$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft File: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft (raw, json) Hash identifier: 0uSqPwK4F7bFiNxunGVhhr2HKOvpKqAKYb4vDjlPUTY= Subject key identifier: 0B:10:5C:C8:B7:21:7B:96:A1:8B:ED:96:53:22:50:68:78:A0:9B:5E Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 Certificate issuer: /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Certificate serial: 3700B713119229C6C706F8495D236D598B5B65FA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft Manifest number: 02CC Signing time: Mon 03 Nov 2025 04:21:17 +0000 Manifest this update: Mon 03 Nov 2025 04:16:17 +0000 Manifest next update: Tue 04 Nov 2025 06:28:17 +0000 Files and hashes: 1: 3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (hash: Bv6Lyj5+VhdPqvZ/TGH9M1sdk0ISaNwfb7BbI7c/FPE=) 2: 323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (hash: 0xs1tTdh2Qke0fip6d1TEfj28igzF6NdDvyXj3IPtmI=) 3: 3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (hash: WqEYa1LHKO/TdU02rXFXLwns464zC4VFuzHF7wOxsfA=) 4: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl (hash: /ELxE84cBD/OhlJ9tKuiQcwFfWNf0LoFM4oEtWN6JOs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 06:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:00:b7:13:11:92:29:c6:c7:06:f8:49:5d:23:6d:59:8b:5b:65:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Validity Not Before: Nov 3 04:16:17 2025 GMT Not After : Nov 4 06:28:17 2025 GMT Subject: CN=0B105CC8B7217B96A18BED965322506878A09B5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fd:b4:61:60:de:88:1b:cf:d6:ad:e2:97:e8: c4:8c:f2:c8:cc:59:1d:da:d9:59:84:c4:0a:00:de: 54:01:34:46:4c:d2:ee:53:a8:7f:c9:27:fa:d7:8e: 12:eb:2a:f2:b5:9e:88:d9:3d:28:fc:92:ad:ce:83: c9:0f:57:d4:39:4f:8a:32:85:08:e4:bd:57:02:bd: 9d:44:67:60:dd:06:3f:8e:e5:32:12:88:41:84:b0: e0:0e:cb:5d:a9:ae:6f:f1:b8:d1:f1:98:5b:e3:6a: 42:71:23:78:60:57:45:9a:c1:3f:64:0b:a2:ae:13: 12:37:28:f1:5a:5a:09:b7:fd:f2:81:60:cd:68:f9: e0:bf:c0:ad:96:d1:ae:c2:75:37:63:6f:13:83:7e: 9f:fe:83:44:2f:6c:c6:32:bd:a7:55:f3:22:19:c7: 16:3b:65:ea:bb:c1:8c:60:47:8a:eb:da:3c:d5:0d: 22:8e:8a:68:dd:00:c2:77:eb:2d:e7:07:a8:96:f1: c5:d0:77:3f:9a:e9:d3:f2:4d:fd:10:a7:2d:d7:80: 45:39:6c:da:0e:e8:a6:55:58:85:09:ea:90:de:e2: aa:35:36:da:ae:a1:36:93:f9:16:de:b1:2b:98:ca: 60:1d:18:0c:16:29:44:db:1a:5c:b8:b4:a9:98:d7: 34:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:10:5C:C8:B7:21:7B:96:A1:8B:ED:96:53:22:50:68:78:A0:9B:5E X509v3 Authority Key Identifier: keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:07:59:19:3d:74:90:c2:65:bf:87:2c:1f:24:69:62:ad:30: 52:a2:3c:c7:a9:3e:f2:22:a7:dd:dc:0d:ec:22:02:e9:51:36: 17:47:3a:d2:ab:a0:04:1c:7f:14:06:fa:e4:d2:0f:08:2e:03: ed:4d:27:60:bd:c2:2f:25:bd:5e:41:1e:4a:b8:05:9b:c5:f6: 9b:28:fe:e8:e2:3e:1b:63:03:4f:29:fb:2d:fe:48:71:f8:9f: c0:96:c5:c5:34:72:cd:49:c8:c0:9c:a0:4c:b7:62:e0:4e:d3: 05:82:3a:4d:ab:45:a3:76:29:9c:89:75:5d:36:a3:3d:cf:f1: 40:2c:8d:fe:5e:44:18:31:14:dc:cc:ac:7c:61:0a:89:1b:c3: a3:ed:b2:19:91:49:a0:e5:f3:f7:67:68:14:00:bf:7a:69:a9: 0a:6e:2b:0c:93:36:6b:b1:86:33:ac:28:3f:e0:d7:fa:d8:9e: ee:36:a3:da:54:8f:87:98:6a:ae:df:b8:6a:a1:4a:63:52:7e: 00:87:f3:5f:01:dd:9b:62:40:11:8e:d5:de:81:b0:19:84:c5: 6e:9c:d1:e2:bf:78:75:ba:cd:7e:6f:0f:39:bc:26:ba:d2:a6: 83:35:1a:24:23:99:b5:6d:e2:0c:99:ad:23:0b:9b:c9:dc:7f: ac:1f:33:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNwC3ExGSKcbHBvhJXSNtWYtbZfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVF MDZBMjdFMjAeFw0yNTExMDMwNDE2MTdaFw0yNTExMDQwNjI4MTdaMDMxMTAvBgNV BAMTKDBCMTA1Q0M4QjcyMTdCOTZBMThCRUQ5NjUzMjI1MDY4NzhBMDlCNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/bRhYN6IG8/WreKX6MSM8sjM WR3a2VmExAoA3lQBNEZM0u5TqH/JJ/rXjhLrKvK1nojZPSj8kq3Og8kPV9Q5T4oy hQjkvVcCvZ1EZ2DdBj+O5TISiEGEsOAOy12prm/xuNHxmFvjakJxI3hgV0WawT9k C6KuExI3KPFaWgm3/fKBYM1o+eC/wK2W0a7CdTdjbxODfp/+g0QvbMYyvadV8yIZ xxY7Zeq7wYxgR4rr2jzVDSKOimjdAMJ36y3nB6iW8cXQdz+a6dPyTf0Qpy3XgEU5 bNoO6KZVWIUJ6pDe4qo1NtquoTaT+RbesSuYymAdGAwWKUTbGly4tKmY1zRfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCxBcyLche5ahi+2WUyJQaHigm14wHwYDVR0j BBgwFoAUZTg31+yh/hFF0M4V4L+JXuBqJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZl UFMvMC82NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MzgzN0Q3RUNBMUZFMTE0 NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC82 NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgwdZGT10kMJlv4csHyRpYq0wUqI8x6k+8iKn3dwN7CIC6VE2F0c60qugBBx/ FAb65NIPCC4D7U0nYL3CLyW9XkEeSrgFm8X2myj+6OI+G2MDTyn7Lf5IcfifwJbF xTRyzUnIwJygTLdi4E7TBYI6TatFo3YpnIl1XTajPc/xQCyN/l5EGDEU3MysfGEK iRvDo+2yGZFJoOXz92doFAC/emmpCm4rDJM2a7GGM6woP+DX+tie7jaj2lSPh5hq rt+4aqFKY1J+AIfzXwHdm2JAEY7V3oGwGYTFbpzR4r94dbrNfm8PObwmutKmgzUa JCOZtW3iDJmtIwubydx/rB8zcA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:32:12 2025 by rpki-client