$ rpki-client -vvf rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft File: 128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft (raw, json) Hash identifier: RWuW15dVJMrWTcqLtn8T+C9DtWXDIouBkm5XNd37A1Y= Subject key identifier: B9:CF:44:7B:C7:14:98:53:55:37:43:81:2D:CC:0A:48:2F:10:0B:1E Authority key identifier: 12:86:44:EC:EB:30:86:8F:7D:DD:8B:50:BD:E3:CD:0A:5A:3A:06:B8 Certificate issuer: /CN=128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8 Certificate serial: 7B7EC5E32A4FFFFB04C60C4FC5CF480F8FE9D4E3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.cer Subject info access: rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft Manifest number: 5C Signing time: Mon 20 Oct 2025 04:23:09 +0000 Manifest this update: Mon 20 Oct 2025 04:18:09 +0000 Manifest next update: Tue 21 Oct 2025 05:00:09 +0000 Files and hashes: 1: 128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.crl (hash: HR24dOcbHtQXw0FQDlYPeo6ikMMqJ3idfo4CArfFNsE=) 2: 323830343a346536343a3a2f33322d313238203d3e20323638323538.roa (hash: cIPRrBZKrOj9lWuWyZWYEmXaWAtDm4pOx+RC7zQlZq4=) 3: 34352e3233372e382e302f32322d3332203d3e20323638323538.roa (hash: gT6g9/y/7vUl+2G7uUJcrg2sfzhdljWwUSKvbqMYsLs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.crl rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 05:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7e:c5:e3:2a:4f:ff:fb:04:c6:0c:4f:c5:cf:48:0f:8f:e9:d4:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8 Validity Not Before: Oct 20 04:18:09 2025 GMT Not After : Oct 21 05:00:09 2025 GMT Subject: CN=B9CF447BC7149853553743812DCC0A482F100B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:6d:c5:41:b0:ab:2d:23:12:d8:07:a9:76: de:1e:07:64:98:0a:d2:74:40:16:52:70:44:32:a7: 60:64:fc:9b:08:eb:5d:e6:ba:99:07:f4:b3:46:a3: 8a:2b:42:9b:c3:64:68:e2:46:b3:f3:8d:6e:65:b9: ce:96:76:1a:40:be:48:d3:97:15:5e:d3:bf:6d:3a: 86:ab:83:f2:21:45:0d:08:e1:07:5a:35:7a:ca:45: f4:97:62:e0:13:ea:37:17:49:76:e7:e9:75:8c:bf: 2f:4f:8f:50:1d:3b:e4:a3:0a:d6:fb:4a:59:73:44: b5:cd:a6:ba:70:91:39:31:c8:11:aa:7d:f0:0a:af: d9:7b:f6:5d:07:59:cc:d3:72:78:42:62:cd:6b:da: 1a:52:de:51:37:38:22:d0:27:19:05:b8:f0:b6:d8: 5c:f6:36:43:60:7a:1a:d6:5b:68:3e:bb:77:a5:e0: 1a:f4:f2:25:92:b4:04:fb:a8:95:7b:a7:d1:df:3d: 7a:9f:cc:bb:4f:d4:ba:29:92:36:a1:20:6e:03:da: cf:f7:9f:58:7b:4d:16:b6:11:2b:82:9d:19:ac:a2: 89:08:63:8c:6a:04:48:83:8d:c2:e8:91:eb:1a:b3: ac:21:b8:b7:e2:ef:0a:66:e2:c3:69:99:97:8d:15: 2a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CF:44:7B:C7:14:98:53:55:37:43:81:2D:CC:0A:48:2F:10:0B:1E X509v3 Authority Key Identifier: keyid:12:86:44:EC:EB:30:86:8F:7D:DD:8B:50:BD:E3:CD:0A:5A:3A:06:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:31:a0:d8:b6:86:aa:8e:bd:a6:62:e1:36:05:9a:91:5b:a5: 9c:45:70:26:51:2a:04:14:4b:d6:fd:c0:7e:0a:05:3d:5d:9c: d9:d3:fd:1d:54:ed:97:54:9f:15:ee:84:c3:f3:fe:28:60:f0: 67:8c:72:96:9f:35:1f:6f:9e:38:20:98:3b:76:71:08:1d:62: 09:d7:fd:7a:1a:1e:f2:73:92:ff:03:5f:eb:cb:52:9b:36:74: 12:94:5c:d5:6d:d5:0a:ea:1c:70:0b:33:7f:5a:c1:eb:39:7e: 0d:ce:11:ba:60:e9:b7:f6:00:66:27:5e:10:fd:a1:fa:d1:4e: 66:bf:1b:86:1d:c2:c9:aa:46:67:21:b1:f0:91:7a:a8:4e:42: d4:2c:06:3f:28:59:47:cc:a5:43:2a:30:dc:8a:66:8b:6b:d2: 84:ec:a8:ff:b4:92:7f:cc:66:db:65:37:62:66:15:ee:4b:cc: b1:5d:a8:ca:ba:34:2b:b0:8c:81:45:c0:8f:dd:ae:ce:69:88: bc:77:05:34:38:87:73:b5:16:4d:07:72:64:d9:21:2d:2c:82: 0e:54:61:73:a6:99:eb:9d:fb:80:28:47:93:bc:f8:31:4f:ef: 63:02:e0:46:ac:53:f6:00:6e:fa:bd:17:43:71:23:e3:f8:5e: ea:df:21:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUe37F4ypP//sExgxPxc9ID4/p1OMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4NjQ0RUNFQjMwODY4RjdEREQ4QjUwQkRFM0NEMEE1 QTNBMDZCODAeFw0yNTEwMjAwNDE4MDlaFw0yNTEwMjEwNTAwMDlaMDMxMTAvBgNV BAMTKEI5Q0Y0NDdCQzcxNDk4NTM1NTM3NDM4MTJEQ0MwQTQ4MkYxMDBCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07G3FQbCrLSMS2Aepdt4eB2SY CtJ0QBZScEQyp2Bk/JsI613mupkH9LNGo4orQpvDZGjiRrPzjW5luc6WdhpAvkjT lxVe079tOoarg/IhRQ0I4QdaNXrKRfSXYuAT6jcXSXbn6XWMvy9Pj1AdO+SjCtb7 SllzRLXNprpwkTkxyBGqffAKr9l79l0HWczTcnhCYs1r2hpS3lE3OCLQJxkFuPC2 2Fz2NkNgehrWW2g+u3el4Br08iWStAT7qJV7p9HfPXqfzLtP1LopkjahIG4D2s/3 n1h7TRa2ESuCnRmsookIY4xqBEiDjcLokesas6whuLfi7wpm4sNpmZeNFSpnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuc9Ee8cUmFNVN0OBLcwKSC8QCx4wHwYDVR0j BBgwFoAUEoZE7Oswho993YtQvePNClo6BrgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0hoaWprVWZjQjc1ZUxvbUdFZ1hveUhkWDJQeWlDMUFaOG5GVGNuQm1m QlQvMC8xMjg2NDRFQ0VCMzA4NjhGN0RERDhCNTBCREUzQ0QwQTVBM0EwNkI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyODY0NEVDRUIzMDg2OEY3 REREOEI1MEJERTNDRDBBNUEzQTA2QjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0hoaWprVWZjQjc1ZUxvbUdFZ1hveUhkWDJQeWlDMUFaOG5GVGNuQm1mQlQvMC8x Mjg2NDRFQ0VCMzA4NjhGN0RERDhCNTBCREUzQ0QwQTVBM0EwNkI4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACjGg2LaGqo69pmLhNgWakVulnEVwJlEqBBRL1v3AfgoFPV2c2dP9HVTtl1Sf Fe6Ew/P+KGDwZ4xylp81H2+eOCCYO3ZxCB1iCdf9ehoe8nOS/wNf68tSmzZ0EpRc 1W3VCuoccAszf1rB6zl+Dc4RumDpt/YAZideEP2h+tFOZr8bhh3CyapGZyGx8JF6 qE5C1CwGPyhZR8ylQyow3Ipmi2vShOyo/7SSf8xm22U3YmYV7kvMsV2oyro0K7CM gUXAj92uzmmIvHcFNDiHc7UWTQdyZNkhLSyCDlRhc6aZ6537gChHk7z4MU/vYwLg RqxT9gBu+r0XQ3Ej4/he6t8hMw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:58:56 2025 by rpki-client