$ rpki-client -vvf rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft File: 928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft (raw, json) Hash identifier: 8yHCebh/3JSo8WOXH2Ju0xDQ4wd8f3uDyUqnI1lQM8g= Subject key identifier: 7F:70:EB:B1:1F:6A:FA:98:AB:70:7E:B2:9C:50:A9:72:87:EC:1A:A0 Authority key identifier: 92:8F:3E:5F:CF:74:B2:47:98:29:DE:F0:B2:58:A8:F9:07:E5:00:8C Certificate issuer: /CN=928F3E5FCF74B2479829DEF0B258A8F907E5008C Certificate serial: 0CD22C9B192D8982881EB1F7B3487A88CB808B70 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer Subject info access: rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft Manifest number: 22 Signing time: Mon 03 Nov 2025 11:40:45 +0000 Manifest this update: Mon 03 Nov 2025 11:35:45 +0000 Manifest next update: Tue 04 Nov 2025 15:19:45 +0000 Files and hashes: 1: 928F3E5FCF74B2479829DEF0B258A8F907E5008C.crl (hash: 9Lrobhrf+7PUyaO6EUkiivhYruwKh98pmYG55FH+C4E=) 2: 323830343a386466343a3a2f33322d3332203d3e20323733333932.roa (hash: VS4osHeXlZ/Q4B1OAGutGiu5LExTcmGe3XvJymQp52c=) 3: 34352e3136382e39342e302f32342d3234203d3e20323733333932.roa (hash: RngRWQyawoEgPWd/npVxW/qgVMwVxWfaJ6c11tWcoXo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.crl rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 15:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d2:2c:9b:19:2d:89:82:88:1e:b1:f7:b3:48:7a:88:cb:80:8b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=928F3E5FCF74B2479829DEF0B258A8F907E5008C Validity Not Before: Nov 3 11:35:45 2025 GMT Not After : Nov 4 15:19:45 2025 GMT Subject: CN=7F70EBB11F6AFA98AB707EB29C50A97287EC1AA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b7:75:6b:57:b5:bd:63:43:21:eb:96:86:d2: 4e:1a:47:fa:5e:00:27:c7:c0:3b:4f:9d:73:98:16: c9:01:ff:ab:6a:4b:9a:4d:5a:e7:95:98:31:44:00: ae:37:d4:ae:36:f5:ca:87:27:f8:a3:fc:54:ff:51: ab:c5:90:53:e9:18:10:dc:62:df:bc:0b:33:76:03: bf:ee:c8:f9:03:51:b1:e9:a2:91:70:15:0b:93:3f: c4:4f:d6:51:26:40:cb:d5:a3:75:1c:cd:60:5e:c3: 88:39:b8:2f:f0:97:d0:25:31:1f:a8:fd:9f:0c:0e: 56:6d:f3:77:6c:97:6c:ac:b1:e7:70:80:27:db:80: f4:02:9f:e2:eb:54:45:e2:13:a3:e2:cc:f4:b8:a0: f5:7b:e6:fb:8c:e6:6a:82:48:44:46:2f:fe:83:3e: 58:75:cf:55:ec:78:b0:e2:4b:bb:f3:66:61:9a:24: 4a:af:2a:f7:78:dc:84:05:2c:3d:ef:97:05:90:4c: 0f:b8:b0:8d:1d:27:b3:80:2f:24:c9:dc:86:c1:5e: 75:6e:70:8b:6c:38:06:f7:9b:42:bb:b4:d7:e0:68: a4:a6:ce:85:0f:11:07:a0:1d:dd:4b:be:2a:6b:a5: 73:4a:82:43:98:3c:35:2a:81:24:58:cc:b9:e0:98: c9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:70:EB:B1:1F:6A:FA:98:AB:70:7E:B2:9C:50:A9:72:87:EC:1A:A0 X509v3 Authority Key Identifier: keyid:92:8F:3E:5F:CF:74:B2:47:98:29:DE:F0:B2:58:A8:F9:07:E5:00:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:44:f2:83:07:b4:fe:9c:35:e5:3f:f1:07:68:f9:68:64:b2: f6:96:37:62:1a:cf:34:83:cf:41:b3:ea:ef:ac:69:d6:d2:98: 76:0d:ea:6d:9b:dc:f0:bf:59:5d:a6:98:cc:5d:d3:da:05:48: a1:26:58:ce:a6:bd:67:e8:45:0e:0c:ae:27:11:0e:6c:b1:e9: 9e:57:c5:5e:e8:a3:5b:86:35:6d:c8:58:98:55:ca:17:8d:a7: 1f:3f:0d:78:49:24:76:3d:1b:d3:c9:e6:4b:a9:10:db:33:4c: b5:eb:b5:61:58:51:22:9c:dd:99:60:15:45:ce:af:7e:e8:8c: 7d:7f:f3:f8:a3:9d:df:2a:57:69:91:04:07:2a:b1:27:4e:71: 59:3c:38:ba:9e:3c:86:d7:fd:f7:9e:18:ff:3b:aa:70:01:5f: 6c:2a:c1:39:7d:ed:ea:5b:bb:a2:f4:c6:f3:46:db:8d:eb:91: 5e:59:2c:c5:4d:19:dc:6c:7f:16:1a:5f:07:1d:25:3c:7a:44: 56:8e:5a:93:f4:69:df:2d:a1:04:d3:65:68:da:f0:02:0b:98: ca:60:69:c0:af:7a:25:2b:6b:71:05:53:21:80:65:65:81:52: be:35:d2:ff:8b:0c:f8:9a:4a:83:8f:a0:0c:6f:6c:13:b3:46: 20:36:21:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDNIsmxktiYKIHrH3s0h6iMuAi3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI4RjNFNUZDRjc0QjI0Nzk4MjlERUYwQjI1OEE4Rjkw N0U1MDA4QzAeFw0yNTExMDMxMTM1NDVaFw0yNTExMDQxNTE5NDVaMDMxMTAvBgNV BAMTKDdGNzBFQkIxMUY2QUZBOThBQjcwN0VCMjlDNTBBOTcyODdFQzFBQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJt3VrV7W9Y0Mh65aG0k4aR/pe ACfHwDtPnXOYFskB/6tqS5pNWueVmDFEAK431K429cqHJ/ij/FT/UavFkFPpGBDc Yt+8CzN2A7/uyPkDUbHpopFwFQuTP8RP1lEmQMvVo3UczWBew4g5uC/wl9AlMR+o /Z8MDlZt83dsl2yssedwgCfbgPQCn+LrVEXiE6PizPS4oPV75vuM5mqCSERGL/6D Plh1z1XseLDiS7vzZmGaJEqvKvd43IQFLD3vlwWQTA+4sI0dJ7OALyTJ3IbBXnVu cItsOAb3m0K7tNfgaKSmzoUPEQegHd1LviprpXNKgkOYPDUqgSRYzLngmMkbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUf3DrsR9q+pircH6ynFCpcofsGqAwHwYDVR0j BBgwFoAUko8+X890skeYKd7wslio+QflAIwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDVZV3VOVDFEMnFEU0Q0QThNSnpBYlQ3WXRQaUJoNlkxcmJRUGdBeHRS SFcvMC85MjhGM0U1RkNGNzRCMjQ3OTgyOURFRjBCMjU4QThGOTA3RTUwMDhDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyOEYzRTVGQ0Y3NEIyNDc5 ODI5REVGMEIyNThBOEY5MDdFNTAwOEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDVZV3VOVDFEMnFEU0Q0QThNSnpBYlQ3WXRQaUJoNlkxcmJRUGdBeHRSSFcvMC85 MjhGM0U1RkNGNzRCMjQ3OTgyOURFRjBCMjU4QThGOTA3RTUwMDhDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGkTygwe0/pw15T/xB2j5aGSy9pY3YhrPNIPPQbPq76xp1tKYdg3qbZvc8L9Z XaaYzF3T2gVIoSZYzqa9Z+hFDgyuJxEObLHpnlfFXuijW4Y1bchYmFXKF42nHz8N eEkkdj0b08nmS6kQ2zNMteu1YVhRIpzdmWAVRc6vfuiMfX/z+KOd3ypXaZEEByqx J05xWTw4up48htf9954Y/zuqcAFfbCrBOX3t6lu7ovTG80bbjeuRXlksxU0Z3Gx/ FhpfBx0lPHpEVo5ak/Rp3y2hBNNlaNrwAguYymBpwK96JStrcQVTIYBlZYFSvjXS /4sM+JpKg4+gDG9sE7NGIDYh9w== -----END CERTIFICATE-----Generated at Mon Nov 3 18:46:07 2025 by rpki-client