$ rpki-client -vvf rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft File: 5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft (raw, json) Hash identifier: fOSjL0HVpbgs1YAPJLOj6mpasDrqlh5SFtD21VRjdlY= Subject key identifier: 9E:B8:45:92:92:6D:EB:24:D5:17:AD:EC:51:6A:51:03:6A:F5:85:5F Authority key identifier: 5D:43:AF:2F:C3:A0:BD:09:5F:D0:62:62:5C:5E:CE:34:B8:4A:95:23 Certificate issuer: /CN=5D43AF2FC3A0BD095FD062625C5ECE34B84A9523 Certificate serial: 0D0826FA6BF0D48ECD21EBAA704EA6FD26818726 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer Subject info access: rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft Manifest number: 02EF Signing time: Mon 20 Oct 2025 13:55:58 +0000 Manifest this update: Mon 20 Oct 2025 13:50:58 +0000 Manifest next update: Tue 21 Oct 2025 17:42:58 +0000 Files and hashes: 1: 5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl (hash: osQfu0BUohe/vrCy5fGxcqYGgUm4d4JnH8vtawIM1R0=) 2: 3137372e35322e3136382e302f32322d3232203d3e20323632343439.roa (hash: +7GsRgs7NRIZR5WPMQvqtfPP2hg4idIHIzt0q9r+wrk=) 3: 3137372e35322e3137302e302f32342d3234203d3e20323632343439.roa (hash: 7nYq6K8fdw4ZRybGXDs4Kkd0F3fRmBUFACD2hQSjlMM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 17:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:08:26:fa:6b:f0:d4:8e:cd:21:eb:aa:70:4e:a6:fd:26:81:87:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D43AF2FC3A0BD095FD062625C5ECE34B84A9523 Validity Not Before: Oct 20 13:50:58 2025 GMT Not After : Oct 21 17:42:58 2025 GMT Subject: CN=9EB84592926DEB24D517ADEC516A51036AF5855F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a7:a0:e9:6a:2b:ec:73:53:b9:d1:7f:a3:8e: f7:3c:54:ed:f4:4d:a2:86:11:06:55:ca:98:7f:a9: 55:c4:8d:33:fb:73:2e:94:52:65:75:53:20:45:a3: 8b:7c:aa:82:ab:89:6d:b7:cd:d4:a5:a1:1f:e9:d2: b7:e2:67:a8:51:d7:2b:04:f4:b7:5a:0f:33:07:9e: 8a:74:8b:e5:48:0a:91:0d:3a:e5:f2:03:62:cc:e2: de:56:96:0e:b6:71:c5:0b:55:34:97:0b:73:2e:cd: ac:15:44:19:79:1b:a9:f1:a2:0e:c0:8b:54:58:f0: 15:2f:2c:1d:b2:d2:ac:54:13:c1:ae:c7:1e:47:84: 99:02:43:c4:e1:bc:ef:df:de:a6:5c:9c:f6:6c:f5: bc:f4:96:34:b5:8b:50:c5:d5:f3:01:f0:39:50:56: c7:0a:da:a7:9e:22:ba:b9:10:d7:8a:a4:11:59:51: f3:41:b5:96:30:03:a7:4b:bd:fb:03:68:02:3c:84: 82:50:61:9c:73:2b:ba:0b:d3:22:27:b5:3b:5c:d0: ab:e6:60:b1:4f:92:3c:f9:d3:bc:b9:af:e2:bb:cc: 5c:70:fb:fb:7b:ee:2c:e4:28:3e:81:59:8c:5f:66: 01:99:0c:a6:8e:75:77:69:2c:b0:cb:8f:be:b6:ed: 1e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B8:45:92:92:6D:EB:24:D5:17:AD:EC:51:6A:51:03:6A:F5:85:5F X509v3 Authority Key Identifier: keyid:5D:43:AF:2F:C3:A0:BD:09:5F:D0:62:62:5C:5E:CE:34:B8:4A:95:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:10:c7:33:77:c7:a8:dc:4f:1f:cb:60:16:4c:3a:f0:7f:2f: 8a:0c:3d:f3:ea:bb:65:d9:90:ab:f2:1c:11:35:63:a1:ad:8d: 41:50:f1:43:89:41:0a:f4:aa:76:ed:f2:d3:03:33:80:f1:bd: b1:91:18:4b:80:0f:20:ea:b6:27:07:49:c7:a3:05:e3:bf:3b: a2:fc:c1:0d:ae:e4:3f:d4:b3:31:75:0a:60:99:2c:e1:63:0c: a1:dc:d2:71:e8:22:da:4f:46:1c:b9:d9:aa:0b:78:18:f5:17: 06:28:0a:05:1e:3c:70:be:39:7f:5c:f2:5c:d6:8b:b2:fc:0b: 98:f9:05:2f:8f:2a:b4:94:da:cf:b8:85:90:cf:b0:8c:c9:8a: 49:ef:e4:78:e2:37:32:65:66:da:70:3a:91:94:37:ce:d3:9f: d9:83:b3:54:a4:b3:38:8e:f8:dd:71:92:18:d5:3a:8f:18:9a: 0c:46:f6:b1:4f:71:d5:50:58:8e:d7:ed:ea:73:c6:8f:63:05: e6:24:e3:42:4c:f7:0a:58:19:37:59:42:06:28:04:c3:c5:56: 61:ef:13:19:fb:6c:f6:ab:d0:70:f9:2e:c2:34:1b:55:32:0e: 34:87:40:fc:86:96:ae:33:0b:72:33:07:92:45:26:7a:3f:b1: 00:0e:0f:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDQgm+mvw1I7NIeuqcE6m/SaBhyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ0M0FGMkZDM0EwQkQwOTVGRDA2MjYyNUM1RUNFMzRC ODRBOTUyMzAeFw0yNTEwMjAxMzUwNThaFw0yNTEwMjExNzQyNThaMDMxMTAvBgNV BAMTKDlFQjg0NTkyOTI2REVCMjRENTE3QURFQzUxNkE1MTAzNkFGNTg1NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMp6Dpaivsc1O50X+jjvc8VO30 TaKGEQZVyph/qVXEjTP7cy6UUmV1UyBFo4t8qoKriW23zdSloR/p0rfiZ6hR1ysE 9LdaDzMHnop0i+VICpENOuXyA2LM4t5Wlg62ccULVTSXC3MuzawVRBl5G6nxog7A i1RY8BUvLB2y0qxUE8Guxx5HhJkCQ8ThvO/f3qZcnPZs9bz0ljS1i1DF1fMB8DlQ VscK2qeeIrq5ENeKpBFZUfNBtZYwA6dLvfsDaAI8hIJQYZxzK7oL0yIntTtc0Kvm YLFPkjz507y5r+K7zFxw+/t77izkKD6BWYxfZgGZDKaOdXdpLLDLj7627R6XAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnrhFkpJt6yTVF63sUWpRA2r1hV8wHwYDVR0j BBgwFoAUXUOvL8OgvQlf0GJiXF7ONLhKlSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3NWc1huZ0dyamdaaWY0SEo3QllQMUd1anMzNURaWDZTRERqZUM1WWJR NkcvMS81RDQzQUYyRkMzQTBCRDA5NUZEMDYyNjI1QzVFQ0UzNEI4NEE5NTIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVENDNBRjJGQzNBMEJEMDk1 RkQwNjI2MjVDNUVDRTM0Qjg0QTk1MjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3NWc1huZ0dyamdaaWY0SEo3QllQMUd1anMzNURaWDZTRERqZUM1WWJRNkcvMS81 RDQzQUYyRkMzQTBCRDA5NUZEMDYyNjI1QzVFQ0UzNEI4NEE5NTIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABxDHM3fHqNxPH8tgFkw68H8vigw98+q7ZdmQq/IcETVjoa2NQVDxQ4lBCvSq du3y0wMzgPG9sZEYS4APIOq2JwdJx6MF4787ovzBDa7kP9SzMXUKYJks4WMModzS cegi2k9GHLnZqgt4GPUXBigKBR48cL45f1zyXNaLsvwLmPkFL48qtJTaz7iFkM+w jMmKSe/keOI3MmVm2nA6kZQ3ztOf2YOzVKSzOI743XGSGNU6jxiaDEb2sU9x1VBY jtft6nPGj2MF5iTjQkz3ClgZN1lCBigEw8VWYe8TGfts9qvQcPkuwjQbVTIONIdA /IaWrjMLcjMHkkUmej+xAA4P8A== -----END CERTIFICATE-----Generated at Mon Oct 20 18:02:27 2025 by rpki-client