$ rpki-client -vvf rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.mft File: D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.mft (raw, json) Hash identifier: DQbB/8Q4VHIgfGadXGDLB9r5NDx64O0csZtdC3N84jc= Subject key identifier: 92:25:C6:5A:D3:B8:36:2D:B3:89:B4:D2:CC:F5:3A:52:A8:5D:ED:05 Authority key identifier: D4:03:E4:39:9F:D7:16:8A:8D:C0:FD:3F:3E:F6:D5:61:5F:6B:FD:4D Certificate issuer: /CN=D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D Certificate serial: 560992F016224930448058ACE5689D4A957E40FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.cer Subject info access: rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.mft Manifest number: 02EF Signing time: Sun 19 Oct 2025 19:31:30 +0000 Manifest this update: Sun 19 Oct 2025 19:26:30 +0000 Manifest next update: Mon 20 Oct 2025 21:20:30 +0000 Files and hashes: 1: 323830343a316530383a3a2f33322d3438203d3e20323634343036.roa (hash: o2U6suTCQRZ7TodZ4jl3q7LpD3EoBTNmtT5PZsohc38=) 2: 3133312e3232312e38342e302f32322d3234203d3e20323634343036.roa (hash: Gvsy+6oyKaCOk+uSBDAgNhC8AtiYnVAHKocHSx2aSMc=) 3: D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.crl (hash: o+D2I9Qzic48zRiwg+1tkZmYtyP24kLQBbqR3HBEAcM=) 4: 3134332e3230322e34302e302f32322d3234203d3e20323634343036.roa (hash: t1r8G72FxLD8L5y8ygSIaaXMSMdcGL1zmz5EInSNY70=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.crl rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 21:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:09:92:f0:16:22:49:30:44:80:58:ac:e5:68:9d:4a:95:7e:40:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D Validity Not Before: Oct 19 19:26:30 2025 GMT Not After : Oct 20 21:20:30 2025 GMT Subject: CN=9225C65AD3B8362DB389B4D2CCF53A52A85DED05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:47:4c:b2:44:dd:ed:8e:f4:9d:85:61:6a:5f: 5a:8d:ac:f5:15:95:a0:a1:d1:0c:77:56:ef:9e:67: d6:70:ba:e1:a6:4c:5e:0a:4f:5c:10:dc:35:68:01: 65:ce:44:7d:60:13:fa:e1:70:dd:5e:7c:06:b3:37: 5b:80:96:57:4b:23:10:86:f3:96:c0:f8:28:fe:c8: ec:f8:43:52:3c:e5:77:8a:95:68:9d:7b:c9:ec:f1: 56:0f:29:e3:a1:eb:be:3f:20:1f:59:7b:1a:62:71: 38:bb:97:94:64:ca:45:2e:93:0e:24:3c:76:14:0c: 2b:ed:5c:83:d2:ac:71:4e:ac:c6:6e:43:4a:0e:35: 5b:77:20:88:89:ef:b6:e5:28:5e:bd:f9:1f:d1:37: b4:cf:a9:e3:e6:05:6c:3d:ce:7d:e5:f0:d4:00:0d: 63:98:49:30:68:5f:68:cc:76:cb:05:2a:24:ed:33: 22:14:58:61:01:24:b4:27:c2:6b:aa:95:4c:d6:8e: 40:e0:2b:07:9b:48:e0:7a:0c:2c:bf:b0:43:ca:2b: 9a:03:83:9d:6a:ac:59:bb:50:58:6d:59:77:8d:92: 8d:10:70:af:bc:57:59:15:e6:ee:95:37:c7:60:2e: e4:83:c8:54:aa:f6:11:09:5e:41:ae:f6:5f:a0:24: b0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:25:C6:5A:D3:B8:36:2D:B3:89:B4:D2:CC:F5:3A:52:A8:5D:ED:05 X509v3 Authority Key Identifier: keyid:D4:03:E4:39:9F:D7:16:8A:8D:C0:FD:3F:3E:F6:D5:61:5F:6B:FD:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:dc:75:f8:9c:b1:b0:ed:a2:19:d1:51:e9:19:59:cd:2b:61: 81:66:5e:13:57:06:00:04:d9:d3:ea:96:7b:c7:1f:71:74:66: f1:1e:2e:aa:98:10:02:28:c3:a1:f2:b5:db:6a:fe:6a:79:d8: 24:e6:0d:52:bc:09:f4:75:3a:07:47:5e:e0:d8:29:c2:60:dd: c2:30:d2:81:5b:92:55:7e:94:e2:27:6a:9c:65:7b:89:13:01: 91:16:fb:5b:c2:20:19:c3:88:e2:c9:5e:8a:9d:b0:2b:d8:5c: 7a:76:ff:94:03:b8:94:94:57:f6:92:3e:31:8d:f2:33:51:7c: 1f:ea:51:09:ca:03:07:c9:71:34:45:61:58:8c:25:85:fa:f9: c2:30:12:58:78:50:94:60:1a:71:7e:31:6e:b4:f9:62:59:79: 07:98:9d:1f:62:b8:e5:e3:89:c6:b4:a1:0c:e2:21:51:76:48: 8e:2d:27:36:b8:65:4c:64:dc:89:ef:e7:4d:47:22:5d:46:4d: 8d:f0:96:2b:1b:1d:80:4c:92:d4:26:98:06:db:9f:c1:d6:d6: 9b:21:35:08:e4:fd:0b:2a:af:98:8d:5f:bc:33:59:df:94:3b: 1c:8f:da:1a:c5:ee:f0:64:a9:da:8b:1a:52:c8:96:be:d8:cf: 3b:6d:66:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVgmS8BYiSTBEgFis5WidSpV+QP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQwM0U0Mzk5RkQ3MTY4QThEQzBGRDNGM0VGNkQ1NjE1 RjZCRkQ0RDAeFw0yNTEwMTkxOTI2MzBaFw0yNTEwMjAyMTIwMzBaMDMxMTAvBgNV BAMTKDkyMjVDNjVBRDNCODM2MkRCMzg5QjREMkNDRjUzQTUyQTg1REVEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0R0yyRN3tjvSdhWFqX1qNrPUV laCh0Qx3Vu+eZ9ZwuuGmTF4KT1wQ3DVoAWXORH1gE/rhcN1efAazN1uAlldLIxCG 85bA+Cj+yOz4Q1I85XeKlWide8ns8VYPKeOh674/IB9ZexpicTi7l5RkykUukw4k PHYUDCvtXIPSrHFOrMZuQ0oONVt3IIiJ77blKF69+R/RN7TPqePmBWw9zn3l8NQA DWOYSTBoX2jMdssFKiTtMyIUWGEBJLQnwmuqlUzWjkDgKwebSOB6DCy/sEPKK5oD g51qrFm7UFhtWXeNko0QcK+8V1kV5u6VN8dgLuSDyFSq9hEJXkGu9l+gJLDbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkiXGWtO4Ni2zibTSzPU6Uqhd7QUwHwYDVR0j BBgwFoAU1APkOZ/XFoqNwP0/PvbVYV9r/U0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTZ0U2VYTUhGd2diaE5GaU1iSEdrQ1liZHF4TWtSdVc3OUF6Z1RpUVE1 MnIvMS9ENDAzRTQzOTlGRDcxNjhBOERDMEZEM0YzRUY2RDU2MTVGNkJGRDRELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0MDNFNDM5OUZENzE2OEE4 REMwRkQzRjNFRjZENTYxNUY2QkZENEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTZ0U2VYTUhGd2diaE5GaU1iSEdrQ1liZHF4TWtSdVc3OUF6Z1RpUVE1MnIvMS9E NDAzRTQzOTlGRDcxNjhBOERDMEZEM0YzRUY2RDU2MTVGNkJGRDRELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANtx1+JyxsO2iGdFR6RlZzSthgWZeE1cGAATZ0+qWe8cfcXRm8R4uqpgQAijD ofK122r+annYJOYNUrwJ9HU6B0de4NgpwmDdwjDSgVuSVX6U4idqnGV7iRMBkRb7 W8IgGcOI4sleip2wK9hcenb/lAO4lJRX9pI+MY3yM1F8H+pRCcoDB8lxNEVhWIwl hfr5wjASWHhQlGAacX4xbrT5Yll5B5idH2K45eOJxrShDOIhUXZIji0nNrhlTGTc ie/nTUciXUZNjfCWKxsdgEyS1CaYBtufwdbWmyE1COT9CyqvmI1fvDNZ35Q7HI/a GsXu8GSp2osaUsiWvtjPO21mBg== -----END CERTIFICATE-----Generated at Mon Oct 20 09:11:10 2025 by rpki-client