$ rpki-client -vvf rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft File: 20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft (raw, json) Hash identifier: 7hWXScf1E8DSP1XDIpU1EnY2NnyVNlAiqj7w15pTC50= Subject key identifier: 5B:B5:75:1C:AC:C5:7E:67:A8:BD:CF:37:43:07:E0:C6:AF:A9:E8:2C Authority key identifier: 20:E5:AB:E1:C1:0D:0B:4C:AF:5B:8A:8B:FD:0E:B5:59:D1:59:8D:5C Certificate issuer: /CN=20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C Certificate serial: 5BDDAD9C7BE4BDFD90126C2EECC7D13A06D8DA51 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.cer Subject info access: rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft Manifest number: 9D Signing time: Sun 19 Oct 2025 17:12:27 +0000 Manifest this update: Sun 19 Oct 2025 17:07:27 +0000 Manifest next update: Mon 20 Oct 2025 20:38:27 +0000 Files and hashes: 1: 20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.crl (hash: 3fXUESge6yMooNUCs9b+28V0SDWp+N6G8LZ1sfiLM/w=) 2: 323830343a313538383a3a2f33322d3336203d3e20323633333933.roa (hash: RkMXKecvmW5kgrux+ScsWloo6oerwyF9YYoG25+10TE=) 3: 3137372e3232322e3230302e302f32312d3234203d3e20323633333933.roa (hash: pZZmxcSR9EAlttKYSeDpPeTr6SVaV3Klh3SCSp08wZk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.crl rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 20:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:dd:ad:9c:7b:e4:bd:fd:90:12:6c:2e:ec:c7:d1:3a:06:d8:da:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C Validity Not Before: Oct 19 17:07:27 2025 GMT Not After : Oct 20 20:38:27 2025 GMT Subject: CN=5BB5751CACC57E67A8BDCF374307E0C6AFA9E82C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f3:fd:88:0c:4e:b8:31:50:5e:bf:ae:72:7a: 78:a2:d9:7c:7d:b4:64:9e:21:d1:d0:13:e0:21:2d: ce:77:21:3b:bb:86:98:83:41:7a:f4:89:37:22:7b: 71:53:86:59:77:84:11:29:29:b2:49:ab:dd:7c:67: 52:64:d3:e6:98:25:ba:7d:57:d2:c9:3f:48:19:d6: ff:ff:36:a4:c5:70:12:da:85:cc:9c:61:90:9e:e6: df:82:a1:07:23:ac:2d:8d:39:45:76:2a:de:41:e8: 1f:70:24:58:86:41:4d:65:ea:c9:2d:ff:29:22:68: 48:d9:09:32:76:c4:0f:e3:29:2d:e7:59:11:f3:03: 6f:1a:f1:50:37:f7:ba:63:5e:50:f9:1a:27:b2:6e: d6:60:e4:a1:64:ac:a3:56:52:9c:36:31:4e:f3:41: c3:a7:14:cc:7a:bb:b5:76:b8:a1:e7:f0:70:4a:6c: 0b:53:e9:21:f4:11:93:7d:5b:db:be:f7:4e:b4:56: e9:6c:b0:e4:fa:75:11:68:b0:a6:d8:b3:2e:59:aa: 36:4f:a6:7e:00:2c:b0:ae:81:70:d8:f9:b3:03:ac: 11:a8:f7:3b:2e:29:e0:40:fd:9d:e7:4b:af:68:37: db:7e:6a:d5:cf:99:f6:de:2d:de:6e:8a:70:c2:bd: 27:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B5:75:1C:AC:C5:7E:67:A8:BD:CF:37:43:07:E0:C6:AF:A9:E8:2C X509v3 Authority Key Identifier: keyid:20:E5:AB:E1:C1:0D:0B:4C:AF:5B:8A:8B:FD:0E:B5:59:D1:59:8D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:25:12:ba:50:5e:15:4f:bc:86:5b:6d:19:af:19:a4:67:09: 5c:32:54:23:57:de:bb:68:58:4c:14:fb:6a:f8:63:4e:5d:ad: 7b:dd:cc:4b:15:e4:69:13:12:e9:bd:ce:a7:a1:12:b2:17:57: a4:0f:5d:af:fc:53:90:66:f5:1d:96:fb:e2:9b:f2:71:4a:d9: b6:61:bc:e4:28:e7:f7:2d:5f:58:e5:65:5e:79:2d:42:b8:d0: ab:08:c7:46:40:2b:43:b0:f5:ab:30:1c:4e:30:1f:01:20:af: 9b:39:5d:68:71:1b:bf:86:16:c5:12:80:ee:4e:e7:c1:88:26: 73:2e:ef:34:b9:42:70:25:b1:89:52:da:00:cd:24:7a:09:88: c2:d4:5d:1b:d3:92:37:c3:38:84:84:e6:90:b1:9c:1c:7c:64: 72:36:f3:29:40:5a:f9:9a:fb:5f:7d:c8:68:de:21:a1:8e:75: 52:69:08:9f:0b:02:e5:6a:3e:aa:e0:00:1f:86:81:f5:11:51: 08:c3:e4:ae:b5:62:3f:93:06:f1:d8:25:ad:1d:fd:18:11:31: c4:8f:76:3d:5f:cd:49:4b:fb:d6:b6:72:bc:f2:94:d8:41:41: bc:33:46:11:02:4b:36:5f:42:8d:f7:5b:5f:68:db:73:de:1c: 36:0e:e2:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUW92tnHvkvf2QEmwu7MfROgbY2lEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFNUFCRTFDMTBEMEI0Q0FGNUI4QThCRkQwRUI1NTlE MTU5OEQ1QzAeFw0yNTEwMTkxNzA3MjdaFw0yNTEwMjAyMDM4MjdaMDMxMTAvBgNV BAMTKDVCQjU3NTFDQUNDNTdFNjdBOEJEQ0YzNzQzMDdFMEM2QUZBOUU4MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl8/2IDE64MVBev65yenii2Xx9 tGSeIdHQE+AhLc53ITu7hpiDQXr0iTcie3FThll3hBEpKbJJq918Z1Jk0+aYJbp9 V9LJP0gZ1v//NqTFcBLahcycYZCe5t+CoQcjrC2NOUV2Kt5B6B9wJFiGQU1l6skt /ykiaEjZCTJ2xA/jKS3nWRHzA28a8VA397pjXlD5GieybtZg5KFkrKNWUpw2MU7z QcOnFMx6u7V2uKHn8HBKbAtT6SH0EZN9W9u+9060VulssOT6dRFosKbYsy5ZqjZP pn4ALLCugXDY+bMDrBGo9zsuKeBA/Z3nS69oN9t+atXPmfbeLd5uinDCvSd3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUW7V1HKzFfmeovc83Qwfgxq+p6CwwHwYDVR0j BBgwFoAUIOWr4cENC0yvW4qL/Q61WdFZjVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnBwUWVjWHo5VTRvNVJhRGZMenVIdHROQmJvR2QzeHJQM2dSajhOVHdY NTUvMC8yMEU1QUJFMUMxMEQwQjRDQUY1QjhBOEJGRDBFQjU1OUQxNTk4RDVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwRTVBQkUxQzEwRDBCNENB RjVCOEE4QkZEMEVCNTU5RDE1OThENUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnBwUWVjWHo5VTRvNVJhRGZMenVIdHROQmJvR2QzeHJQM2dSajhOVHdYNTUvMC8y MEU1QUJFMUMxMEQwQjRDQUY1QjhBOEJGRDBFQjU1OUQxNTk4RDVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmyUSulBeFU+8hlttGa8ZpGcJXDJUI1feu2hYTBT7avhjTl2te93MSxXkaRMS 6b3Op6ESshdXpA9dr/xTkGb1HZb74pvycUrZtmG85Cjn9y1fWOVlXnktQrjQqwjH RkArQ7D1qzAcTjAfASCvmzldaHEbv4YWxRKA7k7nwYgmcy7vNLlCcCWxiVLaAM0k egmIwtRdG9OSN8M4hITmkLGcHHxkcjbzKUBa+Zr7X33IaN4hoY51UmkInwsC5Wo+ quAAH4aB9RFRCMPkrrViP5MG8dglrR39GBExxI92PV/NSUv71rZyvPKU2EFBvDNG EQJLNl9CjfdbX2jbc94cNg7iTg== -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:22 2025 by rpki-client