$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft File: 5429A630D95311C5AADAF5AC62BF18BF86863194.mft (raw, json) Hash identifier: zWGyrbSjR6Hegl7LI0QxX8kWAqgRL7ai8Zz44aCJqw0= Subject key identifier: E1:0C:E8:CB:C6:23:C9:0D:72:C1:FE:D4:8D:6A:5A:5C:0A:0D:AC:25 Authority key identifier: 54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94 Certificate issuer: /CN=5429A630D95311C5AADAF5AC62BF18BF86863194 Certificate serial: 424CCAAC99726AC8860622653819CF7FE5FEBD93 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft Manifest number: 01B2 Signing time: Mon 03 Nov 2025 21:47:04 +0000 Manifest this update: Mon 03 Nov 2025 21:42:04 +0000 Manifest next update: Wed 05 Nov 2025 01:45:04 +0000 Files and hashes: 1: 323830343a6431303a3a2f33322d3438203d3e203532353933.roa (hash: nSOaWesuogq30r5VD09Dk6DV/wQidOLKt4u2pW7jz6k=) 2: 3137302e38332e3230382e302f32322d3234203d3e203532353933.roa (hash: 8vwwo/SaNUCndqLG1W6S/xt9MVBLLG9Ywm1/OLdTEj8=) 3: 5429A630D95311C5AADAF5AC62BF18BF86863194.crl (hash: 3fL4aOkr/7YToWmgqlFb2+6Pu6wZ6xQvFhq9k6L9nsk=) 4: 3137372e38372e3233322e302f32322d3234203d3e203532353933.roa (hash: d5DI6/HlpfZKGZTJE1cimx+rFHCSUvIx3f28vzYvW6U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.crl rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 00:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4c:ca:ac:99:72:6a:c8:86:06:22:65:38:19:cf:7f:e5:fe:bd:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5429A630D95311C5AADAF5AC62BF18BF86863194 Validity Not Before: Nov 3 21:42:04 2025 GMT Not After : Nov 5 01:45:04 2025 GMT Subject: CN=E10CE8CBC623C90D72C1FED48D6A5A5C0A0DAC25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:cb:5f:fb:63:e4:52:1d:92:f9:30:8e:12: 19:e8:98:6c:8d:dc:6f:16:c3:5e:22:c7:90:a7:ff: e2:03:17:32:20:c2:01:a5:c2:d3:f9:fd:74:c7:ee: a4:76:6f:4a:29:f2:59:49:ac:50:48:7e:51:97:58: f6:f7:52:76:f7:44:76:a8:40:f3:36:c7:e1:a3:3f: d4:0e:c5:57:c3:17:86:1f:d2:cf:35:93:59:ff:62: 13:15:2f:d1:f3:37:e9:2b:25:77:99:a2:8c:f3:10: a8:e3:cb:2c:ff:98:7a:82:bc:b9:4b:9b:85:09:f0: d0:6f:2f:ca:d9:26:31:38:56:ad:7a:1e:e0:32:07: f6:06:68:4a:75:89:a8:aa:fd:3a:04:91:2d:8a:11: ae:fc:dd:3e:8c:9a:7b:83:a3:33:78:8c:1b:a5:4a: 09:08:ee:45:b5:22:d7:08:70:8e:21:db:34:ee:58: 09:ba:c0:a1:74:bb:c0:c4:dc:5d:7d:1e:ea:d9:2e: df:15:5f:2f:7f:fa:60:14:3c:85:e1:a1:02:7e:0a: 5e:96:12:ea:a3:e5:49:54:de:12:6e:7c:37:6b:01: 06:be:26:f6:de:95:52:8c:13:ce:d6:05:5c:71:c0: 7a:c1:be:02:2e:28:76:d9:f5:48:ec:c1:21:20:91: 17:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0C:E8:CB:C6:23:C9:0D:72:C1:FE:D4:8D:6A:5A:5C:0A:0D:AC:25 X509v3 Authority Key Identifier: keyid:54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:84:34:f3:6d:64:b1:1d:f0:15:1c:86:a9:0b:cb:42:17:4d: 56:07:2d:08:01:2a:18:de:0e:80:ab:b3:54:6e:68:b1:9c:7b: e5:2c:7b:45:a3:e2:25:01:c7:24:cf:28:66:4b:90:c5:c6:1f: ac:95:d9:29:48:32:b6:64:2a:fd:f4:ff:27:b1:ef:8b:d0:29: b4:a6:19:58:b0:9f:8e:a0:03:6f:6b:fd:ab:2f:9d:b8:90:0d: df:e2:f4:18:11:69:ac:07:58:48:59:e9:f3:4a:73:a9:e3:3b: e0:6a:22:82:44:0a:6b:0b:56:b4:9b:6e:9a:91:18:9a:0c:b7: db:3d:11:2b:92:96:c9:ac:e4:bc:02:d0:b8:21:2c:40:58:b6: a7:32:b1:bc:3d:db:b4:fe:9b:44:1f:a5:49:f3:67:c5:cf:6a: 97:f1:98:92:5c:a0:f2:ac:ed:87:2e:6a:1a:4f:56:22:fc:b3: 1c:4b:81:ac:06:43:4f:f4:dc:cd:6c:cf:4c:ee:0f:32:ac:ad: 66:3b:f6:17:58:4d:9d:53:f0:db:9f:a7:1c:33:53:ab:44:43: 3a:ae:d0:a5:27:e5:7c:28:da:a5:d6:8b:84:01:7b:7f:7b:69: ba:84:18:31:21:79:e4:f7:11:ec:eb:64:26:11:7f:c6:c6:f0: cd:7e:48:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQkzKrJlyasiGBiJlOBnPf+X+vZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQyOUE2MzBEOTUzMTFDNUFBREFGNUFDNjJCRjE4QkY4 Njg2MzE5NDAeFw0yNTExMDMyMTQyMDRaFw0yNTExMDUwMTQ1MDRaMDMxMTAvBgNV BAMTKEUxMENFOENCQzYyM0M5MEQ3MkMxRkVENDhENkE1QTVDMEEwREFDMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2Mtf+2PkUh2S+TCOEhnomGyN 3G8Ww14ix5Cn/+IDFzIgwgGlwtP5/XTH7qR2b0op8llJrFBIflGXWPb3Unb3RHao QPM2x+GjP9QOxVfDF4Yf0s81k1n/YhMVL9HzN+krJXeZoozzEKjjyyz/mHqCvLlL m4UJ8NBvL8rZJjE4Vq16HuAyB/YGaEp1iaiq/ToEkS2KEa783T6MmnuDozN4jBul SgkI7kW1ItcIcI4h2zTuWAm6wKF0u8DE3F19HurZLt8VXy9/+mAUPIXhoQJ+Cl6W Euqj5UlU3hJufDdrAQa+JvbelVKME87WBVxxwHrBvgIuKHbZ9UjswSEgkRdnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4Qzoy8YjyQ1ywf7UjWpaXAoNrCUwHwYDVR0j BBgwFoAUVCmmMNlTEcWq2vWsYr8Yv4aGMZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1TVlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdN SDcvMC81NDI5QTYzMEQ5NTMxMUM1QUFEQUY1QUM2MkJGMThCRjg2ODYzMTk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0MjlBNjMwRDk1MzExQzVB QURBRjVBQzYyQkYxOEJGODY4NjMxOTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OE1TVlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdNSDcvMC81 NDI5QTYzMEQ5NTMxMUM1QUFEQUY1QUM2MkJGMThCRjg2ODYzMTk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC4Q0821ksR3wFRyGqQvLQhdNVgctCAEqGN4OgKuzVG5osZx75Sx7RaPiJQHH JM8oZkuQxcYfrJXZKUgytmQq/fT/J7Hvi9AptKYZWLCfjqADb2v9qy+duJAN3+L0 GBFprAdYSFnp80pzqeM74GoigkQKawtWtJtumpEYmgy32z0RK5KWyazkvALQuCEs QFi2pzKxvD3btP6bRB+lSfNnxc9ql/GYklyg8qzthy5qGk9WIvyzHEuBrAZDT/Tc zWzPTO4PMqytZjv2F1hNnVPw25+nHDNTq0RDOq7QpSflfCjapdaLhAF7f3tpuoQY MSF55PcR7OtkJhF/xsbwzX5IgA== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:52 2025 by rpki-client