$ rpki-client -vvf rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.mft File: 5CEFAC68C13B3048507970843DFCA0B39E32C2F9.mft (raw, json) Hash identifier: e0K+HTUU0PMHVG+d6oFXMhG/MXnSEvicAzxCCAiuQAY= Subject key identifier: D1:A0:6F:79:57:DB:08:71:A0:0D:55:D2:FE:AB:BA:E9:A3:7F:F6:19 Authority key identifier: 5C:EF:AC:68:C1:3B:30:48:50:79:70:84:3D:FC:A0:B3:9E:32:C2:F9 Certificate issuer: /CN=5CEFAC68C13B3048507970843DFCA0B39E32C2F9 Certificate serial: 32B59EC1CED0CA7405BDB3644E804C7919D2EFA9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.cer Subject info access: rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.mft Manifest number: 2D Signing time: Mon 03 Nov 2025 00:50:01 +0000 Manifest this update: Mon 03 Nov 2025 00:45:01 +0000 Manifest next update: Tue 04 Nov 2025 00:59:01 +0000 Files and hashes: 1: 323830343a383966383a3a2f33322d3438203d3e20323733363338.roa (hash: nJ1jP8kWxROVlxgV42w6pt5bFCZlVe3bhWUcYiCCrio=) 2: 5CEFAC68C13B3048507970843DFCA0B39E32C2F9.crl (hash: pN6Lg/71xbvEw7+p2ra1+r9bikZi0sr5Ur2BSAOt6NY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.crl rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b5:9e:c1:ce:d0:ca:74:05:bd:b3:64:4e:80:4c:79:19:d2:ef:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CEFAC68C13B3048507970843DFCA0B39E32C2F9 Validity Not Before: Nov 3 00:45:01 2025 GMT Not After : Nov 4 00:59:01 2025 GMT Subject: CN=D1A06F7957DB0871A00D55D2FEABBAE9A37FF619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f0:f8:c5:13:b4:5a:ae:47:36:6a:5a:41:d0: d3:79:d5:a3:a1:f1:7d:38:71:60:37:84:2f:ee:79: da:77:0d:98:e1:64:8d:98:bc:79:fc:17:8f:98:9e: 5d:61:26:0b:64:a8:56:d6:9c:f7:3b:c0:d3:54:df: 65:b4:04:69:6e:dd:4c:5d:34:ad:84:60:08:ef:76: ce:c1:c7:77:f6:a9:bc:61:f4:2a:40:f2:ea:41:e7: 25:f3:d0:0a:ac:6d:ba:b4:85:bf:73:57:40:3d:5d: 0c:d4:80:22:49:e6:70:af:b0:4f:d3:40:bb:0f:30: 0d:63:b9:74:4e:50:cc:89:71:1d:cc:e0:f5:ed:4c: af:d4:40:c3:e9:d7:46:70:83:90:fb:02:62:bd:80: b8:6d:0b:df:9f:92:01:bb:b3:fd:40:02:c1:7b:51: df:7a:f5:b8:b7:ca:bc:8c:3e:b8:e4:a3:8f:40:86: fe:7f:2a:fd:1c:c7:f1:86:76:76:6b:16:2e:3b:60: 3e:a0:dd:d1:75:74:52:f9:a6:2c:13:1b:e5:7c:cc: b9:f2:3d:4d:de:80:23:63:43:23:23:cc:07:b1:2f: 9b:9a:fd:3e:af:d9:ca:44:b0:1f:e8:3d:6d:b5:bf: 38:08:a5:2b:82:96:ef:f0:a3:8b:d8:86:34:c2:07: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A0:6F:79:57:DB:08:71:A0:0D:55:D2:FE:AB:BA:E9:A3:7F:F6:19 X509v3 Authority Key Identifier: keyid:5C:EF:AC:68:C1:3B:30:48:50:79:70:84:3D:FC:A0:B3:9E:32:C2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ad:f3:3d:a9:96:c3:5c:67:99:33:19:17:7c:8f:45:35:74: 5a:c7:73:8e:32:76:75:a1:3a:b3:5b:ef:ca:91:e9:f8:0e:e3: fc:36:d4:d0:09:f4:80:e3:fe:0d:b5:5e:3f:9d:d0:1a:7f:74: 2f:1c:03:b3:19:08:fc:d6:20:08:7c:35:b3:27:13:8c:9f:ff: d8:f6:fa:8c:be:c7:66:b9:eb:52:bb:36:03:41:b9:fc:3f:b9: e4:25:f3:54:77:ee:07:43:be:96:8c:9f:e4:3c:d0:b7:74:94: e0:21:b6:b5:54:5b:f5:63:fd:f0:6b:90:dc:f5:e3:12:29:d8: 07:cc:0b:b4:09:b5:a6:d6:4e:92:89:6b:dc:9e:ea:bf:23:b1: d0:a5:af:e5:da:97:1f:98:d3:52:06:52:b2:33:c4:ca:cb:5b: 39:37:e3:40:62:9b:ce:a5:59:25:aa:6f:97:64:cf:92:87:20: 27:54:9f:11:2e:4c:d8:7e:91:43:3b:c9:cf:7b:c6:42:42:24: 00:ff:4b:69:91:47:48:f4:b0:1f:15:85:7a:a9:c7:75:11:b5: 7f:4a:5e:5a:08:e6:4f:0d:03:5b:a5:f9:4e:1d:c4:e1:10:0d: 68:d4:68:af:d1:07:c6:ad:c0:6d:09:0d:6d:df:85:bf:31:ed: 97:fa:6f:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMrWewc7QynQFvbNkToBMeRnS76kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNFRkFDNjhDMTNCMzA0ODUwNzk3MDg0M0RGQ0EwQjM5 RTMyQzJGOTAeFw0yNTExMDMwMDQ1MDFaFw0yNTExMDQwMDU5MDFaMDMxMTAvBgNV BAMTKEQxQTA2Rjc5NTdEQjA4NzFBMDBENTVEMkZFQUJCQUU5QTM3RkY2MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX8PjFE7Rarkc2alpB0NN51aOh 8X04cWA3hC/uedp3DZjhZI2YvHn8F4+Ynl1hJgtkqFbWnPc7wNNU32W0BGlu3Uxd NK2EYAjvds7Bx3f2qbxh9CpA8upB5yXz0Aqsbbq0hb9zV0A9XQzUgCJJ5nCvsE/T QLsPMA1juXROUMyJcR3M4PXtTK/UQMPp10Zwg5D7AmK9gLhtC9+fkgG7s/1AAsF7 Ud969bi3yryMPrjko49Ahv5/Kv0cx/GGdnZrFi47YD6g3dF1dFL5piwTG+V8zLny PU3egCNjQyMjzAexL5ua/T6v2cpEsB/oPW21vzgIpSuClu/wo4vYhjTCB1lTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0aBveVfbCHGgDVXS/qu66aN/9hkwHwYDVR0j BBgwFoAUXO+saME7MEhQeXCEPfygs54ywvkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNnhMOEdqTWREMnp5N3I3TlhZclNWbVpueDU4MUJNYVhSaGVVdHpOUXR6 aFQvMC81Q0VGQUM2OEMxM0IzMDQ4NTA3OTcwODQzREZDQTBCMzlFMzJDMkY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDRUZBQzY4QzEzQjMwNDg1 MDc5NzA4NDNERkNBMEIzOUUzMkMyRjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NnhMOEdqTWREMnp5N3I3TlhZclNWbVpueDU4MUJNYVhSaGVVdHpOUXR6aFQvMC81 Q0VGQUM2OEMxM0IzMDQ4NTA3OTcwODQzREZDQTBCMzlFMzJDMkY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgK3zPamWw1xnmTMZF3yPRTV0WsdzjjJ2daE6s1vvypHp+A7j/DbU0An0gOP+ DbVeP53QGn90LxwDsxkI/NYgCHw1sycTjJ//2Pb6jL7HZrnrUrs2A0G5/D+55CXz VHfuB0O+loyf5DzQt3SU4CG2tVRb9WP98GuQ3PXjEinYB8wLtAm1ptZOkolr3J7q vyOx0KWv5dqXH5jTUgZSsjPEystbOTfjQGKbzqVZJapvl2TPkocgJ1SfES5M2H6R QzvJz3vGQkIkAP9LaZFHSPSwHxWFeqnHdRG1f0peWgjmTw0DW6X5Th3E4RANaNRo r9EHxq3AbQkNbd+FvzHtl/pvxA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:10:48 2025 by rpki-client