$ rpki-client -vvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft File: 5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft (raw, json) Hash identifier: h+HDi418qNKS0mevI61+43s+GIxYSOINmREzu4m2ssQ= Subject key identifier: 6B:D4:51:76:BC:0E:9F:F2:52:95:6E:A9:D8:AD:74:58:4C:B8:73:BE Authority key identifier: 5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9 Certificate issuer: /CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9 Certificate serial: 3823C3E0A900D3C793C556780F89C4B523742D91 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer Subject info access: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft Manifest number: 02F3 Signing time: Mon 20 Oct 2025 09:26:25 +0000 Manifest this update: Mon 20 Oct 2025 09:21:25 +0000 Manifest next update: Tue 21 Oct 2025 09:57:25 +0000 Files and hashes: 1: 3137372e38362e3131362e302f32322d3234203d3e203532353730.roa (hash: OGh0oSMiAuqwOXO84p0Xsd8bUAebLrAgyXg0x2c44tg=) 2: 5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl (hash: MIE0qWpgdRXMvs3XYC2THKQtaWKqbz0XLf067QjPNlY=) 3: 3137392e39362e3230302e302f32312d3234203d3e203532353730.roa (hash: ThFay1lLsaEu2jVa7XfNcUJbNcEHJjS8TO7JyZdIDyo=) 4: 323830343a313536343a3a2f33322d3336203d3e203532353730.roa (hash: FC1Wd69RrJidzRZVv4UIal/AXyu4NEituILPDllcaNg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:23:c3:e0:a9:00:d3:c7:93:c5:56:78:0f:89:c4:b5:23:74:2d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9 Validity Not Before: Oct 20 09:21:25 2025 GMT Not After : Oct 21 09:57:25 2025 GMT Subject: CN=6BD45176BC0E9FF252956EA9D8AD74584CB873BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:42:48:be:32:29:c4:62:b3:d8:33:1d:ab:16: fe:ad:0b:13:16:24:58:fd:d2:17:56:e1:11:86:ee: 58:52:13:8a:d6:2c:94:4d:36:28:49:ca:27:0a:03: e9:3f:74:4e:3b:b7:3a:35:27:73:37:9f:e8:bc:65: a5:b8:4f:66:e4:b2:fb:a4:17:8f:5c:05:19:12:ae: 15:99:59:9f:6e:1c:99:4e:84:31:3d:e1:b7:16:a2: 72:0d:c6:01:c1:14:d4:d9:de:4a:60:ad:4b:b7:60: df:e4:86:c6:f0:0b:37:a8:b3:b7:d3:86:56:02:fe: a5:7b:dc:c9:15:33:cd:90:f0:3a:1d:9f:38:37:ca: 03:33:ad:21:fb:70:c1:c1:e3:34:16:e9:03:16:59: 5a:3d:b1:38:31:cd:49:d5:ed:d0:a6:71:2b:18:7f: c9:09:f9:05:6e:d6:65:3a:ca:7f:2d:e4:f2:06:64: 26:38:4f:bb:a3:dc:6d:d5:9a:53:28:51:e0:7e:36: e2:fe:9b:9e:cf:2e:09:86:7f:8f:bf:13:2f:51:52: da:2b:cf:da:8d:a8:1b:0c:eb:19:82:4e:04:13:c8: 8e:aa:3f:57:81:82:ed:75:21:9e:4e:8b:b8:7f:a2: 95:57:dc:e6:f3:1e:c9:85:41:fe:68:8b:4e:96:9b: ef:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D4:51:76:BC:0E:9F:F2:52:95:6E:A9:D8:AD:74:58:4C:B8:73:BE X509v3 Authority Key Identifier: keyid:5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:59:da:8d:47:c2:24:8f:e9:22:d3:97:63:c0:1d:af:10:f9: 13:3d:f5:ed:6d:cb:d8:21:d0:0b:9c:14:3e:35:f6:37:d0:2d: 59:08:4f:94:c1:16:06:82:31:83:a6:f4:d7:38:8e:7f:18:a5: 79:26:e8:e4:f0:00:3b:e1:6c:4e:1f:ca:f6:79:de:35:db:8c: 31:8d:35:cd:ac:84:93:5f:b0:a3:7d:c8:a4:4c:42:cc:1f:40: 86:37:9c:64:bb:9f:17:58:3e:df:a1:4a:dc:4f:d7:75:59:4e: 95:c0:01:26:f3:db:1e:93:88:3a:18:77:a2:ec:3e:31:8b:ab: 2f:31:5b:9c:19:c0:f7:7f:95:24:dd:02:00:ea:27:55:fa:e6: 07:8f:26:45:96:cd:41:ed:b9:ea:bb:91:1e:11:04:5c:52:bb: a2:2a:b6:84:b6:3b:a8:95:56:cd:a1:41:5f:fa:c0:ce:93:9e: db:55:1a:28:ea:a1:1f:63:2a:52:fa:3a:28:e6:1a:97:59:a6: 7a:9f:4a:f7:96:f8:18:08:40:6b:70:86:a2:8d:d4:4e:7c:76: 65:8b:29:ff:64:f4:2c:2b:e4:fc:fb:32:17:cb:ea:e3:e2:52: ee:be:55:a4:e0:41:87:e1:a9:3f:fa:39:d5:95:2c:63:e4:e9: 8a:6a:b8:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOCPD4KkA08eTxVZ4D4nEtSN0LZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNURDMjJDOUYzOEU0QjNBNUZGQUNDNzY4OUM2RUI1 MkE2NURCOTAeFw0yNTEwMjAwOTIxMjVaFw0yNTEwMjEwOTU3MjVaMDMxMTAvBgNV BAMTKDZCRDQ1MTc2QkMwRTlGRjI1Mjk1NkVBOUQ4QUQ3NDU4NENCODczQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaQki+MinEYrPYMx2rFv6tCxMW JFj90hdW4RGG7lhSE4rWLJRNNihJyicKA+k/dE47tzo1J3M3n+i8ZaW4T2bksvuk F49cBRkSrhWZWZ9uHJlOhDE94bcWonINxgHBFNTZ3kpgrUu3YN/khsbwCzeos7fT hlYC/qV73MkVM82Q8Dodnzg3ygMzrSH7cMHB4zQW6QMWWVo9sTgxzUnV7dCmcSsY f8kJ+QVu1mU6yn8t5PIGZCY4T7uj3G3VmlMoUeB+NuL+m57PLgmGf4+/Ey9RUtor z9qNqBsM6xmCTgQTyI6qP1eBgu11IZ5Oi7h/opVX3ObzHsmFQf5oi06Wm+8rAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUa9RRdrwOn/JSlW6p2K10WEy4c74wHwYDVR0j BBgwFoAUX/XcIsnzjks6X/rMdonG61KmXbkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1J1UkxMYXVhenpxUWQ3NUdpWkxpdE5hUVp4bWRVcTZMREpaajhmcWV5 ZDIvMS81RkY1REMyMkM5RjM4RTRCM0E1RkZBQ0M3Njg5QzZFQjUyQTY1REI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGRjVEQzIyQzlGMzhFNEIz QTVGRkFDQzc2ODlDNkVCNTJBNjVEQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1J1UkxMYXVhenpxUWQ3NUdpWkxpdE5hUVp4bWRVcTZMREpaajhmcWV5ZDIvMS81 RkY1REMyMkM5RjM4RTRCM0E1RkZBQ0M3Njg5QzZFQjUyQTY1REI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa1najUfCJI/pItOXY8AdrxD5Ez317W3L2CHQC5wUPjX2N9AtWQhPlMEWBoIx g6b01ziOfxileSbo5PAAO+FsTh/K9nneNduMMY01zayEk1+wo33IpExCzB9Ahjec ZLufF1g+36FK3E/XdVlOlcABJvPbHpOIOhh3ouw+MYurLzFbnBnA93+VJN0CAOon VfrmB48mRZbNQe256ruRHhEEXFK7oiq2hLY7qJVWzaFBX/rAzpOe21UaKOqhH2Mq Uvo6KOYal1mmep9K95b4GAhAa3CGoo3UTnx2ZYsp/2T0LCvk/PsyF8vq4+JS7r5V pOBBh+GpP/o51ZUsY+Tpimq4Cg== -----END CERTIFICATE-----Generated at Mon Oct 20 18:27:15 2025 by rpki-client