$ rpki-client -vvf rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft File: D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft (raw, json) Hash identifier: NivNsAWR8of+OyK0Ezb+3v/h9hBFaCO+sToVwiOL/Uo= Subject key identifier: C5:D0:F5:10:A1:C9:04:8D:CB:73:F5:81:B2:41:89:71:E0:70:E7:8F Authority key identifier: D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2 Certificate issuer: /CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2 Certificate serial: 4D29893CD7253209048015793760CFF78673EF54 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft Manifest number: 91 Signing time: Mon 20 Oct 2025 01:33:03 +0000 Manifest this update: Mon 20 Oct 2025 01:28:03 +0000 Manifest next update: Tue 21 Oct 2025 03:28:03 +0000 Files and hashes: 1: D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl (hash: dDDMlghLlbk8ZNFTZJHhA+hfC/uwQnYLh/YHALhoeos=) 2: 323830343a386663343a3a2f33322d3438203d3e20323733353130.roa (hash: DETwoG/6qi/ZI8aHY1Z5rVUEPEzo75t1n/OyDZwKtCg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:29:89:3c:d7:25:32:09:04:80:15:79:37:60:cf:f7:86:73:ef:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2 Validity Not Before: Oct 20 01:28:03 2025 GMT Not After : Oct 21 03:28:03 2025 GMT Subject: CN=C5D0F510A1C9048DCB73F581B2418971E070E78F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:34:2d:44:d9:c3:77:e3:29:d8:fa:67:73:d3: e4:70:23:5b:41:d8:d2:67:d7:d4:02:21:94:89:53: 60:56:ad:54:50:e9:9f:d4:13:81:c1:cd:db:78:20: af:c2:25:96:a2:75:39:ef:6e:2c:5c:a1:71:ca:42: 12:71:c0:2b:f9:ce:40:f7:95:b5:6e:45:a5:3f:a7: 57:4a:41:6a:3c:8c:18:6e:d8:fb:4e:b2:f1:3a:3d: 16:7a:ae:a4:ef:b0:ed:b6:61:7a:a0:d8:08:56:66: f2:10:2f:9e:ef:a9:81:59:fe:31:7c:2b:10:a0:60: 00:4a:76:d6:c2:6b:1c:2a:50:41:f5:bf:60:6b:58: 20:a0:36:4f:60:26:eb:e3:21:6e:93:ca:bc:ef:5d: c3:8e:c0:72:f8:7b:d6:22:04:a5:9a:96:e1:d6:99: d9:d7:e3:e4:56:6c:cb:b3:8e:35:ba:7b:d3:6d:40: 41:3f:bf:ac:1b:18:71:3b:78:db:33:a3:8e:9b:84: 26:20:45:22:e6:3d:f8:9c:fc:cc:90:e1:36:c8:c4: c2:f6:e5:63:e9:a9:44:c0:c0:f7:c7:4d:c4:70:e3: d2:7a:93:69:23:2c:71:bd:b8:b2:b4:49:57:d8:c2: 82:ad:14:bb:5e:94:91:49:26:85:ad:b3:b6:cb:60: f1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D0:F5:10:A1:C9:04:8D:CB:73:F5:81:B2:41:89:71:E0:70:E7:8F X509v3 Authority Key Identifier: keyid:D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:f7:e6:54:2e:f7:46:da:5f:0e:dd:c4:4d:63:5f:fe:a1:03: dd:e0:d1:1f:db:29:55:8c:e5:1c:93:62:a6:21:6d:d2:06:d8: 82:9b:23:1f:76:9c:f4:0a:79:31:57:d9:d3:75:d3:e5:88:65: 36:59:c4:16:86:6e:ac:dc:fa:2e:11:34:45:f3:0b:93:e0:50: 9a:80:4c:bc:47:9d:a1:30:e7:7b:f7:06:d3:51:cf:b7:ef:61: 1c:0f:d4:e9:b3:a9:26:0d:3f:d9:1c:b6:7f:1e:fd:a8:89:1a: a7:00:1a:ca:cc:5b:ce:74:a3:da:84:fb:13:c2:8b:99:1f:c4: 31:27:2d:bb:e6:06:b2:b0:64:7b:80:81:86:6b:00:6c:91:72: 7d:a5:90:07:ad:4e:3a:7c:c8:10:94:fb:f7:ad:ff:dd:a4:6c: 29:c3:69:0f:f9:2d:40:c7:95:89:15:74:0e:14:41:0b:53:f2: b3:be:eb:e2:d8:b4:00:6a:e1:97:04:0a:4a:e1:2b:b1:79:a8: 3f:11:f1:a5:f5:7e:98:6f:c3:48:6b:7a:45:ea:38:b7:ff:16: 62:06:98:8e:76:96:8c:1d:47:d6:af:1a:f8:2c:ad:4e:7f:3a: 07:39:a1:91:df:1f:15:cb:c5:d6:51:b3:89:e8:1b:ea:a4:f0: 67:5c:f1:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTSmJPNclMgkEgBV5N2DP94Zz71QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDNDMxRDE3QjgzMDczNUZFQjI2NDA5QzY5RTNFRjRG RTYxREJDMjAeFw0yNTEwMjAwMTI4MDNaFw0yNTEwMjEwMzI4MDNaMDMxMTAvBgNV BAMTKEM1RDBGNTEwQTFDOTA0OERDQjczRjU4MUIyNDE4OTcxRTA3MEU3OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbNC1E2cN34ynY+mdz0+RwI1tB 2NJn19QCIZSJU2BWrVRQ6Z/UE4HBzdt4IK/CJZaidTnvbixcoXHKQhJxwCv5zkD3 lbVuRaU/p1dKQWo8jBhu2PtOsvE6PRZ6rqTvsO22YXqg2AhWZvIQL57vqYFZ/jF8 KxCgYABKdtbCaxwqUEH1v2BrWCCgNk9gJuvjIW6TyrzvXcOOwHL4e9YiBKWaluHW mdnX4+RWbMuzjjW6e9NtQEE/v6wbGHE7eNszo46bhCYgRSLmPfic/MyQ4TbIxML2 5WPpqUTAwPfHTcRw49J6k2kjLHG9uLK0SVfYwoKtFLtelJFJJoWts7bLYPFVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxdD1EKHJBI3Lc/WBskGJceBw548wHwYDVR0j BBgwFoAU1cQx0XuDBzX+smQJxp4+9P5h28IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVNxeEY5b1ZHeHNjVWJzQ0haSm9ZOFRQeEc0M1N2OFBwa1VRbmJyMzVw TUQvMC9ENUM0MzFEMTdCODMwNzM1RkVCMjY0MDlDNjlFM0VGNEZFNjFEQkMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1QzQzMUQxN0I4MzA3MzVG RUIyNjQwOUM2OUUzRUY0RkU2MURCQzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVNxeEY5b1ZHeHNjVWJzQ0haSm9ZOFRQeEc0M1N2OFBwa1VRbmJyMzVwTUQvMC9E NUM0MzFEMTdCODMwNzM1RkVCMjY0MDlDNjlFM0VGNEZFNjFEQkMyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB/fmVC73RtpfDt3ETWNf/qED3eDRH9spVYzlHJNipiFt0gbYgpsjH3ac9Ap5 MVfZ03XT5YhlNlnEFoZurNz6LhE0RfMLk+BQmoBMvEedoTDne/cG01HPt+9hHA/U 6bOpJg0/2Ry2fx79qIkapwAaysxbznSj2oT7E8KLmR/EMSctu+YGsrBke4CBhmsA bJFyfaWQB61OOnzIEJT7963/3aRsKcNpD/ktQMeViRV0DhRBC1Pys77r4ti0AGrh lwQKSuErsXmoPxHxpfV+mG/DSGt6Reo4t/8WYgaYjnaWjB1H1q8a+CytTn86Bzmh kd8fFcvF1lGziegb6qTwZ1zxww== -----END CERTIFICATE-----Generated at Mon Oct 20 15:26:16 2025 by rpki-client