$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft File: B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft (raw, json) Hash identifier: 33p1OzG5LK719r4NC34NsQeZDY7XvtGqWzJ/2Ty/h7o= Subject key identifier: F9:41:25:B7:77:DD:13:89:04:54:22:26:49:F0:F0:35:A3:3B:EB:68 Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81 Certificate issuer: /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81 Certificate serial: 3A191BF7A3689C4BB3DE9F5A3AC5663AB7D24CD7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer Subject info access: rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft Manifest number: 02EE Signing time: Mon 20 Oct 2025 16:32:19 +0000 Manifest this update: Mon 20 Oct 2025 16:27:19 +0000 Manifest next update: Tue 21 Oct 2025 19:22:19 +0000 Files and hashes: 1: 323830343a373463303a333a3a2f34382d3438203d3e20323731303031.roa (hash: xIOiY5AbK/u+wde+uFpEZOCisWtyE49NnGfSjfUWESA=) 2: 3137372e3232332e3133322e302f32332d3233203d3e20323731303031.roa (hash: IJwhCRZ/eia9wbArW/hVlZ/3CzBgX2zAxbknxwjozN0=) 3: 323830343a373463303a363a3a2f34382d3438203d3e20323731303031.roa (hash: Hsrvj/TB2roXOEb6pFYXm2pkCmxMpu5m6ezauYUI/2E=) 4: 323830343a373463303a3a2f33322d3332203d3e20323731303031.roa (hash: BCC51P7ZxSQ0m7S8/6KLs4GlFQ1WTUXIjCsSOHZYl+g=) 5: 3137372e3232332e3133322e302f32322d3232203d3e20323731303031.roa (hash: 1XgLCn8snOhVhGzdvEorMRjHnY23cBd+JEmoP0dsLTY=) 6: B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl (hash: Zt5CSV5AkKLNbMU1yT310Eu9YvNbxsXgmxV2E4FUB/k=) 7: 323830343a373463303a3a2f33332d3333203d3e20323731303031.roa (hash: 5v+nTMwCioWhJD/VGCThgGl+n+v8/kmfzVRrtFEM0GU=) 8: 323830343a373463303a383030303a3a2f33332d3333203d3e20323731303031.roa (hash: qgFxFxtxDJNyrMOE8s6UdEvMBq+6La07xmVkbifGxYo=) 9: 3137372e3232332e3133342e302f32332d3233203d3e20323731303031.roa (hash: tWmADO3AyjJB+3iXcF2jswe5Q+UsBpZmVTKP6t3ruP8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 18:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:19:1b:f7:a3:68:9c:4b:b3:de:9f:5a:3a:c5:66:3a:b7:d2:4c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81 Validity Not Before: Oct 20 16:27:19 2025 GMT Not After : Oct 21 19:22:19 2025 GMT Subject: CN=F94125B777DD13890454222649F0F035A33BEB68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:36:34:21:dd:74:8a:70:de:0c:4e:19:a9: f2:90:c4:17:a9:34:9b:34:a7:9a:0c:6f:f1:fe:79: bd:c0:54:72:69:e8:dc:8e:64:31:fd:ab:d6:a9:df: 57:f1:ac:29:67:d6:de:3f:e7:6e:23:91:5c:ca:90: 07:23:58:d4:05:82:25:4e:2f:d6:e7:a0:4c:33:94: ae:59:a9:66:59:6c:9b:0e:c7:13:15:ba:0a:27:60: a9:50:ad:6c:58:eb:04:5d:5b:2d:23:3b:c5:0a:18: 22:2a:72:d3:26:d1:87:2b:36:42:be:b2:17:fd:14: 2a:1f:de:23:55:02:d6:6b:28:87:f3:b1:95:cf:38: 63:34:16:86:65:80:77:38:8b:3b:3c:ee:78:d5:33: 86:39:20:60:86:13:a1:03:2d:b9:4f:e2:6f:21:58: 89:89:a7:19:05:9a:c1:88:53:4f:7a:b8:d8:d6:02: e0:ff:6e:e5:39:67:ba:55:cf:ea:46:b2:5d:b6:be: dd:b3:69:3e:8a:f0:e5:77:9e:aa:e2:9f:26:72:3e: ec:18:80:c9:c0:de:a8:dc:c3:da:7c:23:79:34:de: 93:c0:e2:c7:4a:80:d2:6b:8c:3b:79:79:76:48:1a: 8e:51:22:fd:62:2f:9c:f5:97:78:60:33:64:61:19: 76:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:41:25:B7:77:DD:13:89:04:54:22:26:49:F0:F0:35:A3:3B:EB:68 X509v3 Authority Key Identifier: keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:1c:73:0a:f6:d4:e7:a5:4a:87:22:6a:f0:9b:da:9b:c2:32: cf:7a:39:ca:d6:d0:d1:d8:41:fa:58:94:f6:01:73:19:4c:e7: a5:0c:24:9a:d9:cc:8f:72:e8:d4:04:dc:63:d2:d8:a0:2a:15: 64:c2:e3:9a:15:b6:99:36:15:c2:52:a2:ac:d8:9f:10:88:0f: 53:22:0d:34:c1:a6:98:54:1f:0f:fc:16:32:39:73:80:58:a6: 8d:0f:bc:45:e0:a0:22:91:24:1d:5c:b4:92:89:72:57:ed:82: a1:81:5a:85:c2:6c:66:a4:c8:62:5c:a2:46:79:51:4d:0d:e0: 78:e3:c9:2e:21:8f:b5:42:5b:c0:0b:14:b8:83:3e:86:91:42: 9d:6c:0f:99:f4:76:e0:48:97:81:d9:38:23:69:54:15:9f:fa: 39:e3:aa:44:df:ae:96:cf:b1:94:5a:2f:78:3e:89:5c:90:1f: 4f:da:9e:7f:65:98:86:1a:a7:c9:ae:b1:1d:58:a9:08:52:7f: e7:8e:e2:bb:de:a6:48:ec:78:95:77:48:6a:39:0e:88:fe:5a: 71:c6:8a:f5:55:1b:a0:13:78:35:ec:d5:48:b3:e0:a7:61:b1: c4:b8:d0:09:1f:ff:b0:08:75:d2:1e:01:58:bd:cb:3d:97:37: f2:a5:31:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOhkb96NonEuz3p9aOsVmOrfSTNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZDNUZCODU3RTY5QTkwNDQ5NzNGQTMwNjJBQTFENkZC RjVDNEE4MTAeFw0yNTEwMjAxNjI3MTlaFw0yNTEwMjExOTIyMTlaMDMxMTAvBgNV BAMTKEY5NDEyNUI3NzdERDEzODkwNDU0MjIyNjQ5RjBGMDM1QTMzQkVCNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGQTY0Id10inDeDE4ZqfKQxBep NJs0p5oMb/H+eb3AVHJp6NyOZDH9q9ap31fxrCln1t4/524jkVzKkAcjWNQFgiVO L9bnoEwzlK5ZqWZZbJsOxxMVugonYKlQrWxY6wRdWy0jO8UKGCIqctMm0YcrNkK+ shf9FCof3iNVAtZrKIfzsZXPOGM0FoZlgHc4izs87njVM4Y5IGCGE6EDLblP4m8h WImJpxkFmsGIU096uNjWAuD/buU5Z7pVz+pGsl22vt2zaT6K8OV3nqrinyZyPuwY gMnA3qjcw9p8I3k03pPA4sdKgNJrjDt5eXZIGo5RIv1iL5z1l3hgM2RhGXaLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+UElt3fdE4kEVCImSfDwNaM762gwHwYDVR0j BBgwFoAUtsX7hX5pqQRJc/owYqodb79cSoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1o1dWN2NzIxZDRmRGJxQXVFMVVtOFpuUWo4cGFwYUo1MUhTUnBIeGlX RFUvMS9CNkM1RkI4NTdFNjlBOTA0NDk3M0ZBMzA2MkFBMUQ2RkJGNUM0QTgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2QzVGQjg1N0U2OUE5MDQ0 OTczRkEzMDYyQUExRDZGQkY1QzRBODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1o1dWN2NzIxZDRmRGJxQXVFMVVtOFpuUWo4cGFwYUo1MUhTUnBIeGlXRFUvMS9C NkM1RkI4NTdFNjlBOTA0NDk3M0ZBMzA2MkFBMUQ2RkJGNUM0QTgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuRxzCvbU56VKhyJq8Jvam8Iyz3o5ytbQ0dhB+liU9gFzGUznpQwkmtnMj3Lo 1ATcY9LYoCoVZMLjmhW2mTYVwlKirNifEIgPUyINNMGmmFQfD/wWMjlzgFimjQ+8 ReCgIpEkHVy0kolyV+2CoYFahcJsZqTIYlyiRnlRTQ3geOPJLiGPtUJbwAsUuIM+ hpFCnWwPmfR24EiXgdk4I2lUFZ/6OeOqRN+uls+xlFoveD6JXJAfT9qef2WYhhqn ya6xHVipCFJ/547iu96mSOx4lXdIajkOiP5accaK9VUboBN4NezVSLPgp2GxxLjQ CR//sAh10h4BWL3LPZc38qUxZw== -----END CERTIFICATE-----Generated at Mon Oct 20 17:49:40 2025 by rpki-client