$ rpki-client -vvf rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/5B7D870D6963A99CEA26E65A39708E332A94F7FC.mft File: 5B7D870D6963A99CEA26E65A39708E332A94F7FC.mft (raw, json) Hash identifier: JV/n0CXcagNUCRyhkeLFwOstu6xCKP3/J2OSYc5dW9I= Subject key identifier: 2D:36:AB:26:64:3F:19:23:8E:F5:CC:98:F2:99:74:08:96:42:4A:6B Authority key identifier: 5B:7D:87:0D:69:63:A9:9C:EA:26:E6:5A:39:70:8E:33:2A:94:F7:FC Certificate issuer: /CN=5B7D870D6963A99CEA26E65A39708E332A94F7FC Certificate serial: 529223254608A972EF14F26C7C2383F140E048F4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7D870D6963A99CEA26E65A39708E332A94F7FC.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/5B7D870D6963A99CEA26E65A39708E332A94F7FC.mft Manifest number: A2 Signing time: Mon 20 Oct 2025 10:08:59 +0000 Manifest this update: Mon 20 Oct 2025 10:03:59 +0000 Manifest next update: Tue 21 Oct 2025 11:00:59 +0000 Files and hashes: 1: 323830343a336132343a3a2f33322d313238203d3e20323636303733.roa (hash: SsqPwWCCi9xL5UGS8uKFOIhy9Ah7o6udR5Vd6y2vwuo=) 2: 34352e342e3134382e302f32322d3332203d3e20323636303733.roa (hash: tOqA7PwI8jI1/JRBwcgxuEwnTIf95AbSIW+yp2qqq6Q=) 3: 5B7D870D6963A99CEA26E65A39708E332A94F7FC.crl (hash: 822DPm6FXUv2iCRlEfi6kemm1HjhAWjv28sK5fUqY9k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/5B7D870D6963A99CEA26E65A39708E332A94F7FC.crl rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/5B7D870D6963A99CEA26E65A39708E332A94F7FC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7D870D6963A99CEA26E65A39708E332A94F7FC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:92:23:25:46:08:a9:72:ef:14:f2:6c:7c:23:83:f1:40:e0:48:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B7D870D6963A99CEA26E65A39708E332A94F7FC Validity Not Before: Oct 20 10:03:59 2025 GMT Not After : Oct 21 11:00:59 2025 GMT Subject: CN=2D36AB26643F19238EF5CC98F299740896424A6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4a:02:0d:06:ee:18:7e:83:5d:ea:93:4e:b7: 59:3b:11:66:19:c7:69:b4:41:35:8c:82:7a:bb:fa: 0d:8e:95:38:c5:99:80:ea:c0:7f:a4:dd:b5:2e:fc: 7e:a4:f0:4d:cc:23:bc:e5:71:0c:9f:2f:17:99:cb: 3b:7b:00:b2:58:13:00:b5:b9:5a:e8:56:80:2f:c5: b5:12:02:4f:b4:c2:1c:73:f7:c3:85:87:f2:f2:14: 24:7c:ae:6b:46:ea:cb:46:ba:62:46:bb:f3:80:65: ee:41:b3:65:cc:17:f9:51:54:b8:12:44:19:13:a8: 7e:01:24:11:11:33:32:f0:44:5f:d8:a5:b8:6f:e2: 8c:0e:39:85:93:62:fd:c2:28:22:4f:fc:9d:3f:dd: fb:a8:9c:0e:e3:86:77:34:1e:68:da:3d:2c:21:d8: fa:9f:82:77:d9:30:dd:ce:69:5b:fb:7f:ef:81:a3: fb:84:a1:50:5c:7e:dd:94:ff:99:30:4b:db:39:7e: 2e:8e:9d:8e:04:d1:a7:c5:7b:c6:14:b2:27:c0:8f: 56:e3:50:03:b1:0b:7a:22:6a:b8:5e:8a:1a:a7:8b: 3e:17:09:e5:c9:54:32:62:f0:d7:62:b2:97:b7:70: e7:cf:17:d5:e1:96:1e:24:db:3e:21:5a:58:ec:e9: ae:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:36:AB:26:64:3F:19:23:8E:F5:CC:98:F2:99:74:08:96:42:4A:6B X509v3 Authority Key Identifier: keyid:5B:7D:87:0D:69:63:A9:9C:EA:26:E6:5A:39:70:8E:33:2A:94:F7:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/5B7D870D6963A99CEA26E65A39708E332A94F7FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7D870D6963A99CEA26E65A39708E332A94F7FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/5B7D870D6963A99CEA26E65A39708E332A94F7FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:50:89:7d:ad:36:10:2d:85:c3:08:53:e2:cf:9a:1a:ef:f4: c3:db:8c:c6:24:84:3c:34:71:71:fb:7e:8b:34:5d:ae:9c:36: 6d:3b:81:98:13:af:d4:74:48:55:08:4c:1f:f8:ea:ab:8d:33: a2:3d:a6:de:d3:51:0d:73:e3:9c:03:bc:ed:0b:f4:3c:cb:53: 11:94:79:21:ea:92:94:25:27:b9:be:c3:68:5e:80:94:46:62: 82:e5:4f:e9:67:0e:ab:89:a2:21:19:26:e5:3b:30:e1:d2:3b: 94:7f:85:14:64:54:e1:59:48:9c:f8:03:a0:46:2a:46:1a:33: 40:e0:1e:52:38:8e:12:ca:60:65:cb:4b:3f:26:12:ca:69:d4: 64:ea:c3:e2:73:4e:74:4f:59:e7:6c:21:39:14:7a:d3:9e:58: 67:65:46:ea:07:4f:88:7f:09:66:1c:28:32:5b:ce:28:6b:b5: d9:1c:20:d5:c4:2e:2a:08:ef:40:6c:5c:46:27:07:40:75:09: e7:c6:e4:1a:f9:6d:4d:f2:76:60:63:d5:56:a8:3a:d1:3b:0e: 7c:c2:88:c4:6a:9d:87:69:c0:21:c3:4c:9f:4b:63:02:c0:de: 42:a5:19:d3:0c:f5:ce:11:8d:96:3b:67:c6:2d:99:a8:53:6d: 99:9d:18:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUpIjJUYIqXLvFPJsfCOD8UDgSPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI3RDg3MEQ2OTYzQTk5Q0VBMjZFNjVBMzk3MDhFMzMy QTk0RjdGQzAeFw0yNTEwMjAxMDAzNTlaFw0yNTEwMjExMTAwNTlaMDMxMTAvBgNV BAMTKDJEMzZBQjI2NjQzRjE5MjM4RUY1Q0M5OEYyOTk3NDA4OTY0MjRBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPSgINBu4YfoNd6pNOt1k7EWYZ x2m0QTWMgnq7+g2OlTjFmYDqwH+k3bUu/H6k8E3MI7zlcQyfLxeZyzt7ALJYEwC1 uVroVoAvxbUSAk+0whxz98OFh/LyFCR8rmtG6stGumJGu/OAZe5Bs2XMF/lRVLgS RBkTqH4BJBERMzLwRF/Ypbhv4owOOYWTYv3CKCJP/J0/3fuonA7jhnc0HmjaPSwh 2PqfgnfZMN3OaVv7f++Bo/uEoVBcft2U/5kwS9s5fi6OnY4E0afFe8YUsifAj1bj UAOxC3oiarheihqniz4XCeXJVDJi8Ndispe3cOfPF9Xhlh4k2z4hWljs6a7fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULTarJmQ/GSOO9cyY8pl0CJZCSmswHwYDVR0j BBgwFoAUW32HDWljqZzqJuZaOXCOMyqU9/wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3dkZjFYb1A1UldvaXpNa25TQm1rM0NZS290dTk3ZlZ0NmdNUkdkS2o4 ZGUvMC81QjdEODcwRDY5NjNBOTlDRUEyNkU2NUEzOTcwOEUzMzJBOTRGN0ZDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCN0Q4NzBENjk2M0E5OUNF QTI2RTY1QTM5NzA4RTMzMkE5NEY3RkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3dkZjFYb1A1UldvaXpNa25TQm1rM0NZS290dTk3ZlZ0NmdNUkdkS2o4ZGUvMC81 QjdEODcwRDY5NjNBOTlDRUEyNkU2NUEzOTcwOEUzMzJBOTRGN0ZDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqFCJfa02EC2FwwhT4s+aGu/0w9uMxiSEPDRxcft+izRdrpw2bTuBmBOv1HRI VQhMH/jqq40zoj2m3tNRDXPjnAO87Qv0PMtTEZR5IeqSlCUnub7DaF6AlEZiguVP 6WcOq4miIRkm5Tsw4dI7lH+FFGRU4VlInPgDoEYqRhozQOAeUjiOEspgZctLPyYS ymnUZOrD4nNOdE9Z52whORR6055YZ2VG6gdPiH8JZhwoMlvOKGu12Rwg1cQuKgjv QGxcRicHQHUJ58bkGvltTfJ2YGPVVqg60TsOfMKIxGqdh2nAIcNMn0tjAsDeQqUZ 0wz1zhGNljtnxi2ZqFNtmZ0YwA== -----END CERTIFICATE-----Generated at Mon Oct 20 16:19:13 2025 by rpki-client