$ rpki-client -vvf rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.mft File: 5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.mft (raw, json) Hash identifier: CAg1h6Z+1kcm7y9RD3h/HqcNuZ2o53WER9AlZxH24k4= Subject key identifier: 51:7A:5F:42:70:AB:B5:08:7C:0F:72:55:F5:94:8C:07:3D:68:7E:6F Authority key identifier: 5F:ED:05:49:6A:CB:55:59:F3:DC:2D:3B:19:AD:4B:60:E4:B9:7F:FA Certificate issuer: /CN=5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA Certificate serial: 6127F643AFEFFAEBC9BD05138F3F5329C4446048 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.mft Manifest number: 01B1 Signing time: Mon 20 Oct 2025 01:06:35 +0000 Manifest this update: Mon 20 Oct 2025 01:01:35 +0000 Manifest next update: Tue 21 Oct 2025 04:44:35 +0000 Files and hashes: 1: 34352e37302e342e302f32332d3332203d3e20323637353537.roa (hash: hzk5pfVMKmSnXgCqrrAiLUBnOlh6sxuIzaAEK/dnhbc=) 2: 5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.crl (hash: 9idhlP5oaNgeOpD/MXz26Fi3z2k/dpS7si7hBmOMGAw=) 3: 323830343a343333633a3a2f33322d313238203d3e20323637353537.roa (hash: igHOZQrkWxwvNldBx/c85GMsgvPl1O5uxDTE8MWmIzo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.crl rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:27:f6:43:af:ef:fa:eb:c9:bd:05:13:8f:3f:53:29:c4:44:60:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA Validity Not Before: Oct 20 01:01:35 2025 GMT Not After : Oct 21 04:44:35 2025 GMT Subject: CN=517A5F4270ABB5087C0F7255F5948C073D687E6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0a:51:39:30:d3:2c:9c:4a:5a:78:65:21:55: bc:cd:14:4c:16:db:85:22:f8:f4:be:e1:da:b8:5d: 9b:60:aa:73:ad:36:20:d7:6d:7c:10:39:62:c2:5c: dd:cb:43:48:78:d7:ea:a4:8d:b0:14:12:b2:00:6f: 2e:ed:a7:6a:c6:8c:61:56:76:dc:31:7d:6c:eb:c4: 6f:7e:0d:17:2e:e3:45:9e:3d:7e:79:36:ae:cc:fd: 24:a9:fd:4a:e5:89:44:90:eb:4f:8e:6e:b2:50:14: a2:99:42:9b:20:56:cf:f8:d7:2f:48:06:82:e7:72: d2:31:11:f2:9d:41:9e:8d:41:d1:06:f9:f1:3b:2b: 40:52:c7:cb:f4:b5:44:04:13:ef:2e:91:56:fd:c5: 66:7c:c1:61:c7:85:bc:c9:64:d9:5f:24:04:1f:eb: 3d:2e:20:6c:3f:37:bf:ae:f0:d9:02:06:d4:8e:9d: fa:fc:c6:06:04:3e:13:61:aa:28:9f:3a:e4:66:f1: 8f:46:1d:6f:7c:fd:80:3a:a9:d8:ee:72:c6:cf:ee: cf:5a:98:ec:92:0a:1a:d1:1c:e2:ac:19:3b:f7:b3: 38:7e:e1:28:20:06:69:7a:4f:8b:12:99:d3:93:6b: 1f:c1:96:60:cd:6c:10:a3:ad:b5:6f:8d:1e:22:bf: 41:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7A:5F:42:70:AB:B5:08:7C:0F:72:55:F5:94:8C:07:3D:68:7E:6F X509v3 Authority Key Identifier: keyid:5F:ED:05:49:6A:CB:55:59:F3:DC:2D:3B:19:AD:4B:60:E4:B9:7F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:70:15:68:ef:aa:83:bc:18:13:d8:3e:fe:0c:c2:08:1f:b9: 27:ca:f3:6e:7d:d8:0e:7c:38:40:4e:0f:7e:6c:63:7c:b7:e4: 51:9b:71:4f:2d:72:59:86:8e:a0:18:00:1d:05:25:08:2d:4f: 9d:94:3f:52:9f:28:f5:a2:03:c9:05:b8:45:6a:d7:08:f0:50: e8:ea:a1:50:95:d9:bb:fa:56:d0:3b:93:ce:0f:a4:82:f3:f5: 5c:ac:52:81:b8:94:62:f0:db:08:80:22:3c:dc:0f:73:60:40: ef:63:73:ce:e3:31:96:52:29:f2:c3:ce:01:f9:30:40:0a:47: ae:a0:98:cb:c1:e4:32:3b:b5:ad:8a:a4:c3:fc:24:c6:90:9a: db:ca:9f:69:f3:aa:0e:b2:7d:9b:09:52:2d:be:f5:66:b3:fa: 2b:30:40:87:96:35:f7:c6:94:b9:91:13:37:78:5d:87:b4:04: 3e:80:b3:e6:b9:ae:69:b5:0c:f2:b1:fb:52:4d:62:96:c3:56: 14:57:f2:5e:c9:dc:a7:39:56:99:37:91:98:12:6e:43:b5:d3: 1e:ff:26:ef:2a:e8:cd:0a:f7:96:91:01:fa:5f:b9:72:4b:1a: 9b:8c:2b:c5:e5:48:8f:aa:5e:33:ee:d9:98:b6:77:eb:9d:cf: c4:82:7c:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYSf2Q6/v+uvJvQUTjz9TKcREYEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFRDA1NDk2QUNCNTU1OUYzREMyRDNCMTlBRDRCNjBF NEI5N0ZGQTAeFw0yNTEwMjAwMTAxMzVaFw0yNTEwMjEwNDQ0MzVaMDMxMTAvBgNV BAMTKDUxN0E1RjQyNzBBQkI1MDg3QzBGNzI1NUY1OTQ4QzA3M0Q2ODdFNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHClE5MNMsnEpaeGUhVbzNFEwW 24Ui+PS+4dq4XZtgqnOtNiDXbXwQOWLCXN3LQ0h41+qkjbAUErIAby7tp2rGjGFW dtwxfWzrxG9+DRcu40WePX55Nq7M/SSp/UrliUSQ60+ObrJQFKKZQpsgVs/41y9I BoLnctIxEfKdQZ6NQdEG+fE7K0BSx8v0tUQEE+8ukVb9xWZ8wWHHhbzJZNlfJAQf 6z0uIGw/N7+u8NkCBtSOnfr8xgYEPhNhqiifOuRm8Y9GHW98/YA6qdjucsbP7s9a mOySChrRHOKsGTv3szh+4SggBml6T4sSmdOTax/BlmDNbBCjrbVvjR4iv0EDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUXpfQnCrtQh8D3JV9ZSMBz1ofm8wHwYDVR0j BBgwFoAUX+0FSWrLVVnz3C07Ga1LYOS5f/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODhRSkN4YkNLNGdjWHduUHRXNnVvNk5QWWFja2hpeHQ3QjV4c2hKaVZp TVUvMC81RkVEMDU0OTZBQ0I1NTU5RjNEQzJEM0IxOUFENEI2MEU0Qjk3RkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGRUQwNTQ5NkFDQjU1NTlG M0RDMkQzQjE5QUQ0QjYwRTRCOTdGRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODhRSkN4YkNLNGdjWHduUHRXNnVvNk5QWWFja2hpeHQ3QjV4c2hKaVZpTVUvMC81 RkVEMDU0OTZBQ0I1NTU5RjNEQzJEM0IxOUFENEI2MEU0Qjk3RkZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg3AVaO+qg7wYE9g+/gzCCB+5J8rzbn3YDnw4QE4PfmxjfLfkUZtxTy1yWYaO oBgAHQUlCC1PnZQ/Up8o9aIDyQW4RWrXCPBQ6OqhUJXZu/pW0DuTzg+kgvP1XKxS gbiUYvDbCIAiPNwPc2BA72NzzuMxllIp8sPOAfkwQApHrqCYy8HkMju1rYqkw/wk xpCa28qfafOqDrJ9mwlSLb71ZrP6KzBAh5Y198aUuZETN3hdh7QEPoCz5rmuabUM 8rH7Uk1ilsNWFFfyXsncpzlWmTeRmBJuQ7XTHv8m7yrozQr3lpEB+l+5cksam4wr xeVIj6peM+7ZmLZ3653PxIJ8SQ== -----END CERTIFICATE-----Generated at Mon Oct 20 21:37:01 2025 by rpki-client