$ rpki-client -vvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft File: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft (raw, json) Hash identifier: oUH5xprys8spNQkvDFmUfADqn8FEnKTQxW7yR2jWG4U= Subject key identifier: 54:DD:65:2A:94:4A:DF:38:63:D8:C9:B4:92:CE:87:F4:FE:FF:96:B2 Authority key identifier: 28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9 Certificate issuer: /CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9 Certificate serial: 53EB9781B65297CD816E2266347F1A510522BF50 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer Subject info access: rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft Manifest number: 02E9 Signing time: Mon 03 Nov 2025 11:33:16 +0000 Manifest this update: Mon 03 Nov 2025 11:28:16 +0000 Manifest next update: Tue 04 Nov 2025 14:19:16 +0000 Files and hashes: 1: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl (hash: AbwpCLetYW/KcE7VmAzctcWSLzLKUfreoOcqDK84toc=) 2: 34352e3137372e3138392e302f32342d3332203d3e20323732373932.roa (hash: A/pSWtKQA/OxokA0LkXc4PfBb4bWMqi4QQ8NPqMk/+E=) 3: 323830343a383863343a3a2f34382d3438203d3e20323732373932.roa (hash: pMsNE9PZdxPUZQ1ee0l8kve5nW5PLVXShE79wF6S0BA=) 4: 323830343a383863343a66633a3a2f34382d3438203d3e20323732373932.roa (hash: uIquRLf1o2jdjOFSQRwCQgQeJopCGHlj6eVpPkoczCw=) 5: 323830343a383863343a3a2f33322d3332203d3e20323732373932.roa (hash: EtesB69AQ6y4O933L4QCUQfBeeDeqAjblxt7W0bJGXA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 14:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:eb:97:81:b6:52:97:cd:81:6e:22:66:34:7f:1a:51:05:22:bf:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9 Validity Not Before: Nov 3 11:28:16 2025 GMT Not After : Nov 4 14:19:16 2025 GMT Subject: CN=54DD652A944ADF3863D8C9B492CE87F4FEFF96B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d2:c0:9d:0f:05:23:ed:4b:71:01:24:99:4c: ae:85:61:86:42:f7:79:7d:55:9b:eb:8b:cc:47:74: f3:de:b8:88:28:83:39:74:37:fc:e2:19:ed:86:4d: e7:0e:e1:a0:3b:88:5c:94:fb:01:a9:2b:26:06:43: eb:53:96:8d:7e:00:32:ef:9d:99:57:ee:58:42:5e: 85:2a:f0:19:b0:85:2f:b3:cd:b3:c0:a6:d2:4f:53: 69:34:3b:f7:c7:00:05:eb:0d:5d:63:e0:d6:41:5a: 18:21:33:d1:aa:fa:e5:02:ba:34:75:37:71:03:9d: 6c:f4:30:93:0b:0f:bd:de:58:82:db:d7:08:c2:59: bb:4f:2b:3e:34:b3:91:b3:53:d4:c8:6c:f7:a0:70: b1:34:31:89:87:c0:58:5e:43:80:6f:c6:c7:55:c2: dd:3e:59:be:e6:95:8c:81:9c:6e:37:d3:87:5d:67: 8f:31:69:99:5a:e6:a1:49:85:8e:81:38:1b:25:a5: 19:48:63:40:0b:2a:04:76:87:43:fd:56:5e:b9:69: bb:3f:42:a5:79:5b:43:04:ec:32:5a:85:4a:be:90: 54:e8:e7:3f:85:ed:7b:3b:2c:3f:53:d8:65:fe:3d: 84:b7:b9:d4:06:06:38:a3:63:9e:db:53:04:20:2f: 4b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DD:65:2A:94:4A:DF:38:63:D8:C9:B4:92:CE:87:F4:FE:FF:96:B2 X509v3 Authority Key Identifier: keyid:28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:99:44:a9:50:2c:3b:be:bc:32:bc:11:c5:df:ca:03:f3:90: b7:c7:fc:f2:76:15:ef:6a:cc:38:d6:db:12:99:ec:cc:32:23: cc:41:60:a7:79:8f:78:0d:19:23:dd:cf:46:ef:1e:c0:bf:5a: f2:f0:e4:67:3c:2c:df:b6:99:da:74:5d:d3:2f:08:09:77:8c: 6e:cc:02:a3:90:f4:de:df:76:05:77:39:4c:75:5f:19:6d:f4: 38:70:70:d8:33:60:26:26:d6:7e:63:33:36:b3:ba:80:87:70: 57:e8:cd:a4:96:67:91:a7:13:41:83:8c:70:30:41:66:95:a6: 17:c7:28:8e:ef:64:90:b5:fd:54:16:8a:d0:7f:30:ab:9f:fc: 3c:c0:51:75:cc:e3:06:71:ff:41:3e:21:7c:e8:96:87:7c:5d: 8d:91:23:d1:0d:bd:cf:fd:67:22:46:0a:7a:25:15:17:4a:d1: 99:07:d9:f9:74:34:c7:ba:57:b6:56:58:85:21:78:68:58:ce: 2a:ee:00:10:10:bf:19:01:bf:e8:19:1c:2c:c9:62:cd:d8:e7: 51:34:4a:3e:68:07:43:1e:03:30:70:ae:ec:5e:11:05:37:fb: ec:42:7f:3f:66:cc:e0:12:f0:c4:ee:ef:01:a5:da:ad:9e:84: e6:0b:df:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUU+uXgbZSl82BbiJmNH8aUQUiv1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwMEFGOEU2NzJGNjRFMDJDRUM1RDA0N0VERUIyQUQ4 NkI0N0VEOTAeFw0yNTExMDMxMTI4MTZaFw0yNTExMDQxNDE5MTZaMDMxMTAvBgNV BAMTKDU0REQ2NTJBOTQ0QURGMzg2M0Q4QzlCNDkyQ0U4N0Y0RkVGRjk2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM0sCdDwUj7UtxASSZTK6FYYZC 93l9VZvri8xHdPPeuIgogzl0N/ziGe2GTecO4aA7iFyU+wGpKyYGQ+tTlo1+ADLv nZlX7lhCXoUq8BmwhS+zzbPAptJPU2k0O/fHAAXrDV1j4NZBWhghM9Gq+uUCujR1 N3EDnWz0MJMLD73eWILb1wjCWbtPKz40s5GzU9TIbPegcLE0MYmHwFheQ4BvxsdV wt0+Wb7mlYyBnG4304ddZ48xaZla5qFJhY6BOBslpRlIY0ALKgR2h0P9Vl65abs/ QqV5W0ME7DJahUq+kFTo5z+F7Xs7LD9T2GX+PYS3udQGBjijY57bUwQgL0tHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVN1lKpRK3zhj2Mm0ks6H9P7/lrIwHwYDVR0j BBgwFoAUKACvjmcvZOAs7F0Eft6yrYa0ftkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVZtczhUV2ZYYkdSdlFrQlBkQnV0S0RtbzRNZlFydDhNNUJNUzZKd2hw Zm8vMS8yODAwQUY4RTY3MkY2NEUwMkNFQzVEMDQ3RURFQjJBRDg2QjQ3RUQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4MDBBRjhFNjcyRjY0RTAy Q0VDNUQwNDdFREVCMkFEODZCNDdFRDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVZtczhUV2ZYYkdSdlFrQlBkQnV0S0RtbzRNZlFydDhNNUJNUzZKd2hwZm8vMS8y ODAwQUY4RTY3MkY2NEUwMkNFQzVEMDQ3RURFQjJBRDg2QjQ3RUQ5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU5lEqVAsO768MrwRxd/KA/OQt8f88nYV72rMONbbEpnszDIjzEFgp3mPeA0Z I93PRu8ewL9a8vDkZzws37aZ2nRd0y8ICXeMbswCo5D03t92BXc5THVfGW30OHBw 2DNgJibWfmMzNrO6gIdwV+jNpJZnkacTQYOMcDBBZpWmF8coju9kkLX9VBaK0H8w q5/8PMBRdczjBnH/QT4hfOiWh3xdjZEj0Q29z/1nIkYKeiUVF0rRmQfZ+XQ0x7pX tlZYhSF4aFjOKu4AEBC/GQG/6BkcLMlizdjnUTRKPmgHQx4DMHCu7F4RBTf77EJ/ P2bM4BLwxO7vAaXarZ6E5gvfCQ== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:29 2025 by rpki-client