$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.mft File: 5E82705FF857324984E1087AAFCCE6BD46657C71.mft (raw, json) Hash identifier: EVIsOR9b1Zcfs0sqZJkye42CAFH6c+46UT4XkH2XL7s= Subject key identifier: 4C:AF:9F:53:A2:FD:88:D0:7B:6F:73:4A:91:68:56:2C:91:58:F2:73 Authority key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71 Certificate issuer: /CN=5E82705FF857324984E1087AAFCCE6BD46657C71 Certificate serial: 22BDBAFC521FAE295209A8E891759D62C7722EBA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer Subject info access: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.mft Manifest number: 030A Signing time: Mon 03 Nov 2025 19:40:43 +0000 Manifest this update: Mon 03 Nov 2025 19:35:43 +0000 Manifest next update: Tue 04 Nov 2025 23:06:43 +0000 Files and hashes: 1: 5E82705FF857324984E1087AAFCCE6BD46657C71.crl (hash: NBL8UU8SxXjIeQM/dlRLTYOs26J3zqA9xzc6uOWSswc=) 2: 323830343a313230303a3a2f33322d313238203d3e20323633343530.roa (hash: xf5V30GrFuexySATg7rUcR1aWqQpdI2Wh0yrR3PUOME=) 3: 3136382e3233322e3135362e302f32322d3332203d3e20323633343530.roa (hash: aCft+s267yKm4sGll1Q7ESkI4zexJnEjysrqJshCd5g=) 4: 3137372e39312e3233322e302f32322d3332203d3e20323633343530.roa (hash: 5OntlO5he05wjQ31exQDXaGboW3/a7/8ne58YQn/E28=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 23:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:bd:ba:fc:52:1f:ae:29:52:09:a8:e8:91:75:9d:62:c7:72:2e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E82705FF857324984E1087AAFCCE6BD46657C71 Validity Not Before: Nov 3 19:35:43 2025 GMT Not After : Nov 4 23:06:43 2025 GMT Subject: CN=4CAF9F53A2FD88D07B6F734A9168562C9158F273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1f:49:71:c2:c9:a0:d1:3a:78:3a:7e:4d:95: 12:88:3f:9f:50:32:bd:84:ab:e1:64:37:1a:bf:b8: 15:ef:36:a3:08:a0:45:e9:db:e6:b2:fb:9f:50:e8: 2f:03:b9:8b:79:73:a0:1f:36:4d:70:82:0b:d9:01: 11:b7:90:da:c6:ec:8a:49:56:7a:e9:db:dd:9d:d5: 1a:8c:d8:83:98:2d:68:c5:b4:cd:60:b1:14:de:39: a1:74:da:d8:9e:6e:12:12:bb:66:2a:da:f7:49:2c: 6f:e8:a8:b9:ec:53:50:fc:97:c5:2d:50:a2:f8:82: d2:62:55:57:8b:48:8a:95:3f:56:54:c0:7d:11:53: b1:d0:7d:dd:a8:05:42:a0:d0:3f:d6:85:56:b5:e4: 10:41:1e:c9:e2:8b:6e:fe:a8:e1:e0:5a:18:8a:98: c1:92:1e:a6:cc:8a:bc:4f:04:53:b9:11:d4:16:69: b9:0e:ca:0d:e2:ce:c4:84:e6:37:c6:0a:dc:65:7f: 34:a7:20:76:d9:59:9c:9e:c7:85:19:31:b6:59:00: 43:97:53:8c:5b:65:bc:eb:47:f7:bd:d2:16:ea:1f: 06:91:62:1a:63:cb:8b:0a:89:9d:93:40:c2:94:89: ea:d2:9a:65:86:1f:ac:04:4f:a6:af:1f:5f:d9:f7: 25:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AF:9F:53:A2:FD:88:D0:7B:6F:73:4A:91:68:56:2C:91:58:F2:73 X509v3 Authority Key Identifier: keyid:5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2e:02:ad:21:73:c8:19:30:31:0a:4d:5c:8e:b2:fd:2f:3f: 01:77:e8:cd:46:10:1a:83:3f:39:cb:56:3d:f8:9b:73:3c:55: cb:97:05:45:42:2e:9b:fe:f6:2e:22:0a:e4:ee:de:70:91:3d: 3b:97:6d:fc:1b:6c:ef:19:f7:89:92:17:bb:f9:dd:98:b7:63: 03:d1:09:b7:31:4c:04:3f:4b:b0:33:bc:66:09:df:46:71:1c: e3:e4:17:73:cb:d9:c5:54:2d:06:95:06:14:a3:1b:e4:50:31: 0a:8e:ae:bb:89:f8:00:16:d6:f1:a5:8d:50:0b:2e:e3:d6:b5: 81:6b:70:50:c6:8d:bd:c5:c8:43:bd:81:60:93:83:5e:af:a6: 16:1f:ee:be:2e:5b:b1:76:58:ce:ca:54:53:7b:f2:b5:b1:28: f9:fd:3e:03:48:6a:bf:ba:da:00:49:8f:8d:29:a5:1d:1d:f8: 6d:03:25:79:7f:f5:76:94:54:52:0f:02:c5:76:64:01:5f:55: 79:75:24:8e:be:b9:2b:94:3e:c5:3d:1c:da:66:2b:81:9d:83: 53:b9:12:14:18:b1:d4:64:a5:d2:e2:a0:d0:14:8f:02:98:3f: fb:80:fb:17:67:cd:b5:86:c9:7e:0c:8c:ce:2c:24:d0:bc:fa: 72:9f:08:71 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUIr26/FIfrilSCajokXWdYsdyLrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4MjcwNUZGODU3MzI0OTg0RTEwODdBQUZDQ0U2QkQ0 NjY1N0M3MTAeFw0yNTExMDMxOTM1NDNaFw0yNTExMDQyMzA2NDNaMDMxMTAvBgNV BAMTKDRDQUY5RjUzQTJGRDg4RDA3QjZGNzM0QTkxNjg1NjJDOTE1OEYyNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuH0lxwsmg0Tp4On5NlRKIP59Q Mr2Eq+FkNxq/uBXvNqMIoEXp2+ay+59Q6C8DuYt5c6AfNk1wggvZARG3kNrG7IpJ Vnrp292d1RqM2IOYLWjFtM1gsRTeOaF02tiebhISu2Yq2vdJLG/oqLnsU1D8l8Ut UKL4gtJiVVeLSIqVP1ZUwH0RU7HQfd2oBUKg0D/WhVa15BBBHsnii27+qOHgWhiK mMGSHqbMirxPBFO5EdQWabkOyg3izsSE5jfGCtxlfzSnIHbZWZyex4UZMbZZAEOX U4xbZbzrR/e90hbqHwaRYhpjy4sKiZ2TQMKUierSmmWGH6wET6avH1/Z9yVZAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUTK+fU6L9iNB7b3NKkWhWLJFY8nMwHwYDVR0j BBgwFoAUXoJwX/hXMkmE4Qh6r8zmvUZlfHEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9aUmk5SjdjSk1VQm1zeUJzYUJMYVJ0UlJTZ0ZQWlE0ZkR3a2tHZWt4cVVD LzAvNUU4MjcwNUZGODU3MzI0OTg0RTEwODdBQUZDQ0U2QkQ0NjY1N0M3MS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81RTgyNzA1RkY4NTczMjQ5ODRF MTA4N0FBRkNDRTZCRDQ2NjU3QzcxLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1pS aTlKN2NKTVVCbXN5QnNhQkxhUnRSUlNnRlBaUTRmRHdra0dla3hxVUMvMC81RTgy NzA1RkY4NTczMjQ5ODRFMTA4N0FBRkNDRTZCRDQ2NjU3QzcxLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA TC4CrSFzyBkwMQpNXI6y/S8/AXfozUYQGoM/OctWPfibczxVy5cFRUIum/72LiIK 5O7ecJE9O5dt/Bts7xn3iZIXu/ndmLdjA9EJtzFMBD9LsDO8ZgnfRnEc4+QXc8vZ xVQtBpUGFKMb5FAxCo6uu4n4ABbW8aWNUAsu49a1gWtwUMaNvcXIQ72BYJODXq+m Fh/uvi5bsXZYzspUU3vytbEo+f0+A0hqv7raAEmPjSmlHR34bQMleX/1dpRUUg8C xXZkAV9VeXUkjr65K5Q+xT0c2mYrgZ2DU7kSFBix1GSl0uKg0BSPApg/+4D7F2fN tYbJfgyMziwk0Lz6cp8IcQ== -----END CERTIFICATE-----Generated at Tue Nov 4 00:10:14 2025 by rpki-client