$ rpki-client -vvf rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft File: D5A1856A52E7F9EBF280FCB86750839A6466C111.mft (raw, json) Hash identifier: HiKxj2sO3IAhAF/xyGWvBAoXBKMjy+HdaRA9q8qhli8= Subject key identifier: 7F:F6:AA:4D:C1:C7:B3:3C:57:DB:9E:51:05:9D:29:22:0B:5E:E0:D9 Authority key identifier: D5:A1:85:6A:52:E7:F9:EB:F2:80:FC:B8:67:50:83:9A:64:66:C1:11 Certificate issuer: /CN=D5A1856A52E7F9EBF280FCB86750839A6466C111 Certificate serial: 58F4C93A95F170F955F58A72AFCB829FD7C4D5C6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer Subject info access: rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft Manifest number: 33 Signing time: Mon 20 Oct 2025 22:36:12 +0000 Manifest this update: Mon 20 Oct 2025 22:31:12 +0000 Manifest next update: Wed 22 Oct 2025 02:31:12 +0000 Files and hashes: 1: D5A1856A52E7F9EBF280FCB86750839A6466C111.crl (hash: o4EOBxmXroatLjiGHKhdEqSIYn2Pb4DgSQauBXsWNNk=) 2: 3137372e3132392e3137322e302f32322d3332203d3e20323632393337.roa (hash: iqNa56tx//+u9qieIK9DOLwqegcy4lUTN5G/wjF6sJ0=) 3: 323830343a383237633a3a2f33322d313238203d3e20323632393337.roa (hash: w7mrlzP9adJiyFUUgR0vUJKBTlOPeWaDs+XqI7y8EJY=) 4: 3137372e3132392e3137322e302f32322d3332203d3e20313938393439.roa (hash: KWOcoR9hqLH7384p+O+WHFWxKloI3EeqvgQB7yfHZGs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.crl rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Oct 2025 02:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f4:c9:3a:95:f1:70:f9:55:f5:8a:72:af:cb:82:9f:d7:c4:d5:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5A1856A52E7F9EBF280FCB86750839A6466C111 Validity Not Before: Oct 20 22:31:12 2025 GMT Not After : Oct 22 02:31:12 2025 GMT Subject: CN=7FF6AA4DC1C7B33C57DB9E51059D29220B5EE0D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:98:ed:09:3a:c9:65:36:9b:80:3f:b0:c7: 3a:be:c7:6c:0f:e2:f6:36:b7:09:0c:b4:e0:79:df: bc:93:79:fd:21:ca:9e:24:67:b7:0a:d6:1c:1c:8d: 2b:ae:47:09:df:11:3f:11:f1:72:0b:f8:ee:67:a8: 92:9b:5c:39:fc:8a:2f:6d:fd:98:69:57:6a:91:f4: 11:6d:16:19:25:7e:79:c3:07:fb:6c:6f:0f:31:92: ae:52:7e:ea:c2:cf:1f:27:2c:ac:42:a3:72:e6:a7: a4:76:98:78:ab:80:b3:d9:48:2a:3f:c6:61:c4:5d: 4e:c7:cd:3b:29:a0:7f:e0:9b:5a:97:90:5f:39:57: 88:45:94:fb:84:43:e2:fc:26:87:77:e7:34:5a:cc: e2:9b:94:92:e7:a1:3d:d1:78:23:06:53:21:97:bb: bf:6b:e8:25:39:6d:3a:59:06:41:53:d4:ca:b0:4e: 49:97:0f:f9:bb:30:bf:d3:58:91:f0:8f:49:a4:6f: e0:ac:d7:77:ef:1a:dd:ed:9d:a0:3d:5e:25:5a:c5: 30:b3:97:ab:80:58:93:41:79:e1:d2:1f:bd:42:8e: de:4a:c1:c6:26:fe:af:69:12:6b:2a:14:9f:6b:9b: c3:8f:32:9c:38:ae:d6:8e:0b:ca:77:ca:8c:60:70: bc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F6:AA:4D:C1:C7:B3:3C:57:DB:9E:51:05:9D:29:22:0B:5E:E0:D9 X509v3 Authority Key Identifier: keyid:D5:A1:85:6A:52:E7:F9:EB:F2:80:FC:B8:67:50:83:9A:64:66:C1:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:07:25:5c:71:62:52:c3:f8:7d:75:2b:d8:d1:04:a7:38:ce: 2e:ce:b3:b1:2e:72:d9:3b:7c:22:46:7c:7a:5b:1b:c0:e7:bb: 40:10:8f:0e:fe:23:17:ae:58:8d:27:99:4e:1d:49:95:1d:64: 00:a9:ca:a5:95:b6:c9:60:a6:5e:16:55:68:ee:45:c9:d6:11: e9:fa:ac:bb:b3:07:37:f8:39:dd:e6:14:e1:b5:9d:df:7b:ac: f4:09:c6:49:ab:15:59:62:60:b5:f0:18:70:61:78:f7:3e:7a: 97:d2:33:7b:85:e1:38:19:31:86:47:5a:c7:92:c7:57:43:36: 06:62:66:9f:1f:07:49:3a:93:9a:86:b9:c4:c3:68:bd:bf:85: 06:f7:8b:c2:fb:0c:ba:07:c8:9e:44:1d:9f:06:fb:15:11:72: e5:6a:b4:24:ea:49:7b:51:ec:e0:cf:03:95:1d:49:d7:29:bf: 43:ba:f1:00:3d:3d:3b:c4:bd:fe:79:13:3d:19:fe:71:b0:a9: cb:5d:02:39:95:5d:81:9d:4b:c7:df:eb:9b:bc:cd:06:55:1b: 02:ee:b6:ac:b5:2a:af:67:65:ea:f7:5d:d5:de:52:85:b3:09: bb:1a:20:3e:9f:4d:bb:e3:a6:b6:dc:5f:65:02:a5:ea:60:ad: 64:56:dd:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWPTJOpXxcPlV9Ypyr8uCn9fE1cYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVBMTg1NkE1MkU3RjlFQkYyODBGQ0I4Njc1MDgzOUE2 NDY2QzExMTAeFw0yNTEwMjAyMjMxMTJaFw0yNTEwMjIwMjMxMTJaMDMxMTAvBgNV BAMTKDdGRjZBQTREQzFDN0IzM0M1N0RCOUU1MTA1OUQyOTIyMEI1RUUwRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5pjtCTrJZTabgD+wxzq+x2wP 4vY2twkMtOB537yTef0hyp4kZ7cK1hwcjSuuRwnfET8R8XIL+O5nqJKbXDn8ii9t /ZhpV2qR9BFtFhklfnnDB/tsbw8xkq5SfurCzx8nLKxCo3Lmp6R2mHirgLPZSCo/ xmHEXU7HzTspoH/gm1qXkF85V4hFlPuEQ+L8Jod35zRazOKblJLnoT3ReCMGUyGX u79r6CU5bTpZBkFT1MqwTkmXD/m7ML/TWJHwj0mkb+Cs13fvGt3tnaA9XiVaxTCz l6uAWJNBeeHSH71Cjt5KwcYm/q9pEmsqFJ9rm8OPMpw4rtaOC8p3yoxgcLwZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUf/aqTcHHszxX255RBZ0pIgte4NkwHwYDVR0j BBgwFoAU1aGFalLn+evygPy4Z1CDmmRmwREwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQThCcVhMUTFORm4xcHRxRmU3WnlTakVYWk1zbkRSZ3VYNUM1VWVHRkRB RzcvMC9ENUExODU2QTUyRTdGOUVCRjI4MEZDQjg2NzUwODM5QTY0NjZDMTExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1QTE4NTZBNTJFN0Y5RUJG MjgwRkNCODY3NTA4MzlBNjQ2NkMxMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QThCcVhMUTFORm4xcHRxRmU3WnlTakVYWk1zbkRSZ3VYNUM1VWVHRkRBRzcvMC9E NUExODU2QTUyRTdGOUVCRjI4MEZDQjg2NzUwODM5QTY0NjZDMTExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKQclXHFiUsP4fXUr2NEEpzjOLs6zsS5y2Tt8IkZ8elsbwOe7QBCPDv4jF65Y jSeZTh1JlR1kAKnKpZW2yWCmXhZVaO5FydYR6fqsu7MHN/g53eYU4bWd33us9AnG SasVWWJgtfAYcGF49z56l9Ize4XhOBkxhkdax5LHV0M2BmJmnx8HSTqTmoa5xMNo vb+FBveLwvsMugfInkQdnwb7FRFy5Wq0JOpJe1Hs4M8DlR1J1ym/Q7rxAD09O8S9 /nkTPRn+cbCpy10COZVdgZ1Lx9/rm7zNBlUbAu62rLUqr2dl6vdd1d5ShbMJuxog Pp9Nu+OmttxfZQKl6mCtZFbd1w== -----END CERTIFICATE-----Generated at Tue Oct 21 03:25:33 2025 by rpki-client