$ rpki-client -vvf rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft File: D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft (raw, json) Hash identifier: HDyVb0Mo5jw9dpiVY4v3T5rGsoyjlBp7e796EVSuKxQ= Subject key identifier: DA:7C:D1:E0:17:90:85:02:8F:51:63:FB:D9:12:03:55:45:E9:0C:63 Authority key identifier: D1:40:32:9A:9C:2C:7F:8E:F6:7D:07:AE:69:78:FC:F2:C2:57:CB:DC Certificate issuer: /CN=D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC Certificate serial: 58D97694D7B815EC41087FCBAE91BDF0E08D70F7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft Manifest number: 5E Signing time: Sun 02 Nov 2025 16:37:26 +0000 Manifest this update: Sun 02 Nov 2025 16:32:26 +0000 Manifest next update: Mon 03 Nov 2025 16:37:26 +0000 Files and hashes: 1: 3133382e39392e38302e302f32332d3332203d3e20323731353936.roa (hash: HLRC3ILU1/Q0mbHQEP1oVDDagjnMAzt8TFJhqxGdn2k=) 2: D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl (hash: aN4p2r/VY1TIjhV3EcrCpRl2QrLD8cl+K0ZoDyUKTEk=) 3: 323830343a376530303a3a2f33322d313238203d3e20323731353936.roa (hash: atkpFiuFx9gI+NQUYhUM8BLIYtiVv1QBW1r3n1UGNww=) 4: 3139302e392e3132362e302f32342d3332203d3e20323731353936.roa (hash: uGWB+dLXvJyRVohmeQH5EDKbrZFb7329DIF62AsG+G4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 16:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d9:76:94:d7:b8:15:ec:41:08:7f:cb:ae:91:bd:f0:e0:8d:70:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC Validity Not Before: Nov 2 16:32:26 2025 GMT Not After : Nov 3 16:37:26 2025 GMT Subject: CN=DA7CD1E0179085028F5163FBD912035545E90C63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:39:c4:f8:a8:18:4b:81:3a:b7:7a:b5:d2:58: 1a:e3:5a:4d:f3:32:73:dd:9f:49:ed:c1:95:c4:8a: f4:bf:21:97:54:31:03:34:68:39:12:96:a3:94:31: 22:bd:2e:52:53:a5:9a:6b:7f:47:c8:bb:d1:69:9d: 12:fa:b8:f5:82:5d:f4:eb:e2:36:d7:1c:5e:cc:a9: 28:59:44:d2:57:07:d6:53:ed:4a:cb:a0:4b:41:70: e7:0c:f9:6f:fd:62:41:ea:78:71:3c:58:68:a9:5e: 22:05:fc:93:46:47:0a:8c:d5:95:e3:e7:18:89:c6: c1:b3:01:77:5a:53:e0:62:d5:87:15:bf:20:08:a2: 6f:f4:66:5c:03:c5:90:7e:22:5c:7c:8c:7b:ee:68: cb:8c:c0:d5:cd:a1:86:11:9b:f3:dc:ba:49:92:08: c0:86:54:58:8a:6a:4f:bd:4f:b8:9c:ed:a3:dc:6a: 41:60:4e:bf:ed:c1:12:e8:1f:0b:93:13:f8:84:7f: 0a:70:10:ae:ba:1d:bd:2f:10:25:c6:cc:49:0f:a4: fc:42:76:3d:d8:7e:24:63:68:25:4e:5b:be:fe:13: c8:8d:ea:6b:8c:68:6a:46:23:5a:5d:c8:67:ff:25: 1c:d2:01:8c:e9:d7:14:ef:0a:3e:c6:79:4c:0b:72: 02:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7C:D1:E0:17:90:85:02:8F:51:63:FB:D9:12:03:55:45:E9:0C:63 X509v3 Authority Key Identifier: keyid:D1:40:32:9A:9C:2C:7F:8E:F6:7D:07:AE:69:78:FC:F2:C2:57:CB:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5f:47:b7:8c:e2:a8:a7:6e:d3:1d:60:be:36:8e:bf:09:6c: d7:96:19:a2:de:c0:40:58:3a:98:fc:54:9c:90:5e:1e:b9:b9: 68:90:53:7b:93:a6:3e:f2:81:a7:02:e8:35:9e:d3:40:83:a2: 00:7e:ce:4c:d4:d3:7c:ad:5f:61:e1:b7:f2:fb:88:be:fa:d2: 85:bc:b7:34:cc:0d:b7:2e:c7:9e:8e:41:d6:4d:34:76:8f:12: ad:21:00:61:81:0f:bc:9e:08:28:4c:0b:36:b6:9b:5b:fa:29: 1d:3f:bc:04:a5:44:43:c5:f0:ec:d6:4f:69:3e:99:dc:06:b2: f5:12:06:66:a4:dd:3b:50:51:4a:5c:fc:7d:e0:cc:ac:c1:14: 7d:7a:1a:68:f8:ad:74:2c:33:5c:b7:e2:ac:d2:72:5b:d4:02: 07:c5:0d:11:a2:9b:45:ed:9b:34:43:2d:3c:07:a7:9c:2d:65: 14:5d:aa:d2:27:59:9b:d4:ef:bc:b8:f6:3e:c6:8f:8d:1d:96: 99:82:1d:9d:3e:70:1b:73:4d:da:04:fa:e8:1f:a9:3a:4c:f6: 0f:af:36:20:e7:45:ec:36:b6:61:f3:13:3c:d2:59:93:4a:95: a8:71:c7:c5:e2:4e:25:db:fe:fd:5d:0a:ed:a7:30:ca:04:6f: 2b:26:ec:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWNl2lNe4FexBCH/LrpG98OCNcPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE0MDMyOUE5QzJDN0Y4RUY2N0QwN0FFNjk3OEZDRjJD MjU3Q0JEQzAeFw0yNTExMDIxNjMyMjZaFw0yNTExMDMxNjM3MjZaMDMxMTAvBgNV BAMTKERBN0NEMUUwMTc5MDg1MDI4RjUxNjNGQkQ5MTIwMzU1NDVFOTBDNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOcT4qBhLgTq3erXSWBrjWk3z MnPdn0ntwZXEivS/IZdUMQM0aDkSlqOUMSK9LlJTpZprf0fIu9FpnRL6uPWCXfTr 4jbXHF7MqShZRNJXB9ZT7UrLoEtBcOcM+W/9YkHqeHE8WGipXiIF/JNGRwqM1ZXj 5xiJxsGzAXdaU+Bi1YcVvyAIom/0ZlwDxZB+Ilx8jHvuaMuMwNXNoYYRm/PcukmS CMCGVFiKak+9T7ic7aPcakFgTr/twRLoHwuTE/iEfwpwEK66Hb0vECXGzEkPpPxC dj3YfiRjaCVOW77+E8iN6muMaGpGI1pdyGf/JRzSAYzp1xTvCj7GeUwLcgInAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2nzR4BeQhQKPUWP72RIDVUXpDGMwHwYDVR0j BBgwFoAU0UAympwsf472fQeuaXj88sJXy9wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0hxcXlFSGtvV2ptVzhwUGJwVUh1ZWVTWm53ZGRLaUVRRUhUbXlaMWVF SkwvMC9EMTQwMzI5QTlDMkM3RjhFRjY3RDA3QUU2OTc4RkNGMkMyNTdDQkRDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxNDAzMjlBOUMyQzdGOEVG NjdEMDdBRTY5NzhGQ0YyQzI1N0NCREMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0hxcXlFSGtvV2ptVzhwUGJwVUh1ZWVTWm53ZGRLaUVRRUhUbXlaMWVFSkwvMC9E MTQwMzI5QTlDMkM3RjhFRjY3RDA3QUU2OTc4RkNGMkMyNTdDQkRDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG19Ht4ziqKdu0x1gvjaOvwls15YZot7AQFg6mPxUnJBeHrm5aJBTe5OmPvKB pwLoNZ7TQIOiAH7OTNTTfK1fYeG38vuIvvrShby3NMwNty7Hno5B1k00do8SrSEA YYEPvJ4IKEwLNrabW/opHT+8BKVEQ8Xw7NZPaT6Z3Aay9RIGZqTdO1BRSlz8feDM rMEUfXoaaPitdCwzXLfirNJyW9QCB8UNEaKbRe2bNEMtPAennC1lFF2q0idZm9Tv vLj2PsaPjR2WmYIdnT5wG3NN2gT66B+pOkz2D682IOdF7Da2YfMTPNJZk0qVqHHH xeJOJdv+/V0K7acwygRvKybs5Q== -----END CERTIFICATE-----Generated at Mon Nov 3 05:42:40 2025 by rpki-client