$ rpki-client -vvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft File: 5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft (raw, json) Hash identifier: 26xdglffDZEiSFKoED8XMGTlOUukxtYAEodwFg5rt6g= Subject key identifier: A0:12:51:25:FB:E0:47:7F:D4:BB:EE:3D:A3:5F:61:8E:38:A2:19:03 Authority key identifier: 5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9 Certificate issuer: /CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9 Certificate serial: 63AE14AC3956BA6BEBF890C98E85ED9A46D16F93 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer Subject info access: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft Manifest number: 0306 Signing time: Mon 03 Nov 2025 15:30:53 +0000 Manifest this update: Mon 03 Nov 2025 15:25:53 +0000 Manifest next update: Tue 04 Nov 2025 16:06:53 +0000 Files and hashes: 1: 3137392e39362e3230302e302f32312d3234203d3e203532353730.roa (hash: ThFay1lLsaEu2jVa7XfNcUJbNcEHJjS8TO7JyZdIDyo=) 2: 3137372e38362e3131362e302f32322d3234203d3e203532353730.roa (hash: OGh0oSMiAuqwOXO84p0Xsd8bUAebLrAgyXg0x2c44tg=) 3: 323830343a313536343a3a2f33322d3336203d3e203532353730.roa (hash: FC1Wd69RrJidzRZVv4UIal/AXyu4NEituILPDllcaNg=) 4: 5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl (hash: QtetkSlVxMMgOnTYt9HmaQodMv/gC7Qro2Ub3p7rdCE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 16:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ae:14:ac:39:56:ba:6b:eb:f8:90:c9:8e:85:ed:9a:46:d1:6f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9 Validity Not Before: Nov 3 15:25:53 2025 GMT Not After : Nov 4 16:06:53 2025 GMT Subject: CN=A0125125FBE0477FD4BBEE3DA35F618E38A21903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a1:77:1b:d5:5a:cd:4e:b6:02:3d:63:9f:a0: ed:dd:32:d3:7e:47:30:6e:0d:38:4a:59:d0:1b:97: 10:db:5e:a9:03:7c:5f:24:89:2e:8e:df:21:a7:7f: 3e:26:d3:c3:02:10:bf:b9:f4:98:8f:89:47:56:8e: 7d:11:bd:0d:d1:f6:9e:59:18:ec:55:e2:16:2c:30: 1d:50:17:83:42:7b:19:50:13:41:b1:26:ac:f3:1e: 89:21:a5:fa:82:10:87:2b:81:08:4c:95:ff:66:7d: 3b:04:36:e0:5e:1e:2d:d9:cd:62:7d:5d:7e:fc:0c: 1c:a9:b3:35:1a:cc:d7:48:85:b3:25:c6:bc:09:75: 82:47:e9:7c:46:14:48:e9:f9:35:f6:b3:52:7a:d0: 00:69:3f:ba:32:76:1b:b2:2e:12:ff:1d:a1:9d:8b: aa:e1:28:1d:1e:1c:2d:75:dc:da:15:c1:09:72:21: d9:02:c2:62:45:f0:97:ef:d8:09:9d:b3:15:10:e0: b6:44:3b:7f:c5:87:7f:4b:35:0f:a6:02:55:90:d5: b7:82:57:a5:b8:98:ba:df:77:90:f9:51:a1:39:41: 40:0f:3d:c3:5a:2d:50:69:d3:9e:87:43:01:89:da: 3c:16:ad:c3:e8:cb:0d:9e:90:8e:77:c3:d5:a2:56: 31:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:12:51:25:FB:E0:47:7F:D4:BB:EE:3D:A3:5F:61:8E:38:A2:19:03 X509v3 Authority Key Identifier: keyid:5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:89:b0:ba:d2:4d:80:29:50:8a:d6:9a:8a:df:ab:2a:fa:a0: 33:84:e8:90:4a:b3:c9:67:7a:ba:e7:8f:7f:08:67:72:21:49: ee:22:b2:d6:f1:4e:57:d4:3c:65:e1:f1:cc:93:ca:0f:07:35: ce:6a:9f:32:6f:f9:f9:72:ba:b0:cc:1d:08:70:63:79:15:1b: 77:03:26:12:0c:3c:0a:8d:72:26:6c:d7:2b:33:01:74:6e:81: e5:31:a0:43:85:7b:be:94:b8:c3:36:66:db:85:0c:3b:5b:43: 45:65:48:63:cc:fb:46:34:cc:5b:98:cd:58:fc:fd:8b:3b:ae: 7d:46:9d:03:d8:b9:92:d0:32:a5:cf:20:f8:96:bc:67:a6:17: 7e:4e:f2:1b:b5:69:d3:5d:1f:59:9a:41:98:e3:31:c0:2c:b2: 22:dc:eb:84:79:c6:32:61:20:cd:a0:c8:23:a7:1c:1c:30:a9: 14:78:33:07:36:9e:a3:de:c0:84:c6:c2:2c:7c:1f:37:63:98: 2e:16:f4:e5:c8:e8:00:52:2d:60:07:28:4c:fa:2a:95:79:49: 8e:e3:8d:89:24:c0:02:e6:e8:94:a7:f2:fb:33:68:37:53:6f: 1e:a1:0d:b8:48:f8:7b:32:c7:7c:6e:05:62:42:02:76:5c:a6: 49:e9:2b:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY64UrDlWumvr+JDJjoXtmkbRb5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNURDMjJDOUYzOEU0QjNBNUZGQUNDNzY4OUM2RUI1 MkE2NURCOTAeFw0yNTExMDMxNTI1NTNaFw0yNTExMDQxNjA2NTNaMDMxMTAvBgNV BAMTKEEwMTI1MTI1RkJFMDQ3N0ZENEJCRUUzREEzNUY2MThFMzhBMjE5MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBoXcb1VrNTrYCPWOfoO3dMtN+ RzBuDThKWdAblxDbXqkDfF8kiS6O3yGnfz4m08MCEL+59JiPiUdWjn0RvQ3R9p5Z GOxV4hYsMB1QF4NCexlQE0GxJqzzHokhpfqCEIcrgQhMlf9mfTsENuBeHi3ZzWJ9 XX78DBypszUazNdIhbMlxrwJdYJH6XxGFEjp+TX2s1J60ABpP7oydhuyLhL/HaGd i6rhKB0eHC113NoVwQlyIdkCwmJF8Jfv2AmdsxUQ4LZEO3/Fh39LNQ+mAlWQ1beC V6W4mLrfd5D5UaE5QUAPPcNaLVBp056HQwGJ2jwWrcPoyw2ekI53w9WiVjFbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoBJRJfvgR3/Uu+49o19hjjiiGQMwHwYDVR0j BBgwFoAUX/XcIsnzjks6X/rMdonG61KmXbkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1J1UkxMYXVhenpxUWQ3NUdpWkxpdE5hUVp4bWRVcTZMREpaajhmcWV5 ZDIvMS81RkY1REMyMkM5RjM4RTRCM0E1RkZBQ0M3Njg5QzZFQjUyQTY1REI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGRjVEQzIyQzlGMzhFNEIz QTVGRkFDQzc2ODlDNkVCNTJBNjVEQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1J1UkxMYXVhenpxUWQ3NUdpWkxpdE5hUVp4bWRVcTZMREpaajhmcWV5ZDIvMS81 RkY1REMyMkM5RjM4RTRCM0E1RkZBQ0M3Njg5QzZFQjUyQTY1REI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnYmwutJNgClQitaait+rKvqgM4TokEqzyWd6uuePfwhnciFJ7iKy1vFOV9Q8 ZeHxzJPKDwc1zmqfMm/5+XK6sMwdCHBjeRUbdwMmEgw8Co1yJmzXKzMBdG6B5TGg Q4V7vpS4wzZm24UMO1tDRWVIY8z7RjTMW5jNWPz9izuufUadA9i5ktAypc8g+Ja8 Z6YXfk7yG7Vp010fWZpBmOMxwCyyItzrhHnGMmEgzaDII6ccHDCpFHgzBzaeo97A hMbCLHwfN2OYLhb05cjoAFItYAcoTPoqlXlJjuONiSTAAubolKfy+zNoN1NvHqEN uEj4ezLHfG4FYkICdlymSekr1w== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:35 2025 by rpki-client