$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft File: 75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft (raw, json) Hash identifier: BXOPqFpabaoGtzC3Byy7WZSuEU28KH9G1DfqmSleQxA= Subject key identifier: 13:DD:AE:7C:C9:7F:72:5E:9A:4F:B7:A7:D8:2E:8F:48:F3:F8:5B:C6 Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA Certificate issuer: /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA Certificate serial: 531EC7E01A01C2568818A75EBF7DFA6E194B009E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer Subject info access: rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft Manifest number: 0309 Signing time: Mon 20 Oct 2025 15:23:24 +0000 Manifest this update: Mon 20 Oct 2025 15:18:24 +0000 Manifest next update: Tue 21 Oct 2025 18:10:24 +0000 Files and hashes: 1: 75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl (hash: WeYyxcs4xeA2EMuwBsYVW2oqofYs28ihAajJoG4nQtY=) 2: 323830343a326539343a3a2f33322d3438203d3e203532373830.roa (hash: 8+yqs7RUJpX2yT4UiSP3rmmWsxJekUpVgjcbLKRliog=) 3: 3136382e3230352e38342e302f32322d3234203d3e203532373830.roa (hash: J/PX2I/lax/hE237D/YpsmxGmoiZtrgKGBEB2pdwtjQ=) 4: 3137372e33392e3230342e302f32322d3234203d3e203532373830.roa (hash: GDY3SGDV12iIgUV69vIanzPGHxZzC0jPJdypCKNaraQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 18:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:1e:c7:e0:1a:01:c2:56:88:18:a7:5e:bf:7d:fa:6e:19:4b:00:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA Validity Not Before: Oct 20 15:18:24 2025 GMT Not After : Oct 21 18:10:24 2025 GMT Subject: CN=13DDAE7CC97F725E9A4FB7A7D82E8F48F3F85BC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a7:75:67:1d:68:a2:56:0d:fa:62:e5:bf:d7: 75:4d:1a:dd:8b:21:27:aa:10:48:0c:c1:a7:24:42: 98:4b:07:57:f1:4d:ae:6a:6e:8d:90:2f:60:a2:1a: d2:3a:f6:86:50:4a:6f:04:62:ed:9b:3b:a5:0b:a1: 16:c2:6b:b9:e7:15:46:8a:d5:9f:28:23:11:0d:87: 57:13:fe:a4:e9:54:fb:1f:fc:c7:f8:9f:9d:16:41: 07:c0:ae:cb:40:b7:f8:80:dd:0d:0d:4b:73:6b:af: e8:cf:96:28:ec:a5:b1:a0:a1:d6:d7:c3:50:89:97: cc:a2:61:89:f7:6c:f3:30:2e:3b:dc:e1:ea:1b:f1: cf:62:22:e5:c8:b3:a2:a9:9e:f3:22:a2:8a:5b:12: 86:c9:b1:1e:a3:c2:8e:e5:19:be:22:83:35:8e:5e: 82:9a:63:b6:d6:04:67:a8:8f:d8:dc:1e:b7:0f:18: 7d:62:29:b0:be:b0:42:49:f1:07:ad:bc:6c:65:60: a8:f5:d1:90:fb:2a:9d:d5:6a:4e:77:82:dd:0f:94: 59:3e:f4:a4:fc:89:36:75:c0:ae:ad:ab:41:a0:74: 90:fe:bc:b5:07:dc:18:c6:db:50:20:a5:18:34:85: 25:f5:2f:5b:38:b3:b4:09:9e:e5:85:c1:85:82:7e: ac:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DD:AE:7C:C9:7F:72:5E:9A:4F:B7:A7:D8:2E:8F:48:F3:F8:5B:C6 X509v3 Authority Key Identifier: keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:1a:b8:fd:12:64:7c:8e:7e:e8:34:d4:44:02:13:d1:7d:cf: 81:bd:34:6a:5e:de:7d:46:ae:a7:e8:51:13:c6:62:15:55:42: 93:76:28:bd:92:42:2a:60:f7:5c:9f:8f:40:a7:d7:8b:87:7c: bf:6a:34:29:f2:4e:15:1d:0d:11:9b:6b:6f:d8:4b:a0:be:c4: d3:e3:98:c7:5a:7d:ca:45:65:4c:8c:46:d9:a4:ba:23:1b:30: 66:6f:d5:3b:dc:cc:7d:a2:80:89:1e:46:74:06:90:8d:dc:d0: 7d:51:2c:4b:62:1d:2c:8c:2c:55:a5:90:af:85:05:f9:b8:f5: ed:79:c8:91:99:ce:26:23:4b:c4:b8:54:93:92:b0:b8:78:29: b5:f5:ee:77:77:70:56:91:43:ad:03:8f:d2:46:96:42:74:4f: 1b:9b:d5:54:cd:6e:8c:f0:ea:4e:f1:e0:f9:e8:e4:17:bc:5d: e5:3a:5b:d8:74:43:83:e9:fa:da:76:f9:2a:4e:b9:da:d2:df: d3:21:82:ea:af:65:60:4b:e7:a9:18:43:e8:e9:71:54:d8:01: 18:20:ab:fc:68:e8:9c:88:2b:43:a7:2b:37:4c:f9:56:d9:04: 3e:a9:72:c7:97:7c:d0:4a:a9:70:ee:bf:2d:3f:76:49:d2:5e: 3e:20:5f:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUx7H4BoBwlaIGKdev336bhlLAJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVDRTgwQjA0ODdBOTcwNjYzRUExRTA0QzJDREJFRkY3 MkIxMDRFQTAeFw0yNTEwMjAxNTE4MjRaFw0yNTEwMjExODEwMjRaMDMxMTAvBgNV BAMTKDEzRERBRTdDQzk3RjcyNUU5QTRGQjdBN0Q4MkU4RjQ4RjNGODVCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChp3VnHWiiVg36YuW/13VNGt2L ISeqEEgMwackQphLB1fxTa5qbo2QL2CiGtI69oZQSm8EYu2bO6ULoRbCa7nnFUaK 1Z8oIxENh1cT/qTpVPsf/Mf4n50WQQfArstAt/iA3Q0NS3Nrr+jPlijspbGgodbX w1CJl8yiYYn3bPMwLjvc4eob8c9iIuXIs6KpnvMioopbEobJsR6jwo7lGb4igzWO XoKaY7bWBGeoj9jcHrcPGH1iKbC+sEJJ8QetvGxlYKj10ZD7Kp3Vak53gt0PlFk+ 9KT8iTZ1wK6tq0GgdJD+vLUH3BjG21AgpRg0hSX1L1s4s7QJnuWFwYWCfqz1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUE92ufMl/cl6aT7en2C6PSPP4W8YwHwYDVR0j BBgwFoAUdc6AsEh6lwZj6h4Ews2+/3KxBOowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkJuUWFIeU5SNWtVU3Z2anc2QkttVW40cFU4SnNrNW1HeU5WYmFSWGhr dkMvMS83NUNFODBCMDQ4N0E5NzA2NjNFQTFFMDRDMkNEQkVGRjcyQjEwNEVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1Q0U4MEIwNDg3QTk3MDY2 M0VBMUUwNEMyQ0RCRUZGNzJCMTA0RUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkJuUWFIeU5SNWtVU3Z2anc2QkttVW40cFU4SnNrNW1HeU5WYmFSWGhrdkMvMS83 NUNFODBCMDQ4N0E5NzA2NjNFQTFFMDRDMkNEQkVGRjcyQjEwNEVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhxq4/RJkfI5+6DTURAIT0X3Pgb00al7efUaup+hRE8ZiFVVCk3YovZJCKmD3 XJ+PQKfXi4d8v2o0KfJOFR0NEZtrb9hLoL7E0+OYx1p9ykVlTIxG2aS6IxswZm/V O9zMfaKAiR5GdAaQjdzQfVEsS2IdLIwsVaWQr4UF+bj17XnIkZnOJiNLxLhUk5Kw uHgptfXud3dwVpFDrQOP0kaWQnRPG5vVVM1ujPDqTvHg+ejkF7xd5Tpb2HRDg+n6 2nb5Kk652tLf0yGC6q9lYEvnqRhD6OlxVNgBGCCr/GjonIgrQ6crN0z5VtkEPqly x5d80EqpcO6/LT92SdJePiBfVA== -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:32 2025 by rpki-client