$ rpki-client -vvf rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft File: 5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft (raw, json) Hash identifier: 2zlwVUtaH43Lhqj4vLhD7uJJkm0gyZsW25NNbm1qOXc= Subject key identifier: 73:2F:DB:C5:F0:19:3A:45:08:06:E8:1B:33:95:F2:5E:15:E9:7F:98 Authority key identifier: 5A:1E:4C:0F:6F:96:E5:93:3B:E0:09:91:E3:86:C3:F9:65:E7:C3:E9 Certificate issuer: /CN=5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9 Certificate serial: 0C83ED11F142E74F3AFD6A00BD9DB781A9E6898A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.cer Subject info access: rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft Manifest number: 27 Signing time: Mon 03 Nov 2025 02:33:49 +0000 Manifest this update: Mon 03 Nov 2025 02:28:49 +0000 Manifest next update: Tue 04 Nov 2025 05:03:49 +0000 Files and hashes: 1: 34352e37302e3235322e302f32322d3332203d3e20323637363131.roa (hash: yRi1SXpN/dv/T/K6SaSvoW/LDkoILoiPkENVWXL0Ftc=) 2: 323830343a343433633a3a2f33322d313238203d3e20323637363131.roa (hash: bL/3cJavWtCjzV3M2Smxs5oF64TchmbOwc08G5LhIYM=) 3: 5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.crl (hash: PI+AypGKOm1Zh/5VdKOpu0jrcVtCOtwQNfKEkuYrKnk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.crl rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:83:ed:11:f1:42:e7:4f:3a:fd:6a:00:bd:9d:b7:81:a9:e6:89:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9 Validity Not Before: Nov 3 02:28:49 2025 GMT Not After : Nov 4 05:03:49 2025 GMT Subject: CN=732FDBC5F0193A450806E81B3395F25E15E97F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:06:4f:57:94:f3:87:ae:75:66:a1:89:ea:3d: fd:d2:1f:76:6d:df:e8:86:06:52:a0:9a:53:a6:11: 29:e2:44:5d:72:de:b3:a2:9b:75:78:86:a8:32:d8: e3:ad:37:a4:0e:73:79:b8:cc:1c:b4:41:74:9d:f8: c9:c7:96:41:92:2d:8e:01:be:50:e5:f0:43:1b:e6: 65:e6:3c:5c:8c:8a:e5:fd:57:bf:0d:7e:e6:55:7c: 1c:2c:64:1e:cd:29:57:38:61:51:20:8c:50:71:b7: e6:a0:ca:69:50:dc:f1:ca:ed:7b:fe:43:59:6e:bf: a2:cc:60:f9:b4:ea:41:f5:5e:f1:8e:64:53:d3:72: 31:a1:3a:7b:8d:d9:2e:d1:b5:73:51:df:0c:b5:f3: 27:33:b0:d8:98:15:aa:e2:01:00:e8:7b:29:7a:f3: 8f:98:f3:8d:c9:12:01:c5:ce:13:b4:55:5f:ed:24: 27:de:d6:64:36:0b:36:76:26:3c:20:bf:bc:ad:cf: 4f:7e:53:a2:61:bf:7b:38:50:36:68:90:08:25:38: 09:c4:91:90:19:89:fb:2d:37:7e:09:01:f9:eb:67: 46:43:08:ed:44:8e:b7:26:03:41:68:81:bd:52:f3: 99:76:5a:39:97:df:a0:fa:a1:1c:58:34:34:03:6a: c8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2F:DB:C5:F0:19:3A:45:08:06:E8:1B:33:95:F2:5E:15:E9:7F:98 X509v3 Authority Key Identifier: keyid:5A:1E:4C:0F:6F:96:E5:93:3B:E0:09:91:E3:86:C3:F9:65:E7:C3:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:6a:90:43:54:4a:2b:f7:7d:75:f0:24:e7:92:0b:d5:6f:65: 90:13:06:77:1a:4f:e4:ef:2a:d3:39:37:9c:6b:1c:2c:f7:59: 4f:d7:fe:5a:16:10:9e:d2:07:bd:d9:3b:60:23:1e:c6:3d:73: a8:d1:25:c0:eb:ab:5c:e3:d2:ac:d3:5a:d2:09:c4:89:82:33: 2b:4b:d8:e2:60:00:4d:2a:1c:06:3f:95:70:ac:cd:8a:f9:a4: c5:9c:03:ae:a9:c4:be:38:70:36:a2:14:1f:bb:05:dd:f4:8c: fc:2b:ec:7b:e9:ef:17:33:ac:a4:f6:d1:06:ca:06:b4:a1:1e: 7c:d5:f1:71:8e:23:10:9c:49:fc:d1:7a:d7:0c:13:66:46:8d: 74:d8:60:00:9c:c0:bb:76:c0:74:4c:15:0d:d1:ec:a2:73:98: 5c:09:df:69:12:5d:af:21:23:aa:df:f9:ad:e9:fe:c4:de:01: 04:6f:71:88:56:89:b8:a6:93:14:f3:d6:8d:8e:43:2a:10:a8: c0:c1:4c:80:d2:02:fc:90:b0:29:20:06:a4:a1:86:af:bf:76: f2:c3:3d:cd:2b:9b:09:5e:60:67:9f:25:56:bd:e6:9f:3a:93: 51:e0:bd:1f:ba:0c:74:c9:a7:c3:be:fd:5a:65:15:e5:ff:6c: 46:73:3f:8f -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUDIPtEfFC5086/WoAvZ23ganmiYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExRTRDMEY2Rjk2RTU5MzNCRTAwOTkxRTM4NkMzRjk2 NUU3QzNFOTAeFw0yNTExMDMwMjI4NDlaFw0yNTExMDQwNTAzNDlaMDMxMTAvBgNV BAMTKDczMkZEQkM1RjAxOTNBNDUwODA2RTgxQjMzOTVGMjVFMTVFOTdGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyBk9XlPOHrnVmoYnqPf3SH3Zt 3+iGBlKgmlOmESniRF1y3rOim3V4hqgy2OOtN6QOc3m4zBy0QXSd+MnHlkGSLY4B vlDl8EMb5mXmPFyMiuX9V78NfuZVfBwsZB7NKVc4YVEgjFBxt+agymlQ3PHK7Xv+ Q1luv6LMYPm06kH1XvGOZFPTcjGhOnuN2S7RtXNR3wy18yczsNiYFariAQDoeyl6 84+Y843JEgHFzhO0VV/tJCfe1mQ2CzZ2Jjwgv7ytz09+U6Jhv3s4UDZokAglOAnE kZAZifstN34JAfnrZ0ZDCO1EjrcmA0Fogb1S85l2WjmX36D6oRxYNDQDasiDAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUcy/bxfAZOkUIBugbM5XyXhXpf5gwHwYDVR0j BBgwFoAUWh5MD2+W5ZM74AmR44bD+WXnw+kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9uM2JSeDVqaFJDVUYzOU1QZVpLN2pKOFpZTFNTS283MWNLMmZzQURZdGMx LzAvNUExRTRDMEY2Rjk2RTU5MzNCRTAwOTkxRTM4NkMzRjk2NUU3QzNFOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81QTFFNEMwRjZGOTZFNTkzM0JF MDA5OTFFMzg2QzNGOTY1RTdDM0U5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL24z YlJ4NWpoUkNVRjM5TVBlWks3ako4WllMU1NLbzcxY0syZnNBRFl0YzEvMC81QTFF NEMwRjZGOTZFNTkzM0JFMDA5OTFFMzg2QzNGOTY1RTdDM0U5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA z2qQQ1RKK/d9dfAk55IL1W9lkBMGdxpP5O8q0zk3nGscLPdZT9f+WhYQntIHvdk7 YCMexj1zqNElwOurXOPSrNNa0gnEiYIzK0vY4mAATSocBj+VcKzNivmkxZwDrqnE vjhwNqIUH7sF3fSM/Cvse+nvFzOspPbRBsoGtKEefNXxcY4jEJxJ/NF61wwTZkaN dNhgAJzAu3bAdEwVDdHsonOYXAnfaRJdryEjqt/5ren+xN4BBG9xiFaJuKaTFPPW jY5DKhCowMFMgNIC/JCwKSAGpKGGr7928sM9zSubCV5gZ58lVr3mnzqTUeC9H7oM dMmnw779WmUV5f9sRnM/jw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:01:15 2025 by rpki-client