$ rpki-client -vvf rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft File: D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft (raw, json) Hash identifier: qNXWneeVPHa0/Cuo0vhhkB3lKPyS+3Ysp2sSrszhoeQ= Subject key identifier: 28:9F:06:68:BC:EE:5F:E9:E8:23:C8:78:64:10:EA:7C:C3:C4:D2:28 Authority key identifier: D5:4D:28:DD:11:35:EB:4E:A6:84:16:B4:2C:FD:19:DF:50:29:29:D2 Certificate issuer: /CN=D54D28DD1135EB4EA68416B42CFD19DF502929D2 Certificate serial: 3B76DB6A01FB11C6D0EF6DC2259E9E0E1078BCD3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer Subject info access: rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft Manifest number: 0269 Signing time: Mon 03 Nov 2025 09:03:26 +0000 Manifest this update: Mon 03 Nov 2025 08:58:26 +0000 Manifest next update: Tue 04 Nov 2025 10:17:26 +0000 Files and hashes: 1: D54D28DD1135EB4EA68416B42CFD19DF502929D2.crl (hash: Ltap0NCQAvCErIs9Ak3117rayFMaHY7U8ZGJIzMXAk4=) 2: 323830343a363661303a3a2f33322d313238203d3e20323639353732.roa (hash: JtRy4cmBKBuI/QiHNBhdDeJlqIh4qsk+0GGS5pqApHw=) 3: 34352e3138392e36382e302f32322d3332203d3e20323639353732.roa (hash: ngoWma8TsSEzSWbq6GfRF4ba2k9dPiM3jeI36G1Dcfo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.crl rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:76:db:6a:01:fb:11:c6:d0:ef:6d:c2:25:9e:9e:0e:10:78:bc:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D28DD1135EB4EA68416B42CFD19DF502929D2 Validity Not Before: Nov 3 08:58:26 2025 GMT Not After : Nov 4 10:17:26 2025 GMT Subject: CN=289F0668BCEE5FE9E823C8786410EA7CC3C4D228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c6:e7:93:1d:95:67:b3:9f:76:af:82:1e:cd: 92:c9:18:88:2c:47:ea:0a:28:4e:83:11:78:46:ca: 9e:45:30:c3:ee:6c:32:5f:f8:90:d5:07:0f:ee:74: 80:f2:e7:0a:6a:2f:50:bc:5b:08:a4:08:9f:dc:77: 93:4d:53:df:b5:8c:31:2c:7d:dc:00:69:07:23:52: 95:3c:a8:6e:67:ca:6e:7a:c6:43:83:ed:4a:4c:7f: ce:1c:bf:63:b9:60:aa:7e:28:fd:cc:8c:50:8c:77: a5:c6:65:07:0d:2c:c4:f7:16:88:54:dd:e3:b0:0e: f9:2b:3e:fa:54:35:9c:0c:ae:79:3f:c5:0d:6c:19: ec:a1:f2:9e:dd:93:4a:2f:da:fb:3d:a9:d0:e6:9b: 38:7e:9c:2d:a8:32:0c:78:f5:37:53:e3:13:63:9d: 28:3f:02:7d:be:05:aa:48:fe:e6:d5:d3:b2:3b:93: 89:e3:e9:de:a1:18:d8:70:ff:e0:53:57:ee:bc:1f: 15:a7:44:11:f2:57:78:fc:92:d6:7b:72:86:29:9c: c7:99:bb:6f:4f:2a:f4:f5:9a:88:bd:d0:3b:00:96: e9:2a:e5:6e:07:ea:d5:7c:d1:bf:30:65:70:4d:07: 7d:f0:cf:8e:58:c9:67:6a:96:da:ea:b3:51:5b:97: ae:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9F:06:68:BC:EE:5F:E9:E8:23:C8:78:64:10:EA:7C:C3:C4:D2:28 X509v3 Authority Key Identifier: keyid:D5:4D:28:DD:11:35:EB:4E:A6:84:16:B4:2C:FD:19:DF:50:29:29:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:1f:9c:28:65:9d:b1:b9:1a:fa:15:28:7f:61:ab:4f:43:84: bc:88:a6:60:fb:1d:da:ff:43:61:5e:9f:b0:20:f7:b0:4e:73: a5:c5:08:fc:06:61:cd:bb:da:a8:eb:4b:04:6c:e3:3c:a6:4a: 17:9e:86:59:4b:f5:6f:b1:ea:5c:e4:a7:46:d4:f7:43:9c:51: 31:f7:21:f4:3e:fd:28:26:25:b2:66:5c:1e:a9:0e:d9:7a:04: 8a:2e:a2:ca:2c:47:c4:d4:a7:85:73:49:9c:e6:cd:aa:b7:14: c0:55:88:b1:e1:a1:fc:07:65:96:d8:26:a7:19:a7:1f:20:19: 86:54:c7:c2:d1:b5:9b:d9:1e:48:92:f4:d8:6a:fd:b2:58:34: 31:69:fa:0f:f8:80:ad:3f:28:9b:cc:30:df:2f:5e:3d:48:f0: 2d:01:e5:f0:86:02:63:90:2c:af:58:87:ec:fd:6e:c7:43:d3: 65:73:93:dc:45:53:17:64:87:72:c2:3f:db:8a:cd:4f:6f:21: 45:1b:65:2d:c0:1b:43:ac:6b:9b:ad:cc:71:e9:1e:1c:9b:47: 26:c5:bd:75:76:9e:a6:25:da:a3:be:09:a0:32:e3:71:33:00: cf:0b:79:00:80:2c:2d:cf:0d:0b:a0:ee:25:28:a9:79:90:4c: 75:2c:5a:cf -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUO3bbagH7EcbQ723CJZ6eDhB4vNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDI4REQxMTM1RUI0RUE2ODQxNkI0MkNGRDE5REY1 MDI5MjlEMjAeFw0yNTExMDMwODU4MjZaFw0yNTExMDQxMDE3MjZaMDMxMTAvBgNV BAMTKDI4OUYwNjY4QkNFRTVGRTlFODIzQzg3ODY0MTBFQTdDQzNDNEQyMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyxueTHZVns592r4IezZLJGIgs R+oKKE6DEXhGyp5FMMPubDJf+JDVBw/udIDy5wpqL1C8WwikCJ/cd5NNU9+1jDEs fdwAaQcjUpU8qG5nym56xkOD7UpMf84cv2O5YKp+KP3MjFCMd6XGZQcNLMT3FohU 3eOwDvkrPvpUNZwMrnk/xQ1sGeyh8p7dk0ov2vs9qdDmmzh+nC2oMgx49TdT4xNj nSg/An2+BapI/ubV07I7k4nj6d6hGNhw/+BTV+68HxWnRBHyV3j8ktZ7coYpnMeZ u29PKvT1moi90DsAlukq5W4H6tV80b8wZXBNB33wz45YyWdqltrqs1Fbl673AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUKJ8GaLzuX+noI8h4ZBDqfMPE0igwHwYDVR0j BBgwFoAU1U0o3RE1606mhBa0LP0Z31ApKdIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9jYjdoR3hjYzdBalpQQWpFTXdiY1RXMlpWMUdoc3JMYnY2aW5XQ3AySlNu LzAvRDU0RDI4REQxMTM1RUI0RUE2ODQxNkI0MkNGRDE5REY1MDI5MjlEMi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ENTREMjhERDExMzVFQjRFQTY4 NDE2QjQyQ0ZEMTlERjUwMjkyOUQyLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2Ni N2hHeGNjN0FqWlBBakVNd2JjVFcyWlYxR2hzckxidjZpbldDcDJKU24vMC9ENTRE MjhERDExMzVFQjRFQTY4NDE2QjQyQ0ZEMTlERjUwMjkyOUQyLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA eR+cKGWdsbka+hUof2GrT0OEvIimYPsd2v9DYV6fsCD3sE5zpcUI/AZhzbvaqOtL BGzjPKZKF56GWUv1b7HqXOSnRtT3Q5xRMfch9D79KCYlsmZcHqkO2XoEii6iyixH xNSnhXNJnObNqrcUwFWIseGh/AdlltgmpxmnHyAZhlTHwtG1m9keSJL02Gr9slg0 MWn6D/iArT8om8ww3y9ePUjwLQHl8IYCY5Asr1iH7P1ux0PTZXOT3EVTF2SHcsI/ 24rNT28hRRtlLcAbQ6xrm63McekeHJtHJsW9dXaepiXao74JoDLjcTMAzwt5AIAs Lc8NC6DuJSipeZBMdSxazw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:27:57 2025 by rpki-client