$ rpki-client -vvf rpki-repo.registro.br/repo/EJXbijYD2tnK4sYeCyNj6Rj5jAxoihd3c32q7boVFK5T/0/7D63CDAB496D7DD1258E59A5A7FDF37CE603EECA.mft File: 7D63CDAB496D7DD1258E59A5A7FDF37CE603EECA.mft (raw, json) Hash identifier: LgWYDxA+Tto84y1HWfpRKzBX/YNTDm9Lgn7+QH+eU1A= Subject key identifier: 5A:CD:AE:3B:90:9A:0A:89:6A:3C:E4:33:62:26:9A:37:C0:F2:2A:E8 Authority key identifier: 7D:63:CD:AB:49:6D:7D:D1:25:8E:59:A5:A7:FD:F3:7C:E6:03:EE:CA Certificate issuer: /CN=7D63CDAB496D7DD1258E59A5A7FDF37CE603EECA Certificate serial: 453E4D3CF6EBC2151D6C5D85F0C9039C21E67D02 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D63CDAB496D7DD1258E59A5A7FDF37CE603EECA.cer Subject info access: rsync://rpki-repo.registro.br/repo/EJXbijYD2tnK4sYeCyNj6Rj5jAxoihd3c32q7boVFK5T/0/7D63CDAB496D7DD1258E59A5A7FDF37CE603EECA.mft Manifest number: 11 Signing time: Sun 02 Nov 2025 22:11:39 +0000 Manifest this update: Sun 02 Nov 2025 22:06:39 +0000 Manifest next update: Mon 03 Nov 2025 23:16:39 +0000 Files and hashes: 1: 7D63CDAB496D7DD1258E59A5A7FDF37CE603EECA.crl (hash: h6Nf53FBnyyjia+GtggL02iX4JgJDwmtVJSjxh0HyXM=) 2: 323830343a386131383a3a2f33322d3438203d3e20323733363437.roa (hash: aQDQXlv14e7uz9fHSc4Wz3pS8dwrOYWZE7QW6hwY4OY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EJXbijYD2tnK4sYeCyNj6Rj5jAxoihd3c32q7boVFK5T/0/7D63CDAB496D7DD1258E59A5A7FDF37CE603EECA.crl rsync://rpki-repo.registro.br/repo/EJXbijYD2tnK4sYeCyNj6Rj5jAxoihd3c32q7boVFK5T/0/7D63CDAB496D7DD1258E59A5A7FDF37CE603EECA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D63CDAB496D7DD1258E59A5A7FDF37CE603EECA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 23:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3e:4d:3c:f6:eb:c2:15:1d:6c:5d:85:f0:c9:03:9c:21:e6:7d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D63CDAB496D7DD1258E59A5A7FDF37CE603EECA Validity Not Before: Nov 2 22:06:39 2025 GMT Not After : Nov 3 23:16:39 2025 GMT Subject: CN=5ACDAE3B909A0A896A3CE43362269A37C0F22AE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c7:45:0b:13:26:5a:20:62:20:28:96:cf:a2: 0b:aa:b1:26:1f:4c:85:ff:9b:b5:dc:8f:6a:77:81: d4:58:68:24:70:72:d6:1e:46:5d:81:44:c0:3b:c4: 6c:f7:d3:44:d2:fe:c4:1d:44:2d:e0:cf:ea:8b:c0: 26:fa:93:78:e6:f9:ec:f4:14:f8:8e:55:92:52:87: 38:28:18:7d:b6:9b:bf:9e:12:8c:93:92:f5:cd:97: 0d:4d:24:b8:b3:33:04:ca:d1:33:66:23:54:50:c6: d3:06:aa:8e:7f:23:c0:7f:68:a8:cf:1d:2c:d6:e6: db:74:b9:47:b0:2b:48:54:d0:36:c4:87:67:a7:97: c7:4f:9a:d5:61:ad:05:c8:51:ca:5a:79:0b:0f:b5: 00:fb:68:45:83:b0:19:14:44:95:be:a2:16:44:3f: 13:80:51:1b:3b:57:7f:9d:c1:5b:43:62:6b:a2:2a: bc:82:86:e8:bb:03:b6:29:86:d1:b3:08:21:9e:3c: c6:66:2a:c9:e4:10:bd:da:ec:66:eb:12:88:cf:d0: 6c:d3:e9:4d:de:c6:83:9d:27:88:e4:07:98:c4:4e: 0a:95:c0:49:2d:94:2e:3b:da:27:b4:51:a0:5e:fd: 21:41:23:9f:33:a9:37:61:2c:e3:23:b5:10:38:17: b2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CD:AE:3B:90:9A:0A:89:6A:3C:E4:33:62:26:9A:37:C0:F2:2A:E8 X509v3 Authority Key Identifier: keyid:7D:63:CD:AB:49:6D:7D:D1:25:8E:59:A5:A7:FD:F3:7C:E6:03:EE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EJXbijYD2tnK4sYeCyNj6Rj5jAxoihd3c32q7boVFK5T/0/7D63CDAB496D7DD1258E59A5A7FDF37CE603EECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D63CDAB496D7DD1258E59A5A7FDF37CE603EECA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJXbijYD2tnK4sYeCyNj6Rj5jAxoihd3c32q7boVFK5T/0/7D63CDAB496D7DD1258E59A5A7FDF37CE603EECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:18:83:1e:7e:1e:c3:5f:30:51:82:b3:10:11:4c:3c:eb:36: 88:d4:84:b9:21:51:68:e6:32:ed:5d:1e:60:a6:3c:ab:59:a4: 57:9c:36:52:02:df:7f:08:9a:2d:7d:39:a5:89:af:14:87:45: 7a:ee:b9:cb:28:50:b7:c1:35:fe:bd:2e:4e:7b:67:05:dd:b5: e4:75:74:f1:c5:89:ca:a3:68:1d:2a:14:2b:c8:20:7d:0c:c6: 8c:62:4d:3f:18:30:3e:19:91:a6:82:20:c3:f2:98:92:05:80: 19:1f:d0:e6:ea:31:39:91:3c:8d:4a:14:0f:c0:f9:0c:74:5b: 5f:1b:b3:5b:e8:de:31:2e:b0:19:73:3d:04:4a:36:57:62:3c: 4d:a1:04:37:45:09:9f:90:f7:39:97:3b:8f:d9:be:b4:94:56: c7:b4:15:eb:52:46:32:fa:f8:84:72:40:6d:b8:02:18:03:c7: b3:75:8b:77:71:e8:a1:a4:b1:b0:53:ab:6a:e7:f6:62:28:b9: 3e:9f:f6:ae:7b:4d:4c:3c:4c:ee:bd:d9:31:49:12:45:3c:06: e1:11:6e:ba:e7:83:e9:af:99:72:99:f2:80:4b:2a:8b:97:18: 12:0d:9d:18:00:24:33:1f:9a:ec:a4:64:79:46:7c:74:06:a4: f6:e0:2c:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURT5NPPbrwhUdbF2F8MkDnCHmfQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2M0NEQUI0OTZEN0REMTI1OEU1OUE1QTdGREYzN0NF NjAzRUVDQTAeFw0yNTExMDIyMjA2MzlaFw0yNTExMDMyMzE2MzlaMDMxMTAvBgNV BAMTKDVBQ0RBRTNCOTA5QTBBODk2QTNDRTQzMzYyMjY5QTM3QzBGMjJBRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYx0ULEyZaIGIgKJbPoguqsSYf TIX/m7Xcj2p3gdRYaCRwctYeRl2BRMA7xGz300TS/sQdRC3gz+qLwCb6k3jm+ez0 FPiOVZJShzgoGH22m7+eEoyTkvXNlw1NJLizMwTK0TNmI1RQxtMGqo5/I8B/aKjP HSzW5tt0uUewK0hU0DbEh2enl8dPmtVhrQXIUcpaeQsPtQD7aEWDsBkURJW+ohZE PxOAURs7V3+dwVtDYmuiKryChui7A7YphtGzCCGePMZmKsnkEL3a7GbrEojP0GzT 6U3exoOdJ4jkB5jETgqVwEktlC472ie0UaBe/SFBI58zqTdhLOMjtRA4F7JHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWs2uO5CaColqPOQzYiaaN8DyKugwHwYDVR0j BBgwFoAUfWPNq0ltfdEljlmlp/3zfOYD7sowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUpYYmlqWUQydG5LNHNZZUN5Tmo2Umo1akF4b2loZDNjMzJxN2JvVkZL NVQvMC83RDYzQ0RBQjQ5NkQ3REQxMjU4RTU5QTVBN0ZERjM3Q0U2MDNFRUNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdENjNDREFCNDk2RDdERDEy NThFNTlBNUE3RkRGMzdDRTYwM0VFQ0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUpYYmlqWUQydG5LNHNZZUN5Tmo2Umo1akF4b2loZDNjMzJxN2JvVkZLNVQvMC83 RDYzQ0RBQjQ5NkQ3REQxMjU4RTU5QTVBN0ZERjM3Q0U2MDNFRUNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZxiDHn4ew18wUYKzEBFMPOs2iNSEuSFRaOYy7V0eYKY8q1mkV5w2UgLffwia LX05pYmvFIdFeu65yyhQt8E1/r0uTntnBd215HV08cWJyqNoHSoUK8ggfQzGjGJN PxgwPhmRpoIgw/KYkgWAGR/Q5uoxOZE8jUoUD8D5DHRbXxuzW+jeMS6wGXM9BEo2 V2I8TaEEN0UJn5D3OZc7j9m+tJRWx7QV61JGMvr4hHJAbbgCGAPHs3WLd3HooaSx sFOrauf2Yii5Pp/2rntNTDxM7r3ZMUkSRTwG4RFuuueD6a+ZcpnygEsqi5cYEg2d GAAkMx+a7KRkeUZ8dAak9uAsQw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:11:51 2025 by rpki-client