$ rpki-client -vvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.mft File: F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.mft (raw, json) Hash identifier: isHopJA3bQQBCLw0fM7Na3ACfLOVwPevg9I3zVOLvBY= Subject key identifier: 8E:23:39:E3:45:10:4D:80:AD:E3:0F:24:04:BB:56:52:8A:05:B3:8D Authority key identifier: F4:32:E0:ED:B6:9B:D6:E2:53:EE:20:F4:C1:58:9A:46:26:7A:A2:B9 Certificate issuer: /CN=F432E0EDB69BD6E253EE20F4C1589A46267AA2B9 Certificate serial: 70FD82FB67D5FB9D0F45A8E8FCDF359986E21AAF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer Subject info access: rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.mft Manifest number: 015E Signing time: Mon 03 Nov 2025 12:53:08 +0000 Manifest this update: Mon 03 Nov 2025 12:48:08 +0000 Manifest next update: Tue 04 Nov 2025 14:42:08 +0000 Files and hashes: 1: 323830343a336639343a383030303a3a2f33332d3333203d3e20323632343532.roa (hash: qKJVwpuxX4mJGc/O5QOh4hLSmxhBQYLWHO4H1O8cij8=) 2: F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.crl (hash: EBJwobH+1LHhScVipm5qxSBJdtFCklTrGBa/ed7gm6c=) 3: 323830343a336639343a3a2f33332d3333203d3e20323632343532.roa (hash: JUFruknuPH5l5bjJoH5P9kKZ3TW2frOmFKKrSin9OfA=) 4: 3137372e35322e3231362e302f32342d3234203d3e20323632343532.roa (hash: PuoUtZ/EjH+CH0TrjjIITQbO3AC2EfAHvz57FuScHBw=) 5: 3137372e35322e3231372e302f32342d3234203d3e20323632343532.roa (hash: JARym3U9Ji/gyiEtiQ/KeLC5lVOiCRZ0gLZ/AI2TeCw=) 6: 3137372e35322e3231382e302f32342d3234203d3e20323632343532.roa (hash: s0LXWjVwKnHYL1yWCVWrNuov5ugdNnGro2iWaGYhqvc=) 7: 3137372e35322e3231362e302f32332d3233203d3e20323632343532.roa (hash: NfymXOCJyT2Z90Amb45ybAgXHskg4tz2XyAwoLmtAdg=) 8: 3137372e35322e3231392e302f32342d3234203d3e20323632343532.roa (hash: U6ePlF8ZHE9j7yHkCGHckMRtw0CsBNDA0mdBOt0YUMM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.crl rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 14:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:fd:82:fb:67:d5:fb:9d:0f:45:a8:e8:fc:df:35:99:86:e2:1a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F432E0EDB69BD6E253EE20F4C1589A46267AA2B9 Validity Not Before: Nov 3 12:48:08 2025 GMT Not After : Nov 4 14:42:08 2025 GMT Subject: CN=8E2339E345104D80ADE30F2404BB56528A05B38D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:af:4d:ee:eb:e3:2e:14:2a:19:2d:3e:a2:5c: 51:af:ed:69:af:63:7f:d3:1a:f4:29:fa:a7:5f:87: 64:8b:1f:94:64:e3:8e:b4:52:f3:86:19:25:5b:80: 44:c3:98:18:bb:15:97:f7:c4:b5:dc:41:d3:a6:30: 9f:95:4f:eb:81:bf:f4:4e:22:78:3c:f6:71:3b:c5: d8:c7:b1:21:57:13:d1:c0:e0:5a:b0:a0:30:6d:2b: d2:4c:ce:c0:cf:30:23:76:72:3f:6f:43:83:16:f9: 07:ca:dd:92:14:ff:82:2b:36:95:77:21:b6:73:1e: 6f:a3:c4:66:a9:d9:33:ba:d0:97:25:0e:f5:68:79: 50:32:bc:f5:eb:f7:e1:ef:29:55:af:61:ca:bb:c2: 10:26:a2:98:31:69:c8:69:c8:f5:0a:32:94:55:d5: d6:a2:60:6c:70:bb:4e:21:14:48:a5:8c:3d:3f:10: 1a:77:25:1a:cd:dd:4b:e8:60:e5:84:46:da:71:3e: 26:ce:34:68:4c:33:39:2c:62:ae:77:54:07:4b:d0: d9:b9:c6:b9:c7:18:38:82:2f:2b:7a:e1:a2:e4:5e: b9:8d:56:59:a7:38:53:0a:ba:d5:92:3d:19:b9:63: 29:1f:f1:81:aa:45:85:56:ce:16:3d:8a:1d:3f:0d: f0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:23:39:E3:45:10:4D:80:AD:E3:0F:24:04:BB:56:52:8A:05:B3:8D X509v3 Authority Key Identifier: keyid:F4:32:E0:ED:B6:9B:D6:E2:53:EE:20:F4:C1:58:9A:46:26:7A:A2:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:66:2b:df:89:f7:96:eb:75:85:b1:78:b1:36:10:e6:ae:67: b2:9a:8e:a1:e4:ec:4e:03:5d:1f:cd:1a:d6:ee:64:18:8a:c5: aa:3d:43:60:50:e2:00:73:39:c2:4f:a3:4f:e6:2a:d4:9b:36: 82:ea:92:0e:60:f7:50:20:f1:8b:ec:75:4d:4f:51:8f:81:a2: 4a:44:f8:a8:39:3f:03:34:90:1f:7e:0b:98:48:9e:55:0d:88: 8d:a7:0e:8a:58:07:80:62:be:41:c6:02:2f:e8:29:cb:43:a2: 66:2f:0a:6b:92:48:20:61:e7:0e:9d:76:1b:9a:09:54:f7:0e: 3c:ea:b9:dc:32:69:1d:27:fa:7a:b0:cc:b2:a8:9a:cb:52:89: d3:01:53:41:73:fb:6f:f0:50:a6:47:aa:19:8c:88:c3:79:c3: 69:73:9b:28:14:5e:9b:37:c4:04:20:a0:4f:c0:98:84:63:99: 14:ae:06:42:5b:ca:dd:66:7a:60:ea:06:d9:de:ac:99:90:75: 25:2e:ab:dd:f6:31:cb:4b:34:f8:56:e3:e4:16:05:9c:64:8c: ee:4b:50:ac:82:60:98:13:5f:f4:84:dd:d1:01:48:dd:b9:b7: 7d:95:de:ad:17:9a:81:84:22:c6:7e:e5:b5:f3:e4:59:f1:0b: 0f:b0:5b:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcP2C+2fV+50PRajo/N81mYbiGq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQzMkUwRURCNjlCRDZFMjUzRUUyMEY0QzE1ODlBNDYy NjdBQTJCOTAeFw0yNTExMDMxMjQ4MDhaFw0yNTExMDQxNDQyMDhaMDMxMTAvBgNV BAMTKDhFMjMzOUUzNDUxMDREODBBREUzMEYyNDA0QkI1NjUyOEEwNUIzOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4r03u6+MuFCoZLT6iXFGv7Wmv Y3/TGvQp+qdfh2SLH5Rk4460UvOGGSVbgETDmBi7FZf3xLXcQdOmMJ+VT+uBv/RO Ing89nE7xdjHsSFXE9HA4FqwoDBtK9JMzsDPMCN2cj9vQ4MW+QfK3ZIU/4IrNpV3 IbZzHm+jxGap2TO60JclDvVoeVAyvPXr9+HvKVWvYcq7whAmopgxachpyPUKMpRV 1daiYGxwu04hFEiljD0/EBp3JRrN3UvoYOWERtpxPibONGhMMzksYq53VAdL0Nm5 xrnHGDiCLyt64aLkXrmNVlmnOFMKutWSPRm5Yykf8YGqRYVWzhY9ih0/DfCfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjiM540UQTYCt4w8kBLtWUooFs40wHwYDVR0j BBgwFoAU9DLg7bab1uJT7iD0wViaRiZ6orkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWtGN3VHc2VnR0UxMzJ2VmlhNzRIVDVaYUVCUVFpWnNZd2hmdzJOZmNt bWYvMC9GNDMyRTBFREI2OUJENkUyNTNFRTIwRjRDMTU4OUE0NjI2N0FBMkI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MzJFMEVEQjY5QkQ2RTI1 M0VFMjBGNEMxNTg5QTQ2MjY3QUEyQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWtGN3VHc2VnR0UxMzJ2VmlhNzRIVDVaYUVCUVFpWnNZd2hmdzJOZmNtbWYvMC9G NDMyRTBFREI2OUJENkUyNTNFRTIwRjRDMTU4OUE0NjI2N0FBMkI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApGYr34n3lut1hbF4sTYQ5q5nspqOoeTsTgNdH80a1u5kGIrFqj1DYFDiAHM5 wk+jT+Yq1Js2guqSDmD3UCDxi+x1TU9Rj4GiSkT4qDk/AzSQH34LmEieVQ2IjacO ilgHgGK+QcYCL+gpy0OiZi8Ka5JIIGHnDp12G5oJVPcOPOq53DJpHSf6erDMsqia y1KJ0wFTQXP7b/BQpkeqGYyIw3nDaXObKBRemzfEBCCgT8CYhGOZFK4GQlvK3WZ6 YOoG2d6smZB1JS6r3fYxy0s0+Fbj5BYFnGSM7ktQrIJgmBNf9ITd0QFI3bm3fZXe rReagYQixn7ltfPkWfELD7BbEw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:24:46 2025 by rpki-client