$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft File: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft (raw, json) Hash identifier: u0t9HM+W5Q+N0wylyTuQjcNhlKadsOSVlR4OZj3hafQ= Subject key identifier: 2C:DF:86:DE:EC:33:F9:DF:D5:B2:B2:8F:D3:64:16:DE:69:C8:D3:BA Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 Certificate issuer: /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Certificate serial: 5F3B344B1BE1DD1BA7CB5C807256E63183BC0560 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft Manifest number: 02BA Signing time: Mon 20 Oct 2025 11:47:16 +0000 Manifest this update: Mon 20 Oct 2025 11:42:16 +0000 Manifest next update: Tue 21 Oct 2025 13:42:16 +0000 Files and hashes: 1: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl (hash: Q+t/9O1FZE7KvQeAZzdxW4JcqT9FOqhN0ttiKsXyXXE=) 2: 3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (hash: WqEYa1LHKO/TdU02rXFXLwns464zC4VFuzHF7wOxsfA=) 3: 323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (hash: 0xs1tTdh2Qke0fip6d1TEfj28igzF6NdDvyXj3IPtmI=) 4: 3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (hash: Bv6Lyj5+VhdPqvZ/TGH9M1sdk0ISaNwfb7BbI7c/FPE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3b:34:4b:1b:e1:dd:1b:a7:cb:5c:80:72:56:e6:31:83:bc:05:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Validity Not Before: Oct 20 11:42:16 2025 GMT Not After : Oct 21 13:42:16 2025 GMT Subject: CN=2CDF86DEEC33F9DFD5B2B28FD36416DE69C8D3BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7e:c1:1c:62:41:75:d2:30:b6:cd:5b:13:40: f1:04:5f:67:b2:c3:6f:ed:c8:e7:77:2c:a3:c4:3c: ef:97:f9:51:eb:ee:73:8b:2c:b7:43:62:73:1b:83: 72:ff:7d:56:31:bb:77:4c:7c:29:1e:ad:0f:02:13: ac:d7:64:a6:36:ad:e9:42:72:b6:6f:bd:93:a5:b4: 7e:12:35:f6:c7:de:bc:9f:f2:af:a3:a6:9b:82:13: 76:21:11:f2:f1:04:dd:1d:df:86:3b:94:2f:a9:b2: db:c7:7c:5d:92:db:2b:d7:56:db:1d:43:78:b3:c6: d8:aa:dd:af:d8:93:1a:06:46:4b:25:ff:51:9c:f4: ea:29:dd:8c:bf:83:ab:45:34:fc:db:11:0b:49:a4: 79:e8:2f:83:21:0d:cc:85:cf:b9:90:a4:ac:b6:4b: a7:df:24:f3:88:7c:7b:bd:89:f0:19:06:09:2a:df: 92:55:ea:01:18:52:82:31:2d:43:42:e5:14:19:63: 42:c9:a4:eb:06:29:cf:44:48:bb:03:6b:c1:74:26: 7b:8d:55:4d:5e:06:7d:31:c2:a5:c2:4c:67:fb:ee: 94:f0:a2:43:b2:88:70:c7:09:9f:a1:44:09:99:05: 93:67:85:86:81:9c:3f:30:bb:70:c4:fe:26:9d:2f: 38:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DF:86:DE:EC:33:F9:DF:D5:B2:B2:8F:D3:64:16:DE:69:C8:D3:BA X509v3 Authority Key Identifier: keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:c2:d9:85:c4:49:b3:cf:a8:1e:b5:d7:42:18:be:2d:93:05: 33:11:d7:a6:5d:1b:9f:df:47:be:c7:0f:90:0f:b1:ed:0c:27: ca:87:ce:cc:86:9c:2f:7f:1d:e1:c0:9f:4b:fc:45:e7:0c:b4: 0e:fa:f8:66:71:21:d1:24:a2:11:14:08:c9:4f:cb:2e:b1:da: 0b:87:c2:b9:df:e4:71:18:f6:44:b3:de:da:bc:f5:67:24:33: 99:ec:26:b2:e7:9f:e9:b0:ed:74:fa:05:ab:0f:90:15:2d:6c: dc:3d:20:00:b2:ec:c2:8b:55:7f:62:9c:1c:8b:63:f7:e7:df: 46:12:fd:c5:c3:e8:63:56:71:c6:1c:45:96:93:75:2e:82:57: 95:0a:93:94:c3:5a:0e:37:5e:41:cf:58:7a:94:62:38:ab:e1: 16:7a:fe:0a:73:0f:be:54:17:e2:c2:27:97:d4:73:e9:59:41: df:31:e3:68:52:53:cb:01:d1:a8:ba:fb:9e:1f:d8:a1:4e:de: 1d:f5:2a:4d:1d:ce:74:5f:1d:e4:1c:9d:51:fe:aa:34:e0:e9: 5e:78:4d:b5:8b:e4:c5:f7:ec:d3:b2:b1:e5:2f:87:40:76:95: 42:82:65:e0:e0:24:01:cc:c9:e1:9d:58:fe:54:7c:f7:3d:5b: 05:c9:17:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXzs0Sxvh3Runy1yAclbmMYO8BWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVF MDZBMjdFMjAeFw0yNTEwMjAxMTQyMTZaFw0yNTEwMjExMzQyMTZaMDMxMTAvBgNV BAMTKDJDREY4NkRFRUMzM0Y5REZENUIyQjI4RkQzNjQxNkRFNjlDOEQzQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1fsEcYkF10jC2zVsTQPEEX2ey w2/tyOd3LKPEPO+X+VHr7nOLLLdDYnMbg3L/fVYxu3dMfCkerQ8CE6zXZKY2relC crZvvZOltH4SNfbH3ryf8q+jppuCE3YhEfLxBN0d34Y7lC+pstvHfF2S2yvXVtsd Q3izxtiq3a/YkxoGRksl/1Gc9Oop3Yy/g6tFNPzbEQtJpHnoL4MhDcyFz7mQpKy2 S6ffJPOIfHu9ifAZBgkq35JV6gEYUoIxLUNC5RQZY0LJpOsGKc9ESLsDa8F0JnuN VU1eBn0xwqXCTGf77pTwokOyiHDHCZ+hRAmZBZNnhYaBnD8wu3DE/iadLziZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULN+G3uwz+d/VsrKP02QW3mnI07owHwYDVR0j BBgwFoAUZTg31+yh/hFF0M4V4L+JXuBqJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZl UFMvMC82NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MzgzN0Q3RUNBMUZFMTE0 NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC82 NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgcLZhcRJs8+oHrXXQhi+LZMFMxHXpl0bn99HvscPkA+x7QwnyofOzIacL38d 4cCfS/xF5wy0Dvr4ZnEh0SSiERQIyU/LLrHaC4fCud/kcRj2RLPe2rz1ZyQzmewm suef6bDtdPoFqw+QFS1s3D0gALLswotVf2KcHItj9+ffRhL9xcPoY1ZxxhxFlpN1 LoJXlQqTlMNaDjdeQc9YepRiOKvhFnr+CnMPvlQX4sInl9Rz6VlB3zHjaFJTywHR qLr7nh/YoU7eHfUqTR3OdF8d5BydUf6qNODpXnhNtYvkxffs07Kx5S+HQHaVQoJl 4OAkAczJ4Z1Y/lR89z1bBckX5w== -----END CERTIFICATE-----Generated at Mon Oct 20 14:01:35 2025 by rpki-client