$ rpki-client -vvf rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft File: 57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft (raw, json) Hash identifier: GV+NEZmrB3hxa9ynrkwHr7MW8vBbvZPhxg7jBA4Cs2U= Subject key identifier: 83:E5:0B:0D:2C:32:F5:23:13:C7:43:D3:01:8E:E0:16:D6:D3:44:2A Authority key identifier: 57:F0:2E:77:60:58:15:6B:95:AE:FD:20:B6:CD:5F:53:BF:9C:E7:0F Certificate issuer: /CN=57F02E776058156B95AEFD20B6CD5F53BF9CE70F Certificate serial: 6B90948DB540247DC688D678E465A0E7492A87FE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.cer Subject info access: rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft Manifest number: D4 Signing time: Sun 02 Nov 2025 21:50:00 +0000 Manifest this update: Sun 02 Nov 2025 21:45:00 +0000 Manifest next update: Mon 03 Nov 2025 22:26:00 +0000 Files and hashes: 1: 323830343a363635633a3a2f33322d313238203d3e20323639353533.roa (hash: fjZZkWlnuwmiZxXNtO21RTsnvfO7WKkiW+PozV0W0f0=) 2: 57F02E776058156B95AEFD20B6CD5F53BF9CE70F.crl (hash: bQVmrSkRIAGhbqUi2y43G8qrpUZ0CIB9ihovnPHFx/U=) 3: 34352e3138352e3139322e302f32322d3332203d3e20323639353533.roa (hash: OciFSFGdUnr3ZZQ4btUM8z5xSeXQkPKao0SQH8jEScE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.crl rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 22:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:90:94:8d:b5:40:24:7d:c6:88:d6:78:e4:65:a0:e7:49:2a:87:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57F02E776058156B95AEFD20B6CD5F53BF9CE70F Validity Not Before: Nov 2 21:45:00 2025 GMT Not After : Nov 3 22:26:00 2025 GMT Subject: CN=83E50B0D2C32F52313C743D3018EE016D6D3442A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2e:de:eb:93:02:c6:c6:6b:e1:5a:bf:71:a8: 13:dd:bd:3d:25:f8:74:50:77:3b:29:ea:4f:40:d4: 35:f5:a5:3f:5f:5e:af:74:69:19:cd:32:b4:84:6d: e6:3f:9f:f9:96:fb:c5:6c:7a:de:22:30:f9:29:8c: c6:45:44:59:d0:b1:94:28:00:8d:da:87:e7:23:88: b3:10:66:73:33:f6:d4:58:2a:21:9d:a9:9a:00:ff: e4:41:e9:51:23:e5:71:b8:60:ac:31:65:fd:d2:6c: 8c:ff:86:5d:31:11:67:81:ad:0a:e1:39:8f:d4:15: 90:aa:15:9b:3e:56:5a:5c:ec:68:6d:99:1d:6e:30: 9b:3b:dc:9e:e9:86:65:96:06:76:88:43:a3:c5:ea: 1e:61:2b:e1:a1:d2:c0:8c:ee:ae:70:57:72:73:a8: de:34:3b:22:79:c5:29:be:c9:6f:c8:86:68:c2:fb: 5f:69:82:38:bf:8e:05:ed:f6:00:67:f8:5d:73:64: fa:ef:71:d0:dc:c8:9e:f5:95:2f:02:5a:4b:5c:c8: 45:40:00:ad:33:d3:18:fa:e3:61:b0:bb:f0:1b:03: d0:9f:e0:3b:e4:a3:1f:15:79:81:7d:cc:d7:7c:f0: 18:1d:40:1c:c4:c7:a8:09:cc:43:15:0d:3e:60:d1: 03:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E5:0B:0D:2C:32:F5:23:13:C7:43:D3:01:8E:E0:16:D6:D3:44:2A X509v3 Authority Key Identifier: keyid:57:F0:2E:77:60:58:15:6B:95:AE:FD:20:B6:CD:5F:53:BF:9C:E7:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f1:4d:eb:a4:3a:bd:ba:5a:95:7f:a4:b1:2e:2b:7a:3a:a0: 87:0b:90:60:86:0b:18:48:d3:88:a8:b3:e4:08:c5:43:0a:f7: f8:d2:16:91:47:c9:8b:54:3b:1b:15:21:6d:a3:53:93:f8:4a: 0c:f7:d5:cb:df:a2:8e:19:f3:cc:83:a1:3a:a7:f8:fe:4e:d1: 63:f8:8e:2e:1e:7b:37:65:71:aa:27:6b:c1:71:10:bf:a3:58: a2:ae:90:64:a5:00:ad:ac:04:1d:4a:00:8b:51:73:22:8b:c0: 32:49:fc:0a:15:fb:4e:ac:1a:7d:e7:d9:38:45:08:a5:63:29: 96:8f:b5:57:33:bf:d7:29:ce:0b:b8:57:d4:07:47:7b:2c:4b: 0e:db:65:c0:85:eb:e2:68:af:9b:24:f4:33:a0:8c:b3:e3:74: c0:b0:d8:9c:8f:65:86:46:70:cb:13:9a:af:f1:cc:25:f0:85: 16:0f:ab:f4:6a:7e:45:b2:6d:ba:b2:7d:c5:ea:00:af:a5:e0: d3:65:16:de:5d:82:82:5b:00:2e:b7:64:54:98:1f:e6:ae:9b: 15:02:88:d6:50:f8:7a:ae:a5:42:58:11:ce:5b:0f:e3:7e:b8: 3a:da:03:9a:25:16:9c:dd:be:eb:3d:c8:0f:33:64:e9:84:42: a2:91:8d:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa5CUjbVAJH3GiNZ45GWg50kqh/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdGMDJFNzc2MDU4MTU2Qjk1QUVGRDIwQjZDRDVGNTNC RjlDRTcwRjAeFw0yNTExMDIyMTQ1MDBaFw0yNTExMDMyMjI2MDBaMDMxMTAvBgNV BAMTKDgzRTUwQjBEMkMzMkY1MjMxM0M3NDNEMzAxOEVFMDE2RDZEMzQ0MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtLt7rkwLGxmvhWr9xqBPdvT0l +HRQdzsp6k9A1DX1pT9fXq90aRnNMrSEbeY/n/mW+8Vset4iMPkpjMZFRFnQsZQo AI3ah+cjiLMQZnMz9tRYKiGdqZoA/+RB6VEj5XG4YKwxZf3SbIz/hl0xEWeBrQrh OY/UFZCqFZs+Vlpc7GhtmR1uMJs73J7phmWWBnaIQ6PF6h5hK+Gh0sCM7q5wV3Jz qN40OyJ5xSm+yW/IhmjC+19pgji/jgXt9gBn+F1zZPrvcdDcyJ71lS8CWktcyEVA AK0z0xj642Gwu/AbA9Cf4Dvkox8VeYF9zNd88BgdQBzEx6gJzEMVDT5g0QPBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUg+ULDSwy9SMTx0PTAY7gFtbTRCowHwYDVR0j BBgwFoAUV/Aud2BYFWuVrv0gts1fU7+c5w8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkh3d1RreVA4eE5CUTVyZnoyN1RyQTRLZXBCUms2NHZlbUxkb1p5SFlp elcvMC81N0YwMkU3NzYwNTgxNTZCOTVBRUZEMjBCNkNENUY1M0JGOUNFNzBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3RjAyRTc3NjA1ODE1NkI5 NUFFRkQyMEI2Q0Q1RjUzQkY5Q0U3MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rkh3d1RreVA4eE5CUTVyZnoyN1RyQTRLZXBCUms2NHZlbUxkb1p5SFlpelcvMC81 N0YwMkU3NzYwNTgxNTZCOTVBRUZEMjBCNkNENUY1M0JGOUNFNzBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlPFN66Q6vbpalX+ksS4rejqghwuQYIYLGEjTiKiz5AjFQwr3+NIWkUfJi1Q7 GxUhbaNTk/hKDPfVy9+ijhnzzIOhOqf4/k7RY/iOLh57N2VxqidrwXEQv6NYoq6Q ZKUArawEHUoAi1FzIovAMkn8ChX7TqwafefZOEUIpWMplo+1VzO/1ynOC7hX1AdH eyxLDttlwIXr4mivmyT0M6CMs+N0wLDYnI9lhkZwyxOar/HMJfCFFg+r9Gp+RbJt urJ9xeoAr6Xg02UW3l2CglsALrdkVJgf5q6bFQKI1lD4eq6lQlgRzlsP4364OtoD miUWnN2+6z3IDzNk6YRCopGN6A== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:59 2025 by rpki-client