$ rpki-client -vvf rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft File: 5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft (raw, json) Hash identifier: 7kyTLLabM7DplgK02+ZyIAG4+VhIh0pH/FgF3UifxEc= Subject key identifier: DF:41:13:4F:76:28:9C:CC:FD:8A:9D:96:3A:B3:2E:30:F1:D5:62:08 Authority key identifier: 5B:A4:DD:BB:E9:74:E5:C2:A2:5A:95:2B:F4:43:11:47:F1:D1:95:BD Certificate issuer: /CN=5BA4DDBBE974E5C2A25A952BF4431147F1D195BD Certificate serial: 2B86CE0B07094B1B0A1D92D0E5425B864A15EF81 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft Manifest number: 0169 Signing time: Mon 03 Nov 2025 10:44:27 +0000 Manifest this update: Mon 03 Nov 2025 10:39:27 +0000 Manifest next update: Tue 04 Nov 2025 14:04:27 +0000 Files and hashes: 1: 5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl (hash: xok+a6zikxga3qL2PWPozTY5aHnAHVMLxqQ5wmbMlho=) 2: 3230312e3138322e3137362e302f32322d3332203d3e20323637353238.roa (hash: H03Vu8Bfe520dv1rMV0OcFZWYxUrvxZVo6HkfaDNrN0=) 3: 323830343a343263633a3a2f33322d313238203d3e20323637353238.roa (hash: P5vMjk9xZLUcu/EuN4M9DYWvTIbHxAsWjggzhrTxV18=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:86:ce:0b:07:09:4b:1b:0a:1d:92:d0:e5:42:5b:86:4a:15:ef:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BA4DDBBE974E5C2A25A952BF4431147F1D195BD Validity Not Before: Nov 3 10:39:27 2025 GMT Not After : Nov 4 14:04:27 2025 GMT Subject: CN=DF41134F76289CCCFD8A9D963AB32E30F1D56208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e1:76:9f:b1:6d:bd:b5:f4:71:d4:fd:38:be: 89:3d:01:50:22:20:c7:9d:13:33:6a:52:8c:b1:7a: cd:bb:00:76:77:c0:26:06:e3:c2:7e:e2:d6:a5:dd: 8b:42:e7:3a:4b:7a:31:93:6b:43:54:5a:03:a4:31: 36:f0:53:78:42:ad:f3:fb:3a:26:3c:2e:c7:29:3d: d8:19:08:20:f9:53:13:75:23:1e:7b:ec:99:3f:30: 4a:7e:c9:fd:02:e4:57:31:c2:d9:91:6f:d5:79:d0: 3b:dc:8a:8a:62:8f:c8:f5:84:50:a7:e9:fc:cb:a9: 48:99:4e:dc:18:55:f0:d4:ef:94:6c:ad:26:5d:99: 31:1a:1b:8d:4a:18:47:6b:b2:42:48:66:9d:9d:2e: cd:df:64:04:9f:ab:6a:4e:ef:48:dd:58:74:18:42: cc:97:59:81:48:81:be:3b:1e:08:0b:16:83:60:7c: ad:1e:62:f6:f5:5e:62:59:41:ee:8b:99:be:05:60: 49:55:ab:83:3b:8f:3b:b6:9e:21:44:cf:05:e7:05: a9:3f:36:bb:e0:db:1f:5c:2d:17:6a:2b:01:58:e6: 73:32:db:26:ff:b6:97:6e:76:58:27:a4:70:1b:22: 62:eb:6b:e3:45:dd:22:2b:ae:11:df:b2:88:13:01: f5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:41:13:4F:76:28:9C:CC:FD:8A:9D:96:3A:B3:2E:30:F1:D5:62:08 X509v3 Authority Key Identifier: keyid:5B:A4:DD:BB:E9:74:E5:C2:A2:5A:95:2B:F4:43:11:47:F1:D1:95:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d6:90:65:03:93:8b:17:12:21:e4:7a:50:ae:1b:e8:76:e5: 72:17:37:31:f5:df:81:47:80:05:89:43:cc:d5:bd:39:67:cd: 57:c5:44:e4:46:b9:92:c7:d4:bf:65:c4:96:15:f7:e7:8d:58: 6d:75:59:d3:7e:0b:b6:74:bc:78:7c:dc:77:06:73:fe:29:a8: b8:79:c6:9d:ac:ea:62:e7:a0:ed:e8:3f:04:72:53:87:36:83: 02:38:2e:db:b1:a2:4e:cf:81:65:09:7d:7a:ad:5a:c5:f2:df: d7:48:d5:0e:0b:62:00:ee:07:00:0e:77:e1:bc:3c:54:84:a1: 44:9a:2c:f4:70:86:26:be:8a:82:dc:d6:75:7c:b1:98:fc:d4: 93:e4:2d:f7:af:12:a4:2f:27:bd:5f:bd:19:b4:a5:d5:3f:a9: f9:e1:7f:f8:fc:87:63:b2:3d:ad:3e:d4:cd:ee:c5:3a:f3:35: 13:37:b4:90:a9:ee:52:af:ee:12:b1:d7:47:b2:94:3d:a9:c5: b8:27:5f:9f:a3:e8:7a:e9:f5:ff:ef:02:fa:df:31:76:4e:70: 22:02:b2:b2:b3:f7:91:28:55:3e:50:05:72:55:80:04:c3:08: 89:e2:05:ad:c8:8c:38:72:08:d0:a0:98:cc:7d:29:25:e2:32: 46:3f:54:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUK4bOCwcJSxsKHZLQ5UJbhkoV74EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJBNEREQkJFOTc0RTVDMkEyNUE5NTJCRjQ0MzExNDdG MUQxOTVCRDAeFw0yNTExMDMxMDM5MjdaFw0yNTExMDQxNDA0MjdaMDMxMTAvBgNV BAMTKERGNDExMzRGNzYyODlDQ0NGRDhBOUQ5NjNBQjMyRTMwRjFENTYyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD4XafsW29tfRx1P04vok9AVAi IMedEzNqUoyxes27AHZ3wCYG48J+4tal3YtC5zpLejGTa0NUWgOkMTbwU3hCrfP7 OiY8LscpPdgZCCD5UxN1Ix577Jk/MEp+yf0C5FcxwtmRb9V50Dvciopij8j1hFCn 6fzLqUiZTtwYVfDU75RsrSZdmTEaG41KGEdrskJIZp2dLs3fZASfq2pO70jdWHQY QsyXWYFIgb47HggLFoNgfK0eYvb1XmJZQe6Lmb4FYElVq4M7jzu2niFEzwXnBak/ Nrvg2x9cLRdqKwFY5nMy2yb/tpdudlgnpHAbImLra+NF3SIrrhHfsogTAfVFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU30ETT3YonMz9ip2WOrMuMPHVYggwHwYDVR0j BBgwFoAUW6Tdu+l05cKiWpUr9EMRR/HRlb0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmlMVmNTWkpjdVgxYlRHZW5pWXY5Ulc0RTlhRWdCMUFOZzhUQXIxbW9W dEgvMC81QkE0RERCQkU5NzRFNUMyQTI1QTk1MkJGNDQzMTE0N0YxRDE5NUJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCQTREREJCRTk3NEU1QzJB MjVBOTUyQkY0NDMxMTQ3RjFEMTk1QkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmlMVmNTWkpjdVgxYlRHZW5pWXY5Ulc0RTlhRWdCMUFOZzhUQXIxbW9WdEgvMC81 QkE0RERCQkU5NzRFNUMyQTI1QTk1MkJGNDQzMTE0N0YxRDE5NUJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUNaQZQOTixcSIeR6UK4b6Hblchc3MfXfgUeABYlDzNW9OWfNV8VE5Ea5ksfU v2XElhX3541YbXVZ034LtnS8eHzcdwZz/imouHnGnazqYueg7eg/BHJThzaDAjgu 27GiTs+BZQl9eq1axfLf10jVDgtiAO4HAA534bw8VIShRJos9HCGJr6KgtzWdXyx mPzUk+Qt968SpC8nvV+9GbSl1T+p+eF/+PyHY7I9rT7Uze7FOvM1Eze0kKnuUq/u ErHXR7KUPanFuCdfn6Poeun1/+8C+t8xdk5wIgKysrP3kShVPlAFclWABMMIieIF rciMOHII0KCYzH0pJeIyRj9UMg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:28 2025 by rpki-client