$ rpki-client -vvf rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft File: F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft (raw, json) Hash identifier: 5GuysZ61mFKHqA6fRjQmNsP3ombxJIFy4ycDELHxMmc= Subject key identifier: BE:78:21:2A:6C:A6:74:C3:D0:C3:E3:B7:69:76:FB:3A:8A:2A:93:D2 Authority key identifier: F9:D7:CA:B3:DB:B6:E8:36:A9:DA:11:24:EB:1C:0D:D2:E4:A3:AF:D2 Certificate issuer: /CN=F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2 Certificate serial: 118D3728D1E69F1CDCC3DA65E8C78DBF16618359 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.cer Subject info access: rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft Manifest number: 18 Signing time: Mon 03 Nov 2025 01:42:48 +0000 Manifest this update: Mon 03 Nov 2025 01:37:48 +0000 Manifest next update: Tue 04 Nov 2025 03:49:48 +0000 Files and hashes: 1: F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.crl (hash: cGqnFIRV2m+PB5mVOk4gSEjiST7TkXSFpBvxgEzQ2es=) 2: 34352e3232382e34342e302f32322d3332203d3e20323637303438.roa (hash: 7cDCdLU6VMbWBqB6t/edQ+r3L6KgzYWBki0xGa4vL0s=) 3: 323830343a343735633a3a2f33322d313238203d3e20323637303438.roa (hash: jp3jh3cXGLRbte/PrsJ/rlc1qYfSMcCfJHgTskp8KeA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.crl rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:8d:37:28:d1:e6:9f:1c:dc:c3:da:65:e8:c7:8d:bf:16:61:83:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2 Validity Not Before: Nov 3 01:37:48 2025 GMT Not After : Nov 4 03:49:48 2025 GMT Subject: CN=BE78212A6CA674C3D0C3E3B76976FB3A8A2A93D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:e1:5f:bd:21:9a:33:f2:0a:0f:9c:2d:cd: 5a:9d:85:16:82:ff:a5:54:e4:9e:42:6e:93:19:2e: 02:cd:a7:7c:21:d0:88:0e:b4:72:92:38:5f:63:cb: 25:00:67:a2:13:2d:e8:29:ed:7f:c3:e6:5c:bc:1f: 82:69:4f:95:91:25:e9:84:b3:a9:24:20:f0:af:12: 7a:19:e8:05:3b:6a:83:b8:77:09:3e:ac:a2:fb:ac: 76:91:d3:0e:79:15:e4:2f:36:d1:0c:97:17:ae:e2: 4e:24:7b:00:bb:f3:b7:1f:ae:f7:fa:87:ed:3f:2a: ca:93:1a:e4:56:a2:75:80:06:79:47:ca:61:73:89: ea:bb:89:b7:52:91:42:85:fd:2d:0b:99:d2:17:d9: 64:cd:98:e1:f7:77:f1:5f:d2:e1:00:fa:d7:f4:f5: d9:81:25:9c:65:d4:04:e9:e5:4c:a6:36:d5:21:3f: 89:1b:8c:ca:63:e9:1b:9d:a0:bb:33:30:7e:62:86: d0:c5:79:e2:96:e3:34:aa:2a:2c:7d:6e:21:80:3b: 7f:4f:7b:8d:e8:9a:1a:57:df:e0:f3:10:91:f0:b2: 23:a0:6a:6c:03:66:8c:f0:86:71:62:0c:ae:fa:b2: 2b:a2:f8:cc:54:8a:7d:4a:97:24:17:2f:8e:62:c6: 03:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:78:21:2A:6C:A6:74:C3:D0:C3:E3:B7:69:76:FB:3A:8A:2A:93:D2 X509v3 Authority Key Identifier: keyid:F9:D7:CA:B3:DB:B6:E8:36:A9:DA:11:24:EB:1C:0D:D2:E4:A3:AF:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:06:f6:10:a9:49:57:30:f7:19:c6:f4:46:bb:c3:3f:23:da: 37:2b:28:c4:81:66:38:4e:ce:52:b4:df:07:6c:4b:0e:db:5b: 5e:94:04:f5:d1:8d:69:ee:32:41:a5:7e:5e:38:c7:76:3d:08: 75:44:0b:a9:9a:80:72:c8:10:1e:dd:4a:38:c8:cf:38:e6:06: d5:73:88:81:54:d4:24:93:cc:c8:d6:94:a5:8a:c4:38:7a:9d: ef:9a:3e:10:36:f8:8c:71:af:67:bb:74:cb:da:33:73:93:36: ae:16:15:d3:6b:fe:e3:6f:74:46:5b:65:7f:5a:16:2e:ce:a0: 92:d7:f9:c5:3a:c0:61:6c:e0:7a:62:80:ec:1f:e5:76:e5:78: ea:1e:b5:7a:38:ca:36:42:45:a8:e2:9a:0f:31:c9:55:aa:38: 71:fa:ae:f2:78:10:44:be:4c:d1:ba:5f:2f:6c:84:84:b8:5d: a0:68:d9:e9:c9:0d:5a:05:99:da:c4:4a:77:c1:0b:33:1b:7d: 90:8f:17:0d:45:21:0d:8f:ab:1f:59:01:29:68:34:54:72:65: 52:86:63:54:b3:a8:12:6f:8c:74:be:e3:58:58:ad:49:01:71: 59:d1:cd:74:a8:25:8b:cb:5b:5d:88:10:17:3b:02:53:0e:ce: 96:13:dc:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEY03KNHmnxzcw9pl6MeNvxZhg1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlEN0NBQjNEQkI2RTgzNkE5REExMTI0RUIxQzBERDJF NEEzQUZEMjAeFw0yNTExMDMwMTM3NDhaFw0yNTExMDQwMzQ5NDhaMDMxMTAvBgNV BAMTKEJFNzgyMTJBNkNBNjc0QzNEMEMzRTNCNzY5NzZGQjNBOEEyQTkzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+kuFfvSGaM/IKD5wtzVqdhRaC /6VU5J5CbpMZLgLNp3wh0IgOtHKSOF9jyyUAZ6ITLegp7X/D5ly8H4JpT5WRJemE s6kkIPCvEnoZ6AU7aoO4dwk+rKL7rHaR0w55FeQvNtEMlxeu4k4kewC787cfrvf6 h+0/KsqTGuRWonWABnlHymFzieq7ibdSkUKF/S0LmdIX2WTNmOH3d/Ff0uEA+tf0 9dmBJZxl1ATp5UymNtUhP4kbjMpj6RudoLszMH5ihtDFeeKW4zSqKix9biGAO39P e43omhpX3+DzEJHwsiOgamwDZozwhnFiDK76siui+MxUin1KlyQXL45ixgP7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvnghKmymdMPQw+O3aXb7Oooqk9IwHwYDVR0j BBgwFoAU+dfKs9u26Dap2hEk6xwN0uSjr9IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNTJlOHBFb256N2lzc0ROWDU2WlBxSkFvdTh2RUFkdGhVVW5qdFFSdGtt N1UvMC9GOUQ3Q0FCM0RCQjZFODM2QTlEQTExMjRFQjFDMEREMkU0QTNBRkQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5RDdDQUIzREJCNkU4MzZB OURBMTEyNEVCMUMwREQyRTRBM0FGRDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NTJlOHBFb256N2lzc0ROWDU2WlBxSkFvdTh2RUFkdGhVVW5qdFFSdGttN1UvMC9G OUQ3Q0FCM0RCQjZFODM2QTlEQTExMjRFQjFDMEREMkU0QTNBRkQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmgb2EKlJVzD3Gcb0RrvDPyPaNysoxIFmOE7OUrTfB2xLDttbXpQE9dGNae4y QaV+XjjHdj0IdUQLqZqAcsgQHt1KOMjPOOYG1XOIgVTUJJPMyNaUpYrEOHqd75o+ EDb4jHGvZ7t0y9ozc5M2rhYV02v+4290Rltlf1oWLs6gktf5xTrAYWzgemKA7B/l duV46h61ejjKNkJFqOKaDzHJVao4cfqu8ngQRL5M0bpfL2yEhLhdoGjZ6ckNWgWZ 2sRKd8ELMxt9kI8XDUUhDY+rH1kBKWg0VHJlUoZjVLOoEm+MdL7jWFitSQFxWdHN dKgli8tbXYgQFzsCUw7OlhPcuQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:05:27 2025 by rpki-client