$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft File: 5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft (raw, json) Hash identifier: rrWmPulWUzHlI7ddZweM3H3S39hyNZ4uXBQqbR7ufkw= Subject key identifier: 4A:E4:4D:6C:17:6B:E4:8C:6E:7C:64:AD:D1:60:92:7E:9B:C7:C4:1D Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03 Certificate issuer: /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03 Certificate serial: 7910F5694F501B5B67807FC2C238E38535B6EE12 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer Subject info access: rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft Manifest number: 034B Signing time: Mon 20 Oct 2025 17:35:24 +0000 Manifest this update: Mon 20 Oct 2025 17:30:24 +0000 Manifest next update: Tue 21 Oct 2025 20:10:24 +0000 Files and hashes: 1: 3137372e3132362e36342e302f32302d3234203d3e20323632333338.roa (hash: JHu+YEvSyZhTF52NbNsxoKk1ovrHwWDZ7McbbiRag8I=) 2: 323830343a3830343a3a2f33322d3438203d3e20323632333338.roa (hash: ymdJP8Nbk9jRmYyOWMHk1THgRAKhTi9mQg1JwV1w5V8=) 3: 5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl (hash: hdoTcw1f8ilAR0AP/q8mngfTsv4h4Sf8X6xPJX13OO0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 19:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:10:f5:69:4f:50:1b:5b:67:80:7f:c2:c2:38:e3:85:35:b6:ee:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03 Validity Not Before: Oct 20 17:30:24 2025 GMT Not After : Oct 21 20:10:24 2025 GMT Subject: CN=4AE44D6C176BE48C6E7C64ADD160927E9BC7C41D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:3b:66:25:cd:4b:83:3c:d4:a1:d1:77:22: b2:a6:7e:4d:2d:a9:9b:38:d2:16:f7:6a:0d:3d:e3: c4:1d:a2:ef:b3:f1:8c:66:9c:31:83:2c:98:8d:95: b3:d4:b9:fb:88:2f:c6:a9:0c:b1:d8:f3:0b:d1:76: b0:d6:ef:c8:b7:33:71:7e:ca:70:e5:d8:6b:a8:6b: 1c:b6:97:c0:bb:01:d3:35:ff:32:55:a8:77:23:95: 9c:72:42:8e:1b:83:c3:96:19:12:9f:8f:a4:84:7b: 4f:ff:3d:a2:31:bd:09:2a:31:97:ec:ee:73:34:44: f7:c5:af:e3:bf:63:6a:91:35:53:01:e8:42:0e:76: 6f:d0:c8:3c:9b:7f:9d:c7:7a:a9:98:39:51:f6:47: 4c:e3:a8:58:bf:25:a1:46:eb:a9:2c:e5:5d:c4:1b: ad:40:d9:de:4b:e0:3c:53:b5:17:c1:15:ee:f4:d1: ab:50:cc:53:77:6a:d3:f7:ff:9e:2d:2a:42:d7:54: be:7e:f3:f0:c5:34:00:0d:be:f5:13:54:fb:22:93: 82:78:e9:1d:7c:65:14:66:83:b2:38:cd:b4:44:3f: 82:e1:5c:50:69:b7:6d:b5:de:e1:1f:db:f1:6e:55: 97:3d:bf:c1:64:f9:52:ce:20:6c:48:4b:8a:e2:cd: bf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E4:4D:6C:17:6B:E4:8C:6E:7C:64:AD:D1:60:92:7E:9B:C7:C4:1D X509v3 Authority Key Identifier: keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0e:81:d5:f8:4b:1d:9b:73:62:a5:a3:41:0e:a0:5b:36:b9: 7f:17:4e:2b:ac:b5:11:09:16:f6:4e:9f:10:d4:73:95:1c:b5: 5f:ba:83:1a:bf:f0:37:18:7c:a7:56:9a:04:b2:8d:6f:4e:18: ac:65:d6:fd:9e:b9:2d:b6:2a:1d:86:fc:87:2a:4e:70:1f:45: 8b:03:ac:79:27:02:59:5e:8e:cb:74:1f:bd:d1:b6:8f:b6:a7: a4:63:88:56:96:8b:91:0d:08:d4:21:f1:d3:8c:6e:fd:6a:ed: 89:96:56:4f:73:3e:17:de:64:c8:f9:9c:d7:5e:42:63:93:fa: 90:e1:41:2e:14:7b:7d:0a:6e:fa:aa:00:c7:15:25:3b:07:8d: c7:4c:43:66:38:5f:fc:a3:e2:0a:59:09:e1:19:49:a0:bf:2e: cf:a7:f4:0f:92:0b:bd:57:66:a2:71:62:6a:0e:fa:48:95:c0: fe:01:e4:c4:18:85:9a:f4:45:6b:a1:59:1f:c9:1f:7e:78:85: 7d:39:63:67:b0:39:a9:7b:03:03:d4:3a:99:64:9d:d3:fc:f2: 57:4f:39:b8:05:02:fd:40:dd:4d:f1:f1:e7:c5:26:61:2e:20: bb:e3:28:1b:9f:21:22:bf:9b:82:e3:ae:47:4b:a7:af:af:cb: c4:5a:95:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeRD1aU9QG1tngH/CwjjjhTW27hIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxQTEyMEQ3MjgxMjVGNjBGRjREQ0JGMUVDN0RBNTRG MERCRUQwMzAeFw0yNTEwMjAxNzMwMjRaFw0yNTEwMjEyMDEwMjRaMDMxMTAvBgNV BAMTKDRBRTQ0RDZDMTc2QkU0OEM2RTdDNjRBREQxNjA5MjdFOUJDN0M0MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0yjtmJc1LgzzUodF3IrKmfk0t qZs40hb3ag0948Qdou+z8YxmnDGDLJiNlbPUufuIL8apDLHY8wvRdrDW78i3M3F+ ynDl2Guoaxy2l8C7AdM1/zJVqHcjlZxyQo4bg8OWGRKfj6SEe0//PaIxvQkqMZfs 7nM0RPfFr+O/Y2qRNVMB6EIOdm/QyDybf53HeqmYOVH2R0zjqFi/JaFG66ks5V3E G61A2d5L4DxTtRfBFe700atQzFN3atP3/54tKkLXVL5+8/DFNAANvvUTVPsik4J4 6R18ZRRmg7I4zbREP4LhXFBpt2213uEf2/FuVZc9v8Fk+VLOIGxIS4rizb9HAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSuRNbBdr5IxufGSt0WCSfpvHxB0wHwYDVR0j BBgwFoAUXRoSDXKBJfYP9Ny/HsfaVPDb7QMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOW9rc2Yzc0x4bmJxZ3hQZUNQaENNYXM5dDdqUkFrVjgydm44VGtMUnhH c3YvMC81RDFBMTIwRDcyODEyNUY2MEZGNERDQkYxRUM3REE1NEYwREJFRDAzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEMUExMjBENzI4MTI1RjYw RkY0RENCRjFFQzdEQTU0RjBEQkVEMDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OW9rc2Yzc0x4bmJxZ3hQZUNQaENNYXM5dDdqUkFrVjgydm44VGtMUnhHc3YvMC81 RDFBMTIwRDcyODEyNUY2MEZGNERDQkYxRUM3REE1NEYwREJFRDAzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnw6B1fhLHZtzYqWjQQ6gWza5fxdOK6y1EQkW9k6fENRzlRy1X7qDGr/wNxh8 p1aaBLKNb04YrGXW/Z65LbYqHYb8hypOcB9FiwOseScCWV6Oy3QfvdG2j7anpGOI VpaLkQ0I1CHx04xu/WrtiZZWT3M+F95kyPmc115CY5P6kOFBLhR7fQpu+qoAxxUl OweNx0xDZjhf/KPiClkJ4RlJoL8uz6f0D5ILvVdmonFiag76SJXA/gHkxBiFmvRF a6FZH8kffniFfTljZ7A5qXsDA9Q6mWSd0/zyV085uAUC/UDdTfHx58UmYS4gu+Mo G58hIr+bguOuR0unr6/LxFqVNg== -----END CERTIFICATE-----Generated at Mon Oct 20 21:35:24 2025 by rpki-client