$ rpki-client -vvf rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft File: 0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft (raw, json) Hash identifier: ncWMea5BH/IoNvt523qQ9usRz5TODC5YBAvoFKJTnvg= Subject key identifier: 1C:AD:12:30:F5:D7:87:F9:28:35:94:57:7F:B3:8C:D1:85:B5:94:1A Authority key identifier: 0E:F7:13:1E:83:15:CF:BC:2A:0C:8E:B2:A6:84:48:B4:0D:F9:DD:EB Certificate issuer: /CN=0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB Certificate serial: 6691FF0DEA13C554887CACF649C0303822BA1577 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft Manifest number: 02FD Signing time: Mon 03 Nov 2025 07:33:00 +0000 Manifest this update: Mon 03 Nov 2025 07:28:00 +0000 Manifest next update: Tue 04 Nov 2025 10:47:00 +0000 Files and hashes: 1: 0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl (hash: 7zisT5vFUfyyWXy/PSTevN6gS/ePzeTglXLrw0Qqxto=) 2: 3138312e3233322e3235302e302f32332d3234203d3e20323731353431.roa (hash: 4IIa4k60q+t0mOSWWa3xktMr2fL1MMbexf0+Pk1A8dU=) 3: 323830313a38303a336537303a3a2f34372d3437203d3e20323731353431.roa (hash: gQvqAbK6gQBmP0J6nHXKQ8gCtZEaiIVsEdHKjqQvV/Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:91:ff:0d:ea:13:c5:54:88:7c:ac:f6:49:c0:30:38:22:ba:15:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB Validity Not Before: Nov 3 07:28:00 2025 GMT Not After : Nov 4 10:47:00 2025 GMT Subject: CN=1CAD1230F5D787F9283594577FB38CD185B5941A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:74:e9:74:b2:70:dd:ad:37:59:a2:0b:97:79: 98:e4:40:03:51:45:00:20:af:8f:32:8e:5e:0b:b9: 97:db:ce:94:de:1b:de:cc:ed:50:40:5d:1b:01:4f: 17:8d:42:cd:53:b2:1c:fe:2d:5e:c5:39:66:ce:2c: d1:80:be:af:aa:86:5f:39:4c:e2:6a:43:d9:ec:c7: 94:9d:0c:95:58:f8:e9:87:35:7e:ec:6f:19:f9:2a: 54:a0:5f:bb:27:66:3b:f4:cb:f1:d1:cc:39:ee:9b: 1e:b9:5f:33:73:db:72:5c:29:f7:3d:e5:95:10:04: 26:cd:64:e9:b8:04:34:be:35:2c:65:d8:4c:04:bb: 02:1a:7c:db:a8:d4:2c:70:73:be:56:01:c4:d1:6a: b2:a7:15:d6:05:a3:70:10:f8:8b:39:81:ef:76:4f: 28:2b:d4:0d:96:2a:03:4b:29:13:61:3e:1b:13:81: 3b:8f:10:66:54:1b:96:35:80:7c:a6:40:94:da:8c: b8:7b:75:e6:ea:50:75:5a:8b:04:11:a7:b3:3e:f0: 6e:35:70:97:a4:f3:65:b4:3d:cb:83:d4:b9:b9:5a: d4:68:57:54:f3:6c:e9:bd:c8:52:ff:80:8c:e5:d7: b3:98:44:8f:4c:16:f1:a7:f1:52:55:30:c6:9b:84: 71:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AD:12:30:F5:D7:87:F9:28:35:94:57:7F:B3:8C:D1:85:B5:94:1A X509v3 Authority Key Identifier: keyid:0E:F7:13:1E:83:15:CF:BC:2A:0C:8E:B2:A6:84:48:B4:0D:F9:DD:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:10:c7:5b:da:eb:9a:78:44:d1:da:7f:ab:1a:de:bf:f7:c7: 74:0f:3c:cb:03:17:4b:25:b0:41:50:45:42:51:4f:bd:36:a1: f4:90:11:27:e5:31:5f:d1:e0:25:76:55:5e:75:a4:b8:6a:77: 9a:d8:52:05:11:3a:df:7d:dd:90:6a:0d:92:d0:5c:51:0f:b1: d6:a1:e0:67:5f:f3:30:bd:66:56:fb:7e:26:1d:88:f7:c3:86: d4:59:af:3d:92:4c:af:84:d9:8d:3c:46:18:f4:06:e9:9b:86: b3:39:98:b5:6b:b6:11:64:0e:8e:bb:05:7c:9d:d6:cc:00:bb: 9b:66:eb:2b:66:85:d0:68:71:82:87:85:36:0d:69:bc:c3:92: 74:5f:ed:8a:74:4d:bb:fc:5f:5d:3b:b1:fe:8d:06:e0:db:bb: 3a:fb:bb:d3:06:da:54:cf:73:ae:a3:1b:56:b9:c4:81:5e:23: 92:2f:77:b7:1f:37:5e:2a:39:92:29:05:78:3f:16:f0:e7:d5: cf:b1:ed:48:2a:9e:e0:1e:6a:ea:9f:a1:df:a9:87:62:cc:bf: 38:2d:b8:30:06:b0:c8:1a:de:da:f0:03:a4:d9:05:e2:7b:34: b6:73:64:50:19:c9:f2:e2:a9:70:f4:d3:a8:5f:da:9c:d6:92: ad:c4:e5:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZpH/DeoTxVSIfKz2ScAwOCK6FXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVGNzEzMUU4MzE1Q0ZCQzJBMEM4RUIyQTY4NDQ4QjQw REY5RERFQjAeFw0yNTExMDMwNzI4MDBaFw0yNTExMDQxMDQ3MDBaMDMxMTAvBgNV BAMTKDFDQUQxMjMwRjVENzg3RjkyODM1OTQ1NzdGQjM4Q0QxODVCNTk0MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZdOl0snDdrTdZoguXeZjkQANR RQAgr48yjl4LuZfbzpTeG97M7VBAXRsBTxeNQs1Tshz+LV7FOWbOLNGAvq+qhl85 TOJqQ9nsx5SdDJVY+OmHNX7sbxn5KlSgX7snZjv0y/HRzDnumx65XzNz23JcKfc9 5ZUQBCbNZOm4BDS+NSxl2EwEuwIafNuo1Cxwc75WAcTRarKnFdYFo3AQ+Is5ge92 Tygr1A2WKgNLKRNhPhsTgTuPEGZUG5Y1gHymQJTajLh7debqUHVaiwQRp7M+8G41 cJek82W0PcuD1Lm5WtRoV1TzbOm9yFL/gIzl17OYRI9MFvGn8VJVMMabhHHtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHK0SMPXXh/koNZRXf7OM0YW1lBowHwYDVR0j BBgwFoAUDvcTHoMVz7wqDI6ypoRItA353eswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmE1MThTbjVDWWh3SnZFaWh5dHhDdkplUHU2d3k0eUhFWDZlZkx5aUFY RkEvMS8wRUY3MTMxRTgzMTVDRkJDMkEwQzhFQjJBNjg0NDhCNDBERjlEREVCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFRjcxMzFFODMxNUNGQkMy QTBDOEVCMkE2ODQ0OEI0MERGOURERUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmE1MThTbjVDWWh3SnZFaWh5dHhDdkplUHU2d3k0eUhFWDZlZkx5aUFYRkEvMS8w RUY3MTMxRTgzMTVDRkJDMkEwQzhFQjJBNjg0NDhCNDBERjlEREVCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMxDHW9rrmnhE0dp/qxrev/fHdA88ywMXSyWwQVBFQlFPvTah9JARJ+UxX9Hg JXZVXnWkuGp3mthSBRE6333dkGoNktBcUQ+x1qHgZ1/zML1mVvt+Jh2I98OG1Fmv PZJMr4TZjTxGGPQG6ZuGszmYtWu2EWQOjrsFfJ3WzAC7m2brK2aF0GhxgoeFNg1p vMOSdF/tinRNu/xfXTux/o0G4Nu7Ovu70wbaVM9zrqMbVrnEgV4jki93tx83Xio5 kikFeD8W8OfVz7HtSCqe4B5q6p+h36mHYsy/OC24MAawyBre2vADpNkF4ns0tnNk UBnJ8uKpcPTTqF/anNaSrcTlsw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:57 2025 by rpki-client