$ rpki-client -vvf rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.mft File: 64EE45FF4E73BCB7FEE37731DE1088660B5851F8.mft (raw, json) Hash identifier: qz/Ea9Kg/Ak4P03xpI263JYaNCI2d0dJcaNofTIRsjk= Subject key identifier: D8:15:F2:D7:35:9E:72:54:10:7A:BB:0F:A8:F4:F1:7F:96:07:72:7F Authority key identifier: 64:EE:45:FF:4E:73:BC:B7:FE:E3:77:31:DE:10:88:66:0B:58:51:F8 Certificate issuer: /CN=64EE45FF4E73BCB7FEE37731DE1088660B5851F8 Certificate serial: 1BCC569CE54A418DA94F405EBE420A20C1578CEA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.cer Subject info access: rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.mft Manifest number: 10 Signing time: Sun 02 Nov 2025 21:08:58 +0000 Manifest this update: Sun 02 Nov 2025 21:03:58 +0000 Manifest next update: Mon 03 Nov 2025 23:56:58 +0000 Files and hashes: 1: 64EE45FF4E73BCB7FEE37731DE1088660B5851F8.crl (hash: ksAlL1Ev7uvuCCoEC8Z9k3h7o71XYH4h3Sc9gLxn5Tw=) 2: 3137372e3135342e38342e302f32322d3332203d3e20323632393439.roa (hash: 1d3tUWLajSTTOvZLqwd5mEbvDy4l89GnNAeXH9kRVmA=) 3: 323830343a6534383a3a2f33322d313238203d3e20323632393439.roa (hash: ZP7LxRSY9e7An77Rzk9cRX4tKzfidV+jAXvMsYBInSM=) 4: 3137372e3135342e38302e302f32322d3332203d3e20323632393439.roa (hash: obVLbFBlD1kxbpny0GXq8wk0hN/KhjWe7WeqtCHWKwc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.crl rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 23:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:cc:56:9c:e5:4a:41:8d:a9:4f:40:5e:be:42:0a:20:c1:57:8c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EE45FF4E73BCB7FEE37731DE1088660B5851F8 Validity Not Before: Nov 2 21:03:58 2025 GMT Not After : Nov 3 23:56:58 2025 GMT Subject: CN=D815F2D7359E7254107ABB0FA8F4F17F9607727F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:55:eb:5d:1e:2d:52:26:b0:20:2d:6e:3e:1d: c8:eb:b4:d1:7e:22:e3:70:89:04:df:3d:3b:b8:15: 49:2d:87:44:4d:ee:36:78:06:5f:94:d8:bb:24:f8: 87:70:50:7d:f3:1f:d9:8c:7f:45:06:4d:03:d1:30: 6c:d5:2d:f9:96:cb:a2:c1:be:a8:3c:69:3e:65:4e: be:2b:9e:67:63:74:26:25:4b:fd:ec:84:81:a1:f9: a4:ed:f1:8b:e2:21:10:1d:da:8d:2e:7e:f1:d5:3b: 98:ae:98:95:a5:17:68:74:be:a1:95:eb:f8:4c:2e: f4:8b:03:54:2d:18:c5:71:b9:d9:63:5a:6e:c9:5f: 3e:74:f8:79:3a:d2:ec:74:0e:5d:77:9a:2c:93:ae: a1:96:f7:0e:32:e1:82:2c:fa:35:88:c8:b7:9b:6f: 8c:b9:e4:c9:89:55:71:39:4f:fe:c2:eb:a6:11:61: 34:61:11:14:80:ec:51:fe:1d:52:50:bf:1a:0e:38: 93:26:51:fe:3e:fe:16:9a:b5:7d:58:4e:12:ef:27: 55:d8:8b:f7:9e:8a:11:c0:88:e2:dd:1a:8f:80:85: 24:f6:78:a1:36:a7:a2:d3:4a:c1:95:32:ab:01:6c: 54:2d:b3:a7:46:85:c5:6d:5e:71:b7:1f:1c:fc:e4: 3e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:15:F2:D7:35:9E:72:54:10:7A:BB:0F:A8:F4:F1:7F:96:07:72:7F X509v3 Authority Key Identifier: keyid:64:EE:45:FF:4E:73:BC:B7:FE:E3:77:31:DE:10:88:66:0B:58:51:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:72:94:ed:bd:0f:71:71:7c:8b:3c:01:72:38:d5:4a:3f:dd: be:9e:54:ba:d7:f6:cd:43:b6:f9:9b:40:50:44:90:32:1a:40: 25:42:15:a5:39:20:15:9b:07:51:2d:de:7f:da:cf:fc:a9:9b: e0:84:5f:98:28:03:61:c8:c1:de:49:bb:34:b0:29:9c:46:97: 59:3c:4a:eb:1b:0b:5f:63:9c:2c:4a:b0:17:55:af:83:4a:62: 6f:13:ed:c8:18:1c:54:34:e5:20:8b:2c:f0:88:32:86:fd:e0: 39:74:c5:79:24:6d:af:f4:02:67:50:67:90:aa:3c:65:6c:85: 4d:11:54:a8:e6:00:c8:ec:7a:58:9d:b6:cb:4d:19:ad:6b:e2: 38:f9:6a:d3:23:1d:81:d2:55:a4:79:47:2d:81:da:4d:51:99: 75:fd:24:0c:64:fa:1a:6a:4e:21:82:2f:97:93:e1:61:e1:4e: 01:70:10:1b:1b:46:8a:9c:8b:b2:8c:b1:4b:c2:7f:64:ca:52: 1e:22:bd:42:72:6b:82:b8:a3:66:47:a2:6b:57:c1:f1:bb:3a: 7c:85:99:a1:03:9a:30:60:02:50:02:a7:1f:1b:e5:3a:7b:c9: 32:04:d2:8c:db:fc:38:51:6c:76:ec:3a:b3:2f:b4:fe:75:a3: 0f:00:b7:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUG8xWnOVKQY2pT0BevkIKIMFXjOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFRTQ1RkY0RTczQkNCN0ZFRTM3NzMxREUxMDg4NjYw QjU4NTFGODAeFw0yNTExMDIyMTAzNThaFw0yNTExMDMyMzU2NThaMDMxMTAvBgNV BAMTKEQ4MTVGMkQ3MzU5RTcyNTQxMDdBQkIwRkE4RjRGMTdGOTYwNzcyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVVetdHi1SJrAgLW4+HcjrtNF+ IuNwiQTfPTu4FUkth0RN7jZ4Bl+U2Lsk+IdwUH3zH9mMf0UGTQPRMGzVLfmWy6LB vqg8aT5lTr4rnmdjdCYlS/3shIGh+aTt8YviIRAd2o0ufvHVO5iumJWlF2h0vqGV 6/hMLvSLA1QtGMVxudljWm7JXz50+Hk60ux0Dl13miyTrqGW9w4y4YIs+jWIyLeb b4y55MmJVXE5T/7C66YRYTRhERSA7FH+HVJQvxoOOJMmUf4+/haatX1YThLvJ1XY i/eeihHAiOLdGo+AhST2eKE2p6LTSsGVMqsBbFQts6dGhcVtXnG3Hxz85D5DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2BXy1zWeclQQersPqPTxf5YHcn8wHwYDVR0j BBgwFoAUZO5F/05zvLf+43cx3hCIZgtYUfgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVA1Q1Y5QjZOOHozUFVXc0NzU0VqTTdGVjlvUm92RmN5cndtYUJqbXNV SkgvMC82NEVFNDVGRjRFNzNCQ0I3RkVFMzc3MzFERTEwODg2NjBCNTg1MUY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0RUU0NUZGNEU3M0JDQjdG RUUzNzczMURFMTA4ODY2MEI1ODUxRjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVA1Q1Y5QjZOOHozUFVXc0NzU0VqTTdGVjlvUm92RmN5cndtYUJqbXNVSkgvMC82 NEVFNDVGRjRFNzNCQ0I3RkVFMzc3MzFERTEwODg2NjBCNTg1MUY4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjHKU7b0PcXF8izwBcjjVSj/dvp5Uutf2zUO2+ZtAUESQMhpAJUIVpTkgFZsH US3ef9rP/Kmb4IRfmCgDYcjB3km7NLApnEaXWTxK6xsLX2OcLEqwF1Wvg0pibxPt yBgcVDTlIIss8Igyhv3gOXTFeSRtr/QCZ1BnkKo8ZWyFTRFUqOYAyOx6WJ22y00Z rWviOPlq0yMdgdJVpHlHLYHaTVGZdf0kDGT6GmpOIYIvl5PhYeFOAXAQGxtGipyL soyxS8J/ZMpSHiK9QnJrgrijZkeia1fB8bs6fIWZoQOaMGACUAKnHxvlOnvJMgTS jNv8OFFsduw6sy+0/nWjDwC3Xg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:05:44 2025 by rpki-client