$ rpki-client -vvf rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft File: 37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft (raw, json) Hash identifier: zfX0RQQEkwa80b9oaEFhvx8nmD8oXd5mEGUU3G46Q9Y= Subject key identifier: 91:60:8F:B5:83:B5:21:C9:4F:0D:BF:94:70:E4:52:68:4A:16:AA:6C Authority key identifier: 37:E9:05:23:C8:27:A5:7C:11:E0:B9:7A:03:E6:AD:0A:F3:50:D7:BB Certificate issuer: /CN=37E90523C827A57C11E0B97A03E6AD0AF350D7BB Certificate serial: 5ECF3E00A8436A9D27FD7DA0D5F3B31B0E01B2AB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer Subject info access: rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft Manifest number: 02F0 Signing time: Mon 20 Oct 2025 15:43:15 +0000 Manifest this update: Mon 20 Oct 2025 15:38:15 +0000 Manifest next update: Tue 21 Oct 2025 16:13:15 +0000 Files and hashes: 1: 37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl (hash: gXjYxNHhd4fZlTZ85ZrO3vGH+InYUKvPDWOzjeBPv7o=) 2: 323830343a333564633a3a2f33322d3334203d3e20323636333131.roa (hash: wcI0ieNyQdQrVcqiR6SjIzVgQugca+WqF9vNkOhZw68=) 3: 3137302e37392e3232382e302f32322d3234203d3e20323636333131.roa (hash: P911MJb8bo8zJ2j5fIGU+UADWHGgL9jZ2aBW0Bz91k4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 16:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:cf:3e:00:a8:43:6a:9d:27:fd:7d:a0:d5:f3:b3:1b:0e:01:b2:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37E90523C827A57C11E0B97A03E6AD0AF350D7BB Validity Not Before: Oct 20 15:38:15 2025 GMT Not After : Oct 21 16:13:15 2025 GMT Subject: CN=91608FB583B521C94F0DBF9470E452684A16AA6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:03:3b:9e:6e:9d:29:89:0b:0d:84:6c:85:06: 92:1c:2e:aa:0c:0c:33:4c:f8:1f:84:85:15:ce:dd: c0:88:69:e0:e5:66:a3:e1:97:59:76:ba:41:f4:6d: c7:2a:9d:40:7f:60:e2:9c:dc:48:00:4e:60:b3:79: 85:1f:9d:bf:3e:6f:ab:25:b9:8d:b7:59:53:31:ca: fe:5f:a7:7b:5f:a2:5c:2a:bb:8b:38:31:de:97:80: 75:9b:bf:fb:e0:7f:a9:92:51:17:07:2c:8f:d8:45: 92:9c:e6:b6:88:45:41:e0:88:b8:b0:0c:09:49:a4: 20:58:28:ad:4f:ea:6d:33:3d:2e:56:18:4d:d8:67: b6:38:a8:e6:b3:a8:f0:07:60:57:e4:9a:e5:ad:ff: 70:d4:a0:7d:80:73:53:ee:07:78:d8:51:ab:35:37: 84:58:4d:6e:f3:08:52:65:2f:e8:2f:0f:34:9f:bd: cd:3a:9c:44:0f:11:f0:5e:60:40:f7:70:c5:bd:27: 72:34:0f:0b:0b:17:7b:03:bc:6e:0c:56:30:d8:e4: b3:0f:6c:d0:37:a9:90:3d:5f:e8:3c:3d:46:0d:2a: 5c:c6:39:0a:82:55:16:c5:dd:ca:db:9b:ca:1c:17: da:6a:13:c3:e2:74:c4:0d:95:50:d3:42:dd:f2:87: 91:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:60:8F:B5:83:B5:21:C9:4F:0D:BF:94:70:E4:52:68:4A:16:AA:6C X509v3 Authority Key Identifier: keyid:37:E9:05:23:C8:27:A5:7C:11:E0:B9:7A:03:E6:AD:0A:F3:50:D7:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3f:6d:4a:4e:95:8e:8c:03:c7:b1:70:3f:c6:e4:b8:41:93: b5:6f:04:1f:2f:20:0b:6d:79:e5:87:92:1c:97:fa:f3:c5:9f: 63:dd:4d:c3:56:95:fc:26:2e:b9:cd:e4:b6:05:14:d0:67:cb: 30:6e:4f:dc:17:64:85:c9:aa:5a:68:f8:15:90:8c:93:17:48: d9:4f:a5:d7:d9:28:7c:bc:14:1d:78:64:84:b2:6e:b8:aa:c8: 49:08:a7:a7:c4:a9:2c:c2:16:10:1e:c7:f6:dc:f8:bc:90:c7: df:ba:0e:db:3c:12:42:b3:9c:dc:0f:5d:6d:06:1e:3c:36:c1: 30:99:c8:26:7d:e7:c2:78:ac:8f:92:69:5d:8c:14:23:ee:f1: 88:29:0e:f6:09:40:3f:ca:f0:3f:8c:6f:de:7a:aa:1d:cc:66: 9f:8c:9d:29:9b:13:86:c1:83:e6:f4:3d:bf:6e:70:af:6d:17: 7b:66:b0:8f:d8:ce:bb:4d:18:23:83:28:ae:ad:0a:8d:71:b4: b0:7b:20:b3:ba:cd:fa:8d:d1:a7:6f:5c:05:6b:2c:53:67:94: aa:0f:dd:00:eb:20:b8:74:22:40:f2:fd:28:2b:9f:6b:9a:f1: e7:bb:64:03:53:d0:0c:a5:10:60:d8:c7:0a:9e:98:d4:ea:9f: 12:26:14:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXs8+AKhDap0n/X2g1fOzGw4BsqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdFOTA1MjNDODI3QTU3QzExRTBCOTdBMDNFNkFEMEFG MzUwRDdCQjAeFw0yNTEwMjAxNTM4MTVaFw0yNTEwMjExNjEzMTVaMDMxMTAvBgNV BAMTKDkxNjA4RkI1ODNCNTIxQzk0RjBEQkY5NDcwRTQ1MjY4NEExNkFBNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKAzuebp0piQsNhGyFBpIcLqoM DDNM+B+EhRXO3cCIaeDlZqPhl1l2ukH0bccqnUB/YOKc3EgATmCzeYUfnb8+b6sl uY23WVMxyv5fp3tfolwqu4s4Md6XgHWbv/vgf6mSURcHLI/YRZKc5raIRUHgiLiw DAlJpCBYKK1P6m0zPS5WGE3YZ7Y4qOazqPAHYFfkmuWt/3DUoH2Ac1PuB3jYUas1 N4RYTW7zCFJlL+gvDzSfvc06nEQPEfBeYED3cMW9J3I0DwsLF3sDvG4MVjDY5LMP bNA3qZA9X+g8PUYNKlzGOQqCVRbF3crbm8ocF9pqE8PidMQNlVDTQt3yh5FBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkWCPtYO1IclPDb+UcORSaEoWqmwwHwYDVR0j BBgwFoAUN+kFI8gnpXwR4Ll6A+atCvNQ17swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzVjNVVQbzFtckZtcGRCcGo2YTVWTG9rTGVCOXozU28yTWhjc3pFVGQ3 UlUvMS8zN0U5MDUyM0M4MjdBNTdDMTFFMEI5N0EwM0U2QUQwQUYzNTBEN0JCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3RTkwNTIzQzgyN0E1N0Mx MUUwQjk3QTAzRTZBRDBBRjM1MEQ3QkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzVjNVVQbzFtckZtcGRCcGo2YTVWTG9rTGVCOXozU28yTWhjc3pFVGQ3UlUvMS8z N0U5MDUyM0M4MjdBNTdDMTFFMEI5N0EwM0U2QUQwQUYzNTBEN0JCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfT9tSk6VjowDx7FwP8bkuEGTtW8EHy8gC2155YeSHJf688WfY91Nw1aV/CYu uc3ktgUU0GfLMG5P3BdkhcmqWmj4FZCMkxdI2U+l19kofLwUHXhkhLJuuKrISQin p8SpLMIWEB7H9tz4vJDH37oO2zwSQrOc3A9dbQYePDbBMJnIJn3nwnisj5JpXYwU I+7xiCkO9glAP8rwP4xv3nqqHcxmn4ydKZsThsGD5vQ9v25wr20Xe2awj9jOu00Y I4Morq0KjXG0sHsgs7rN+o3Rp29cBWssU2eUqg/dAOsguHQiQPL9KCufa5rx57tk A1PQDKUQYNjHCp6Y1OqfEiYUrw== -----END CERTIFICATE-----Generated at Mon Oct 20 21:55:06 2025 by rpki-client