$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft File: 85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft (raw, json) Hash identifier: eNFaZ4LYytTn0jhM/h24ewUmQO1y+6bXbUUYBY5k0WQ= Subject key identifier: 43:1B:77:8F:49:84:5E:AE:86:38:21:6D:74:5C:77:7C:DB:9A:69:C0 Authority key identifier: 85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95 Certificate issuer: /CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995 Certificate serial: 4B42F6766E7C86DFAA908163A40F52AD938442D3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer Subject info access: rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft Manifest number: 02E4 Signing time: Mon 20 Oct 2025 02:44:08 +0000 Manifest this update: Mon 20 Oct 2025 02:39:08 +0000 Manifest next update: Tue 21 Oct 2025 05:04:08 +0000 Files and hashes: 1: 323830343a6366303a3a2f33322d3438203d3e203532353736.roa (hash: wiHI9SrflkamLTOfmYBEaJJSlinTuLYPlmXxJbPhtpo=) 2: 3137372e38362e3230302e302f32312d3234203d3e203532353736.roa (hash: TI8fvU+DA9BGVyDJ2qm1cJltZ0I1E38L4u9tbujdTOY=) 3: 85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl (hash: RMD8PLtuHMS/XfbSY1LNlpChjRX+bFVC0tg2AAZwGPo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 05:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:42:f6:76:6e:7c:86:df:aa:90:81:63:a4:0f:52:ad:93:84:42:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995 Validity Not Before: Oct 20 02:39:08 2025 GMT Not After : Oct 21 05:04:08 2025 GMT Subject: CN=431B778F49845EAE8638216D745C777CDB9A69C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:35:a9:91:6f:64:a0:30:8e:b3:a5:cf:2d:c9: 3c:9d:c2:a6:c2:f0:62:54:0b:37:1b:72:cf:d9:46: c0:a5:06:7e:35:58:60:ed:e8:63:b7:25:d0:91:4b: 25:09:01:f7:2b:a4:c1:22:21:6e:d1:d3:60:91:81: 1a:eb:f2:c6:94:c9:ae:43:ba:ad:e8:42:da:31:49: ba:66:2c:fe:8b:0b:99:76:66:df:48:69:cf:40:f2: 6c:28:b9:84:85:77:d2:82:e5:98:c2:97:91:5e:5e: f3:fa:e6:e0:a4:21:82:73:9c:c7:c3:15:2c:ea:1f: 75:0b:48:31:6d:3e:ab:65:e2:97:40:10:32:de:38: 99:c8:9e:0d:f2:2f:63:54:5f:9a:5e:e6:67:af:d6: e0:4d:a3:37:f7:ad:87:1a:64:cd:7d:62:75:87:0e: c4:68:7d:f8:60:a5:11:d4:9a:8a:f7:f5:97:15:45: 26:d6:53:ca:90:05:e9:ac:bb:35:b1:b4:f0:d1:09: 2a:37:98:d3:09:ac:f2:1d:3b:46:8a:e2:6c:4e:56: f9:eb:77:85:08:5b:40:34:22:9a:38:91:59:b3:e3: 18:4b:8f:b9:ba:d6:49:9d:fa:15:cc:d2:95:3b:19: e6:9e:1b:34:d1:95:2b:f8:43:0b:cf:ea:b7:4c:fb: 2d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1B:77:8F:49:84:5E:AE:86:38:21:6D:74:5C:77:7C:DB:9A:69:C0 X509v3 Authority Key Identifier: keyid:85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:dc:b1:a1:df:61:e1:cd:64:13:17:8b:76:e8:3e:10:45:5a: 72:a6:94:63:ae:23:41:ed:19:37:00:23:25:ac:73:f2:76:7f: 1d:89:c9:10:9f:60:de:02:f1:ed:6f:d1:d0:98:f5:b9:c2:2c: 84:be:c9:f4:07:c9:4d:e2:b4:9c:7b:1d:05:6d:34:00:ce:57: 53:dc:9c:6d:51:cd:b9:93:da:d5:65:3e:22:41:5c:74:d0:24: eb:72:e4:91:21:de:69:86:ce:bc:1a:56:a5:95:0e:62:27:95: 56:aa:6f:2b:a8:4c:ed:8f:f4:50:d0:2f:c2:cf:05:67:d1:f5: 22:50:e4:03:f1:3e:89:98:71:5f:b7:48:b0:f3:ae:e7:0b:f2: ab:a7:aa:e3:b5:43:80:f9:fe:7b:90:47:aa:33:ad:27:72:2c: a1:b2:d9:8a:c6:1a:91:5d:8c:69:47:02:f2:8d:6a:59:43:2b: 1b:c5:43:99:a6:99:82:d4:9d:49:a3:2d:80:a1:b8:33:bc:55: 38:eb:f5:ba:bd:b6:7d:22:b3:f7:c4:ff:b6:c3:b2:5a:b5:ee: 16:bd:f6:dc:4a:1d:e6:85:0e:a5:df:88:70:a4:9d:4d:94:67: 3e:9b:15:ac:41:d8:09:aa:1e:4d:3f:9d:6b:9d:15:19:bf:fd: e2:f7:52:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS0L2dm58ht+qkIFjpA9SrZOEQtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVBQzdGRjA3MjI0MDkxMTZDMUUzQzQwRkU0N0VBQTYw M0RERDk5NTAeFw0yNTEwMjAwMjM5MDhaFw0yNTEwMjEwNTA0MDhaMDMxMTAvBgNV BAMTKDQzMUI3NzhGNDk4NDVFQUU4NjM4MjE2RDc0NUM3NzdDREI5QTY5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfNamRb2SgMI6zpc8tyTydwqbC 8GJUCzcbcs/ZRsClBn41WGDt6GO3JdCRSyUJAfcrpMEiIW7R02CRgRrr8saUya5D uq3oQtoxSbpmLP6LC5l2Zt9Iac9A8mwouYSFd9KC5ZjCl5FeXvP65uCkIYJznMfD FSzqH3ULSDFtPqtl4pdAEDLeOJnIng3yL2NUX5pe5mev1uBNozf3rYcaZM19YnWH DsRoffhgpRHUmor39ZcVRSbWU8qQBemsuzWxtPDRCSo3mNMJrPIdO0aK4mxOVvnr d4UIW0A0Ipo4kVmz4xhLj7m61kmd+hXM0pU7GeaeGzTRlSv4QwvP6rdM+y2BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQxt3j0mEXq6GOCFtdFx3fNuaacAwHwYDVR0j BBgwFoAUhax/8HIkCRFsHjxA/kfqpgPd2ZUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdK WFIvMS84NUFDN0ZGMDcyMjQwOTExNkMxRTNDNDBGRTQ3RUFBNjAzREREOTk1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1QUM3RkYwNzIyNDA5MTE2 QzFFM0M0MEZFNDdFQUE2MDNEREQ5OTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdKWFIvMS84 NUFDN0ZGMDcyMjQwOTExNkMxRTNDNDBGRTQ3RUFBNjAzREREOTk1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFdyxod9h4c1kExeLdug+EEVacqaUY64jQe0ZNwAjJaxz8nZ/HYnJEJ9g3gLx 7W/R0Jj1ucIshL7J9AfJTeK0nHsdBW00AM5XU9ycbVHNuZPa1WU+IkFcdNAk63Lk kSHeaYbOvBpWpZUOYieVVqpvK6hM7Y/0UNAvws8FZ9H1IlDkA/E+iZhxX7dIsPOu 5wvyq6eq47VDgPn+e5BHqjOtJ3IsobLZisYakV2MaUcC8o1qWUMrG8VDmaaZgtSd SaMtgKG4M7xVOOv1ur22fSKz98T/tsOyWrXuFr323Eod5oUOpd+IcKSdTZRnPpsV rEHYCaoeTT+da50VGb/94vdSXg== -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:53 2025 by rpki-client