$ rpki-client -vvf rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft File: 5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft (raw, json) Hash identifier: nFpXwFoPJ3VcH8r4ZaX+4Um01VHkuUNUb9vbJhzDH1o= Subject key identifier: 8B:15:07:AB:B6:59:24:47:72:3F:BA:D5:CC:47:58:BC:16:EF:C5:83 Authority key identifier: 5D:43:AF:2F:C3:A0:BD:09:5F:D0:62:62:5C:5E:CE:34:B8:4A:95:23 Certificate issuer: /CN=5D43AF2FC3A0BD095FD062625C5ECE34B84A9523 Certificate serial: 11CBFCB675D7124A7EE3B42ADA44EC4EA4C5EC22 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer Subject info access: rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft Manifest number: 0301 Signing time: Mon 03 Nov 2025 03:25:56 +0000 Manifest this update: Mon 03 Nov 2025 03:20:56 +0000 Manifest next update: Tue 04 Nov 2025 04:47:56 +0000 Files and hashes: 1: 5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl (hash: +TAqzY2+J6Z6YXUlLIRH57xu15BUofoUQMp7g9wELag=) 2: 3137372e35322e3136382e302f32322d3232203d3e20323632343439.roa (hash: +7GsRgs7NRIZR5WPMQvqtfPP2hg4idIHIzt0q9r+wrk=) 3: 3137372e35322e3137302e302f32342d3234203d3e20323632343439.roa (hash: 7nYq6K8fdw4ZRybGXDs4Kkd0F3fRmBUFACD2hQSjlMM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 04:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:cb:fc:b6:75:d7:12:4a:7e:e3:b4:2a:da:44:ec:4e:a4:c5:ec:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D43AF2FC3A0BD095FD062625C5ECE34B84A9523 Validity Not Before: Nov 3 03:20:56 2025 GMT Not After : Nov 4 04:47:56 2025 GMT Subject: CN=8B1507ABB6592447723FBAD5CC4758BC16EFC583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:83:f8:56:00:26:a8:0e:c8:89:46:a3:8b: d0:dd:2f:e1:2c:51:d3:d9:59:d3:a7:7e:27:0a:53: cd:b0:e8:8f:0f:5e:d4:71:60:27:36:88:6e:9e:a4: d4:02:76:53:68:4e:13:c1:04:3a:94:8a:03:0a:8e: 3e:41:63:26:18:ff:3e:10:d4:c0:a1:60:3f:06:f3: 6f:48:8c:1a:a4:55:9d:16:52:6e:71:ba:06:1a:8e: ba:99:9d:b2:23:b3:17:c3:cb:9a:67:74:41:1f:26: 7d:0e:9d:a2:87:d1:67:85:3e:4d:e9:50:a9:7d:27: 0f:52:b0:4d:1e:1e:06:8f:dd:a2:e8:41:27:9d:85: c4:b0:d1:84:7a:cd:0b:04:fb:6d:9b:29:bf:53:0c: b5:7d:17:19:58:6e:03:49:93:d9:90:32:aa:60:22: 2e:1a:e8:0c:05:ba:1a:ff:a1:f1:bc:0b:20:6c:1c: 6e:35:a6:b4:66:42:91:b0:5c:07:04:a5:7d:52:47: 2b:9d:93:99:af:39:aa:fc:41:49:78:73:5f:b3:00: 8e:a5:0a:30:87:0e:81:51:c2:f6:7a:5d:aa:8f:5b: 39:96:07:b8:ba:99:51:31:a2:19:00:ef:7d:14:7c: 8b:82:7c:e6:ab:37:ad:f2:14:0d:8d:fc:c9:44:ec: 97:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:15:07:AB:B6:59:24:47:72:3F:BA:D5:CC:47:58:BC:16:EF:C5:83 X509v3 Authority Key Identifier: keyid:5D:43:AF:2F:C3:A0:BD:09:5F:D0:62:62:5C:5E:CE:34:B8:4A:95:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:83:16:ed:26:40:d0:81:89:cc:31:67:2d:fa:12:60:82:99: ad:5d:67:f6:57:ad:f3:81:52:17:bc:36:e0:ef:5b:52:57:ce: a9:d1:4f:08:22:f0:3e:fb:15:36:94:82:82:6f:4b:6b:9d:06: 42:71:ee:23:4c:7e:7b:a1:3d:79:79:eb:07:4c:94:34:fc:5f: 95:45:33:f6:35:bc:3d:49:7d:1a:91:74:f4:c4:e3:b2:b3:9b: fd:ab:82:7c:a7:17:68:7c:c7:47:44:45:65:aa:94:b3:57:59: 4d:75:12:8a:b9:4a:42:2e:d8:86:68:2c:33:f6:a8:fa:3e:11: 28:9b:a8:a7:54:db:5c:15:5e:96:51:32:91:17:42:dd:f4:34: 6c:e9:20:23:c4:65:08:c8:27:62:4b:84:d9:f2:57:60:c6:8c: 6c:7a:20:82:4f:0e:0d:ba:2b:38:f0:c5:c3:7a:ff:1a:ca:d9: 3f:7a:6b:db:ed:5c:c1:2f:4a:66:05:2d:6f:1a:fc:4f:39:79: 3c:81:f4:83:d6:b2:bb:4a:bf:8c:0d:f2:2a:75:67:c1:c1:18: fe:8b:b9:10:9f:b0:1b:d9:42:ab:35:de:91:c2:8d:b7:94:a8: f0:97:0d:f9:d1:66:3e:9f:69:58:ef:af:f5:8f:93:75:a2:ed: ff:50:d6:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEcv8tnXXEkp+47Qq2kTsTqTF7CIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ0M0FGMkZDM0EwQkQwOTVGRDA2MjYyNUM1RUNFMzRC ODRBOTUyMzAeFw0yNTExMDMwMzIwNTZaFw0yNTExMDQwNDQ3NTZaMDMxMTAvBgNV BAMTKDhCMTUwN0FCQjY1OTI0NDc3MjNGQkFENUNDNDc1OEJDMTZFRkM1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+4P4VgAmqA7IiUaji9DdL+Es UdPZWdOnficKU82w6I8PXtRxYCc2iG6epNQCdlNoThPBBDqUigMKjj5BYyYY/z4Q 1MChYD8G829IjBqkVZ0WUm5xugYajrqZnbIjsxfDy5pndEEfJn0OnaKH0WeFPk3p UKl9Jw9SsE0eHgaP3aLoQSedhcSw0YR6zQsE+22bKb9TDLV9FxlYbgNJk9mQMqpg Ii4a6AwFuhr/ofG8CyBsHG41prRmQpGwXAcEpX1SRyudk5mvOar8QUl4c1+zAI6l CjCHDoFRwvZ6XaqPWzmWB7i6mVExohkA730UfIuCfOarN63yFA2N/MlE7JfDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUixUHq7ZZJEdyP7rVzEdYvBbvxYMwHwYDVR0j BBgwFoAUXUOvL8OgvQlf0GJiXF7ONLhKlSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3NWc1huZ0dyamdaaWY0SEo3QllQMUd1anMzNURaWDZTRERqZUM1WWJR NkcvMS81RDQzQUYyRkMzQTBCRDA5NUZEMDYyNjI1QzVFQ0UzNEI4NEE5NTIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVENDNBRjJGQzNBMEJEMDk1 RkQwNjI2MjVDNUVDRTM0Qjg0QTk1MjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3NWc1huZ0dyamdaaWY0SEo3QllQMUd1anMzNURaWDZTRERqZUM1WWJRNkcvMS81 RDQzQUYyRkMzQTBCRDA5NUZEMDYyNjI1QzVFQ0UzNEI4NEE5NTIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuIMW7SZA0IGJzDFnLfoSYIKZrV1n9let84FSF7w24O9bUlfOqdFPCCLwPvsV NpSCgm9La50GQnHuI0x+e6E9eXnrB0yUNPxflUUz9jW8PUl9GpF09MTjsrOb/auC fKcXaHzHR0RFZaqUs1dZTXUSirlKQi7YhmgsM/ao+j4RKJuop1TbXBVellEykRdC 3fQ0bOkgI8RlCMgnYkuE2fJXYMaMbHoggk8ODborOPDFw3r/GsrZP3pr2+1cwS9K ZgUtbxr8Tzl5PIH0g9ayu0q/jA3yKnVnwcEY/ou5EJ+wG9lCqzXekcKNt5So8JcN +dFmPp9pWO+v9Y+TdaLt/1DWag== -----END CERTIFICATE-----Generated at Mon Nov 3 12:13:24 2025 by rpki-client