$ rpki-client -vvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft File: 5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft (raw, json) Hash identifier: dZanhiquBnFWQrOoh6Wg4ewaaTpgyVZTdArRw90qVQc= Subject key identifier: DA:AE:77:0B:A2:9C:8D:33:9E:1D:A1:8C:0B:88:1B:77:FD:A5:89:1F Authority key identifier: 5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED Certificate issuer: /CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED Certificate serial: 08E4A4B836740BE2D6B659531877760439A70C31 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer Subject info access: rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft Manifest number: 02ED Signing time: Mon 20 Oct 2025 06:16:51 +0000 Manifest this update: Mon 20 Oct 2025 06:11:51 +0000 Manifest next update: Tue 21 Oct 2025 06:59:51 +0000 Files and hashes: 1: 5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl (hash: yCe3MrSNyJrq7XJbrhIUPAv4XhHI8Pk0En/clX96w9A=) 2: 3136342e3136332e35322e302f32322d3234203d3e20323635393533.roa (hash: N0btAFtvDXp7wrWYpNQVZV54i7RyzNCdiBD/oCt2wRo=) 3: 323830343a343035383a3a2f33322d3438203d3e20323635393533.roa (hash: P1kjWEGrObzZJrYICVUDSoEdRZLmjZ79Ee/h/Dakbdo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e4:a4:b8:36:74:0b:e2:d6:b6:59:53:18:77:76:04:39:a7:0c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED Validity Not Before: Oct 20 06:11:51 2025 GMT Not After : Oct 21 06:59:51 2025 GMT Subject: CN=DAAE770BA29C8D339E1DA18C0B881B77FDA5891F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:39:61:97:a2:92:7e:42:fd:da:a0:c2:ac: ce:f6:99:96:da:fc:e6:a5:b6:d1:8f:78:82:ce:40: 2b:f7:78:b2:06:2a:59:13:4a:62:c1:32:f1:b3:89: 53:33:8e:96:4d:ba:47:8e:5c:6c:3d:f0:fe:56:7f: b2:de:a6:5f:e1:70:1a:34:5b:3c:86:a3:86:88:57: 90:c4:a5:68:eb:9c:d9:86:a4:45:d0:f1:f6:cd:6a: 0d:94:38:fc:48:bd:d7:9f:90:a2:bb:d2:59:e2:99: 34:23:8b:d3:90:33:a9:e3:1c:bc:49:ed:d1:a2:4c: f1:6a:ad:4b:b7:a0:6f:f2:a0:7a:ac:cf:d9:e3:a2: 53:37:88:1c:37:c6:7b:d7:72:01:da:ac:b9:91:3f: 1a:69:1a:b9:69:c4:ec:ab:90:c7:ef:6e:f9:50:ea: d3:dd:fc:4e:8e:b9:94:f3:05:37:4c:9b:c1:d2:ca: b9:47:51:9a:ee:ec:23:76:c5:83:b6:33:d1:cc:c9: 6c:a8:5e:3f:ae:9d:8a:34:24:4c:40:7d:95:8b:bd: 8d:48:10:e2:1f:ab:d9:81:29:69:81:7d:34:38:2c: e9:d3:a9:2a:7f:ba:cb:c9:da:a2:b8:8a:86:cb:49: e6:04:40:9b:a6:45:f0:43:40:46:26:e8:4c:d0:ca: 62:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AE:77:0B:A2:9C:8D:33:9E:1D:A1:8C:0B:88:1B:77:FD:A5:89:1F X509v3 Authority Key Identifier: keyid:5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:db:28:e3:a2:98:32:b3:f8:55:10:7d:e2:a3:4f:a0:d4:02: 76:e6:8f:aa:fa:3e:b8:06:f9:4d:5c:6c:d3:dd:38:12:28:c0: eb:85:fc:60:43:1d:9f:65:4e:da:ec:9b:89:26:2d:ce:3a:aa: fb:ca:36:64:db:8b:39:d1:fd:4f:b3:00:e9:c3:ef:92:40:b2: ed:08:eb:f6:78:ba:7d:24:00:83:fc:ce:bd:7c:b3:83:33:0e: bc:86:9e:f2:b9:16:b2:a5:d5:0c:50:58:e0:3d:ce:6c:ec:1d: 3d:82:4f:24:51:9d:be:04:1a:f6:9f:93:65:b2:e0:48:5d:ac: 57:47:30:07:cc:c4:76:f2:92:85:71:2b:96:8d:79:0f:3d:45: e5:c0:e9:ad:d6:d5:f3:b6:04:98:1e:56:3c:d0:32:97:78:44: f1:9d:40:ed:50:50:8f:48:34:29:25:79:60:5f:97:76:00:77: ac:66:aa:4a:0f:d5:53:43:58:72:7d:18:82:f9:66:46:eb:96: 48:d0:9d:28:7e:33:a7:c7:1c:19:12:7e:7f:86:46:8c:de:79: eb:fe:d8:9a:27:f2:b7:bf:32:4e:34:53:68:90:64:2a:3e:d1: a1:3c:da:5f:42:13:fb:8a:f2:54:90:ea:63:0a:91:27:40:9f: 04:35:2a:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCOSkuDZ0C+LWtllTGHd2BDmnDDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFGOTU1RENCM0ZBNkM2QkE3QUVDM0Q4QkMxMzcyNzA4 Njk2QjhFRDAeFw0yNTEwMjAwNjExNTFaFw0yNTEwMjEwNjU5NTFaMDMxMTAvBgNV BAMTKERBQUU3NzBCQTI5QzhEMzM5RTFEQTE4QzBCODgxQjc3RkRBNTg5MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXzlhl6KSfkL92qDCrM72mZba /OalttGPeILOQCv3eLIGKlkTSmLBMvGziVMzjpZNukeOXGw98P5Wf7Lepl/hcBo0 WzyGo4aIV5DEpWjrnNmGpEXQ8fbNag2UOPxIvdefkKK70lnimTQji9OQM6njHLxJ 7dGiTPFqrUu3oG/yoHqsz9njolM3iBw3xnvXcgHarLmRPxppGrlpxOyrkMfvbvlQ 6tPd/E6OuZTzBTdMm8HSyrlHUZru7CN2xYO2M9HMyWyoXj+unYo0JExAfZWLvY1I EOIfq9mBKWmBfTQ4LOnTqSp/usvJ2qK4iobLSeYEQJumRfBDQEYm6EzQymIJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2q53C6KcjTOeHaGMC4gbd/2liR8wHwYDVR0j BBgwFoAUWvlV3LP6bGunrsPYvBNycIaWuO0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkpIY3lLQTQyeXNWNDNqelJSZmZLVlNUM2VTMzl3dGhVRGVjMXc3RlI4 TmQvMS81QUY5NTVEQ0IzRkE2QzZCQTdBRUMzRDhCQzEzNzI3MDg2OTZCOEVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBRjk1NURDQjNGQTZDNkJB N0FFQzNEOEJDMTM3MjcwODY5NkI4RUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkpIY3lLQTQyeXNWNDNqelJSZmZLVlNUM2VTMzl3dGhVRGVjMXc3RlI4TmQvMS81 QUY5NTVEQ0IzRkE2QzZCQTdBRUMzRDhCQzEzNzI3MDg2OTZCOEVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB9so46KYMrP4VRB94qNPoNQCduaPqvo+uAb5TVxs0904EijA64X8YEMdn2VO 2uybiSYtzjqq+8o2ZNuLOdH9T7MA6cPvkkCy7Qjr9ni6fSQAg/zOvXyzgzMOvIae 8rkWsqXVDFBY4D3ObOwdPYJPJFGdvgQa9p+TZbLgSF2sV0cwB8zEdvKShXErlo15 Dz1F5cDprdbV87YEmB5WPNAyl3hE8Z1A7VBQj0g0KSV5YF+XdgB3rGaqSg/VU0NY cn0YgvlmRuuWSNCdKH4zp8ccGRJ+f4ZGjN556/7Ymifyt78yTjRTaJBkKj7RoTza X0IT+4ryVJDqYwqRJ0CfBDUqcQ== -----END CERTIFICATE-----Generated at Mon Oct 20 17:53:53 2025 by rpki-client