$ rpki-client -vvf rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft File: ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft (raw, json) Hash identifier: xblXuc+Yv79VZF9JLsrwnptFsWFvyeO71g8v5rEMQWc= Subject key identifier: 03:90:6F:78:ED:6F:1A:D5:98:5D:A8:A1:B1:E0:D9:4C:7F:AD:4F:A5 Authority key identifier: ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41 Certificate issuer: /CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541 Certificate serial: 2E32AD2F39B39876F25135DB4E64815253509706 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer Subject info access: rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft Manifest number: 02EF Signing time: Sun 19 Oct 2025 18:08:55 +0000 Manifest this update: Sun 19 Oct 2025 18:03:55 +0000 Manifest next update: Mon 20 Oct 2025 18:22:55 +0000 Files and hashes: 1: 34352e3138342e3137362e302f32332d3233203d3e20323639333932.roa (hash: /Dp4hCOsgXygPlMz5YSz4GTiSyfx+NQyd1XZo/YIByE=) 2: 34352e3138342e3137362e302f32322d3232203d3e20323639333932.roa (hash: n6m5QXLtYsd6QZ8EVT2MzdSK9laq92ocZsZcfnIdIPA=) 3: 34352e3138342e3137382e302f32332d3233203d3e20323639333932.roa (hash: 9oCvgVcA9zyrxL9AHAJRRHoxWEvKlFhGZYHtdt61ank=) 4: ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl (hash: 7PgtD9CVGBD0Ibnjw1sl9s0k0GGUME9JDHZGcRbs4HE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 18:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:32:ad:2f:39:b3:98:76:f2:51:35:db:4e:64:81:52:53:50:97:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541 Validity Not Before: Oct 19 18:03:55 2025 GMT Not After : Oct 20 18:22:55 2025 GMT Subject: CN=03906F78ED6F1AD5985DA8A1B1E0D94C7FAD4FA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e7:d6:45:f4:9a:e0:11:e9:67:10:32:f4:28: 91:e8:7d:0b:57:af:ea:fb:2f:0a:eb:c8:ac:75:d6: bf:ce:2b:56:ce:8f:f7:47:71:d4:2b:39:92:9e:59: a7:05:1c:bd:03:52:7d:b2:03:72:e4:18:ea:52:2d: 1d:b4:61:22:2a:90:1d:83:f1:94:aa:0b:b8:3a:ee: 44:8e:37:b0:6d:ff:58:ff:1e:f7:3b:93:17:b6:74: 0c:32:5d:5d:f1:8a:09:cd:64:bd:cb:06:fe:2b:1c: 10:29:80:b9:e0:2c:07:e0:3c:e6:f7:14:94:4b:cd: c2:e1:c4:d0:9e:e9:b2:c3:db:6d:5b:97:0d:55:20: 96:b2:42:8a:83:5d:e3:4a:17:11:dc:a9:d5:eb:e5: 87:00:0c:14:a0:8c:4f:23:e8:48:a0:54:b7:7b:d9: 7d:d3:67:ae:80:4f:5b:c3:0b:9b:10:05:11:71:d4: 5f:37:58:fc:c9:a0:b0:e8:2f:a6:c1:2e:57:e5:df: 8a:bf:fd:07:a6:54:e3:6d:d4:2c:a3:a8:32:9d:d4: 83:e2:db:ff:8b:3a:bf:6c:f8:07:6e:02:03:23:1c: 4b:5b:06:80:b4:70:f2:20:72:68:8c:8c:f6:40:78: 0f:66:be:1c:47:8e:55:d6:52:ce:d6:31:35:f5:e4: 80:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:90:6F:78:ED:6F:1A:D5:98:5D:A8:A1:B1:E0:D9:4C:7F:AD:4F:A5 X509v3 Authority Key Identifier: keyid:ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a0:f4:50:aa:3e:bb:0c:d2:fd:99:c2:bf:aa:0d:b6:46:f7: 1a:18:e9:86:67:30:a5:dd:17:2b:4e:4d:47:82:a5:5f:7f:3d: 97:49:9a:65:2b:1d:86:0f:ad:74:56:17:63:49:10:45:d9:21: 14:07:56:80:ae:58:f8:48:38:c0:44:f0:ee:cc:0c:e5:c8:27: cd:e3:70:6d:03:12:3f:d0:1f:d9:4d:07:3d:78:96:20:3d:22: 83:25:d0:37:2f:68:2f:45:ab:59:28:ee:24:40:0f:b0:2f:92: 34:20:e0:bd:ac:0c:2b:bf:a5:42:ec:13:37:54:c7:38:20:5a: e4:b8:6b:52:0d:6f:5d:79:f4:4e:af:b8:da:5c:8a:18:65:76: 33:d5:65:3c:0e:f8:25:4e:1f:c9:93:36:6e:ca:bf:7a:df:67: 12:e3:b6:f4:49:5e:8a:94:76:c3:89:59:03:51:72:43:66:3d: 0d:ea:dc:b4:9b:d9:dc:cd:27:16:ff:e9:f1:b2:53:ed:02:b2: b9:69:60:4a:e3:e4:06:02:9c:22:ee:ff:82:7e:9d:50:3c:dc: ae:fd:87:32:e1:42:2d:2b:4c:5a:e2:1d:02:c5:fe:4f:be:6b: 44:98:9d:56:9a:a0:20:dd:e3:4e:4e:bd:73:ed:0e:8a:96:bb: a7:a1:e4:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULjKtLzmzmHbyUTXbTmSBUlNQlwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ1QjM3RkRFMUEzMDNDM0E0QkQ1QTFDMjZFMDA4QUFD OTExMzU0MTAeFw0yNTEwMTkxODAzNTVaFw0yNTEwMjAxODIyNTVaMDMxMTAvBgNV BAMTKDAzOTA2Rjc4RUQ2RjFBRDU5ODVEQThBMUIxRTBEOTRDN0ZBRDRGQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD59ZF9JrgEelnEDL0KJHofQtX r+r7LwrryKx11r/OK1bOj/dHcdQrOZKeWacFHL0DUn2yA3LkGOpSLR20YSIqkB2D 8ZSqC7g67kSON7Bt/1j/Hvc7kxe2dAwyXV3xignNZL3LBv4rHBApgLngLAfgPOb3 FJRLzcLhxNCe6bLD221blw1VIJayQoqDXeNKFxHcqdXr5YcADBSgjE8j6EigVLd7 2X3TZ66AT1vDC5sQBRFx1F83WPzJoLDoL6bBLlfl34q//QemVONt1CyjqDKd1IPi 2/+LOr9s+AduAgMjHEtbBoC0cPIgcmiMjPZAeA9mvhxHjlXWUs7WMTX15ICXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUA5BveO1vGtWYXaihseDZTH+tT6UwHwYDVR0j BBgwFoAU7Vs3/eGjA8OkvVocJuAIqskRNUEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUY2Rm5INTlvWVc1YWVMS29LNUQ1aEtvdWttVlV4OEtQZjh5dHFKTGVx dXQvMS9FRDVCMzdGREUxQTMwM0MzQTRCRDVBMUMyNkUwMDhBQUM5MTEzNTQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VENUIzN0ZERTFBMzAzQzNB NEJENUExQzI2RTAwOEFBQzkxMTM1NDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUY2Rm5INTlvWVc1YWVMS29LNUQ1aEtvdWttVlV4OEtQZjh5dHFKTGVxdXQvMS9F RDVCMzdGREUxQTMwM0MzQTRCRDVBMUMyNkUwMDhBQUM5MTEzNTQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIqD0UKo+uwzS/ZnCv6oNtkb3Ghjphmcwpd0XK05NR4KlX389l0maZSsdhg+t dFYXY0kQRdkhFAdWgK5Y+Eg4wETw7swM5cgnzeNwbQMSP9Af2U0HPXiWID0igyXQ Ny9oL0WrWSjuJEAPsC+SNCDgvawMK7+lQuwTN1THOCBa5LhrUg1vXXn0Tq+42lyK GGV2M9VlPA74JU4fyZM2bsq/et9nEuO29EleipR2w4lZA1FyQ2Y9DerctJvZ3M0n Fv/p8bJT7QKyuWlgSuPkBgKcIu7/gn6dUDzcrv2HMuFCLStMWuIdAsX+T75rRJid VpqgIN3jTk69c+0Oipa7p6HkzA== -----END CERTIFICATE-----Generated at Mon Oct 20 08:59:00 2025 by rpki-client