$ rpki-client -vvf rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft File: 0D544ED42C6259C03F729BAE35330B8BC76BC251.mft (raw, json) Hash identifier: tVXME73LmKYZaCw2NRDLokGv7CAz5cUoB5IIWfcPfWM= Subject key identifier: 53:6F:C0:46:A5:51:6D:B6:DF:C0:9E:91:3D:36:34:47:7E:60:75:AD Authority key identifier: 0D:54:4E:D4:2C:62:59:C0:3F:72:9B:AE:35:33:0B:8B:C7:6B:C2:51 Certificate issuer: /CN=0D544ED42C6259C03F729BAE35330B8BC76BC251 Certificate serial: 0695F896962CB7958EC9A9E1F76A050CB7B64A6E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer Subject info access: rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft Manifest number: 01E5 Signing time: Mon 03 Nov 2025 18:30:41 +0000 Manifest this update: Mon 03 Nov 2025 18:25:41 +0000 Manifest next update: Tue 04 Nov 2025 20:14:41 +0000 Files and hashes: 1: 3137372e3132392e36362e302f32332d3234203d3e20323632333839.roa (hash: KsWHaJ7vdXHcYweiBw7WF5loPstR/Hj2nfarSdw48sQ=) 2: 0D544ED42C6259C03F729BAE35330B8BC76BC251.crl (hash: iF3RZWEkz2UK1LztJifN2e5P0J93YuM0jCkYy95ECYM=) 3: 3137372e3132392e36342e302f32342d3234203d3e20323732373133.roa (hash: ge+yYFJNirKnVCEbRb4Q5GE2Vr5gFCwDtAoAQwvImVM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.crl rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 20:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:95:f8:96:96:2c:b7:95:8e:c9:a9:e1:f7:6a:05:0c:b7:b6:4a:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D544ED42C6259C03F729BAE35330B8BC76BC251 Validity Not Before: Nov 3 18:25:41 2025 GMT Not After : Nov 4 20:14:41 2025 GMT Subject: CN=536FC046A5516DB6DFC09E913D3634477E6075AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c2:ee:24:95:62:ab:42:9c:8b:0e:42:d1:b7: 52:e4:b4:0b:0e:93:9b:be:f1:5c:4e:3c:ea:3d:3d: e6:78:0d:98:83:c3:cf:bf:33:66:bf:81:8c:7a:14: fb:0a:a4:b3:5b:bb:c8:e3:f2:59:d2:56:fa:fe:a2: d4:31:bd:0f:d7:c5:ef:59:c9:1b:01:32:c2:77:72: 17:06:27:00:48:3a:8d:69:a6:d5:67:0c:4e:4c:76: 7c:5f:78:e7:b2:17:02:f1:c0:36:ad:7e:ce:b8:09: 69:d7:a6:8a:63:04:f8:d6:a9:2c:57:1b:8c:f7:54: bd:4e:ec:69:68:fe:e5:e4:7f:f1:c4:cc:2d:9c:ba: e8:99:97:c9:5b:df:d2:12:d6:f0:a4:5a:90:05:0a: 48:00:dd:3a:66:9d:b9:38:b3:4f:60:b5:66:ed:0e: d4:09:a1:e0:a3:2b:5e:eb:55:61:2c:f3:08:e3:6c: b1:27:e0:55:0f:ed:18:f3:e8:45:a1:fe:b8:7b:67: 91:cc:b7:0f:bb:4e:91:4b:0a:b4:b3:04:fa:05:6c: 1a:8b:3b:a8:5e:06:0c:06:27:94:9e:8c:ec:91:96: 7e:3b:e7:2a:6f:28:a4:da:0f:0b:d4:88:4a:32:aa: 94:e4:19:df:98:4e:4f:54:d9:2b:39:8a:19:97:d0: 79:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6F:C0:46:A5:51:6D:B6:DF:C0:9E:91:3D:36:34:47:7E:60:75:AD X509v3 Authority Key Identifier: keyid:0D:54:4E:D4:2C:62:59:C0:3F:72:9B:AE:35:33:0B:8B:C7:6B:C2:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4a:c1:b1:1b:1a:eb:5a:71:94:f3:8e:5c:d8:69:c4:c3:9c: f6:63:a3:ea:fb:57:4e:2a:1f:01:9f:71:b6:bf:cd:99:6f:bd: c4:5c:1c:47:0d:b5:20:83:ae:f7:c8:00:99:75:52:f3:96:76: d8:b5:86:ba:74:14:f6:2b:50:55:e2:f1:fd:47:36:44:05:ef: 69:49:f6:88:be:8d:9f:ab:36:49:97:9b:5b:99:81:1f:3c:1d: 8a:c4:f6:68:a7:3a:0b:fb:28:71:fe:2b:f7:a6:06:ca:83:0f: bb:4a:ca:4e:03:1b:4e:81:89:1b:08:c0:0f:92:57:66:c4:85: 91:f7:9e:2e:32:5e:05:c1:37:d3:58:f0:7a:d0:68:9f:c3:59: bb:81:91:3d:c1:8e:a5:08:80:aa:f1:04:dd:24:bc:02:5a:38: f6:34:4a:13:53:1f:d5:d1:2c:c0:71:8d:e5:22:bc:ec:81:78: 08:46:75:e4:f7:16:f5:8b:54:3f:e9:c5:07:94:c7:ac:20:69: 4b:da:da:95:d9:4b:4e:eb:71:9f:70:72:a8:cc:1c:81:dd:4f: 9c:59:a5:82:3f:ba:96:fb:df:b2:67:67:7f:22:62:e9:e9:04: 9f:dd:d1:d8:c8:d5:d6:e9:db:ab:64:7c:57:9f:78:73:63:75: 0f:ed:fa:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBpX4lpYst5WOyanh92oFDLe2Sm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ1NDRFRDQyQzYyNTlDMDNGNzI5QkFFMzUzMzBCOEJD NzZCQzI1MTAeFw0yNTExMDMxODI1NDFaFw0yNTExMDQyMDE0NDFaMDMxMTAvBgNV BAMTKDUzNkZDMDQ2QTU1MTZEQjZERkMwOUU5MTNEMzYzNDQ3N0U2MDc1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4wu4klWKrQpyLDkLRt1LktAsO k5u+8VxOPOo9PeZ4DZiDw8+/M2a/gYx6FPsKpLNbu8jj8lnSVvr+otQxvQ/Xxe9Z yRsBMsJ3chcGJwBIOo1pptVnDE5MdnxfeOeyFwLxwDatfs64CWnXpopjBPjWqSxX G4z3VL1O7Glo/uXkf/HEzC2cuuiZl8lb39IS1vCkWpAFCkgA3Tpmnbk4s09gtWbt DtQJoeCjK17rVWEs8wjjbLEn4FUP7Rjz6EWh/rh7Z5HMtw+7TpFLCrSzBPoFbBqL O6heBgwGJ5SejOyRln475ypvKKTaDwvUiEoyqpTkGd+YTk9U2Ss5ihmX0Hn5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUU2/ARqVRbbbfwJ6RPTY0R35gda0wHwYDVR0j BBgwFoAUDVRO1CxiWcA/cpuuNTMLi8drwlEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUVXMnFhenY1RlFNcjNhaFY1cGF4aXlXaHNUQzF6OVQyeWtMNDRWOUxY cHkvMC8wRDU0NEVENDJDNjI1OUMwM0Y3MjlCQUUzNTMzMEI4QkM3NkJDMjUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENTQ0RUQ0MkM2MjU5QzAz RjcyOUJBRTM1MzMwQjhCQzc2QkMyNTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUVXMnFhenY1RlFNcjNhaFY1cGF4aXlXaHNUQzF6OVQyeWtMNDRWOUxYcHkvMC8w RDU0NEVENDJDNjI1OUMwM0Y3MjlCQUUzNTMzMEI4QkM3NkJDMjUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACkrBsRsa61pxlPOOXNhpxMOc9mOj6vtXTiofAZ9xtr/NmW+9xFwcRw21IIOu 98gAmXVS85Z22LWGunQU9itQVeLx/Uc2RAXvaUn2iL6Nn6s2SZebW5mBHzwdisT2 aKc6C/socf4r96YGyoMPu0rKTgMbToGJGwjAD5JXZsSFkfeeLjJeBcE301jwetBo n8NZu4GRPcGOpQiAqvEE3SS8Alo49jRKE1Mf1dEswHGN5SK87IF4CEZ15PcW9YtU P+nFB5THrCBpS9raldlLTutxn3ByqMwcgd1PnFmlgj+6lvvfsmdnfyJi6ekEn93R 2MjV1unbq2R8V594c2N1D+36Rg== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:59 2025 by rpki-client