$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft File: 85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft (raw, json) Hash identifier: 8xKSeGo4i5x/2wwIuu3fxGEvTWIH1wSmx7Xk8Pp7qYQ= Subject key identifier: DD:0E:5F:C4:B1:B5:7B:D7:64:75:E2:EB:82:47:9D:70:8A:1F:B2:7E Authority key identifier: 85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95 Certificate issuer: /CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995 Certificate serial: 43B6982F09975462B8C95834076480650E0695C0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer Subject info access: rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft Manifest number: 02F7 Signing time: Mon 03 Nov 2025 10:23:25 +0000 Manifest this update: Mon 03 Nov 2025 10:18:25 +0000 Manifest next update: Tue 04 Nov 2025 12:30:25 +0000 Files and hashes: 1: 323830343a6366303a3a2f33322d3438203d3e203532353736.roa (hash: wiHI9SrflkamLTOfmYBEaJJSlinTuLYPlmXxJbPhtpo=) 2: 85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl (hash: saM8JYKplOZeisAR6Un51qz0fGmT1MdDDFqupoKN7gE=) 3: 3137372e38362e3230302e302f32312d3234203d3e203532353736.roa (hash: TI8fvU+DA9BGVyDJ2qm1cJltZ0I1E38L4u9tbujdTOY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b6:98:2f:09:97:54:62:b8:c9:58:34:07:64:80:65:0e:06:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995 Validity Not Before: Nov 3 10:18:25 2025 GMT Not After : Nov 4 12:30:25 2025 GMT Subject: CN=DD0E5FC4B1B57BD76475E2EB82479D708A1FB27E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a7:b4:17:75:ce:b0:1a:36:9a:53:d3:4a:19: 8d:39:5e:7c:98:fc:18:2b:bd:80:45:47:cb:d6:2e: de:a3:28:20:6b:0d:d3:1e:92:de:88:c6:f5:50:ca: 19:d0:ee:96:40:5c:02:f7:02:ab:fa:3f:01:24:50: f8:af:88:ba:96:7e:cf:72:d4:43:93:dd:d8:b3:a8: 00:d7:99:63:92:e5:55:ee:47:12:1c:4e:f8:e9:77: b4:94:8e:95:d8:38:63:85:9e:cc:8b:ff:d2:4d:f5: a6:98:b4:97:10:66:59:da:df:84:a0:81:b7:6f:75: 96:d3:72:ad:11:3c:ca:6a:cd:65:3c:e0:72:ac:9b: be:99:c0:50:18:42:31:be:a3:c7:26:10:27:9f:e4: f2:40:79:07:ea:2e:cb:89:79:5f:44:7e:3a:c2:dd: 3e:2b:d8:ae:bd:01:2f:7c:b0:34:0c:16:75:90:de: e6:9b:b0:c7:6b:a2:e2:32:df:5f:eb:8d:de:29:8b: d3:df:bb:37:1b:b2:ed:06:1a:16:8f:3e:c3:bc:41: 49:56:6e:b1:12:65:e6:86:12:27:50:08:8b:2b:ce: 6a:0f:8f:c0:bd:13:5e:e2:99:cd:d8:0e:b6:56:81: 8a:c4:32:a7:23:82:23:e5:7c:63:5c:74:26:bc:6c: 4a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0E:5F:C4:B1:B5:7B:D7:64:75:E2:EB:82:47:9D:70:8A:1F:B2:7E X509v3 Authority Key Identifier: keyid:85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b5:c4:70:d9:95:42:5b:2b:15:83:92:6c:bf:a1:95:c9:60: a3:67:59:21:76:ea:db:84:c0:b9:99:2d:ce:44:07:92:8e:91: 51:1d:ed:33:d4:25:88:cc:50:fc:82:fe:53:d7:4a:f6:e5:9c: 17:5b:ea:e7:3c:58:38:19:17:e1:2d:96:95:db:91:d8:72:a2: 91:7d:66:4e:d3:e3:3b:02:08:d4:66:e7:93:d9:4b:a8:2d:86: bb:f3:f0:d0:a7:8b:74:8f:53:c5:d1:3c:c3:20:75:23:7f:04: 92:f4:62:90:bc:a0:41:de:78:01:96:12:76:47:e0:b3:c7:2b: 32:42:d2:14:6f:4f:88:04:35:91:ca:99:05:89:dd:37:d1:d4: 06:a6:94:98:09:d9:67:f0:bd:ac:bc:fd:57:f6:e8:d8:6b:69: f6:d0:29:c4:13:e9:84:87:ce:64:a5:90:29:ee:19:de:aa:28: e7:4b:97:45:2c:a0:96:b3:71:9c:b5:80:e7:d5:f1:c2:f9:3b: a0:66:a1:71:f3:90:5b:4e:8c:8b:be:ae:e8:64:ce:b5:c6:c3: 62:dc:e2:95:b2:25:e0:b5:d2:28:20:8d:0c:61:2e:41:a3:59: 23:12:45:4a:02:c4:bb:c4:ac:b1:aa:57:b6:10:2f:5e:29:61: 3c:99:1d:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ7aYLwmXVGK4yVg0B2SAZQ4GlcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVBQzdGRjA3MjI0MDkxMTZDMUUzQzQwRkU0N0VBQTYw M0RERDk5NTAeFw0yNTExMDMxMDE4MjVaFw0yNTExMDQxMjMwMjVaMDMxMTAvBgNV BAMTKEREMEU1RkM0QjFCNTdCRDc2NDc1RTJFQjgyNDc5RDcwOEExRkIyN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVp7QXdc6wGjaaU9NKGY05XnyY /BgrvYBFR8vWLt6jKCBrDdMekt6IxvVQyhnQ7pZAXAL3Aqv6PwEkUPiviLqWfs9y 1EOT3dizqADXmWOS5VXuRxIcTvjpd7SUjpXYOGOFnsyL/9JN9aaYtJcQZlna34Sg gbdvdZbTcq0RPMpqzWU84HKsm76ZwFAYQjG+o8cmECef5PJAeQfqLsuJeV9EfjrC 3T4r2K69AS98sDQMFnWQ3uabsMdrouIy31/rjd4pi9Pfuzcbsu0GGhaPPsO8QUlW brESZeaGEidQCIsrzmoPj8C9E17imc3YDrZWgYrEMqcjgiPlfGNcdCa8bEoFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3Q5fxLG1e9dkdeLrgkedcIofsn4wHwYDVR0j BBgwFoAUhax/8HIkCRFsHjxA/kfqpgPd2ZUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdK WFIvMS84NUFDN0ZGMDcyMjQwOTExNkMxRTNDNDBGRTQ3RUFBNjAzREREOTk1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1QUM3RkYwNzIyNDA5MTE2 QzFFM0M0MEZFNDdFQUE2MDNEREQ5OTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdKWFIvMS84 NUFDN0ZGMDcyMjQwOTExNkMxRTNDNDBGRTQ3RUFBNjAzREREOTk1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnLXEcNmVQlsrFYOSbL+hlclgo2dZIXbq24TAuZktzkQHko6RUR3tM9QliMxQ /IL+U9dK9uWcF1vq5zxYOBkX4S2WlduR2HKikX1mTtPjOwII1Gbnk9lLqC2Gu/Pw 0KeLdI9TxdE8wyB1I38EkvRikLygQd54AZYSdkfgs8crMkLSFG9PiAQ1kcqZBYnd N9HUBqaUmAnZZ/C9rLz9V/bo2Gtp9tApxBPphIfOZKWQKe4Z3qoo50uXRSyglrNx nLWA59Xxwvk7oGahcfOQW06Mi76u6GTOtcbDYtzilbIl4LXSKCCNDGEuQaNZIxJF SgLEu8SssapXthAvXilhPJkd5Q== -----END CERTIFICATE-----Generated at Mon Nov 3 12:37:00 2025 by rpki-client