$ rpki-client -vvf rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft File: 5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft (raw, json) Hash identifier: FYfM8K3qgDPvWfHwJ0jcnhh5MTk8kwNjB51NO08nm3U= Subject key identifier: 1A:97:79:3E:23:57:CD:84:C7:22:FE:E8:8A:F0:7F:ED:BA:6E:7B:A8 Authority key identifier: 5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31 Certificate issuer: /CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31 Certificate serial: 7201AB1964508F50E28944E77F6C1EB1AD0CF3AC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer Subject info access: rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft Manifest number: 0297 Signing time: Sun 02 Nov 2025 17:13:20 +0000 Manifest this update: Sun 02 Nov 2025 17:08:20 +0000 Manifest next update: Mon 03 Nov 2025 20:30:20 +0000 Files and hashes: 1: 323830343a333435343a3a2f33322d3334203d3e20323635343531.roa (hash: r3bCeQ3Va1xBObYctOhmI8el+yMJ561eA1zNaJrdc6A=) 2: 3136382e3139362e3130342e302f32322d3234203d3e20323635343531.roa (hash: bm12g2NtqddE/K8ln3akRM5TUAz6D/tgPeBexY7J5sY=) 3: 323830343a333435343a323030303a3a2f33352d3335203d3e20323635343531.roa (hash: lWPWAMy2NkMXHq4ex2mIrGhd7zdCsxdT6sdhk5ThXO0=) 4: 5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl (hash: lQv7+zqxwPfOIhSINje43nqveaToZILmj2vK84Tq74c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 20:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:01:ab:19:64:50:8f:50:e2:89:44:e7:7f:6c:1e:b1:ad:0c:f3:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31 Validity Not Before: Nov 2 17:08:20 2025 GMT Not After : Nov 3 20:30:20 2025 GMT Subject: CN=1A97793E2357CD84C722FEE88AF07FEDBA6E7BA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:2a:19:67:f0:dc:f7:c0:0d:a7:7d:51:07: dc:b3:14:83:d3:c1:04:c6:10:63:42:5c:9a:f4:e0: 94:16:11:ad:4d:2f:3d:e0:cd:58:67:76:4d:02:23: 73:67:36:8d:2a:bb:e3:ee:0b:b5:75:3f:cf:74:a2: 74:a3:6a:5e:76:43:be:c6:e1:eb:0e:98:7c:86:ef: ae:a0:57:4d:fa:9b:7f:bc:b6:f5:53:39:59:4e:ed: b3:12:3f:50:80:2a:30:27:0c:b0:5d:d2:2e:b5:f5: 84:8f:d6:3d:0f:f4:a0:3e:a8:63:e9:2c:1b:82:e8: 13:ca:90:94:98:87:ca:c0:84:c6:27:28:35:9e:7d: b5:67:d6:f8:67:24:83:1d:08:ba:f3:db:1b:0a:27: db:53:f1:c9:8c:a3:e0:51:1d:b2:0e:96:7c:b7:6b: 42:fb:80:dd:07:1e:37:c8:d2:96:62:b2:d0:d5:50: d8:47:3a:dc:7f:21:1b:71:4d:60:92:5c:a1:d1:53: 75:07:54:6f:72:95:5c:a4:33:61:6b:5c:20:8d:82: bd:cc:48:e4:b2:4e:cc:56:68:77:a9:ea:c5:47:b7: d0:ea:33:28:5a:d4:5d:9d:6e:16:45:92:29:98:86: 19:db:56:a5:20:d7:8d:ae:6e:17:43:75:d9:d7:06: 45:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:97:79:3E:23:57:CD:84:C7:22:FE:E8:8A:F0:7F:ED:BA:6E:7B:A8 X509v3 Authority Key Identifier: keyid:5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:18:37:3f:64:af:c6:45:33:97:83:3f:9c:b5:28:57:6a:41: 47:a5:da:b6:65:76:75:34:2a:37:73:e2:bc:25:9f:9d:fe:c6: fc:fc:cc:43:4b:d0:e3:79:ae:1c:eb:13:8f:24:1d:5e:3d:17: 8b:73:2f:67:4e:d9:6c:7b:73:b6:69:fa:e5:11:27:df:25:68: b9:6a:bd:a3:3b:31:3c:51:92:11:45:b2:75:00:fe:11:7c:65: 6e:86:78:26:ae:25:0f:8d:a4:1e:5f:57:0c:0e:93:ad:c0:f9: e7:f1:95:48:d7:87:77:fe:67:c2:21:0c:63:5b:d0:98:cb:75: 23:ad:47:52:f8:aa:c6:fc:38:5e:ee:2d:fd:c6:be:a8:42:93: f5:c3:51:58:9a:dc:99:02:61:df:b0:78:13:3d:7c:87:9f:e4: 38:8c:0c:7a:ad:c8:6e:c9:50:f5:2e:04:51:8f:a5:4e:cb:8e: 3c:8c:85:aa:8c:aa:75:7a:24:5c:2a:33:8d:fe:7c:10:e1:c6: f2:2a:c2:3d:4d:83:53:82:43:a3:f7:46:7d:18:a2:cc:23:76: 30:c1:f1:94:50:cd:0d:0c:b2:45:19:26:e5:43:0b:57:c1:f3: bf:9f:c2:fa:c6:0c:00:98:85:05:c9:3d:2a:d9:ce:2c:bf:1b: 8f:e1:9e:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcgGrGWRQj1DiiUTnf2wesa0M86wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURCRjM4OURFODRBODA2OEQ3MkJBN0E1RTAzMEY5MEQ4 RjY3MEQzMTAeFw0yNTExMDIxNzA4MjBaFw0yNTExMDMyMDMwMjBaMDMxMTAvBgNV BAMTKDFBOTc3OTNFMjM1N0NEODRDNzIyRkVFODhBRjA3RkVEQkE2RTdCQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fyoZZ/Dc98ANp31RB9yzFIPT wQTGEGNCXJr04JQWEa1NLz3gzVhndk0CI3NnNo0qu+PuC7V1P890onSjal52Q77G 4esOmHyG766gV036m3+8tvVTOVlO7bMSP1CAKjAnDLBd0i619YSP1j0P9KA+qGPp LBuC6BPKkJSYh8rAhMYnKDWefbVn1vhnJIMdCLrz2xsKJ9tT8cmMo+BRHbIOlny3 a0L7gN0HHjfI0pZistDVUNhHOtx/IRtxTWCSXKHRU3UHVG9ylVykM2FrXCCNgr3M SOSyTsxWaHep6sVHt9DqMyha1F2dbhZFkimYhhnbVqUg142ubhdDddnXBkVhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGpd5PiNXzYTHIv7oivB/7bpue6gwHwYDVR0j BBgwFoAUXb84nehKgGjXK6el4DD5DY9nDTEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGs0VWlncXN2Q3BWZUY2b29SYk5tdHY2OW1YVkFWQXhNRlRCclVodEEz R3YvMC81REJGMzg5REU4NEE4MDY4RDcyQkE3QTVFMDMwRjkwRDhGNjcwRDMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEQkYzODlERTg0QTgwNjhE NzJCQTdBNUUwMzBGOTBEOEY2NzBEMzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGs0VWlncXN2Q3BWZUY2b29SYk5tdHY2OW1YVkFWQXhNRlRCclVodEEzR3YvMC81 REJGMzg5REU4NEE4MDY4RDcyQkE3QTVFMDMwRjkwRDhGNjcwRDMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHhg3P2SvxkUzl4M/nLUoV2pBR6XatmV2dTQqN3PivCWfnf7G/PzMQ0vQ43mu HOsTjyQdXj0Xi3MvZ07ZbHtztmn65REn3yVouWq9ozsxPFGSEUWydQD+EXxlboZ4 Jq4lD42kHl9XDA6TrcD55/GVSNeHd/5nwiEMY1vQmMt1I61HUviqxvw4Xu4t/ca+ qEKT9cNRWJrcmQJh37B4Ez18h5/kOIwMeq3IbslQ9S4EUY+lTsuOPIyFqoyqdXok XCozjf58EOHG8irCPU2DU4JDo/dGfRiizCN2MMHxlFDNDQyyRRkm5UMLV8Hzv5/C +sYMAJiFBck9KtnOLL8bj+GeqQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:18:47 2025 by rpki-client