$ rpki-client -vvf rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft File: A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft (raw, json) Hash identifier: iurJno+Uwq0h6CzNW3WfpzwUmKFbsaZSoHUXygdQVSc= Subject key identifier: 1A:5C:DB:4E:36:A2:53:08:48:B7:8A:BD:A1:DB:E3:6B:81:96:AC:65 Authority key identifier: A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41 Certificate issuer: /CN=A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041 Certificate serial: 4340B3F62AD7C1E1FA95838D2E589A7AD9F5AA9A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer Subject info access: rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft Manifest number: 02D7 Signing time: Mon 20 Oct 2025 04:10:18 +0000 Manifest this update: Mon 20 Oct 2025 04:05:18 +0000 Manifest next update: Tue 21 Oct 2025 06:40:18 +0000 Files and hashes: 1: A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl (hash: kPqOkP/ZzEA80SGeCmJ09ZUIBaTA7cblO3EBQTojzxs=) 2: 323830343a386162633a3a2f33322d313238203d3e20323733363839.roa (hash: ItHOB5NSOr3tcfc/B7XnxF4I381M7cjemmgQf3Y+EaI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:40:b3:f6:2a:d7:c1:e1:fa:95:83:8d:2e:58:9a:7a:d9:f5:aa:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041 Validity Not Before: Oct 20 04:05:18 2025 GMT Not After : Oct 21 06:40:18 2025 GMT Subject: CN=1A5CDB4E36A2530848B78ABDA1DBE36B8196AC65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9f:36:a3:10:e7:7f:e0:15:1f:6f:ac:52:16: 37:8a:6d:50:c4:3c:b2:59:15:67:ef:d3:65:76:b5: 80:6a:c2:bf:60:95:19:ea:02:00:53:11:45:80:43: 44:7f:d4:43:1e:71:63:3d:47:b4:53:05:47:1b:47: fc:f9:a2:11:b4:95:38:50:dd:d7:9e:40:7b:27:6d: a6:54:97:e7:7f:e4:99:48:d9:5b:a3:7a:31:a2:c0: fc:1c:7e:54:c5:45:97:4d:09:83:c6:0e:5e:9b:7c: 74:30:e8:6b:56:d1:27:ea:af:a4:ba:51:13:df:dc: ac:0c:6d:5f:29:9e:fb:b4:fe:da:fc:e1:95:99:08: 1a:6b:96:c6:ad:e3:8b:a0:d2:07:08:7b:9e:14:33: a1:87:2a:41:13:3a:36:7b:26:e8:d8:62:d8:9a:d9: 4f:ce:74:b2:ca:06:45:46:e9:1c:58:57:f6:fb:a8: 82:ed:9a:dd:be:3b:df:fc:6b:1e:34:0a:0a:4c:54: 60:e5:9e:0e:7d:53:f2:3c:e5:58:aa:c6:da:4b:57: e6:17:7a:94:ea:d2:ee:12:37:84:d7:e5:8a:f8:00: de:7b:40:8d:9a:b1:e8:bd:4b:8d:0b:77:73:e7:de: 47:f9:c4:ee:a8:ad:fb:06:8e:1a:ae:d9:29:da:ea: 7b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5C:DB:4E:36:A2:53:08:48:B7:8A:BD:A1:DB:E3:6B:81:96:AC:65 X509v3 Authority Key Identifier: keyid:A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:95:42:59:31:50:bb:3f:3d:c3:4f:89:96:ad:fc:af:24:7e: 73:d0:80:86:31:aa:11:7a:86:9d:b7:ae:42:c5:8b:e6:84:48: 40:8b:c1:f8:54:36:71:ba:4b:f4:3e:a0:aa:f7:c9:74:64:89: 85:4e:cb:3f:2a:10:3c:90:fe:e8:c4:e7:24:8c:1e:1b:6a:68: 0c:92:5b:b1:ec:53:21:33:9f:7e:22:21:d4:bf:c9:f8:3e:fc: 93:da:ad:61:8e:9a:1d:16:56:c4:89:fc:4c:2d:42:d5:54:9f: 2e:e6:f4:92:a5:c5:cf:b8:13:3f:5b:62:c3:9a:f7:4d:89:f7: d3:75:5e:85:77:41:8a:41:ad:d9:a8:f8:da:4a:63:13:95:83: 2b:30:18:d0:40:ef:7b:bb:92:52:c4:6e:ba:c6:60:e0:bc:67: 83:78:28:8c:84:21:45:df:f3:e9:79:86:a0:2b:65:05:be:e5: 5e:7f:e3:8e:54:f8:9a:12:97:da:35:cc:bc:8d:40:a1:f6:94: 2d:df:c3:a5:96:d9:03:a5:80:73:8e:e6:69:87:ba:b3:f2:32: d8:21:18:fd:5b:35:6c:ff:d6:b5:41:54:d0:f1:48:9e:0b:ba: 87:16:29:83:77:6e:ee:75:db:4b:b6:10:20:6c:4d:c1:ce:3c: 1b:e8:9d:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ0Cz9irXweH6lYONLliaetn1qpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVBMzNDMkI5QjlCMUE1NjgzNDRDMTZFODlDRTg0RTdC Q0U1RjA0MTAeFw0yNTEwMjAwNDA1MThaFw0yNTEwMjEwNjQwMThaMDMxMTAvBgNV BAMTKDFBNUNEQjRFMzZBMjUzMDg0OEI3OEFCREExREJFMzZCODE5NkFDNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRnzajEOd/4BUfb6xSFjeKbVDE PLJZFWfv02V2tYBqwr9glRnqAgBTEUWAQ0R/1EMecWM9R7RTBUcbR/z5ohG0lThQ 3deeQHsnbaZUl+d/5JlI2VujejGiwPwcflTFRZdNCYPGDl6bfHQw6GtW0Sfqr6S6 URPf3KwMbV8pnvu0/tr84ZWZCBprlsat44ug0gcIe54UM6GHKkETOjZ7JujYYtia 2U/OdLLKBkVG6RxYV/b7qILtmt2+O9/8ax40CgpMVGDlng59U/I85ViqxtpLV+YX epTq0u4SN4TX5Yr4AN57QI2asei9S40Ld3Pn3kf5xO6orfsGjhqu2Sna6nstAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGlzbTjaiUwhIt4q9odvja4GWrGUwHwYDVR0j BBgwFoAUpaM8K5ubGlaDRMFuic6E57zl8EEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUU4bU1yYXBoRXNkR29QVThHSExMSG1rdm5zSGo0Ulp4dERYSktQOHY5 WlUvMC9BNUEzM0MyQjlCOUIxQTU2ODM0NEMxNkU4OUNFODRFN0JDRTVGMDQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1QTMzQzJCOUI5QjFBNTY4 MzQ0QzE2RTg5Q0U4NEU3QkNFNUYwNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUU4bU1yYXBoRXNkR29QVThHSExMSG1rdm5zSGo0Ulp4dERYSktQOHY5WlUvMC9B NUEzM0MyQjlCOUIxQTU2ODM0NEMxNkU4OUNFODRFN0JDRTVGMDQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmJVCWTFQuz89w0+Jlq38ryR+c9CAhjGqEXqGnbeuQsWL5oRIQIvB+FQ2cbpL 9D6gqvfJdGSJhU7LPyoQPJD+6MTnJIweG2poDJJbsexTITOffiIh1L/J+D78k9qt YY6aHRZWxIn8TC1C1VSfLub0kqXFz7gTP1tiw5r3TYn303VehXdBikGt2aj42kpj E5WDKzAY0EDve7uSUsRuusZg4Lxng3gojIQhRd/z6XmGoCtlBb7lXn/jjlT4mhKX 2jXMvI1AofaULd/DpZbZA6WAc47maYe6s/Iy2CEY/Vs1bP/WtUFU0PFIngu6hxYp g3du7nXbS7YQIGxNwc48G+idog== -----END CERTIFICATE-----Generated at Mon Oct 20 14:01:20 2025 by rpki-client