$ rpki-client -vvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft File: 85338CFAF888C0350AE9CB844AEBC476C4367656.mft (raw, json) Hash identifier: VJY/BwM4oKgJITdh8iy5SIm2DvpWhDLPIleLy8u0lto= Subject key identifier: 35:BC:8A:48:8C:16:83:31:59:D7:A4:98:99:6F:4F:F7:84:7F:40:C9 Authority key identifier: 85:33:8C:FA:F8:88:C0:35:0A:E9:CB:84:4A:EB:C4:76:C4:36:76:56 Certificate issuer: /CN=85338CFAF888C0350AE9CB844AEBC476C4367656 Certificate serial: 6D3099CDABC912CA746B10C0C27868CCA10F5D58 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer Subject info access: rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft Manifest number: 0271 Signing time: Sun 02 Nov 2025 20:55:35 +0000 Manifest this update: Sun 02 Nov 2025 20:50:35 +0000 Manifest next update: Mon 03 Nov 2025 21:17:35 +0000 Files and hashes: 1: 34352e3137382e3230342e302f32322d3234203d3e20323639303536.roa (hash: 4MTe5q9v1+RODyYpXAl+hTOa6qdVAoueHQymY2Pvcuo=) 2: 323830343a356563383a3a2f33322d3438203d3e20323639303536.roa (hash: iVzGwIcktrLJfi4MMxN4YYOLT8qF41PrYjqdCiMjJL8=) 3: 85338CFAF888C0350AE9CB844AEBC476C4367656.crl (hash: k6ox2gbWHATYVv9OGij1urIBDEl8cUF3EYX65WQqsZc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.crl rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 21:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:30:99:cd:ab:c9:12:ca:74:6b:10:c0:c2:78:68:cc:a1:0f:5d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85338CFAF888C0350AE9CB844AEBC476C4367656 Validity Not Before: Nov 2 20:50:35 2025 GMT Not After : Nov 3 21:17:35 2025 GMT Subject: CN=35BC8A488C16833159D7A498996F4FF7847F40C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6d:7c:c8:5b:06:61:f4:13:2b:0c:66:7e:63: c0:ec:c7:a5:ec:14:88:dc:95:44:dd:dc:01:ff:47: 2d:53:48:78:31:9a:a1:6b:59:7f:55:81:4a:4f:20: 91:8d:4e:9b:03:0a:ce:fa:fb:57:4f:77:3a:73:ea: 4c:76:1c:cf:b5:4d:01:f0:9e:c6:a0:7f:ff:16:22: 02:aa:db:10:d7:db:90:ab:b0:28:b1:56:42:6f:cd: 60:78:dc:80:2b:83:f9:a1:72:47:86:c7:35:16:c3: ba:e7:4e:b1:a6:fe:94:3b:5f:e1:a1:fd:b7:f6:7d: 0f:74:3a:f5:4f:38:bc:e0:e0:d1:d5:eb:d8:c7:1a: 33:32:97:e8:8c:6c:71:9e:55:25:ea:5c:6a:2b:fc: b9:9e:17:1c:47:cc:58:15:d5:15:31:15:a1:b1:43: 6e:fa:1a:d7:20:b5:34:60:db:a4:50:6a:9c:ad:49: 5e:25:37:78:77:c5:aa:b9:9f:46:6a:a8:90:62:6a: 4e:c9:b2:e8:36:96:8b:f9:ae:9c:13:03:a8:4d:3b: 4e:05:22:cb:59:d9:1a:1d:79:9e:d9:bb:c8:af:72: 68:dc:22:ad:77:1f:6f:aa:cb:13:04:60:a6:54:4e: 14:92:a8:4c:0e:be:57:e9:7d:6a:50:0f:9f:78:36: 72:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BC:8A:48:8C:16:83:31:59:D7:A4:98:99:6F:4F:F7:84:7F:40:C9 X509v3 Authority Key Identifier: keyid:85:33:8C:FA:F8:88:C0:35:0A:E9:CB:84:4A:EB:C4:76:C4:36:76:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:b4:a6:96:e6:0b:1b:c1:1d:73:fd:55:8a:7f:01:bf:5c:a2: 75:e7:0d:97:90:5f:dc:1a:03:2e:b5:d4:92:ac:7f:d4:c1:f2: 77:45:a7:ba:fb:58:75:67:ec:1f:bd:67:a5:de:80:0c:d7:e1: f8:db:90:cd:de:02:3d:ff:c1:49:6c:2b:42:d2:cd:71:ac:38: 2a:d9:7b:06:17:94:e2:ac:ed:7a:91:ee:60:ff:e9:e0:5c:cc: a3:dc:0b:71:66:24:5f:2c:d0:1e:30:da:20:95:e9:c5:aa:ea: ea:1a:4b:bb:22:e8:96:4c:12:e1:c5:d6:70:9d:82:48:6c:6e: eb:ef:08:d4:df:56:e0:5a:7f:6e:47:5b:b9:17:03:e0:de:22: ad:71:9a:32:6e:50:c0:54:d6:e3:4f:a3:a7:f0:f5:6a:6f:4b: 36:2f:59:a3:f0:a4:9d:e2:dc:95:d0:a3:7e:a2:65:0f:02:dd: f7:d9:da:0c:55:13:72:f4:9d:dc:7f:8d:a0:6f:9b:06:22:fc: 2f:eb:a9:74:d7:0a:3d:2b:24:d9:fa:b6:ca:d3:c3:01:5b:ac: 78:d1:0f:78:b6:18:76:26:63:68:06:ae:90:c1:a2:53:05:6e: 0c:7c:bf:4a:f9:3a:82:3a:87:6e:10:09:5c:f6:55:c7:d0:de: 41:ee:c8:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbTCZzavJEsp0axDAwnhozKEPXVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzMzhDRkFGODg4QzAzNTBBRTlDQjg0NEFFQkM0NzZD NDM2NzY1NjAeFw0yNTExMDIyMDUwMzVaFw0yNTExMDMyMTE3MzVaMDMxMTAvBgNV BAMTKDM1QkM4QTQ4OEMxNjgzMzE1OUQ3QTQ5ODk5NkY0RkY3ODQ3RjQwQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbXzIWwZh9BMrDGZ+Y8Dsx6Xs FIjclUTd3AH/Ry1TSHgxmqFrWX9VgUpPIJGNTpsDCs76+1dPdzpz6kx2HM+1TQHw nsagf/8WIgKq2xDX25CrsCixVkJvzWB43IArg/mhckeGxzUWw7rnTrGm/pQ7X+Gh /bf2fQ90OvVPOLzg4NHV69jHGjMyl+iMbHGeVSXqXGor/LmeFxxHzFgV1RUxFaGx Q276GtcgtTRg26RQapytSV4lN3h3xaq5n0ZqqJBiak7Jsug2lov5rpwTA6hNO04F IstZ2RodeZ7Zu8ivcmjcIq13H2+qyxMEYKZUThSSqEwOvlfpfWpQD594NnKbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNbyKSIwWgzFZ16SYmW9P94R/QMkwHwYDVR0j BBgwFoAUhTOM+viIwDUK6cuESuvEdsQ2dlYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVZCWjhZVnA1ZW1WWkIycUVoTXNWWkJKOGpqaGlTOE5CcUJ2dWtmZThM Q2EvMC84NTMzOENGQUY4ODhDMDM1MEFFOUNCODQ0QUVCQzQ3NkM0MzY3NjU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1MzM4Q0ZBRjg4OEMwMzUw QUU5Q0I4NDRBRUJDNDc2QzQzNjc2NTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVZCWjhZVnA1ZW1WWkIycUVoTXNWWkJKOGpqaGlTOE5CcUJ2dWtmZThMQ2EvMC84 NTMzOENGQUY4ODhDMDM1MEFFOUNCODQ0QUVCQzQ3NkM0MzY3NjU2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJLSmluYLG8Edc/1Vin8Bv1yidecNl5Bf3BoDLrXUkqx/1MHyd0WnuvtYdWfs H71npd6ADNfh+NuQzd4CPf/BSWwrQtLNcaw4Ktl7BheU4qztepHuYP/p4FzMo9wL cWYkXyzQHjDaIJXpxarq6hpLuyLolkwS4cXWcJ2CSGxu6+8I1N9W4Fp/bkdbuRcD 4N4irXGaMm5QwFTW40+jp/D1am9LNi9Zo/CkneLcldCjfqJlDwLd99naDFUTcvSd 3H+NoG+bBiL8L+updNcKPSsk2fq2ytPDAVuseNEPeLYYdiZjaAaukMGiUwVuDHy/ Svk6gjqHbhAJXPZVx9DeQe7Iwg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:31:17 2025 by rpki-client