$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft File: C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft (raw, json) Hash identifier: gzRwrTkZSJH9V9e+U2u0aOLL+sZ558DBrlN71cwoj8A= Subject key identifier: 21:A7:5C:94:2B:43:67:FF:56:A9:9D:14:8D:B2:C7:81:76:65:D1:7F Authority key identifier: C7:C5:FB:EC:3A:54:3A:98:78:99:FE:A8:6B:4E:C6:8B:B3:B7:85:C6 Certificate issuer: /CN=C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6 Certificate serial: 04473D98FFCC685FFD0DE1C493CEDD62814F9F3F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer Subject info access: rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft Manifest number: 90 Signing time: Mon 20 Oct 2025 15:05:07 +0000 Manifest this update: Mon 20 Oct 2025 15:00:07 +0000 Manifest next update: Tue 21 Oct 2025 18:58:07 +0000 Files and hashes: 1: C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.crl (hash: eJ6Dss7PUsUqHhyanqA3XIgw4vSWm0YuUQGt6i4jW0A=) 2: 323830343a6139633a3a2f33322d3333203d3e203532383938.roa (hash: HpYSXVRiMUCEyphfyUnjYZ8d4vusVhaATgf/hl2rd0Q=) 3: 3137372e3138342e36342e302f32302d3234203d3e203532383938.roa (hash: u5VZboufd9q3izfHx5cNQeI0r2bBo05yX5Km59lO+FA=) 4: 3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa (hash: p/f9WMgk5TtK110gPA24AZ2OwCTIhCwLfAsFip2SxTc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.crl rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 18:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:47:3d:98:ff:cc:68:5f:fd:0d:e1:c4:93:ce:dd:62:81:4f:9f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6 Validity Not Before: Oct 20 15:00:07 2025 GMT Not After : Oct 21 18:58:07 2025 GMT Subject: CN=21A75C942B4367FF56A99D148DB2C7817665D17F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:de:1f:71:1f:ad:0c:52:60:8d:f2:9c:f9: a4:c9:92:cf:58:79:db:26:e9:35:87:2f:67:79:9d: 4e:80:ac:d9:58:cb:dc:16:27:33:e2:09:fa:ed:72: 0f:53:88:a2:63:55:a5:72:86:80:b0:fe:fc:12:dc: 02:0a:93:55:c9:9a:a5:f1:65:5f:d6:04:50:6f:c7: 08:75:cf:98:b9:16:72:47:9a:ad:b7:3b:9b:5c:b3: 77:fb:3c:6c:55:ac:30:3c:22:40:53:31:4d:06:50: 1d:20:9c:7a:76:95:b6:03:85:af:4e:c5:17:5e:95: 16:aa:f7:4b:18:60:9f:41:f9:0f:ca:71:ba:69:09: 83:8d:07:44:07:e2:db:c1:6c:cc:5c:f6:d2:68:ef: a1:7f:a1:37:25:96:6d:77:a4:16:46:ce:a9:c1:5d: 3d:27:2c:51:98:d5:fb:3d:25:75:a9:13:6d:47:68: f1:04:4f:6d:32:b8:d3:ff:da:95:47:f6:a7:fc:1a: 07:30:05:27:9e:c1:fd:ad:0e:70:62:9d:42:d5:36: cd:08:cc:77:75:ba:67:b1:6d:62:ca:da:9d:dd:b8: b7:af:35:79:c3:f6:20:a9:eb:ec:44:bf:9f:a0:08: f0:f4:42:20:71:e2:97:27:4d:39:dd:02:31:6d:38: d3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A7:5C:94:2B:43:67:FF:56:A9:9D:14:8D:B2:C7:81:76:65:D1:7F X509v3 Authority Key Identifier: keyid:C7:C5:FB:EC:3A:54:3A:98:78:99:FE:A8:6B:4E:C6:8B:B3:B7:85:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:68:fb:3e:20:09:42:73:a8:76:ed:02:0c:10:3a:0f:5b:30: 57:19:70:a4:cd:91:88:7e:f4:54:a4:7d:e3:80:6e:7d:ec:3f: 74:fc:9e:f5:e2:73:6c:df:8e:c0:3c:2d:c5:26:cb:42:38:af: 7e:af:b0:e7:f4:24:f9:1a:17:4b:36:0e:ef:7c:8b:88:3e:be: d2:7a:67:da:4a:74:40:13:e6:15:be:75:ea:a9:f4:b6:19:c1: 04:51:2b:e1:8e:88:ee:d9:ef:3a:6a:04:31:03:a9:d6:2a:1b: a1:28:13:0c:27:43:93:50:be:0c:83:5f:94:9b:15:3b:9c:cc: 44:ab:08:69:81:1b:1a:f2:6d:c5:5e:dd:46:6c:d9:0e:d0:3f: 6f:fd:b9:dc:15:74:51:c8:e1:4d:83:9c:4a:fa:99:e1:e1:6d: 34:38:9d:5a:a9:de:3b:c6:75:ba:0f:2a:8f:fb:5a:e4:08:5c: d8:10:a7:81:79:f1:43:db:d9:da:9f:41:15:bf:7b:dd:dc:c8: c1:6c:71:4b:41:2a:4d:3a:81:c8:53:07:bb:e2:00:fb:d6:99: 8a:43:0c:a2:1d:38:b2:26:f8:63:d7:4a:66:d1:7b:87:c9:b4: d9:f6:35:49:49:7b:a4:0c:be:9b:4b:29:3c:43:1a:48:a9:fe: ca:f1:6a:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBEc9mP/MaF/9DeHEk87dYoFPnz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdDNUZCRUMzQTU0M0E5ODc4OTlGRUE4NkI0RUM2OEJC M0I3ODVDNjAeFw0yNTEwMjAxNTAwMDdaFw0yNTEwMjExODU4MDdaMDMxMTAvBgNV BAMTKDIxQTc1Qzk0MkI0MzY3RkY1NkE5OUQxNDhEQjJDNzgxNzY2NUQxN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCGN4fcR+tDFJgjfKc+aTJks9Y edsm6TWHL2d5nU6ArNlYy9wWJzPiCfrtcg9TiKJjVaVyhoCw/vwS3AIKk1XJmqXx ZV/WBFBvxwh1z5i5FnJHmq23O5tcs3f7PGxVrDA8IkBTMU0GUB0gnHp2lbYDha9O xRdelRaq90sYYJ9B+Q/KcbppCYONB0QH4tvBbMxc9tJo76F/oTcllm13pBZGzqnB XT0nLFGY1fs9JXWpE21HaPEET20yuNP/2pVH9qf8GgcwBSeewf2tDnBinULVNs0I zHd1umexbWLK2p3duLevNXnD9iCp6+xEv5+gCPD0QiBx4pcnTTndAjFtONP7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIadclCtDZ/9WqZ0UjbLHgXZl0X8wHwYDVR0j BBgwFoAUx8X77DpUOph4mf6oa07Gi7O3hcYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2FuaEdYY0diZTdtekhTZFhTMVoxZjRwaGNTQ0V6UFJIUm9zV1FxZWV4 cTQvMC9DN0M1RkJFQzNBNTQzQTk4Nzg5OUZFQTg2QjRFQzY4QkIzQjc4NUM2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3QzVGQkVDM0E1NDNBOTg3 ODk5RkVBODZCNEVDNjhCQjNCNzg1QzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2FuaEdYY0diZTdtekhTZFhTMVoxZjRwaGNTQ0V6UFJIUm9zV1FxZWV4cTQvMC9D N0M1RkJFQzNBNTQzQTk4Nzg5OUZFQTg2QjRFQzY4QkIzQjc4NUM2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARGj7PiAJQnOodu0CDBA6D1swVxlwpM2RiH70VKR944Bufew/dPye9eJzbN+O wDwtxSbLQjivfq+w5/Qk+RoXSzYO73yLiD6+0npn2kp0QBPmFb516qn0thnBBFEr 4Y6I7tnvOmoEMQOp1ioboSgTDCdDk1C+DINflJsVO5zMRKsIaYEbGvJtxV7dRmzZ DtA/b/253BV0UcjhTYOcSvqZ4eFtNDidWqneO8Z1ug8qj/ta5Ahc2BCngXnxQ9vZ 2p9BFb973dzIwWxxS0EqTTqByFMHu+IA+9aZikMMoh04sib4Y9dKZtF7h8m02fY1 SUl7pAy+m0spPEMaSKn+yvFq+g== -----END CERTIFICATE-----Generated at Mon Oct 20 23:36:51 2025 by rpki-client