$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.mft File: EF9D370AB78E47ED988195E5BF641AC265AC0230.mft (raw, json) Hash identifier: RLueoMHgVrOPAgpZEaKH35iTsbfwDYWr6f3dhO9zgAQ= Subject key identifier: 64:2E:0F:79:34:93:A1:DF:98:12:32:07:82:73:70:AA:21:6E:F4:7F Authority key identifier: EF:9D:37:0A:B7:8E:47:ED:98:81:95:E5:BF:64:1A:C2:65:AC:02:30 Certificate issuer: /CN=EF9D370AB78E47ED988195E5BF641AC265AC0230 Certificate serial: 5AB8751479FC288C27256D9240FF81AF1BD1E133 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9D370AB78E47ED988195E5BF641AC265AC0230.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.mft Manifest number: 85 Signing time: Sun 02 Nov 2025 22:29:29 +0000 Manifest this update: Sun 02 Nov 2025 22:24:29 +0000 Manifest next update: Tue 04 Nov 2025 01:49:29 +0000 Files and hashes: 1: 323830343a386538343a3a2f33322d313238203d3e20323733343331.roa (hash: 6x10PVZZuzVejBRD6Q7FVdxUl4HrhcL/zWS6xH6hbBE=) 2: 3138362e3232372e37362e302f32322d3332203d3e20323733343331.roa (hash: J/1m69/x8vy7bx2a1DCizUvrKeEgZVC8uLG/ePlI91k=) 3: 3139312e372e302e302f32332d3332203d3e20323733343331.roa (hash: iunrE3SBYmm+pYsI+FnplsHHxSBbDZeM3RxsRQjLbxo=) 4: EF9D370AB78E47ED988195E5BF641AC265AC0230.crl (hash: utAAqR2EQxflr7WMTJ4x1YPZIlOGx7tQMr85iXosBsc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.crl rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9D370AB78E47ED988195E5BF641AC265AC0230.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 01:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b8:75:14:79:fc:28:8c:27:25:6d:92:40:ff:81:af:1b:d1:e1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF9D370AB78E47ED988195E5BF641AC265AC0230 Validity Not Before: Nov 2 22:24:29 2025 GMT Not After : Nov 4 01:49:29 2025 GMT Subject: CN=642E0F793493A1DF98123207827370AA216EF47F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:05:57:00:d3:06:90:ac:92:f6:56:32:4a: 27:a2:d3:93:0a:92:a5:2e:aa:46:52:a5:96:7a:b4: 1c:b2:16:1b:ba:55:db:18:d9:61:57:46:12:a0:6d: b4:d7:19:af:90:95:81:b5:39:25:f7:59:75:c8:05: 29:92:9e:08:f7:cb:54:a5:63:13:ba:bb:cf:86:5e: 7b:61:0a:36:43:ce:7b:f3:9e:4f:90:43:a5:1d:b7: 9d:5c:fb:74:4e:3a:6c:a7:2d:10:b1:c9:48:a3:4e: df:4e:48:c0:2d:30:bf:fe:a1:98:30:a3:83:22:f5: ca:cd:4f:c3:eb:77:b3:64:fd:5e:d4:76:dc:bc:f5: c2:63:f3:e1:da:a6:ff:23:c3:8b:b2:3d:ba:bd:fc: 4f:83:d5:8f:a0:19:cb:75:fa:bd:21:9f:b9:cc:13: 46:78:a7:da:3c:cd:f8:80:c1:8f:97:ad:56:e1:b6: 22:fa:54:58:05:94:28:5b:8d:0b:8f:12:86:d2:42: ef:5a:7b:f6:12:87:90:ce:c6:e3:31:e4:a0:d6:17: 68:1f:c0:4b:7d:e7:84:9b:28:96:21:cd:58:da:71: 3b:27:b0:1f:d1:ab:ba:d6:ef:50:60:fb:2e:03:71: 6f:33:23:3d:fc:8d:95:92:07:76:03:5e:f3:8d:ae: 6c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2E:0F:79:34:93:A1:DF:98:12:32:07:82:73:70:AA:21:6E:F4:7F X509v3 Authority Key Identifier: keyid:EF:9D:37:0A:B7:8E:47:ED:98:81:95:E5:BF:64:1A:C2:65:AC:02:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9D370AB78E47ED988195E5BF641AC265AC0230.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a4:d2:ad:f9:0b:50:cd:00:d0:9d:0c:88:58:67:ca:ae:61: 29:08:8f:7f:8e:ab:77:70:47:38:6e:ea:67:51:27:56:28:22: 3a:a4:34:2e:ef:0d:e7:06:9c:c1:43:0a:ee:64:45:27:0a:7a: 45:78:41:e3:52:8c:23:ad:8f:96:fd:eb:47:80:87:76:4a:c7: 1d:4b:78:1d:d1:6e:cd:e4:82:58:cd:a9:0c:be:05:9c:ae:43: 69:a9:b6:db:f5:25:4c:b6:f8:f5:93:6c:2d:17:4a:e2:2a:0f: 9e:83:2d:79:35:3a:6c:39:ad:51:da:71:44:d5:f0:cd:33:c7: d0:02:bc:75:9d:17:5e:a5:b4:60:52:73:5d:f4:c9:27:be:ee: 89:a5:6a:22:dc:0a:68:df:2d:53:79:6b:3d:da:27:30:71:33: 37:05:f8:9a:ee:39:c7:a4:19:8e:1d:ef:b4:0a:18:d4:1d:36: 95:8f:4e:5b:6b:44:62:63:e7:b8:36:fc:b8:ba:27:d1:56:3f: 21:ad:45:e4:fb:84:8f:ab:78:f5:f3:78:77:61:ec:75:d8:3e: f6:8c:b0:7e:d1:2e:48:62:56:3a:f3:f9:b2:2d:c6:e9:c7:b2: 2f:53:38:b2:b2:e3:d7:57:8e:d9:81:5d:01:df:b9:52:23:aa: 06:72:db:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWrh1FHn8KIwnJW2SQP+BrxvR4TMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY5RDM3MEFCNzhFNDdFRDk4ODE5NUU1QkY2NDFBQzI2 NUFDMDIzMDAeFw0yNTExMDIyMjI0MjlaFw0yNTExMDQwMTQ5MjlaMDMxMTAvBgNV BAMTKDY0MkUwRjc5MzQ5M0ExREY5ODEyMzIwNzgyNzM3MEFBMjE2RUY0N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVQVXANMGkKyS9lYySiei05MK kqUuqkZSpZZ6tByyFhu6VdsY2WFXRhKgbbTXGa+QlYG1OSX3WXXIBSmSngj3y1Sl YxO6u8+GXnthCjZDznvznk+QQ6Udt51c+3ROOmynLRCxyUijTt9OSMAtML/+oZgw o4Mi9crNT8Prd7Nk/V7Udty89cJj8+Hapv8jw4uyPbq9/E+D1Y+gGct1+r0hn7nM E0Z4p9o8zfiAwY+XrVbhtiL6VFgFlChbjQuPEobSQu9ae/YSh5DOxuMx5KDWF2gf wEt954SbKJYhzVjacTsnsB/Rq7rW71Bg+y4DcW8zIz38jZWSB3YDXvONrmz7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZC4PeTSTod+YEjIHgnNwqiFu9H8wHwYDVR0j BBgwFoAU7503CreOR+2YgZXlv2QawmWsAjAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGlwazRlUWQ5elV1Y3lFeExrc0NZeHlLNFNxRWR2R1FzSkxMazlNc3Bt RlgvMC9FRjlEMzcwQUI3OEU0N0VEOTg4MTk1RTVCRjY0MUFDMjY1QUMwMjMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGOUQzNzBBQjc4RTQ3RUQ5 ODgxOTVFNUJGNjQxQUMyNjVBQzAyMzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGlwazRlUWQ5elV1Y3lFeExrc0NZeHlLNFNxRWR2R1FzSkxMazlNc3BtRlgvMC9F RjlEMzcwQUI3OEU0N0VEOTg4MTk1RTVCRjY0MUFDMjY1QUMwMjMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXKTSrfkLUM0A0J0MiFhnyq5hKQiPf46rd3BHOG7qZ1EnVigiOqQ0Lu8N5wac wUMK7mRFJwp6RXhB41KMI62Plv3rR4CHdkrHHUt4HdFuzeSCWM2pDL4FnK5Daam2 2/UlTLb49ZNsLRdK4ioPnoMteTU6bDmtUdpxRNXwzTPH0AK8dZ0XXqW0YFJzXfTJ J77uiaVqItwKaN8tU3lrPdonMHEzNwX4mu45x6QZjh3vtAoY1B02lY9OW2tEYmPn uDb8uLon0VY/Ia1F5PuEj6t49fN4d2Hsddg+9oywftEuSGJWOvP5si3G6ceyL1M4 srLj11eO2YFdAd+5UiOqBnLbQg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:31:11 2025 by rpki-client