$ rpki-client -vvf rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft File: D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft (raw, json) Hash identifier: 6rn5ZCrk6fdManmQ8ZdE8SEyKjsZiPFZsPlBk/73lkA= Subject key identifier: 30:75:06:65:96:0A:3B:C7:1D:5F:11:16:B5:B8:73:15:90:E5:F6:9B Authority key identifier: D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2 Certificate issuer: /CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2 Certificate serial: 46DEE2AF7BBB39FC60107195B33B9692E979E580 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft Manifest number: A4 Signing time: Mon 03 Nov 2025 14:53:16 +0000 Manifest this update: Mon 03 Nov 2025 14:48:16 +0000 Manifest next update: Tue 04 Nov 2025 15:07:16 +0000 Files and hashes: 1: 323830343a386663343a3a2f33322d3438203d3e20323733353130.roa (hash: DETwoG/6qi/ZI8aHY1Z5rVUEPEzo75t1n/OyDZwKtCg=) 2: D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl (hash: AmUHKvmIKsNIacv7FtvBDHf1fhgnL62MEKbcHmZRglk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 15:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:de:e2:af:7b:bb:39:fc:60:10:71:95:b3:3b:96:92:e9:79:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2 Validity Not Before: Nov 3 14:48:16 2025 GMT Not After : Nov 4 15:07:16 2025 GMT Subject: CN=30750665960A3BC71D5F1116B5B8731590E5F69B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:09:71:c8:29:9a:c7:f2:3c:04:be:49:e3:59: 1f:38:57:b8:74:01:7b:3f:bd:d0:94:11:2a:db:12: 37:08:27:d3:ca:3f:c9:fc:2e:49:7d:92:7b:9e:35: f8:86:ab:a2:25:26:2a:e7:89:9d:e2:bc:e7:08:41: 87:d1:92:94:18:6d:6b:c9:a9:10:d2:9f:60:5c:12: f7:41:86:72:e0:fb:fe:09:36:17:28:aa:bd:50:c1: a5:bb:53:04:05:5f:89:1d:e2:6d:31:6f:dc:f7:9e: 4b:5f:75:af:6a:5a:47:cc:7e:2d:79:13:fb:db:b2: de:af:d8:5d:da:c1:8d:05:fa:08:26:60:78:fd:b4: 0c:7e:01:bf:ae:b5:11:be:40:11:7a:95:2e:0b:a4: 82:db:a8:3d:c8:e0:cb:82:cf:22:32:95:d4:8a:c7: 88:17:43:fe:e1:fb:c2:24:49:71:03:b7:0a:1c:23: 52:ef:f8:58:a1:b2:6c:6c:86:09:c9:e2:d6:52:d7: ab:80:06:e3:d9:36:8b:06:e0:7e:c7:53:fc:0d:34: 83:d0:11:be:f2:c2:77:10:ce:da:36:ed:51:f8:03: ed:58:42:e6:65:a0:e8:2f:d7:bc:3b:fe:69:3b:17: 1b:f7:ca:5d:a1:a7:58:83:12:6e:17:fd:32:c8:e3: 8b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:75:06:65:96:0A:3B:C7:1D:5F:11:16:B5:B8:73:15:90:E5:F6:9B X509v3 Authority Key Identifier: keyid:D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:7e:41:09:fc:61:e0:75:0f:71:15:ef:1c:06:5e:f3:f6:b1: e3:fb:a6:74:5c:7f:a9:15:98:de:ce:38:3e:a8:f8:28:a9:cb: a2:dd:c7:bf:ed:8a:03:6a:83:0a:33:2f:c7:b0:0d:2e:33:58: bc:a1:fd:a5:76:cd:1e:a4:a1:9d:45:0e:4d:de:c4:16:59:a2: 8b:64:31:d6:3a:be:30:62:a1:c4:2f:c5:03:8b:fe:24:e2:2e: b8:1b:c9:84:c2:c0:34:be:18:01:d0:2b:4f:17:1b:43:6f:47: 4f:c8:ee:16:65:0d:06:d8:a8:87:61:c1:22:ea:12:08:c9:17: 08:85:bb:cf:67:a1:93:82:5e:a9:b7:be:c7:23:29:f4:8d:bf: 40:26:a1:a4:45:3e:dd:9b:35:3e:72:a2:ce:60:26:4f:b8:85: e6:a9:06:cd:35:83:32:5c:b1:be:13:b1:8c:e5:a2:e3:5e:1c: dd:f2:e4:42:c5:3c:07:aa:3d:6f:6a:2f:05:93:e2:8c:3a:9c: b9:b0:f3:67:1d:32:e6:19:37:64:75:2c:d2:4b:1a:3d:f1:db: ea:2a:40:69:fa:49:b0:24:4c:51:6e:e2:36:5e:bd:04:29:b3: 76:06:29:de:52:e6:3d:49:9f:b9:0f:7b:88:2c:1d:0c:21:7a: eb:07:26:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURt7ir3u7OfxgEHGVszuWkul55YAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDNDMxRDE3QjgzMDczNUZFQjI2NDA5QzY5RTNFRjRG RTYxREJDMjAeFw0yNTExMDMxNDQ4MTZaFw0yNTExMDQxNTA3MTZaMDMxMTAvBgNV BAMTKDMwNzUwNjY1OTYwQTNCQzcxRDVGMTExNkI1Qjg3MzE1OTBFNUY2OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDCXHIKZrH8jwEvknjWR84V7h0 AXs/vdCUESrbEjcIJ9PKP8n8Lkl9knueNfiGq6IlJirniZ3ivOcIQYfRkpQYbWvJ qRDSn2BcEvdBhnLg+/4JNhcoqr1QwaW7UwQFX4kd4m0xb9z3nktfda9qWkfMfi15 E/vbst6v2F3awY0F+ggmYHj9tAx+Ab+utRG+QBF6lS4LpILbqD3I4MuCzyIyldSK x4gXQ/7h+8IkSXEDtwocI1Lv+FihsmxshgnJ4tZS16uABuPZNosG4H7HU/wNNIPQ Eb7ywncQzto27VH4A+1YQuZloOgv17w7/mk7Fxv3yl2hp1iDEm4X/TLI44sfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMHUGZZYKO8cdXxEWtbhzFZDl9pswHwYDVR0j BBgwFoAU1cQx0XuDBzX+smQJxp4+9P5h28IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVNxeEY5b1ZHeHNjVWJzQ0haSm9ZOFRQeEc0M1N2OFBwa1VRbmJyMzVw TUQvMC9ENUM0MzFEMTdCODMwNzM1RkVCMjY0MDlDNjlFM0VGNEZFNjFEQkMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1QzQzMUQxN0I4MzA3MzVG RUIyNjQwOUM2OUUzRUY0RkU2MURCQzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVNxeEY5b1ZHeHNjVWJzQ0haSm9ZOFRQeEc0M1N2OFBwa1VRbmJyMzVwTUQvMC9E NUM0MzFEMTdCODMwNzM1RkVCMjY0MDlDNjlFM0VGNEZFNjFEQkMyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMH5BCfxh4HUPcRXvHAZe8/ax4/umdFx/qRWY3s44Pqj4KKnLot3Hv+2KA2qD CjMvx7ANLjNYvKH9pXbNHqShnUUOTd7EFlmii2Qx1jq+MGKhxC/FA4v+JOIuuBvJ hMLANL4YAdArTxcbQ29HT8juFmUNBtioh2HBIuoSCMkXCIW7z2ehk4Jeqbe+xyMp 9I2/QCahpEU+3Zs1PnKizmAmT7iF5qkGzTWDMlyxvhOxjOWi414c3fLkQsU8B6o9 b2ovBZPijDqcubDzZx0y5hk3ZHUs0ksaPfHb6ipAafpJsCRMUW7iNl69BCmzdgYp 3lLmPUmfuQ97iCwdDCF66wcmwQ== -----END CERTIFICATE-----Generated at Tue Nov 4 06:21:16 2025 by rpki-client