$ rpki-client -vvf rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft File: 52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft (raw, json) Hash identifier: gw6N+5oBh41lZONJM8+OyqLEiuMj2yc0vwGGxyLXdfw= Subject key identifier: C9:5F:0F:79:BB:9A:AF:0F:CC:58:AD:D9:AD:50:53:C8:E7:72:A5:34 Authority key identifier: 52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E Certificate issuer: /CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E Certificate serial: 10144ECE250E73CF81912272C439423481579F85 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft Manifest number: D0 Signing time: Wed 05 Nov 2025 12:41:41 +0000 Manifest this update: Wed 05 Nov 2025 12:36:41 +0000 Manifest next update: Thu 06 Nov 2025 12:44:41 +0000 Files and hashes: 1: 323830343a386538633a3a2f33322d3332203d3e20323733343333.roa (hash: GKQiZSRTggPaFx/yFhowb4IhNVU02HJ7y8OaPzs+f/0=) 2: 52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl (hash: b8luQVkNewVpW8q55Rm+9pWoSEsFgvb5DkF7NaJcwG8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 12:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:14:4e:ce:25:0e:73:cf:81:91:22:72:c4:39:42:34:81:57:9f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E Validity Not Before: Nov 5 12:36:41 2025 GMT Not After : Nov 6 12:44:41 2025 GMT Subject: CN=C95F0F79BB9AAF0FCC58ADD9AD5053C8E772A534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:e7:26:8a:31:20:99:36:8e:b9:57:fb:b4: 46:36:22:64:8a:d5:83:17:d0:6a:16:ac:64:e0:15: ba:7a:a6:d5:82:eb:9e:61:17:d0:4c:50:fa:a9:b2: ff:59:e1:c4:2a:f8:cd:4c:ae:4c:93:b7:f2:26:40: f3:7b:c7:5e:12:dc:c7:32:dc:28:79:bb:6c:f2:4d: 0a:9d:65:6c:96:fd:86:27:29:fb:4c:0a:38:13:fe: 75:26:80:56:3f:3b:88:bb:f7:43:d0:21:01:8c:23: eb:4a:3e:a2:c2:c2:04:86:33:f8:29:37:a9:fd:76: 73:39:79:5d:47:ef:db:49:a0:5b:10:36:04:79:9b: a5:06:10:a6:8d:39:2f:49:82:8f:b4:f4:ef:38:d4: ec:95:73:73:92:56:7d:4f:9a:92:5e:3e:98:38:7e: 37:b4:93:72:28:7d:82:ba:08:e2:d4:be:33:aa:1d: 33:60:17:bf:32:3d:46:01:2d:17:a4:09:df:bd:50: 1c:1f:28:ad:a9:57:24:e8:42:86:49:06:f4:4c:35: ab:9c:ea:6d:bf:42:ce:70:02:ea:78:c1:cb:e6:c4: 01:92:12:fa:9d:9e:5e:c5:13:16:af:73:9b:b2:5f: 88:c8:81:ba:4d:e6:16:39:ce:2d:0b:59:47:4c:5c: 8a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5F:0F:79:BB:9A:AF:0F:CC:58:AD:D9:AD:50:53:C8:E7:72:A5:34 X509v3 Authority Key Identifier: keyid:52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:59:21:d7:b3:c0:22:1c:41:9b:6f:dd:21:a9:2c:ab:e7:ac: e3:16:8e:09:70:8b:e5:2b:05:dd:e3:b7:ad:aa:9d:3f:f9:ec: cf:09:a7:fe:d5:7e:45:b1:75:a7:06:c5:ec:d4:cc:a6:95:d6: 92:a7:97:b2:bf:a9:49:80:ec:59:d3:02:d5:0c:b6:45:08:b7: 0e:96:98:8f:31:7c:79:18:cc:51:1d:f6:22:25:fa:8a:6c:28: f0:cf:84:5b:84:8a:d8:bf:a5:98:a4:84:aa:3e:31:4d:8b:4e: cf:41:2b:a6:00:78:d7:e7:48:05:e4:de:71:70:d6:1d:f9:67: 4b:c4:27:e3:37:d0:51:dd:5a:d4:4f:cc:f0:5e:ce:81:45:93: 2f:23:21:e1:d7:95:aa:8f:51:3a:48:ac:6b:e8:17:3a:9e:4e: 30:32:d2:50:b8:52:79:28:3c:c8:65:92:05:43:37:b6:7e:24: a2:20:43:8d:69:d0:58:92:1d:44:8b:58:98:c0:fd:d9:40:17: 3e:5b:5d:5d:1b:51:81:5c:e1:e2:d9:9a:e8:2e:88:b5:17:b6: d2:dc:9c:49:2f:0c:df:da:87:49:5b:33:55:07:56:8b:39:73: bb:d1:d6:39:65:b7:5a:d3:c6:6f:aa:c2:7a:1a:7e:0f:75:de: 5f:e7:a5:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEBROziUOc8+BkSJyxDlCNIFXn4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGRDM4QzVEMERGMzY1Q0Q4REUzQkQxREQwRTkyQzFB NkI2OUY3RTAeFw0yNTExMDUxMjM2NDFaFw0yNTExMDYxMjQ0NDFaMDMxMTAvBgNV BAMTKEM5NUYwRjc5QkI5QUFGMEZDQzU4QUREOUFENTA1M0M4RTc3MkE1MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88OcmijEgmTaOuVf7tEY2ImSK 1YMX0GoWrGTgFbp6ptWC655hF9BMUPqpsv9Z4cQq+M1MrkyTt/ImQPN7x14S3Mcy 3Ch5u2zyTQqdZWyW/YYnKftMCjgT/nUmgFY/O4i790PQIQGMI+tKPqLCwgSGM/gp N6n9dnM5eV1H79tJoFsQNgR5m6UGEKaNOS9Jgo+09O841OyVc3OSVn1PmpJePpg4 fje0k3IofYK6COLUvjOqHTNgF78yPUYBLRekCd+9UBwfKK2pVyToQoZJBvRMNauc 6m2/Qs5wAup4wcvmxAGSEvqdnl7FExavc5uyX4jIgbpN5hY5zi0LWUdMXIrVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyV8Pebuarw/MWK3ZrVBTyOdypTQwHwYDVR0j BBgwFoAUUv04xdDfNlzY3jvR3Q6Swaa2n34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1lOeGVGVjU2elNOdkthZDR6WnZIeUtiallYd1BLM0NGTFNkWHExVUxn TUovMC81MkZEMzhDNUQwREYzNjVDRDhERTNCRDFERDBFOTJDMUE2QjY5RjdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyRkQzOEM1RDBERjM2NUNE OERFM0JEMUREMEU5MkMxQTZCNjlGN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1lOeGVGVjU2elNOdkthZDR6WnZIeUtiallYd1BLM0NGTFNkWHExVUxnTUovMC81 MkZEMzhDNUQwREYzNjVDRDhERTNCRDFERDBFOTJDMUE2QjY5RjdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALVkh17PAIhxBm2/dIaksq+es4xaOCXCL5SsF3eO3raqdP/nszwmn/tV+RbF1 pwbF7NTMppXWkqeXsr+pSYDsWdMC1Qy2RQi3DpaYjzF8eRjMUR32IiX6imwo8M+E W4SK2L+lmKSEqj4xTYtOz0ErpgB41+dIBeTecXDWHflnS8Qn4zfQUd1a1E/M8F7O gUWTLyMh4deVqo9ROkisa+gXOp5OMDLSULhSeSg8yGWSBUM3tn4koiBDjWnQWJId RItYmMD92UAXPltdXRtRgVzh4tma6C6ItRe20tycSS8M39qHSVszVQdWizlzu9HW OWW3WtPGb6rCehp+D3XeX+el8w== -----END CERTIFICATE-----Generated at Thu Nov 6 04:42:45 2025 by rpki-client