$ rpki-client -vvf rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft File: 542883AF217B55CA895036F0F5CDBCE406386E83.mft (raw, json) Hash identifier: 6BdMJI3fCYHTNP/3/pHKqU7pw6/YbTb2RBm4RJfOGKQ= Subject key identifier: 81:7E:27:39:0A:DD:BB:5D:53:64:E3:C1:B1:C7:D9:40:35:4F:8C:AF Authority key identifier: 54:28:83:AF:21:7B:55:CA:89:50:36:F0:F5:CD:BC:E4:06:38:6E:83 Certificate issuer: /CN=542883AF217B55CA895036F0F5CDBCE406386E83 Certificate serial: 0EA42F3915A449AEA977A762724C88B9A8A78422 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer Subject info access: rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft Manifest number: 01CF Signing time: Mon 20 Oct 2025 15:15:02 +0000 Manifest this update: Mon 20 Oct 2025 15:10:02 +0000 Manifest next update: Tue 21 Oct 2025 16:05:02 +0000 Files and hashes: 1: 3230302e3134322e3232342e302f32322d3234203d3e20323730393331.roa (hash: +k9SBA0b4hGy+gKwJZ70sOS+jRS1RXL4Gqj6hwBEfrE=) 2: 542883AF217B55CA895036F0F5CDBCE406386E83.crl (hash: cq6fZ8FlN2udWEZ6d2QGQwxrSvfQaF+IKNP+uBd/Y78=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.crl rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 16:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a4:2f:39:15:a4:49:ae:a9:77:a7:62:72:4c:88:b9:a8:a7:84:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=542883AF217B55CA895036F0F5CDBCE406386E83 Validity Not Before: Oct 20 15:10:02 2025 GMT Not After : Oct 21 16:05:02 2025 GMT Subject: CN=817E27390ADDBB5D5364E3C1B1C7D940354F8CAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:05:5b:fd:06:7e:39:ef:60:7d:65:bf:e7:46: ed:58:e2:d5:91:4d:b1:d7:de:f2:e5:50:9f:73:12: 9f:f3:3d:2e:44:a4:04:ed:7a:55:27:f4:c9:d9:ad: 37:59:a4:32:61:af:4a:82:38:82:ca:a2:4f:c4:c5: 14:03:66:e9:7b:fd:88:2f:f9:d5:71:f5:3e:f4:bb: 1b:74:a2:34:ab:cd:ab:20:e8:3e:68:7f:b8:ab:57: 41:a1:ba:5d:73:07:ba:bc:04:f4:6e:17:81:ac:88: 26:0a:f9:8d:67:39:11:d5:f2:85:67:5c:02:21:ba: 67:c9:ba:48:a4:7d:8a:5c:e0:a2:18:40:45:be:5f: e6:9e:19:db:ec:0b:ad:82:20:c6:58:f6:97:83:a6: d9:15:71:7a:a1:66:05:d3:8e:f1:2a:4b:c8:04:8d: 0a:e0:51:98:ba:85:0d:91:39:1b:f4:f5:58:30:81: 3c:27:54:1c:3d:be:23:a6:54:b4:5c:b4:88:11:15: 82:b9:e0:7e:0d:c9:86:a9:80:6a:7d:03:72:76:97: 84:62:2b:1a:b6:73:d3:d5:8e:14:71:45:29:85:34: ec:f4:69:2f:c4:7b:4a:2b:c7:0d:fa:aa:45:0c:bd: b0:17:b1:72:ec:29:ce:0b:9a:52:32:1a:5d:5c:c2: 5c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7E:27:39:0A:DD:BB:5D:53:64:E3:C1:B1:C7:D9:40:35:4F:8C:AF X509v3 Authority Key Identifier: keyid:54:28:83:AF:21:7B:55:CA:89:50:36:F0:F5:CD:BC:E4:06:38:6E:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:77:2f:a4:96:a5:f8:ed:03:99:23:77:27:d8:da:2a:e5:b1: 37:4c:50:21:d3:5a:90:8a:ea:68:eb:e5:41:69:3e:7c:82:f6: 8c:d2:a5:ad:f3:0b:13:8b:ac:d1:24:d1:e6:07:0d:0c:aa:c8: 44:1d:ce:cd:e2:a5:1b:9a:45:f5:b9:68:b9:bf:b9:06:22:72: f1:ae:01:71:8a:40:82:c4:7c:85:e5:c4:6d:b8:cf:f3:d9:b3: 43:9a:4b:96:70:8d:31:ab:c9:7e:92:48:46:94:e0:62:65:ad: 30:ee:5a:df:34:fa:e4:78:1f:19:ee:62:da:4a:87:7b:28:93: 21:cb:df:34:76:cc:13:50:01:53:32:e0:0c:89:d5:02:27:ca: 1b:f0:06:e1:30:38:3f:04:43:c5:08:de:21:d0:ab:82:5a:70: 84:cb:1e:7f:9e:8f:3d:7b:b9:b4:14:5c:37:9f:76:cd:68:d8: b6:2b:47:dd:9e:3d:8b:a5:5b:3f:1d:0d:e9:63:6c:a4:a3:00: f0:8b:09:7b:3a:d4:df:b4:c6:0b:4d:ac:81:f0:16:f5:24:5a: 7a:8d:ea:26:b4:c5:7c:33:93:52:b1:b3:d5:5c:5a:26:5e:7e: 57:b5:1d:41:4d:5e:e3:bc:9e:ee:1e:b0:48:73:6d:1d:23:65: bc:7d:b3:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDqQvORWkSa6pd6dickyIuainhCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQyODgzQUYyMTdCNTVDQTg5NTAzNkYwRjVDREJDRTQw NjM4NkU4MzAeFw0yNTEwMjAxNTEwMDJaFw0yNTEwMjExNjA1MDJaMDMxMTAvBgNV BAMTKDgxN0UyNzM5MEFEREJCNUQ1MzY0RTNDMUIxQzdEOTQwMzU0RjhDQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBVv9Bn4572B9Zb/nRu1Y4tWR TbHX3vLlUJ9zEp/zPS5EpATtelUn9MnZrTdZpDJhr0qCOILKok/ExRQDZul7/Ygv +dVx9T70uxt0ojSrzasg6D5of7irV0Ghul1zB7q8BPRuF4GsiCYK+Y1nORHV8oVn XAIhumfJukikfYpc4KIYQEW+X+aeGdvsC62CIMZY9peDptkVcXqhZgXTjvEqS8gE jQrgUZi6hQ2RORv09VgwgTwnVBw9viOmVLRctIgRFYK54H4NyYapgGp9A3J2l4Ri Kxq2c9PVjhRxRSmFNOz0aS/Ee0orxw36qkUMvbAXsXLsKc4LmlIyGl1cwlxvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgX4nOQrdu11TZOPBscfZQDVPjK8wHwYDVR0j BBgwFoAUVCiDryF7VcqJUDbw9c285AY4boMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUpENXJUYUpBNDlqUVNmTGE4ZlhDZzZ2cm4yUmljTkdWdUNwOXRGenZl WG4vMC81NDI4ODNBRjIxN0I1NUNBODk1MDM2RjBGNUNEQkNFNDA2Mzg2RTgzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0Mjg4M0FGMjE3QjU1Q0E4 OTUwMzZGMEY1Q0RCQ0U0MDYzODZFODMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUpENXJUYUpBNDlqUVNmTGE4ZlhDZzZ2cm4yUmljTkdWdUNwOXRGenZlWG4vMC81 NDI4ODNBRjIxN0I1NUNBODk1MDM2RjBGNUNEQkNFNDA2Mzg2RTgzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApncvpJal+O0DmSN3J9jaKuWxN0xQIdNakIrqaOvlQWk+fIL2jNKlrfMLE4us 0STR5gcNDKrIRB3OzeKlG5pF9bloub+5BiJy8a4BcYpAgsR8heXEbbjP89mzQ5pL lnCNMavJfpJIRpTgYmWtMO5a3zT65HgfGe5i2kqHeyiTIcvfNHbME1ABUzLgDInV AifKG/AG4TA4PwRDxQjeIdCrglpwhMsef56PPXu5tBRcN592zWjYtitH3Z49i6Vb Px0N6WNspKMA8IsJezrU37TGC02sgfAW9SRaeo3qJrTFfDOTUrGz1VxaJl5+V7Ud QU1e47ye7h6wSHNtHSNlvH2zqg== -----END CERTIFICATE-----Generated at Mon Oct 20 23:14:46 2025 by rpki-client