$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft File: C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft (raw, json) Hash identifier: Q+eBk6XFCMu6lNhDYNrnSWeatxAgoLNXFi2MktnfAio= Subject key identifier: 21:E4:BF:B2:70:6B:0F:B1:9B:6E:48:31:1C:43:63:70:55:66:7C:9E Authority key identifier: C5:FA:C8:83:F5:29:99:AC:F7:58:B4:E2:B9:7F:23:64:1E:0B:11:41 Certificate issuer: /CN=C5FAC883F52999ACF758B4E2B97F23641E0B1141 Certificate serial: 4105C048AE24F96087406F4A9DDD509F89902250 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer Subject info access: rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft Manifest number: 028E Signing time: Sun 19 Oct 2025 19:38:24 +0000 Manifest this update: Sun 19 Oct 2025 19:33:24 +0000 Manifest next update: Mon 20 Oct 2025 21:26:24 +0000 Files and hashes: 1: 323830343a383030303a3a2f33322d3332203d3e20323731373233.roa (hash: LSu3GftnomNKTBnhOtUHqc0EyfeYBG14n6JK7jzTHtA=) 2: C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl (hash: XYuifyQN3Xvy7WjhHKEZxkl6opnYwpuXQaiCZ9aH2r8=) 3: 323830343a383030303a3a2f33332d3333203d3e20323731373233.roa (hash: rjOzK9VSD9fq/SxJ+lECML6w865sYD3+8bpb9tcyUnY=) 4: 323830343a383030303a383030303a3a2f33332d3333203d3e20323731373233.roa (hash: h7Kv+zxSfT3tP9oYJdoUTulCa62bqCSpyNfGiBC+m9w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 21:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:05:c0:48:ae:24:f9:60:87:40:6f:4a:9d:dd:50:9f:89:90:22:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5FAC883F52999ACF758B4E2B97F23641E0B1141 Validity Not Before: Oct 19 19:33:24 2025 GMT Not After : Oct 20 21:26:24 2025 GMT Subject: CN=21E4BFB2706B0FB19B6E48311C43637055667C9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ca:64:c9:fe:1c:b5:14:64:9c:ba:97:ba:c1: 1c:2e:97:7c:92:ca:d9:e4:bd:b6:b1:80:c5:d8:2b: 9a:1c:dd:73:46:de:8d:18:58:f7:0b:4a:2d:26:0c: 39:91:09:30:a4:9f:15:fc:9a:3e:ef:46:69:ad:bf: 20:cf:b4:4a:e8:55:21:e6:ca:0f:2b:e9:fe:9b:04: c3:c6:99:27:e5:e9:13:be:06:13:f2:0a:17:86:c6: 15:ca:b5:6d:de:17:1f:a7:d4:2d:ac:c1:3b:b0:97: d3:e6:89:53:05:01:39:13:b7:44:fc:de:18:ca:9e: a8:aa:35:a0:b6:c4:d9:10:d3:92:d4:c2:47:4f:e3: 20:01:2b:25:0f:47:e6:a1:b9:e3:8c:e7:cf:5a:1e: 30:35:dd:11:87:ef:63:59:67:96:af:35:15:26:1c: 16:75:9e:13:6d:9d:ec:5d:56:40:65:cd:54:71:0e: c3:ba:57:4c:7a:f8:69:6b:6f:15:ea:01:bd:2c:be: ca:01:3d:30:27:4a:7d:82:e0:3a:e4:6b:c9:02:46: 63:d7:7c:14:2a:73:d6:7c:37:a7:c4:87:81:58:61: aa:86:99:94:38:64:5e:50:42:98:38:87:93:79:98: 32:e6:26:8f:cd:b3:38:57:71:8b:e1:70:df:78:76: d3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E4:BF:B2:70:6B:0F:B1:9B:6E:48:31:1C:43:63:70:55:66:7C:9E X509v3 Authority Key Identifier: keyid:C5:FA:C8:83:F5:29:99:AC:F7:58:B4:E2:B9:7F:23:64:1E:0B:11:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f7:dc:b9:45:44:d0:60:5b:4a:73:25:c0:68:c1:8c:85:a2: 46:e8:b0:d4:c3:30:47:8b:97:f9:9a:76:73:9d:86:f0:fe:f5: 5a:09:63:98:2e:fa:66:50:04:83:dc:f3:2c:9d:26:32:1b:b2: fd:21:56:ac:85:8f:22:1c:0a:e3:be:3a:04:c8:32:1b:de:93: fc:e6:a0:41:c0:22:05:ae:05:e9:40:aa:c1:83:94:d9:23:9b: 73:3a:1b:eb:67:54:b8:08:f4:e3:ac:15:c4:59:06:65:d3:90: 13:8e:87:f9:fa:65:1d:d7:b8:6f:54:21:17:30:66:21:82:b9: 83:3f:d6:e7:c8:93:32:f2:30:37:73:dc:be:45:49:30:8c:27: 14:b7:fb:62:8e:8e:65:9e:01:64:e5:ae:de:09:3b:0c:0e:9c: 56:51:45:5d:79:42:49:e1:d2:04:ed:ac:19:fb:c4:a4:66:c9: 16:75:c0:ff:b0:7c:be:21:bb:56:27:61:e4:c9:f7:12:77:9a: f0:9b:5d:5a:60:24:ff:38:1a:ac:9e:8f:8e:73:2c:4d:ef:0d: 56:61:73:93:67:79:ad:67:32:94:79:16:b9:38:ad:92:af:a2: 29:7b:fd:d1:ab:cd:89:b9:b2:9d:b2:61:bf:e6:a9:29:1a:32: 0c:09:76:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQQXASK4k+WCHQG9Knd1Qn4mQIlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVGQUM4ODNGNTI5OTlBQ0Y3NThCNEUyQjk3RjIzNjQx RTBCMTE0MTAeFw0yNTEwMTkxOTMzMjRaFw0yNTEwMjAyMTI2MjRaMDMxMTAvBgNV BAMTKDIxRTRCRkIyNzA2QjBGQjE5QjZFNDgzMTFDNDM2MzcwNTU2NjdDOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfymTJ/hy1FGScupe6wRwul3yS ytnkvbaxgMXYK5oc3XNG3o0YWPcLSi0mDDmRCTCknxX8mj7vRmmtvyDPtEroVSHm yg8r6f6bBMPGmSfl6RO+BhPyCheGxhXKtW3eFx+n1C2swTuwl9PmiVMFATkTt0T8 3hjKnqiqNaC2xNkQ05LUwkdP4yABKyUPR+ahueOM589aHjA13RGH72NZZ5avNRUm HBZ1nhNtnexdVkBlzVRxDsO6V0x6+GlrbxXqAb0svsoBPTAnSn2C4Drka8kCRmPX fBQqc9Z8N6fEh4FYYaqGmZQ4ZF5QQpg4h5N5mDLmJo/NszhXcYvhcN94dtNBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIeS/snBrD7GbbkgxHENjcFVmfJ4wHwYDVR0j BBgwFoAUxfrIg/Upmaz3WLTiuX8jZB4LEUEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0hzUk5lOWdoVEZDZ0xiY3p5aEx0RENtcTF5NzZQakxzQTVoTDVGM0U3 U2svMC9DNUZBQzg4M0Y1Mjk5OUFDRjc1OEI0RTJCOTdGMjM2NDFFMEIxMTQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1RkFDODgzRjUyOTk5QUNG NzU4QjRFMkI5N0YyMzY0MUUwQjExNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0hzUk5lOWdoVEZDZ0xiY3p5aEx0RENtcTF5NzZQakxzQTVoTDVGM0U3U2svMC9D NUZBQzg4M0Y1Mjk5OUFDRjc1OEI0RTJCOTdGMjM2NDFFMEIxMTQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgvfcuUVE0GBbSnMlwGjBjIWiRuiw1MMwR4uX+Zp2c52G8P71WgljmC76ZlAE g9zzLJ0mMhuy/SFWrIWPIhwK4746BMgyG96T/OagQcAiBa4F6UCqwYOU2SObczob 62dUuAj046wVxFkGZdOQE46H+fplHde4b1QhFzBmIYK5gz/W58iTMvIwN3PcvkVJ MIwnFLf7Yo6OZZ4BZOWu3gk7DA6cVlFFXXlCSeHSBO2sGfvEpGbJFnXA/7B8viG7 Vidh5Mn3Enea8JtdWmAk/zgarJ6PjnMsTe8NVmFzk2d5rWcylHkWuTitkq+iKXv9 0avNibmynbJhv+apKRoyDAl2eA== -----END CERTIFICATE-----Generated at Mon Oct 20 13:58:59 2025 by rpki-client