$ rpki-client -vvf rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.mft File: C5423CDD002348905AC2D36D7816B81D97846978.mft (raw, json) Hash identifier: NSyuW6srMO2g1vSx/I9IZNtdqGvSWg4BLTVG0DX+wBo= Subject key identifier: 5A:B6:E8:90:0E:13:C4:8A:B3:44:B9:14:47:E7:18:AA:79:73:9C:99 Authority key identifier: C5:42:3C:DD:00:23:48:90:5A:C2:D3:6D:78:16:B8:1D:97:84:69:78 Certificate issuer: /CN=C5423CDD002348905AC2D36D7816B81D97846978 Certificate serial: 2A0143A372143056912A2F82E38368E17555A238 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer Subject info access: rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.mft Manifest number: 1A Signing time: Mon 20 Oct 2025 02:19:33 +0000 Manifest this update: Mon 20 Oct 2025 02:14:33 +0000 Manifest next update: Tue 21 Oct 2025 03:02:33 +0000 Files and hashes: 1: C5423CDD002348905AC2D36D7816B81D97846978.crl (hash: If4rhq2Jp2sWJJT7n1/p8sLZOPdie3CuePSa7f97rso=) 2: 34352e3138332e3136362e302f32342d3234203d3e20323639323838.roa (hash: cxDd+okJkjtg47HvDfFnuvmdDyRXUKijnUErHTNTcuc=) 3: 34352e3138332e3136352e302f32342d3234203d3e20323639323838.roa (hash: zyDsEY4ZAV0sl3Uszl3g1iMc0aWyKhZN7pMENpVB6bU=) 4: 323830343a363234383a346330303a3a2f33382d3338203d3e20323639323838.roa (hash: LwUxlK8xEOi6aUOThzIkF746qcNllmDI5O1/KuVsrX8=) 5: 34352e3138332e3136362e302f32332d3233203d3e20323639323838.roa (hash: d8u5h26uasxQo7tRx+fU4yN6m3APz8uOf4bD0Ypd4dk=) 6: 323830343a363234383a343030303a3a2f33352d3335203d3e20323639323838.roa (hash: NWIjtBSJw6Jrjc2FUNODpR+R5MJpOCh/b2DrK7s/GR0=) 7: 323830343a363234383a353030303a3a2f33382d3338203d3e20323639323838.roa (hash: +VdQ3er5Av62lFRjCIOwCrakBNaeL3MKZeRzpYfNzn8=) 8: 34352e3138332e3136372e302f32342d3234203d3e20323639323838.roa (hash: XViF6KpgR8BimVjbtsk8BB56gelnkdHBfAT2I9fNMpU=) 9: 323830343a363234383a383030303a3a2f33332d3333203d3e20323639323838.roa (hash: r/ZXCGmumyKG+OR888CR2aMc3/dhLAjr4nXTUGZIBg8=) 10: 34352e3138332e3136342e302f32342d3234203d3e20323639323838.roa (hash: B0FwVmwclHCVJQzLdtp79AAs/NW1LCY9cw1fldgL6d0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.crl rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:01:43:a3:72:14:30:56:91:2a:2f:82:e3:83:68:e1:75:55:a2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5423CDD002348905AC2D36D7816B81D97846978 Validity Not Before: Oct 20 02:14:33 2025 GMT Not After : Oct 21 03:02:33 2025 GMT Subject: CN=5AB6E8900E13C48AB344B91447E718AA79739C99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:19:0d:79:18:f8:bc:36:8a:52:03:29:d2: 4d:19:88:39:70:ed:db:df:f8:30:cb:43:c1:5e:50: cb:04:e5:cb:84:ac:d4:85:33:40:74:01:88:d4:50: c0:45:df:49:45:52:a6:72:50:84:c5:66:48:45:2a: 57:ef:b0:9e:f9:49:58:13:3a:9e:ed:f8:f9:65:35: b5:f3:24:6e:e5:fb:dc:de:cf:e7:9b:7e:43:34:71: 4c:df:e0:fe:b6:8b:16:94:12:d0:c8:d9:c6:a5:e1: 37:8c:27:cc:56:76:e4:f6:9a:a8:70:a5:b6:6f:75: 41:cd:74:3c:45:4d:fb:68:02:2e:6e:dd:3b:f8:df: d7:15:79:d9:c7:f5:c0:58:1b:28:e9:30:ef:17:2a: 21:f7:5c:0a:1f:a7:cb:24:72:ee:ee:5c:a6:4f:03: dd:6b:dd:6e:a0:9d:38:58:85:9c:49:90:66:c7:fe: 59:22:8f:eb:fb:db:1d:15:d8:33:45:74:5d:00:94: 05:24:ad:6d:01:33:f2:db:87:b0:2b:12:b2:48:cf: ed:1a:c4:ec:0d:74:f4:be:31:64:31:e6:61:8a:06: ee:a6:e1:f7:c2:a3:6a:bc:42:7a:40:2f:7d:00:ea: b4:f8:cd:02:44:6c:32:46:ad:d8:04:17:65:16:d7: f2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B6:E8:90:0E:13:C4:8A:B3:44:B9:14:47:E7:18:AA:79:73:9C:99 X509v3 Authority Key Identifier: keyid:C5:42:3C:DD:00:23:48:90:5A:C2:D3:6D:78:16:B8:1D:97:84:69:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:80:64:99:cd:8f:0d:3e:e0:86:09:5c:9e:d0:80:70:8b:48: f4:0f:59:82:34:50:2f:06:a7:3a:d9:2b:8b:ce:f4:35:94:9a: 03:34:c1:2e:80:06:76:76:b9:ba:85:4d:ec:1a:56:1f:74:21: 22:c0:53:71:85:e0:b7:7f:23:cc:3a:76:7e:fd:85:ab:54:57: a4:f6:f6:5a:6b:f7:db:5e:20:67:0b:6a:01:45:85:92:86:06: 52:12:65:32:6c:b3:9d:db:fc:1a:ea:e3:b2:13:d5:46:db:f0: e9:9e:01:25:6c:98:ec:a7:f0:ac:57:03:4a:a1:58:a6:c2:fa: 91:c1:fa:6d:4c:82:77:45:66:77:5e:f8:af:be:70:93:4e:27: 55:e2:1f:99:56:a7:3c:80:88:b0:d1:9c:fe:4c:9d:7c:80:87: ac:15:56:4f:2e:b4:6a:b4:ca:bd:e9:1a:05:2b:77:50:f6:b8: 26:b5:5f:de:f3:e0:12:2c:5c:f1:45:5d:2c:d8:9d:87:8d:4c: 77:b2:c2:4f:65:2a:82:46:e0:a2:3c:a2:5f:a4:aa:40:58:fe: 30:a8:61:5b:38:c2:99:ea:78:b4:d4:05:35:9a:cd:c4:e0:d5: 2a:f5:43:dd:79:b3:52:0f:f6:27:44:05:98:9b:27:c4:2e:6f: 72:5d:12:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKgFDo3IUMFaRKi+C44No4XVVojgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU0MjNDREQwMDIzNDg5MDVBQzJEMzZENzgxNkI4MUQ5 Nzg0Njk3ODAeFw0yNTEwMjAwMjE0MzNaFw0yNTEwMjEwMzAyMzNaMDMxMTAvBgNV BAMTKDVBQjZFODkwMEUxM0M0OEFCMzQ0QjkxNDQ3RTcxOEFBNzk3MzlDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCShkNeRj4vDaKUgMp0k0ZiDlw 7dvf+DDLQ8FeUMsE5cuErNSFM0B0AYjUUMBF30lFUqZyUITFZkhFKlfvsJ75SVgT Op7t+PllNbXzJG7l+9zez+ebfkM0cUzf4P62ixaUEtDI2cal4TeMJ8xWduT2mqhw pbZvdUHNdDxFTftoAi5u3Tv439cVednH9cBYGyjpMO8XKiH3XAofp8skcu7uXKZP A91r3W6gnThYhZxJkGbH/lkij+v72x0V2DNFdF0AlAUkrW0BM/Lbh7ArErJIz+0a xOwNdPS+MWQx5mGKBu6m4ffCo2q8QnpAL30A6rT4zQJEbDJGrdgEF2UW1/IDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWrbokA4TxIqzRLkUR+cYqnlznJkwHwYDVR0j BBgwFoAUxUI83QAjSJBawtNteBa4HZeEaXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGpDRzJWcVFGNjRlQXlxZXFhbTd5OVNwYmE3NURXZGFyMlprTEN1dEtN TGEvMC9DNTQyM0NERDAwMjM0ODkwNUFDMkQzNkQ3ODE2QjgxRDk3ODQ2OTc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1NDIzQ0REMDAyMzQ4OTA1 QUMyRDM2RDc4MTZCODFEOTc4NDY5NzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGpDRzJWcVFGNjRlQXlxZXFhbTd5OVNwYmE3NURXZGFyMlprTEN1dEtNTGEvMC9D NTQyM0NERDAwMjM0ODkwNUFDMkQzNkQ3ODE2QjgxRDk3ODQ2OTc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkYBkmc2PDT7ghglcntCAcItI9A9ZgjRQLwanOtkri870NZSaAzTBLoAGdna5 uoVN7BpWH3QhIsBTcYXgt38jzDp2fv2Fq1RXpPb2Wmv3214gZwtqAUWFkoYGUhJl Mmyzndv8GurjshPVRtvw6Z4BJWyY7KfwrFcDSqFYpsL6kcH6bUyCd0Vmd174r75w k04nVeIfmVanPICIsNGc/kydfICHrBVWTy60arTKvekaBSt3UPa4JrVf3vPgEixc 8UVdLNidh41Md7LCT2UqgkbgojyiX6SqQFj+MKhhWzjCmep4tNQFNZrNxODVKvVD 3XmzUg/2J0QFmJsnxC5vcl0S/g== -----END CERTIFICATE-----Generated at Mon Oct 20 19:17:10 2025 by rpki-client