$ rpki-client -vvf rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft File: 289C0FA8F74E8A496A1CF040353916504C4E789F.mft (raw, json) Hash identifier: Q1itRPxYg2M2z7/1teeCH3d+1t8nk+GS33UKQSRcqTc= Subject key identifier: 5C:0C:0F:FA:3E:DC:C2:A9:9B:A9:C0:C6:A1:5A:C1:EF:8B:E6:3A:25 Authority key identifier: 28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F Certificate issuer: /CN=289C0FA8F74E8A496A1CF040353916504C4E789F Certificate serial: 732D6DCBB12CEBDCC881766655167CDCF7102069 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer Subject info access: rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft Manifest number: 02D8 Signing time: Mon 20 Oct 2025 07:55:20 +0000 Manifest this update: Mon 20 Oct 2025 07:50:20 +0000 Manifest next update: Tue 21 Oct 2025 08:47:20 +0000 Files and hashes: 1: 289C0FA8F74E8A496A1CF040353916504C4E789F.crl (hash: sFi5U14runWbg0o7PFi9WAvFnBfuOvqlc4WcnKNDboQ=) 2: 34352e3232382e3134382e302f32322d3234203d3e20323637303738.roa (hash: v1wrjfYs/XN4AL+meICElKQP9scnXquXOc/B2Xkm9JI=) 3: 323830343a343764303a3a2f33322d313238203d3e20323637303738.roa (hash: +gP3s6w113DB3ZyjXxmKKAlbxghpSVPSj8Lqa0WGlnI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.crl rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2d:6d:cb:b1:2c:eb:dc:c8:81:76:66:55:16:7c:dc:f7:10:20:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289C0FA8F74E8A496A1CF040353916504C4E789F Validity Not Before: Oct 20 07:50:20 2025 GMT Not After : Oct 21 08:47:20 2025 GMT Subject: CN=5C0C0FFA3EDCC2A99BA9C0C6A15AC1EF8BE63A25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1d:a1:e1:f6:c2:e9:a4:13:4e:8e:f0:40:3a: 8a:cd:0c:00:61:36:dc:bb:a3:2f:06:9e:b1:ca:17: 1c:ad:1a:8a:2c:61:7a:83:0d:db:e3:bb:4b:9e:25: 8b:a6:07:60:56:38:7e:5f:56:73:23:a5:73:6b:a5: 38:5c:60:ae:f8:8a:46:46:9c:7b:01:3e:c2:d4:eb: e3:f5:bd:99:88:29:d2:68:e1:71:5b:ed:df:db:2a: ae:96:7c:a7:50:be:9b:11:00:80:16:c9:e7:a4:fc: 73:01:ec:cc:98:5d:84:ee:ef:e7:8f:c1:89:68:04: 63:38:8e:e0:6f:54:97:3c:75:1c:dc:00:60:85:91: b1:03:cc:5a:61:75:95:6d:5b:35:fa:58:d4:be:0c: 59:89:3f:04:7b:f1:1a:a6:a8:b7:14:fb:20:a1:62: 62:d7:88:18:b7:7d:2a:44:bb:d3:fe:d5:a2:d2:14: 57:8b:ca:11:82:09:e6:31:72:75:e8:94:0b:48:fa: db:1e:e9:74:e1:6e:73:72:15:5f:d9:4d:e4:9d:54: 53:08:25:69:96:3e:ad:af:99:40:53:41:7c:e0:fb: 62:89:fc:c0:e9:f8:a1:a7:be:4e:49:50:ce:3f:4a: d0:9a:2c:a2:fb:2d:0f:32:69:5c:ff:9f:11:ef:9d: 04:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0C:0F:FA:3E:DC:C2:A9:9B:A9:C0:C6:A1:5A:C1:EF:8B:E6:3A:25 X509v3 Authority Key Identifier: keyid:28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:06:8f:ca:42:11:c1:67:53:09:6b:10:35:05:95:6f:00:3a: a7:58:b7:c3:4c:46:4c:9b:b6:18:cd:bd:fa:ac:b7:d9:34:58: 26:98:45:5a:e5:af:75:ee:5f:48:3e:76:24:9b:6f:11:18:7a: 2e:09:a8:58:2d:27:8f:b5:22:e2:94:ec:f0:94:78:5b:e3:dc: 56:01:10:03:b0:e7:8e:a1:74:8c:83:c4:16:b0:4d:0c:a0:12: f1:e9:26:e6:38:11:9b:23:6a:b1:68:3d:c0:5f:06:ed:a4:7b: 62:3e:e6:a0:e6:0f:cf:07:4d:3a:7c:d6:7f:c6:19:c1:0e:fa: 8e:4f:47:9f:f2:a7:dd:45:34:1a:14:72:2f:e5:33:75:40:86: ef:10:89:d1:15:a6:08:b3:96:a0:49:b6:b9:58:e0:d9:f6:71: 7e:1f:f6:0c:56:cb:b9:ae:5b:75:85:04:4e:07:eb:5e:9a:38: f7:1d:9c:46:cf:43:b6:8b:39:fc:aa:8f:27:9f:c2:92:9b:17: fc:35:59:a9:49:d4:c2:24:f8:89:c0:71:4e:0e:46:b6:10:84: 74:ff:cd:ce:01:ac:71:82:99:b2:7f:ae:b4:a5:ee:05:5c:cb: 61:ab:d5:39:5e:dc:3e:0b:ce:16:d1:0f:ed:79:10:ce:3c:12: 0d:f8:46:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcy1ty7Es69zIgXZmVRZ83PcQIGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5QzBGQThGNzRFOEE0OTZBMUNGMDQwMzUzOTE2NTA0 QzRFNzg5RjAeFw0yNTEwMjAwNzUwMjBaFw0yNTEwMjEwODQ3MjBaMDMxMTAvBgNV BAMTKDVDMEMwRkZBM0VEQ0MyQTk5QkE5QzBDNkExNUFDMUVGOEJFNjNBMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCHaHh9sLppBNOjvBAOorNDABh Nty7oy8GnrHKFxytGoosYXqDDdvju0ueJYumB2BWOH5fVnMjpXNrpThcYK74ikZG nHsBPsLU6+P1vZmIKdJo4XFb7d/bKq6WfKdQvpsRAIAWyeek/HMB7MyYXYTu7+eP wYloBGM4juBvVJc8dRzcAGCFkbEDzFphdZVtWzX6WNS+DFmJPwR78RqmqLcU+yCh YmLXiBi3fSpEu9P+1aLSFFeLyhGCCeYxcnXolAtI+tse6XThbnNyFV/ZTeSdVFMI JWmWPq2vmUBTQXzg+2KJ/MDp+KGnvk5JUM4/StCaLKL7LQ8yaVz/nxHvnQS3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXAwP+j7cwqmbqcDGoVrB74vmOiUwHwYDVR0j BBgwFoAUKJwPqPdOiklqHPBANTkWUExOeJ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNTFwV05zeWkxc3pIbVJ5aDlxRG5leWlZSFBubktIZGpYU2k3MVBSeTJq YWMvMC8yODlDMEZBOEY3NEU4QTQ5NkExQ0YwNDAzNTM5MTY1MDRDNEU3ODlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4OUMwRkE4Rjc0RThBNDk2 QTFDRjA0MDM1MzkxNjUwNEM0RTc4OUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NTFwV05zeWkxc3pIbVJ5aDlxRG5leWlZSFBubktIZGpYU2k3MVBSeTJqYWMvMC8y ODlDMEZBOEY3NEU4QTQ5NkExQ0YwNDAzNTM5MTY1MDRDNEU3ODlGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAagaPykIRwWdTCWsQNQWVbwA6p1i3w0xGTJu2GM29+qy32TRYJphFWuWvde5f SD52JJtvERh6LgmoWC0nj7Ui4pTs8JR4W+PcVgEQA7DnjqF0jIPEFrBNDKAS8ekm 5jgRmyNqsWg9wF8G7aR7Yj7moOYPzwdNOnzWf8YZwQ76jk9Hn/Kn3UU0GhRyL+Uz dUCG7xCJ0RWmCLOWoEm2uVjg2fZxfh/2DFbLua5bdYUETgfrXpo49x2cRs9Dtos5 /KqPJ5/CkpsX/DVZqUnUwiT4icBxTg5GthCEdP/NzgGscYKZsn+utKXuBVzLYavV OV7cPgvOFtEP7XkQzjwSDfhG1A== -----END CERTIFICATE-----Generated at Mon Oct 20 13:44:50 2025 by rpki-client