$ rpki-client -vvf rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft File: A5455EE25C6FEB15A12789F15E975474289CE800.mft (raw, json) Hash identifier: 5G8qPuNeXgB9qofT33H6BLuvBLTyQldiIOq4YJMWwkc= Subject key identifier: 27:52:48:15:9C:30:81:B5:E4:C3:69:21:54:4B:48:13:E0:5E:A4:40 Authority key identifier: A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00 Certificate issuer: /CN=A5455EE25C6FEB15A12789F15E975474289CE800 Certificate serial: 279B17D295B95B9B56195D20B327278507259D54 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft Manifest number: 02F2 Signing time: Mon 20 Oct 2025 08:00:46 +0000 Manifest this update: Mon 20 Oct 2025 07:55:46 +0000 Manifest next update: Tue 21 Oct 2025 11:55:46 +0000 Files and hashes: 1: 3137372e3132362e3132382e302f32302d3234203d3e20323632333433.roa (hash: wyF0GJjDX5YnWfr20u0CwT3kDZX//zWud8hjzCmqbF4=) 2: 323830343a3830633a3a2f33322d3438203d3e20323632333433.roa (hash: WkDXinBlhSpzEvUc/HOjtx0nayVUYKfHQ1jGnnUDwSE=) 3: 3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa (hash: Q2JymKQF6NmDOXMRSwyKq2Je2bjCMsxjvwq3vjHVwnE=) 4: A5455EE25C6FEB15A12789F15E975474289CE800.crl (hash: aEbNpVv4cK7rEBLgj4JarklNT4VpPXPE8Oe7YTw9xR4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:9b:17:d2:95:b9:5b:9b:56:19:5d:20:b3:27:27:85:07:25:9d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5455EE25C6FEB15A12789F15E975474289CE800 Validity Not Before: Oct 20 07:55:46 2025 GMT Not After : Oct 21 11:55:46 2025 GMT Subject: CN=275248159C3081B5E4C36921544B4813E05EA440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ed:ae:85:86:c8:49:8e:c7:b4:f8:f2:86:6f: 4b:f4:ca:3f:ac:4d:de:23:5c:29:0e:de:eb:2b:b3: 53:37:9a:7f:d4:a7:ea:e6:bb:6a:96:9b:d6:7b:e0: 10:08:52:ff:50:78:c9:f3:fb:b9:e1:df:a7:66:43: 22:0c:31:76:b2:0c:f0:ef:45:32:80:4d:5d:09:4b: c6:66:49:45:7e:31:c1:5f:0a:a6:8f:47:5b:15:59: e6:c2:23:eb:0e:66:74:b9:09:6e:f2:a7:7c:b3:56: ce:b3:f8:de:25:8e:e0:15:4f:a2:d2:29:c4:7b:86: 70:14:09:c5:d7:32:d2:9c:80:4a:8f:5f:53:c7:e7: b4:3c:00:1e:f8:61:b2:ab:c3:eb:1a:54:5f:59:40: 22:20:cb:ed:f2:51:69:b9:7c:f2:66:bb:de:fa:37: 47:62:4e:5d:22:53:a4:05:12:0d:bd:7d:a4:26:d1: 7f:87:aa:a3:ac:58:7b:ea:3c:44:64:47:24:eb:2a: ee:e8:00:17:3f:1f:98:d8:7b:16:41:77:07:d3:f3: c7:7a:ca:25:88:71:66:12:7d:ce:7c:3c:8d:af:6a: f7:4e:4b:62:44:0e:f5:9a:99:fe:f8:ae:7b:ff:bd: f6:13:06:f9:3e:30:0e:83:69:08:28:bb:f6:57:d6: 9f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:52:48:15:9C:30:81:B5:E4:C3:69:21:54:4B:48:13:E0:5E:A4:40 X509v3 Authority Key Identifier: keyid:A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fb:ac:5f:70:69:3d:e7:d9:7e:b9:2b:f4:c6:53:e0:e3:07: fe:75:e2:38:41:2e:04:57:a7:fe:f5:fa:96:aa:75:d2:0e:6a: 88:45:89:1c:09:15:59:78:14:c6:1b:10:aa:44:bc:14:d3:d2: 73:b0:2b:aa:28:df:70:e2:e6:d0:c7:be:6f:a8:00:0d:dc:0e: 0b:a8:3f:77:de:41:93:e2:3a:30:c0:24:67:8b:40:dd:24:28: fa:1a:66:b4:c0:2a:66:18:7a:72:aa:99:91:59:5f:79:a7:8e: 53:75:7a:cd:3b:bd:72:c9:4b:57:18:17:9a:3b:c8:b4:93:d1: 05:01:9a:b7:a2:f1:d0:a7:a3:89:cc:3e:2e:9f:28:64:a9:9a: 44:a3:c6:4d:98:dc:ef:a1:d5:cb:10:2d:94:1f:59:c6:b9:fa: d2:d0:fa:fe:23:be:4c:da:74:38:f5:11:c6:f6:ad:b0:16:03: 98:c8:6d:12:14:03:43:71:6d:17:0b:91:e6:0f:80:a1:3b:91: a3:da:78:bf:25:a1:97:d4:c4:28:e0:a1:91:81:a2:5a:73:12: 6f:98:33:66:c5:5f:40:d0:40:72:af:e7:d7:43:14:7b:ab:1a: 7c:ef:94:7e:1d:33:17:6f:4f:4c:40:fd:e9:37:1b:19:3f:76: c6:f0:38:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ5sX0pW5W5tWGV0gsycnhQclnVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU0NTVFRTI1QzZGRUIxNUExMjc4OUYxNUU5NzU0NzQy ODlDRTgwMDAeFw0yNTEwMjAwNzU1NDZaFw0yNTEwMjExMTU1NDZaMDMxMTAvBgNV BAMTKDI3NTI0ODE1OUMzMDgxQjVFNEMzNjkyMTU0NEI0ODEzRTA1RUE0NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf7a6FhshJjse0+PKGb0v0yj+s Td4jXCkO3usrs1M3mn/Up+rmu2qWm9Z74BAIUv9QeMnz+7nh36dmQyIMMXayDPDv RTKATV0JS8ZmSUV+McFfCqaPR1sVWebCI+sOZnS5CW7yp3yzVs6z+N4ljuAVT6LS KcR7hnAUCcXXMtKcgEqPX1PH57Q8AB74YbKrw+saVF9ZQCIgy+3yUWm5fPJmu976 N0diTl0iU6QFEg29faQm0X+HqqOsWHvqPERkRyTrKu7oABc/H5jYexZBdwfT88d6 yiWIcWYSfc58PI2vavdOS2JEDvWamf74rnv/vfYTBvk+MA6DaQgou/ZX1p99AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJ1JIFZwwgbXkw2khVEtIE+BepEAwHwYDVR0j BBgwFoAUpUVe4lxv6xWhJ4nxXpdUdCic6AAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGszNHhnNUFZak5uMXZTZlo3enc0S3J5d3paRDh2NllFN3lvMzR2S3BX b2ovMi9BNTQ1NUVFMjVDNkZFQjE1QTEyNzg5RjE1RTk3NTQ3NDI4OUNFODAwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NDU1RUUyNUM2RkVCMTVB MTI3ODlGMTVFOTc1NDc0Mjg5Q0U4MDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGszNHhnNUFZak5uMXZTZlo3enc0S3J5d3paRDh2NllFN3lvMzR2S3BXb2ovMi9B NTQ1NUVFMjVDNkZFQjE1QTEyNzg5RjE1RTk3NTQ3NDI4OUNFODAwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmvusX3BpPefZfrkr9MZT4OMH/nXiOEEuBFen/vX6lqp10g5qiEWJHAkVWXgU xhsQqkS8FNPSc7ArqijfcOLm0Me+b6gADdwOC6g/d95Bk+I6MMAkZ4tA3SQo+hpm tMAqZhh6cqqZkVlfeaeOU3V6zTu9cslLVxgXmjvItJPRBQGat6Lx0Kejicw+Lp8o ZKmaRKPGTZjc76HVyxAtlB9Zxrn60tD6/iO+TNp0OPURxvatsBYDmMhtEhQDQ3Ft FwuR5g+AoTuRo9p4vyWhl9TEKOChkYGiWnMSb5gzZsVfQNBAcq/n10MUe6safO+U fh0zF29PTED96TcbGT92xvA4Vw== -----END CERTIFICATE-----Generated at Mon Oct 20 11:04:54 2025 by rpki-client