$ rpki-client -vvf rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft File: 54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft (raw, json) Hash identifier: BA82WwyaVTUxKKez7xHHHs0kGeJm8VJryxkkw93g6PE= Subject key identifier: 28:64:72:5A:65:41:BC:2B:A8:F2:36:67:CE:82:D4:74:25:C0:50:88 Authority key identifier: 54:65:48:55:AF:7A:47:FA:3E:E5:E7:AF:D4:22:FF:D3:DB:BF:EC:4A Certificate issuer: /CN=54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A Certificate serial: 5AB295392B1D5056311AB026E2B666A6A5325F41 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer Subject info access: rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft Manifest number: 02CC Signing time: Mon 20 Oct 2025 17:24:25 +0000 Manifest this update: Mon 20 Oct 2025 17:19:25 +0000 Manifest next update: Tue 21 Oct 2025 21:12:25 +0000 Files and hashes: 1: 54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl (hash: hC9AJ5eqlDb+5NUvBvuuBb0+NhbZAgxNQt/jnikIycE=) 2: 323830343a333932383a3a2f33322d313238203d3e20323636303135.roa (hash: 6mQqP6vwEYKsyAizhYGj/YcrcMRHF+AZmBDLXF0Fj1I=) 3: 3137302e3234352e37362e302f32322d3332203d3e20323636303135.roa (hash: FMts0WWmRfv3uIJr6sQoqG85fvB8sMOGzi7yG5qk4oU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 21:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b2:95:39:2b:1d:50:56:31:1a:b0:26:e2:b6:66:a6:a5:32:5f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A Validity Not Before: Oct 20 17:19:25 2025 GMT Not After : Oct 21 21:12:25 2025 GMT Subject: CN=2864725A6541BC2BA8F23667CE82D47425C05088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:d2:ae:f7:e2:e7:74:8e:96:7a:57:48:36: 08:72:c6:97:9a:40:92:92:c7:59:fc:01:13:ac:ca: 92:b0:2d:dc:74:5f:0c:96:c5:c5:81:06:4c:8d:ef: 30:ce:8d:c7:09:e7:15:f6:47:89:92:94:c8:55:2b: 17:fe:e4:b4:ae:d8:8f:7d:ad:9d:45:9a:ce:81:4b: 11:f2:82:d8:75:9e:f3:cc:63:9a:ec:e2:de:3a:9f: 16:39:25:3f:04:62:20:38:35:7b:2e:e5:2a:36:e0: 81:a3:1d:3c:92:02:53:ba:70:c2:62:58:40:1e:a4: ba:0b:c3:d7:2c:7a:3d:01:0e:50:19:66:33:fd:58: 13:5f:38:67:11:25:af:37:3f:cf:7c:af:04:49:41: 76:af:8a:8a:a0:f1:13:34:7e:44:30:42:31:f2:6e: 61:16:8f:11:69:5d:31:06:c8:7f:79:48:3f:e9:09: e6:e3:d5:7e:ca:66:2e:39:68:f8:2e:54:e7:3e:98: 2a:16:cc:8b:bc:07:09:33:8e:7a:fe:a0:3f:79:4c: a9:26:67:eb:05:90:ff:48:b2:39:82:b5:a6:cb:9c: 2d:10:c0:b8:5f:72:6e:a4:7f:87:af:8b:eb:60:c9: 8d:7b:0f:2e:c9:2a:60:6b:ca:f9:07:db:be:7b:af: eb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:64:72:5A:65:41:BC:2B:A8:F2:36:67:CE:82:D4:74:25:C0:50:88 X509v3 Authority Key Identifier: keyid:54:65:48:55:AF:7A:47:FA:3E:E5:E7:AF:D4:22:FF:D3:DB:BF:EC:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:17:7f:83:4b:3a:df:0c:8a:9b:a2:54:16:d3:bf:c5:fb:2a: df:46:dc:e4:a3:70:c1:97:e4:ee:4a:1a:6f:5d:92:f5:51:41: 54:93:67:3d:45:86:1d:be:9f:5c:10:fe:51:fb:40:01:5d:e2: 0b:62:95:37:18:da:c8:ca:23:0e:6d:e5:52:28:d0:02:4c:ed: cc:f7:d7:58:a3:cf:a8:d0:68:d7:28:94:fc:bc:f0:3c:72:f6: dd:c5:3d:bb:a7:73:c3:2f:6c:7a:a6:54:8f:0a:61:f0:f4:1a: c3:76:ae:4a:07:8c:77:6b:e9:63:9e:ae:0d:63:0d:c5:c5:89: 01:aa:1a:92:39:a9:02:6e:83:d5:df:54:f4:e1:82:47:b2:5a: cb:a2:f1:dd:a5:fe:ab:a0:f6:ab:65:15:57:39:da:47:40:fd: 4b:63:86:98:b8:d6:85:7e:0b:04:d9:9a:28:18:37:ca:6f:1c: d8:0b:04:72:c7:5d:5c:c2:2c:71:99:f9:5a:af:fc:d1:0c:66: 2b:3c:ce:c4:8a:a3:6e:02:03:3b:c7:56:b7:55:a2:1e:2a:a6: 43:fa:c8:39:be:b0:d3:0d:a9:6a:17:de:06:2c:12:8a:c9:93: 27:ef:69:4e:9a:51:87:b9:d2:fa:22:a4:55:cd:2c:ca:e1:18: e3:dc:13:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWrKVOSsdUFYxGrAm4rZmpqUyX0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ2NTQ4NTVBRjdBNDdGQTNFRTVFN0FGRDQyMkZGRDNE QkJGRUM0QTAeFw0yNTEwMjAxNzE5MjVaFw0yNTEwMjEyMTEyMjVaMDMxMTAvBgNV BAMTKDI4NjQ3MjVBNjU0MUJDMkJBOEYyMzY2N0NFODJENDc0MjVDMDUwODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTjdKu9+LndI6WeldINghyxpea QJKSx1n8AROsypKwLdx0XwyWxcWBBkyN7zDOjccJ5xX2R4mSlMhVKxf+5LSu2I99 rZ1Fms6BSxHygth1nvPMY5rs4t46nxY5JT8EYiA4NXsu5So24IGjHTySAlO6cMJi WEAepLoLw9csej0BDlAZZjP9WBNfOGcRJa83P898rwRJQXavioqg8RM0fkQwQjHy bmEWjxFpXTEGyH95SD/pCebj1X7KZi45aPguVOc+mCoWzIu8Bwkzjnr+oD95TKkm Z+sFkP9IsjmCtabLnC0QwLhfcm6kf4evi+tgyY17Dy7JKmBryvkH2757r+t5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKGRyWmVBvCuo8jZnzoLUdCXAUIgwHwYDVR0j BBgwFoAUVGVIVa96R/o+5eev1CL/09u/7EowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWNQaEVzTFYzMW9XNDNFVmFRNGg4ekw4M2RLYXJBcHB4Z2ZMS2RZOTJy ZU4vMC81NDY1NDg1NUFGN0E0N0ZBM0VFNUU3QUZENDIyRkZEM0RCQkZFQzRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0NjU0ODU1QUY3QTQ3RkEz RUU1RTdBRkQ0MjJGRkQzREJCRkVDNEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWNQaEVzTFYzMW9XNDNFVmFRNGg4ekw4M2RLYXJBcHB4Z2ZMS2RZOTJyZU4vMC81 NDY1NDg1NUFGN0E0N0ZBM0VFNUU3QUZENDIyRkZEM0RCQkZFQzRBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqRd/g0s63wyKm6JUFtO/xfsq30bc5KNwwZfk7koab12S9VFBVJNnPUWGHb6f XBD+UftAAV3iC2KVNxjayMojDm3lUijQAkztzPfXWKPPqNBo1yiU/LzwPHL23cU9 u6dzwy9seqZUjwph8PQaw3auSgeMd2vpY56uDWMNxcWJAaoakjmpAm6D1d9U9OGC R7Jay6Lx3aX+q6D2q2UVVznaR0D9S2OGmLjWhX4LBNmaKBg3ym8c2AsEcsddXMIs cZn5Wq/80QxmKzzOxIqjbgIDO8dWt1WiHiqmQ/rIOb6w0w2pahfeBiwSismTJ+9p TppRh7nS+iKkVc0syuEY49wTHQ== -----END CERTIFICATE-----Generated at Tue Oct 21 01:25:23 2025 by rpki-client