$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft File: D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft (raw, json) Hash identifier: gE5ZNrKhDHu/ElLBrzUKGDTX9U91d1B3C4y8NSnrpSU= Subject key identifier: 2D:EF:53:DC:FB:D2:66:91:50:4E:04:25:1C:37:28:46:67:99:C9:88 Authority key identifier: D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B Certificate issuer: /CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B Certificate serial: 40499AE4658F53F8A42D49D1C609A807B2A31EE3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft Manifest number: 01A5 Signing time: Mon 03 Nov 2025 06:52:01 +0000 Manifest this update: Mon 03 Nov 2025 06:47:01 +0000 Manifest next update: Tue 04 Nov 2025 09:29:01 +0000 Files and hashes: 1: 3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa (hash: mQl+DqMitEfto4sm/J239pDInofAJ055830zO5LsIjU=) 2: 3137372e37332e36302e302f32322d3234203d3e20323633343638.roa (hash: ojNYwHHCihvNSk2FkbyfGPhui+Fo/NptmXx53NBSpaQ=) 3: D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl (hash: QpivCKqF0C98dyAAQUAfxzPoICdldHZtvEr50bfJ28E=) 4: 323830343a313234633a3a2f33322d3438203d3e20323633343638.roa (hash: T2k3XHzj+R5PWM1PAn1IiRXkMkZU+kzdLTKOTB9BdPU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:49:9a:e4:65:8f:53:f8:a4:2d:49:d1:c6:09:a8:07:b2:a3:1e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B Validity Not Before: Nov 3 06:47:01 2025 GMT Not After : Nov 4 09:29:01 2025 GMT Subject: CN=2DEF53DCFBD26691504E04251C3728466799C988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:73:ef:05:28:6b:87:52:16:2f:97:4f:00:2e: 53:c8:01:6e:14:6f:ba:46:80:51:4f:1a:a8:12:e6: 17:5f:83:cf:71:74:4d:2d:b6:f9:ea:36:23:31:aa: 27:2e:97:18:23:69:89:2a:fc:93:82:b3:ea:84:a5: de:44:5f:98:d7:cd:4e:50:b2:db:7e:d2:35:b7:b3: a7:20:25:b6:27:61:9b:99:05:1b:dd:44:69:29:3d: a0:b1:6b:c1:b6:f3:5f:58:00:a8:a6:51:f5:7a:93: ca:63:36:51:21:2d:f2:31:07:46:05:da:e1:84:00: 9d:0b:88:dd:34:17:83:d0:cc:b8:72:24:5b:a9:90: 4a:bd:57:fa:7c:ff:ea:e7:1e:8d:07:8a:57:6d:07: 37:6d:00:a2:9c:3b:19:c1:a6:ba:54:29:96:bd:29: 13:2b:e8:2c:99:d8:99:94:38:93:db:a7:50:4a:7f: bb:4e:21:13:eb:7d:73:1f:5c:5f:82:a2:fe:3c:29: 46:4c:9f:f8:dc:7d:bc:d2:71:2d:57:cc:d1:8d:16: 17:66:1a:04:92:78:b4:42:fe:c4:0b:89:5e:46:6f: 15:95:7c:c4:c9:ae:78:90:9d:a1:b6:69:96:4b:e5: 8d:84:b9:a9:d1:3b:57:4e:5f:b1:37:79:58:36:5b: ae:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EF:53:DC:FB:D2:66:91:50:4E:04:25:1C:37:28:46:67:99:C9:88 X509v3 Authority Key Identifier: keyid:D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:60:50:fb:ef:f6:10:4c:d2:3d:4c:01:43:eb:46:31:78:20: ab:22:8d:4d:33:b0:10:de:49:30:6f:ef:a5:c0:e1:4a:07:50: 18:df:51:84:8d:91:8f:c3:d6:0d:92:de:9e:21:e8:89:21:0d: 81:03:ae:c9:65:82:cd:42:48:e2:b6:5d:fb:25:e0:7c:72:7d: a2:4e:1e:62:67:99:7e:52:57:e8:d9:c3:e8:76:ef:90:1e:9f: a4:24:47:6d:44:6c:88:9f:f1:0b:5a:30:0f:9a:51:f5:5a:ed: bd:91:a2:26:6b:fd:0a:5b:3b:ac:7e:fa:39:15:f3:e6:6e:d7: 71:04:32:9d:51:d7:78:d9:d4:ee:35:e2:a8:90:8f:76:30:25: 6c:33:3f:48:97:9d:6d:bb:fe:30:99:52:47:30:b0:1f:e2:14: 49:ef:91:b3:48:e4:a7:79:78:d2:9a:6c:a7:64:cc:cd:ec:ec: 42:60:e7:79:4d:8c:73:42:64:68:84:d0:ce:e0:27:d8:3b:fe: 70:ce:ec:eb:a0:8e:aa:88:76:13:4e:c6:f0:31:48:c9:59:83: 8f:ff:73:ec:27:8a:aa:cf:e1:8a:7e:56:cb:fb:8b:88:04:2a: 18:3b:52:a2:63:36:48:8a:70:55:ab:54:5d:8f:1c:f3:80:a3: fe:88:50:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQEma5GWPU/ikLUnRxgmoB7KjHuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3NEY1NDI4MEZDOUNGN0U5MDY4QzZGRjc0NEZBNUFE MTQ5RDcxQjAeFw0yNTExMDMwNjQ3MDFaFw0yNTExMDQwOTI5MDFaMDMxMTAvBgNV BAMTKDJERUY1M0RDRkJEMjY2OTE1MDRFMDQyNTFDMzcyODQ2Njc5OUM5ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCic+8FKGuHUhYvl08ALlPIAW4U b7pGgFFPGqgS5hdfg89xdE0ttvnqNiMxqiculxgjaYkq/JOCs+qEpd5EX5jXzU5Q stt+0jW3s6cgJbYnYZuZBRvdRGkpPaCxa8G2819YAKimUfV6k8pjNlEhLfIxB0YF 2uGEAJ0LiN00F4PQzLhyJFupkEq9V/p8/+rnHo0HildtBzdtAKKcOxnBprpUKZa9 KRMr6CyZ2JmUOJPbp1BKf7tOIRPrfXMfXF+Cov48KUZMn/jcfbzScS1XzNGNFhdm GgSSeLRC/sQLiV5GbxWVfMTJrniQnaG2aZZL5Y2EuanRO1dOX7E3eVg2W67dAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULe9T3PvSZpFQTgQlHDcoRmeZyYgwHwYDVR0j BBgwFoAU03T1QoD8nPfpBoxv90T6WtFJ1xswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0Vh blkvMC9EMzc0RjU0MjgwRkM5Q0Y3RTkwNjhDNkZGNzQ0RkE1QUQxNDlENzFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNzRGNTQyODBGQzlDRjdF OTA2OEM2RkY3NDRGQTVBRDE0OUQ3MUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0VhblkvMC9E Mzc0RjU0MjgwRkM5Q0Y3RTkwNjhDNkZGNzQ0RkE1QUQxNDlENzFCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXmBQ++/2EEzSPUwBQ+tGMXggqyKNTTOwEN5JMG/vpcDhSgdQGN9RhI2Rj8PW DZLeniHoiSENgQOuyWWCzUJI4rZd+yXgfHJ9ok4eYmeZflJX6NnD6HbvkB6fpCRH bURsiJ/xC1owD5pR9VrtvZGiJmv9Cls7rH76ORXz5m7XcQQynVHXeNnU7jXiqJCP djAlbDM/SJedbbv+MJlSRzCwH+IUSe+Rs0jkp3l40ppsp2TMzezsQmDneU2Mc0Jk aITQzuAn2Dv+cM7s66COqoh2E07G8DFIyVmDj/9z7CeKqs/hin5Wy/uLiAQqGDtS omM2SIpwVatUXY8c84Cj/ohQ6g== -----END CERTIFICATE-----Generated at Tue Nov 4 02:02:15 2025 by rpki-client