMwRjZGOTZFNTkzM0JFMDA5OTFFMzg2QzNGOTY1RTdDM0U5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA sItGe380ERXruBvchhY4vB5tDUOXZGs6yRMe9ILypdysy53QMm2YoytJaYedwojT pgcm6h24uoStpOIKD/eEkn5TF9ruZzAh6DDQDroWBw/J/7JQdnGeGOM2AOA89JR/ BonctQWSI70xbsUgXI5ivFTacHslOgQdXsOOyxZFCOWv2JsVtqrJI+uCnDegOW0r 0aUENNtp5KQX2sIw8BXj7tby+BfbBfeRiVmriPG/tj+BLznrz+wDDZN8DITDSP4q YSNQUOEw4EGjHGEghF8X5cz6TRnMo54l1G2Mdiwpy5LLeLF0NCp22a1jLlT5rZ3q V3cip22pdMoDT+nOsKHYGw== -----END CERTIFICATE-----Generated at Wed Nov 5 14:02:21 2025 by rpki-client