$ rpki-client -vvf rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft File: 5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft (raw, json) Hash identifier: 9iH5e0Co9Z7khYmt/4S0dYLdkFGq25OlfaLgj4x3bSg= Subject key identifier: 72:6F:9E:D7:76:14:1B:E5:67:03:69:CC:B4:9E:C3:D7:76:71:CC:89 Authority key identifier: 5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31 Certificate issuer: /CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31 Certificate serial: 79F80D8B3BB97C6742DBF7B007785CE12953DCC6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer Subject info access: rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft Manifest number: 0285 Signing time: Sun 19 Oct 2025 22:48:20 +0000 Manifest this update: Sun 19 Oct 2025 22:43:20 +0000 Manifest next update: Tue 21 Oct 2025 01:29:20 +0000 Files and hashes: 1: 323830343a333435343a3a2f33322d3334203d3e20323635343531.roa (hash: r3bCeQ3Va1xBObYctOhmI8el+yMJ561eA1zNaJrdc6A=) 2: 5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl (hash: szMq3amk7pPMHshmDBkEBpAqjkDJ6ViQs0KLSBkCyJk=) 3: 323830343a333435343a323030303a3a2f33352d3335203d3e20323635343531.roa (hash: lWPWAMy2NkMXHq4ex2mIrGhd7zdCsxdT6sdhk5ThXO0=) 4: 3136382e3139362e3130342e302f32322d3234203d3e20323635343531.roa (hash: bm12g2NtqddE/K8ln3akRM5TUAz6D/tgPeBexY7J5sY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 01:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f8:0d:8b:3b:b9:7c:67:42:db:f7:b0:07:78:5c:e1:29:53:dc:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31 Validity Not Before: Oct 19 22:43:20 2025 GMT Not After : Oct 21 01:29:20 2025 GMT Subject: CN=726F9ED776141BE5670369CCB49EC3D77671CC89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5c:e6:1b:6a:55:c0:78:69:f3:54:8c:2d:1a: 3d:02:77:94:0b:5a:b7:e3:bf:23:07:98:40:a6:8e: ae:22:b7:55:2c:38:81:06:dc:c8:73:35:01:f5:ba: 48:54:e2:0d:fc:c2:c4:c2:7d:98:2d:30:2e:1d:3c: dc:24:19:bd:f5:fe:23:9b:bb:48:01:79:8d:f1:1c: 31:f5:22:ad:49:ce:02:2f:ac:a6:1b:64:1f:df:2f: 8b:e1:c3:2d:e2:5d:27:75:be:3f:d7:e9:44:06:74: f8:74:f9:51:95:b6:7b:b0:91:ec:f5:1b:c9:c6:28: 3d:6e:55:8d:87:47:38:44:60:0c:ee:14:41:f0:7e: fe:bf:22:8e:20:a1:4d:f4:fd:96:ca:81:55:89:9b: d2:ff:a5:6e:10:87:9f:dc:f0:1d:4c:55:28:16:e2: 58:43:03:37:9f:de:75:60:5e:02:f2:38:03:c8:80: 7b:bf:fd:db:c1:a2:92:53:6a:3b:c3:40:50:44:36: 66:8d:08:28:7f:f7:34:dc:04:41:0b:67:26:af:7e: cc:db:5f:b5:0c:a9:85:31:4e:83:ab:c3:80:c4:f2: c5:c9:4a:c3:73:2d:b7:d9:b5:e6:61:c2:62:aa:8e: c6:50:47:c1:55:2d:03:5d:28:68:34:01:a9:82:7c: 6c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6F:9E:D7:76:14:1B:E5:67:03:69:CC:B4:9E:C3:D7:76:71:CC:89 X509v3 Authority Key Identifier: keyid:5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a3:c4:00:2f:b0:5a:7d:7d:c0:6a:54:1d:8c:16:89:d5:8d: 26:19:7d:b1:8b:88:84:2f:43:29:43:52:38:a8:81:dc:3d:42: 05:46:74:1a:f7:25:c6:f0:66:a8:0b:f3:bd:bb:01:fc:52:2a: 8e:3c:4e:a0:95:cb:c7:83:61:a9:dd:49:24:6f:be:44:0c:a7: e6:35:c9:47:2b:8d:d7:7a:5e:7b:9c:5c:20:f6:9e:ce:d3:95: 32:a1:a4:e0:7d:79:84:e5:f8:17:00:7d:7c:7c:4f:f0:07:42: 37:63:c3:6a:c1:66:76:19:ff:03:56:59:db:f7:1a:0d:f8:47: 82:3e:a4:d5:cb:85:4d:c3:ac:52:08:b1:b3:03:fe:35:19:c3: bc:bc:0b:97:c8:50:da:cc:43:c6:3f:93:11:77:5b:f4:89:b2: 4e:ad:e9:3e:96:0d:89:98:19:db:e5:fc:9f:38:af:db:e0:10: 71:e3:ea:b3:b4:b7:98:5f:34:12:38:92:ef:71:89:6d:b0:46: 38:e3:a2:94:37:3e:e5:b4:8a:01:3c:f0:53:f1:8a:f7:c1:84: ee:76:63:3c:03:d7:54:0a:08:76:12:42:b0:24:4b:d2:2d:07: 80:72:b5:68:19:f2:fd:ed:0a:c5:0d:0d:c4:79:08:0c:68:47: fb:e8:08:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUefgNizu5fGdC2/ewB3hc4SlT3MYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURCRjM4OURFODRBODA2OEQ3MkJBN0E1RTAzMEY5MEQ4 RjY3MEQzMTAeFw0yNTEwMTkyMjQzMjBaFw0yNTEwMjEwMTI5MjBaMDMxMTAvBgNV BAMTKDcyNkY5RUQ3NzYxNDFCRTU2NzAzNjlDQ0I0OUVDM0Q3NzY3MUNDODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCXOYbalXAeGnzVIwtGj0Cd5QL WrfjvyMHmECmjq4it1UsOIEG3MhzNQH1ukhU4g38wsTCfZgtMC4dPNwkGb31/iOb u0gBeY3xHDH1Iq1JzgIvrKYbZB/fL4vhwy3iXSd1vj/X6UQGdPh0+VGVtnuwkez1 G8nGKD1uVY2HRzhEYAzuFEHwfv6/Io4goU30/ZbKgVWJm9L/pW4Qh5/c8B1MVSgW 4lhDAzef3nVgXgLyOAPIgHu//dvBopJTajvDQFBENmaNCCh/9zTcBEELZyavfszb X7UMqYUxToOrw4DE8sXJSsNzLbfZteZhwmKqjsZQR8FVLQNdKGg0AamCfGxVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcm+e13YUG+VnA2nMtJ7D13ZxzIkwHwYDVR0j BBgwFoAUXb84nehKgGjXK6el4DD5DY9nDTEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGs0VWlncXN2Q3BWZUY2b29SYk5tdHY2OW1YVkFWQXhNRlRCclVodEEz R3YvMC81REJGMzg5REU4NEE4MDY4RDcyQkE3QTVFMDMwRjkwRDhGNjcwRDMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEQkYzODlERTg0QTgwNjhE NzJCQTdBNUUwMzBGOTBEOEY2NzBEMzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGs0VWlncXN2Q3BWZUY2b29SYk5tdHY2OW1YVkFWQXhNRlRCclVodEEzR3YvMC81 REJGMzg5REU4NEE4MDY4RDcyQkE3QTVFMDMwRjkwRDhGNjcwRDMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJKPEAC+wWn19wGpUHYwWidWNJhl9sYuIhC9DKUNSOKiB3D1CBUZ0GvclxvBm qAvzvbsB/FIqjjxOoJXLx4Nhqd1JJG++RAyn5jXJRyuN13pee5xcIPaeztOVMqGk 4H15hOX4FwB9fHxP8AdCN2PDasFmdhn/A1ZZ2/caDfhHgj6k1cuFTcOsUgixswP+ NRnDvLwLl8hQ2sxDxj+TEXdb9ImyTq3pPpYNiZgZ2+X8nziv2+AQcePqs7S3mF80 EjiS73GJbbBGOOOilDc+5bSKATzwU/GK98GE7nZjPAPXVAoIdhJCsCRL0i0HgHK1 aBny/e0KxQ0NxHkIDGhH++gIfQ== -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:45 2025 by rpki-client