$ rpki-client -vvf rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft File: 53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft (raw, json) Hash identifier: ztG4JiikVkkWZDVCi74JUi/6JthgbmBF4k84TuK9o4g= Subject key identifier: 43:D0:3F:46:6A:CE:D5:17:73:EB:A9:24:16:2E:B3:A8:36:01:61:F4 Authority key identifier: 53:EC:D4:D1:D2:93:60:3C:EC:43:C0:FB:8C:D7:8D:F9:CF:24:11:AA Certificate issuer: /CN=53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA Certificate serial: 3DC710D4E7AB4DE4FC6E33AC93C9D6EAE47E2C2E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft Manifest number: 02E2 Signing time: Sun 02 Nov 2025 19:17:29 +0000 Manifest this update: Sun 02 Nov 2025 19:12:29 +0000 Manifest next update: Mon 03 Nov 2025 22:52:29 +0000 Files and hashes: 1: 323830343a333535303a3a2f33322d3336203d3e20323636323830.roa (hash: +nL7ybLpICw7PZ+2W5pi76/oLneSgE73RRDZtIzKVsE=) 2: 3137302e37382e3232382e302f32322d3234203d3e20323636323830.roa (hash: jSsiPpdfMJb1jXwIKkDoLy57dvL+Hy33DK8ZFCdBE1w=) 3: 323830343a333535303a653030303a3a2f33362d3438203d3e20323636323830.roa (hash: c7TzAQ1qYxjPFqrQI6yEYE48I0jeUYIK0uevUAVJrM8=) 4: 53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl (hash: 11wIlmLaWUV7QO9YGmYmYXKN1tB9uWOwb3zW/xvF6Wk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 22:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c7:10:d4:e7:ab:4d:e4:fc:6e:33:ac:93:c9:d6:ea:e4:7e:2c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA Validity Not Before: Nov 2 19:12:29 2025 GMT Not After : Nov 3 22:52:29 2025 GMT Subject: CN=43D03F466ACED51773EBA924162EB3A8360161F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e1:bb:7f:5f:04:a7:1a:bf:6b:e7:f3:f2:02: 26:92:8b:fd:37:40:07:ca:ba:87:75:0f:28:84:58: 7f:ba:21:fe:4b:5c:18:11:98:f0:92:9d:1b:c0:64: fc:83:52:c5:29:64:f1:d1:b5:ad:62:2b:4e:cc:ff: 5d:5d:d7:f3:9d:96:53:a2:e0:44:b9:83:18:6d:44: 23:84:49:f9:67:70:34:03:ef:6c:2f:e4:1d:f3:94: ea:d3:ac:85:c1:8a:ca:06:00:a9:e2:91:66:e6:4d: ea:bc:37:37:6a:64:e0:c4:f6:f7:6a:25:80:66:cb: 2f:ed:46:c6:ee:6a:28:08:f6:30:58:c7:25:e1:b5: 38:c8:38:cc:64:e6:be:9e:e8:9f:3a:a1:3c:03:b5: 08:9c:e4:e0:49:72:7e:72:a2:92:3f:2a:72:dc:3c: d9:d8:ee:1f:1c:21:e0:57:d0:92:ae:c3:1c:b8:f4: ff:4f:a1:9e:21:42:f6:b6:3c:ff:07:9d:c4:1e:df: c8:37:58:48:cf:83:11:3d:cd:c3:6b:1c:96:07:37: 17:e7:c9:96:df:bb:c0:4b:51:eb:59:c5:a2:49:ec: a8:88:4e:4c:69:73:8a:9c:d4:6d:03:b1:df:bc:6f: 9b:8d:cf:9a:e7:37:c1:d2:10:07:61:31:80:df:94: 92:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D0:3F:46:6A:CE:D5:17:73:EB:A9:24:16:2E:B3:A8:36:01:61:F4 X509v3 Authority Key Identifier: keyid:53:EC:D4:D1:D2:93:60:3C:EC:43:C0:FB:8C:D7:8D:F9:CF:24:11:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:90:02:70:60:e9:c3:e9:c8:5e:5c:3c:4d:e0:8b:7b:09:e3: e9:19:13:fc:47:d2:45:96:48:b0:60:94:91:27:08:59:52:80: ad:b5:d4:8c:bf:4c:c4:0f:bb:7f:8b:b6:6a:a9:5c:ae:dc:ec: d3:d4:d9:99:1a:54:7f:d9:98:94:13:50:b6:b4:4a:dd:84:6d: 60:e8:f0:bb:4f:64:43:7e:22:fc:fb:ed:e8:b3:db:15:a5:91: bb:c6:d6:18:26:8c:6c:2f:ce:c5:23:de:ab:48:94:b8:b2:0f: 62:10:79:81:4f:17:de:ce:24:7a:51:42:b1:88:b9:5f:04:65: b3:c5:62:4d:4c:eb:77:ce:7b:ef:67:c5:49:31:85:6f:ce:ee: 2b:03:5b:80:98:55:a4:82:79:87:d5:7d:82:58:79:ea:26:e2: e1:a6:5c:35:e0:f9:23:a4:e4:5b:c5:f3:43:97:26:eb:86:5c: 60:91:73:41:5a:fa:45:fa:a8:76:1b:65:d9:6a:9a:25:88:26: e1:e6:08:d9:78:ae:ee:ee:a8:67:63:37:c0:83:2d:6d:a8:9f: 9a:3a:85:e7:0b:9e:96:9d:0b:94:d4:f4:a5:47:f2:da:c9:ee: 37:a1:79:44:f6:0e:e2:c4:fb:b4:91:f6:59:14:ab:ac:6a:7b: c1:67:8a:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPccQ1OerTeT8bjOsk8nW6uR+LC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNFQ0Q0RDFEMjkzNjAzQ0VDNDNDMEZCOENENzhERjlD RjI0MTFBQTAeFw0yNTExMDIxOTEyMjlaFw0yNTExMDMyMjUyMjlaMDMxMTAvBgNV BAMTKDQzRDAzRjQ2NkFDRUQ1MTc3M0VCQTkyNDE2MkVCM0E4MzYwMTYxRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk4bt/XwSnGr9r5/PyAiaSi/03 QAfKuod1DyiEWH+6If5LXBgRmPCSnRvAZPyDUsUpZPHRta1iK07M/11d1/OdllOi 4ES5gxhtRCOESflncDQD72wv5B3zlOrTrIXBisoGAKnikWbmTeq8NzdqZODE9vdq JYBmyy/tRsbuaigI9jBYxyXhtTjIOMxk5r6e6J86oTwDtQic5OBJcn5yopI/KnLc PNnY7h8cIeBX0JKuwxy49P9PoZ4hQva2PP8HncQe38g3WEjPgxE9zcNrHJYHNxfn yZbfu8BLUetZxaJJ7KiITkxpc4qc1G0Dsd+8b5uNz5rnN8HSEAdhMYDflJKdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQ9A/RmrO1Rdz66kkFi6zqDYBYfQwHwYDVR0j BBgwFoAUU+zU0dKTYDzsQ8D7jNeN+c8kEaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVZCSDZHWWdLRlM3a0RoRUhGN2FZc29GV3VQTmpqNG1SR0FSOHBEa2l3 NDIvMC81M0VDRDREMUQyOTM2MDNDRUM0M0MwRkI4Q0Q3OERGOUNGMjQxMUFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzRUNENEQxRDI5MzYwM0NF QzQzQzBGQjhDRDc4REY5Q0YyNDExQUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVZCSDZHWWdLRlM3a0RoRUhGN2FZc29GV3VQTmpqNG1SR0FSOHBEa2l3NDIvMC81 M0VDRDREMUQyOTM2MDNDRUM0M0MwRkI4Q0Q3OERGOUNGMjQxMUFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs5ACcGDpw+nIXlw8TeCLewnj6RkT/EfSRZZIsGCUkScIWVKArbXUjL9MxA+7 f4u2aqlcrtzs09TZmRpUf9mYlBNQtrRK3YRtYOjwu09kQ34i/Pvt6LPbFaWRu8bW GCaMbC/OxSPeq0iUuLIPYhB5gU8X3s4kelFCsYi5XwRls8ViTUzrd85772fFSTGF b87uKwNbgJhVpIJ5h9V9glh56ibi4aZcNeD5I6TkW8XzQ5cm64ZcYJFzQVr6Rfqo dhtl2WqaJYgm4eYI2Xiu7u6oZ2M3wIMtbaifmjqF5wuelp0LlNT0pUfy2snuN6F5 RPYO4sT7tJH2WRSrrGp7wWeKYA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:12:26 2025 by rpki-client