$ rpki-client -vvf rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/22556D0290AA08E04E52E5890C17182439269D40.mft File: 22556D0290AA08E04E52E5890C17182439269D40.mft (raw, json) Hash identifier: l/M9MJ7mEQ+6zXSRxZjv+UPlBS502vzXYDG4oV4FInM= Subject key identifier: 59:10:09:F0:40:94:55:88:A7:4F:1E:C2:17:C4:24:5A:C7:FF:A9:D5 Authority key identifier: 22:55:6D:02:90:AA:08:E0:4E:52:E5:89:0C:17:18:24:39:26:9D:40 Certificate issuer: /CN=22556D0290AA08E04E52E5890C17182439269D40 Certificate serial: 7092BD6ACC76B7E62679C2A026F3A19A7874B4A6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22556D0290AA08E04E52E5890C17182439269D40.cer Subject info access: rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/22556D0290AA08E04E52E5890C17182439269D40.mft Manifest number: 022A Signing time: Mon 03 Nov 2025 07:10:51 +0000 Manifest this update: Mon 03 Nov 2025 07:05:51 +0000 Manifest next update: Tue 04 Nov 2025 08:14:51 +0000 Files and hashes: 1: 22556D0290AA08E04E52E5890C17182439269D40.crl (hash: yXMk1z1z9ZYNBOqcjYuai4tUniSgF0zUqPoyA55LbMY=) 2: 323830343a316236303a3a2f33322d313238203d3e203631373234.roa (hash: ony0xbBFzRiDSEq2E2qJORm3J3QbhC8W7AhhIBt72tw=) 3: 3133312e302e382e302f32322d3332203d3e203631373234.roa (hash: Az9UJ+sbQqvsK3EHb6n681jgYONI60BrkMfNzA9vrf0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/22556D0290AA08E04E52E5890C17182439269D40.crl rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/22556D0290AA08E04E52E5890C17182439269D40.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22556D0290AA08E04E52E5890C17182439269D40.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 08:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:92:bd:6a:cc:76:b7:e6:26:79:c2:a0:26:f3:a1:9a:78:74:b4:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22556D0290AA08E04E52E5890C17182439269D40 Validity Not Before: Nov 3 07:05:51 2025 GMT Not After : Nov 4 08:14:51 2025 GMT Subject: CN=591009F040945588A74F1EC217C4245AC7FFA9D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bf:80:c8:d8:46:b5:f3:28:b0:85:a1:5d:d5: b1:48:be:fd:2e:49:53:b0:95:48:50:dd:ad:2f:b0: 0b:5d:59:b6:95:07:99:e3:f7:fa:0a:20:45:0d:74: c3:fa:78:ae:b9:24:97:44:f4:06:15:a1:70:16:a3: 8c:71:b2:4b:41:b1:8d:e5:4e:f5:62:a5:69:f7:05: 4d:66:7e:3f:65:33:9f:7e:34:d8:70:6f:82:83:ff: 16:f4:69:31:d9:1b:e9:9c:7d:4f:e4:7e:81:5e:0a: c5:c3:6e:90:fa:e3:fa:cd:73:8f:9a:ac:32:30:a2: 9c:b0:0e:9a:e5:35:e0:5b:9b:c0:aa:e9:50:aa:97: 60:6d:1e:f3:78:12:a6:a5:bc:9f:6e:e8:6d:68:d3: 3a:ea:46:d1:bd:d5:56:df:63:9e:a3:93:d3:72:8a: 87:c1:2a:a4:26:63:e9:c1:51:97:46:1b:3d:d4:7e: 11:5a:60:6b:91:a4:eb:19:77:34:f7:f5:85:b3:c0: 13:b1:76:79:05:f2:fa:47:3c:75:a5:4b:db:7c:43: fc:6a:6e:96:88:cd:eb:80:87:f9:c5:d3:62:96:3d: 0f:ff:af:3e:a3:87:fb:16:16:bc:c7:eb:93:38:98: b7:ec:53:16:95:46:bc:db:91:a1:1a:82:07:5c:31: fb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:10:09:F0:40:94:55:88:A7:4F:1E:C2:17:C4:24:5A:C7:FF:A9:D5 X509v3 Authority Key Identifier: keyid:22:55:6D:02:90:AA:08:E0:4E:52:E5:89:0C:17:18:24:39:26:9D:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/22556D0290AA08E04E52E5890C17182439269D40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22556D0290AA08E04E52E5890C17182439269D40.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/22556D0290AA08E04E52E5890C17182439269D40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:9b:55:d2:07:ca:78:79:f3:b0:06:22:0a:38:f6:83:a8:e5: 40:25:7c:1d:3e:4f:7c:31:9d:1f:3a:23:45:5e:7e:eb:c6:76: 59:05:47:2b:d0:9d:8e:0d:01:69:97:5d:bf:02:eb:89:d8:b2: 77:94:f8:2a:ab:fd:b5:31:5c:b6:b1:56:97:26:d6:6a:05:78: d9:66:09:d0:c9:66:11:56:35:4c:2e:c7:6e:15:97:e3:9a:e6: 9c:f3:1b:93:5f:97:3f:61:08:e2:61:fa:6f:2a:e3:19:3b:53: 65:a7:75:51:be:33:0e:b9:ba:ac:9d:5f:63:98:6e:90:33:6e: 78:e8:d2:47:49:e5:7d:42:9b:bf:63:0d:48:c5:78:47:8b:0d: 17:57:2f:5d:e2:18:81:4b:ed:2e:db:10:28:1d:f1:df:49:8b: 77:31:e8:9b:cc:58:a9:b6:06:71:ab:79:c7:b0:5e:2b:2c:8a: 5a:37:df:4b:43:e9:8c:bd:0f:07:70:44:09:d0:4e:b1:5f:d6: a1:ae:54:36:96:42:03:77:d9:68:b4:41:1b:26:e7:e2:60:81: 0a:da:36:aa:73:15:6d:8d:05:29:6a:9e:30:5e:45:05:d8:28: 87:13:a2:2f:99:5b:7f:47:ae:69:9a:b7:52:35:a8:b9:5b:09: c2:dc:c7:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcJK9asx2t+YmecKgJvOhmnh0tKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1NTZEMDI5MEFBMDhFMDRFNTJFNTg5MEMxNzE4MjQz OTI2OUQ0MDAeFw0yNTExMDMwNzA1NTFaFw0yNTExMDQwODE0NTFaMDMxMTAvBgNV BAMTKDU5MTAwOUYwNDA5NDU1ODhBNzRGMUVDMjE3QzQyNDVBQzdGRkE5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmv4DI2Ea18yiwhaFd1bFIvv0u SVOwlUhQ3a0vsAtdWbaVB5nj9/oKIEUNdMP6eK65JJdE9AYVoXAWo4xxsktBsY3l TvVipWn3BU1mfj9lM59+NNhwb4KD/xb0aTHZG+mcfU/kfoFeCsXDbpD64/rNc4+a rDIwopywDprlNeBbm8Cq6VCql2BtHvN4EqalvJ9u6G1o0zrqRtG91VbfY56jk9Ny iofBKqQmY+nBUZdGGz3UfhFaYGuRpOsZdzT39YWzwBOxdnkF8vpHPHWlS9t8Q/xq bpaIzeuAh/nF02KWPQ//rz6jh/sWFrzH65M4mLfsUxaVRrzbkaEaggdcMftnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWRAJ8ECUVYinTx7CF8QkWsf/qdUwHwYDVR0j BBgwFoAUIlVtApCqCOBOUuWJDBcYJDkmnUAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjdrRWJISFgxMng3V05tclZoYWE5a2ZycjdqblpjWnFFS2E0djNWWmht M1MvMC8yMjU1NkQwMjkwQUEwOEUwNEU1MkU1ODkwQzE3MTgyNDM5MjY5RDQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyNTU2RDAyOTBBQTA4RTA0 RTUyRTU4OTBDMTcxODI0MzkyNjlENDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NjdrRWJISFgxMng3V05tclZoYWE5a2ZycjdqblpjWnFFS2E0djNWWmhtM1MvMC8y MjU1NkQwMjkwQUEwOEUwNEU1MkU1ODkwQzE3MTgyNDM5MjY5RDQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgZtV0gfKeHnzsAYiCjj2g6jlQCV8HT5PfDGdHzojRV5+68Z2WQVHK9Cdjg0B aZddvwLridiyd5T4Kqv9tTFctrFWlybWagV42WYJ0MlmEVY1TC7HbhWX45rmnPMb k1+XP2EI4mH6byrjGTtTZad1Ub4zDrm6rJ1fY5hukDNueOjSR0nlfUKbv2MNSMV4 R4sNF1cvXeIYgUvtLtsQKB3x30mLdzHom8xYqbYGcat5x7BeKyyKWjffS0PpjL0P B3BECdBOsV/Woa5UNpZCA3fZaLRBGybn4mCBCto2qnMVbY0FKWqeMF5FBdgohxOi L5lbf0euaZq3UjWouVsJwtzHdA== -----END CERTIFICATE-----Generated at Tue Nov 4 00:25:51 2025 by rpki-client