$ rpki-client -vvf rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft File: 71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft (raw, json) Hash identifier: u9j6pL8+JiD/TJC5bfIHjOqT/2qDcpfsZrux7mgjRys= Subject key identifier: F0:04:5E:7B:4B:21:3F:39:49:50:4B:1A:91:8E:F6:53:DE:BB:E3:02 Authority key identifier: 71:D3:A2:DE:C8:BA:E6:67:5D:BB:BA:B3:FB:77:3E:6D:CF:4A:6F:B9 Certificate issuer: /CN=71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9 Certificate serial: 5454D9CD204C8E81F2310B27131E61EF34074E78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.cer Subject info access: rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft Manifest number: 84 Signing time: Mon 20 Oct 2025 09:28:25 +0000 Manifest this update: Mon 20 Oct 2025 09:23:25 +0000 Manifest next update: Tue 21 Oct 2025 10:15:25 +0000 Files and hashes: 1: 323830343a393363343a3a2f33322d3332203d3e20323734373939.roa (hash: Lg2xMCDUflfzYLEqDuILPmwVidL9vHQP1G7+KLc+SfE=) 2: 71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.crl (hash: X4d4lemp+RFQYEC9RmbZXzNWuRmTVjOwKEOCvccYFN4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.crl rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:54:d9:cd:20:4c:8e:81:f2:31:0b:27:13:1e:61:ef:34:07:4e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9 Validity Not Before: Oct 20 09:23:25 2025 GMT Not After : Oct 21 10:15:25 2025 GMT Subject: CN=F0045E7B4B213F3949504B1A918EF653DEBBE302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:89:d4:09:87:50:e3:af:a7:29:1d:9f:f7:a4: be:0b:b5:cc:82:6d:4e:07:fe:80:dc:7b:23:28:4a: eb:44:9b:3a:dc:cb:fa:bb:22:23:59:b9:ba:19:0d: 58:c7:c0:fc:ae:9e:c5:a1:0b:e5:da:a4:fd:5e:fe: ed:bb:ba:c8:f7:1a:d6:85:4f:34:f3:50:fe:e9:9c: bd:81:34:57:99:1f:6c:a5:1f:9a:8a:4e:f1:70:87: de:f3:d9:4f:28:00:f0:bb:aa:e8:c9:cf:e2:14:69: 2b:2e:35:07:2d:9e:77:54:a6:4b:88:48:52:8f:83: 83:02:e2:d4:a5:64:11:79:1f:61:9c:55:7b:e0:fc: 3f:32:32:b2:2d:3c:7a:95:a9:47:bd:8e:ae:7d:62: 34:d5:07:cc:9a:49:88:11:8a:2f:2c:88:77:b5:0e: 45:d2:c5:db:12:3d:77:b1:6b:a9:12:56:bd:58:5d: 28:1f:1e:f4:c1:37:0d:59:28:c5:21:0e:ec:b3:fd: 87:84:6d:7c:54:6b:43:67:0a:c8:77:c5:ce:bf:92: dd:2c:cf:ee:92:2e:df:47:50:08:f0:8a:7f:df:05: b1:ef:f9:28:7a:d3:7f:b8:b0:e4:9b:5b:1d:cf:11: e3:b9:d0:db:66:91:ff:a4:66:97:b9:d4:4e:b5:23: 01:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:04:5E:7B:4B:21:3F:39:49:50:4B:1A:91:8E:F6:53:DE:BB:E3:02 X509v3 Authority Key Identifier: keyid:71:D3:A2:DE:C8:BA:E6:67:5D:BB:BA:B3:FB:77:3E:6D:CF:4A:6F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:72:16:f5:9c:fd:60:15:16:7c:55:f7:e7:c8:72:ac:2a:e0: b9:f1:f9:5f:04:e2:43:1e:74:00:b6:25:81:82:e6:72:d3:7d: 48:02:51:3c:8f:ba:ce:23:8f:b2:68:ae:ee:85:18:4b:db:80: 65:a8:f1:7d:86:b8:9f:1c:d9:39:71:41:88:ec:b0:8a:fb:e6: 78:f6:b1:07:d8:59:8a:7f:e9:60:2e:60:df:82:ca:6a:95:37: 27:70:5f:e6:f4:4e:10:2c:21:68:38:5d:54:12:16:eb:e7:aa: 1a:b1:5f:68:d0:9c:c4:95:56:e7:3a:eb:72:a0:95:1a:13:c9: a1:23:4a:61:e8:1c:54:77:9a:72:f5:e9:89:da:97:76:b7:1d: fb:36:1a:6a:87:eb:78:04:ac:64:a7:4a:25:ba:0c:a0:79:75: 0c:0c:7f:7a:a0:7d:46:0a:99:d5:72:eb:79:39:c6:93:65:14: 47:1e:2c:d8:df:36:d3:54:b5:c4:c2:d2:d7:0b:9b:cd:c4:37: e3:34:9d:18:5e:e0:3b:6a:07:06:ea:8f:ea:1e:05:4e:95:c9: 4d:51:84:7c:2f:e7:89:65:dc:7b:83:cd:33:73:c7:a3:9a:45: 52:f5:a2:da:84:fb:20:44:08:f8:6a:5d:07:35:be:02:1e:f6: 25:d4:6c:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVFTZzSBMjoHyMQsnEx5h7zQHTngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFEM0EyREVDOEJBRTY2NzVEQkJCQUIzRkI3NzNFNkRD RjRBNkZCOTAeFw0yNTEwMjAwOTIzMjVaFw0yNTEwMjExMDE1MjVaMDMxMTAvBgNV BAMTKEYwMDQ1RTdCNEIyMTNGMzk0OTUwNEIxQTkxOEVGNjUzREVCQkUzMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5idQJh1Djr6cpHZ/3pL4LtcyC bU4H/oDceyMoSutEmzrcy/q7IiNZuboZDVjHwPyunsWhC+XapP1e/u27usj3GtaF TzTzUP7pnL2BNFeZH2ylH5qKTvFwh97z2U8oAPC7qujJz+IUaSsuNQctnndUpkuI SFKPg4MC4tSlZBF5H2GcVXvg/D8yMrItPHqVqUe9jq59YjTVB8yaSYgRii8siHe1 DkXSxdsSPXexa6kSVr1YXSgfHvTBNw1ZKMUhDuyz/YeEbXxUa0NnCsh3xc6/kt0s z+6SLt9HUAjwin/fBbHv+Sh603+4sOSbWx3PEeO50Ntmkf+kZpe51E61IwFZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8ARee0shPzlJUEsakY72U9674wIwHwYDVR0j BBgwFoAUcdOi3si65mddu7qz+3c+bc9Kb7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkZLMlo1Q0R2bjc0TlJzaUZ2NzIzUHBTY2h0TUZocUpQZVJBVDZTRWoy c1kvMC83MUQzQTJERUM4QkFFNjY3NURCQkJBQjNGQjc3M0U2RENGNEE2RkI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRDNBMkRFQzhCQUU2Njc1 REJCQkFCM0ZCNzczRTZEQ0Y0QTZGQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NkZLMlo1Q0R2bjc0TlJzaUZ2NzIzUHBTY2h0TUZocUpQZVJBVDZTRWoyc1kvMC83 MUQzQTJERUM4QkFFNjY3NURCQkJBQjNGQjc3M0U2RENGNEE2RkI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj3IW9Zz9YBUWfFX358hyrCrgufH5XwTiQx50ALYlgYLmctN9SAJRPI+6ziOP smiu7oUYS9uAZajxfYa4nxzZOXFBiOywivvmePaxB9hZin/pYC5g34LKapU3J3Bf 5vROECwhaDhdVBIW6+eqGrFfaNCcxJVW5zrrcqCVGhPJoSNKYegcVHeacvXpidqX drcd+zYaaofreASsZKdKJboMoHl1DAx/eqB9RgqZ1XLreTnGk2UURx4s2N8201S1 xMLS1wubzcQ34zSdGF7gO2oHBuqP6h4FTpXJTVGEfC/niWXce4PNM3PHo5pFUvWi 2oT7IEQI+GpdBzW+Ah72JdRs7A== -----END CERTIFICATE-----Generated at Mon Oct 20 12:07:06 2025 by rpki-client