$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft File: 5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft (raw, json) Hash identifier: fGblzFwyqxgQlu814Yw5RIMdzusg5FoTlypkRCr2FHA= Subject key identifier: E8:AA:7D:BD:05:C7:3F:E8:8B:4D:CC:1D:40:05:E5:E5:02:9B:FD:76 Authority key identifier: 5D:C0:8B:C2:E7:CA:BC:11:B8:39:5E:55:BD:1B:E9:CD:DA:57:49:39 Certificate issuer: /CN=5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939 Certificate serial: 4360E7D0B08AB09C0A7AB1FF406E07B1501D04BA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer Subject info access: rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft Manifest number: 33 Signing time: Mon 20 Oct 2025 11:30:40 +0000 Manifest this update: Mon 20 Oct 2025 11:25:40 +0000 Manifest next update: Tue 21 Oct 2025 12:36:40 +0000 Files and hashes: 1: 323830343a386539383a3a2f33322d3438203d3e20323733343336.roa (hash: BxvAZqsINc17TFdRXILJwTm+FG+N9YG1areIiru28HI=) 2: 5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl (hash: rISZ1Sn6yPC2Gh+yY8XoPVb+gizakavrBOur/gzAlcc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:60:e7:d0:b0:8a:b0:9c:0a:7a:b1:ff:40:6e:07:b1:50:1d:04:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939 Validity Not Before: Oct 20 11:25:40 2025 GMT Not After : Oct 21 12:36:40 2025 GMT Subject: CN=E8AA7DBD05C73FE88B4DCC1D4005E5E5029BFD76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fc:11:72:b3:e6:d7:ec:4d:44:5c:2b:7d:19: 52:5d:f6:52:8c:36:36:18:2b:67:0f:1b:8a:1d:7c: 98:60:1d:24:ad:d1:22:9c:9a:bf:26:b2:90:fb:5d: a5:21:32:7e:29:04:c3:29:b8:19:a9:00:68:c8:69: 5c:a9:f2:85:19:71:1d:82:01:bc:ab:86:35:04:24: 21:a4:15:80:0b:b9:44:a2:98:83:93:42:55:31:67: 7a:cb:43:0e:14:a6:07:dd:7d:c5:60:e8:ab:10:7a: 63:11:e3:36:4b:54:6b:ae:0f:d2:c1:b1:d8:0b:77: 78:73:99:87:41:dc:05:44:3b:60:5e:e3:14:b7:25: eb:bd:0e:58:6a:82:e2:6b:3c:5f:02:20:1a:31:dc: 2d:d7:f5:e8:88:3a:5b:b2:2f:2f:6f:fc:da:2e:67: 2e:9c:35:2b:e5:da:ca:52:80:d6:27:f0:b7:a3:9a: d6:29:7f:7b:8a:27:65:56:7d:c4:31:10:4e:9f:ab: 26:c0:82:1a:19:0b:9d:ea:a3:21:c8:aa:ce:89:3e: e2:7a:cf:6a:f7:22:56:57:71:7e:62:93:63:93:4d: 4c:26:e3:7a:11:59:32:ca:8f:21:2b:9a:19:f4:52: 86:0c:e6:10:ef:b4:7d:07:31:3d:0c:ae:19:1d:c5: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AA:7D:BD:05:C7:3F:E8:8B:4D:CC:1D:40:05:E5:E5:02:9B:FD:76 X509v3 Authority Key Identifier: keyid:5D:C0:8B:C2:E7:CA:BC:11:B8:39:5E:55:BD:1B:E9:CD:DA:57:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:9c:5f:4c:27:bf:9f:bc:e8:24:47:f4:1d:df:1e:66:7a:b8: 5e:05:2e:fb:4e:61:05:6f:b7:34:87:02:43:03:49:cd:e1:f3: a0:cc:72:4b:ac:c3:e1:7e:53:44:b5:90:5d:15:52:72:82:53: 20:64:ef:41:0d:88:25:ae:14:47:ae:d0:7b:33:dd:b9:ac:42: 00:ce:90:74:f6:bd:c4:60:ca:2e:a7:3c:68:c1:68:61:08:97: da:0f:cc:90:2d:9f:10:79:fd:b3:76:e7:34:7f:cf:d5:ee:ed: 9d:98:29:c0:a1:47:98:b6:95:8d:b0:0d:7d:2d:75:1f:2e:b9: 37:54:e9:6f:4f:9d:07:1a:21:bd:fc:30:c4:79:c2:ad:67:8f: c1:d5:4c:c5:05:73:5f:b0:68:4b:ee:19:bf:9e:d8:10:bb:6b: 1a:ff:58:d5:c6:2c:e9:e8:72:b8:74:b2:6d:3a:a6:90:f2:f8: 50:11:06:ad:57:f2:86:17:d9:ce:c1:b3:6e:bd:cc:83:10:80: f6:2c:7f:d3:fd:4a:9c:c2:e3:8f:d1:f8:75:08:0c:58:a5:5d: cd:76:50:25:5c:84:68:d0:53:c5:d1:e2:5f:19:a0:71:ee:62: 1b:7b:2f:6e:2c:b5:7a:7d:4f:f0:5a:7c:af:c7:9d:a1:50:6e: 7a:e3:12:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ2Dn0LCKsJwKerH/QG4HsVAdBLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURDMDhCQzJFN0NBQkMxMUI4Mzk1RTU1QkQxQkU5Q0RE QTU3NDkzOTAeFw0yNTEwMjAxMTI1NDBaFw0yNTEwMjExMjM2NDBaMDMxMTAvBgNV BAMTKEU4QUE3REJEMDVDNzNGRTg4QjREQ0MxRDQwMDVFNUU1MDI5QkZENzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs/BFys+bX7E1EXCt9GVJd9lKM NjYYK2cPG4odfJhgHSSt0SKcmr8mspD7XaUhMn4pBMMpuBmpAGjIaVyp8oUZcR2C AbyrhjUEJCGkFYALuUSimIOTQlUxZ3rLQw4UpgfdfcVg6KsQemMR4zZLVGuuD9LB sdgLd3hzmYdB3AVEO2Be4xS3Jeu9DlhqguJrPF8CIBox3C3X9eiIOluyLy9v/Nou Zy6cNSvl2spSgNYn8LejmtYpf3uKJ2VWfcQxEE6fqybAghoZC53qoyHIqs6JPuJ6 z2r3IlZXcX5ik2OTTUwm43oRWTLKjyErmhn0UoYM5hDvtH0HMT0MrhkdxYrdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6Kp9vQXHP+iLTcwdQAXl5QKb/XYwHwYDVR0j BBgwFoAUXcCLwufKvBG4OV5VvRvpzdpXSTkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkgzWjhlUnBiYm5Cek1lUGJENkxvSHZUOFR2blY0TVkzenVaQUtzR2Ja cXAvMC81REMwOEJDMkU3Q0FCQzExQjgzOTVFNTVCRDFCRTlDRERBNTc0OTM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEQzA4QkMyRTdDQUJDMTFC ODM5NUU1NUJEMUJFOUNEREE1NzQ5MzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkgzWjhlUnBiYm5Cek1lUGJENkxvSHZUOFR2blY0TVkzenVaQUtzR2JacXAvMC81 REMwOEJDMkU3Q0FCQzExQjgzOTVFNTVCRDFCRTlDRERBNTc0OTM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYpxfTCe/n7zoJEf0Hd8eZnq4XgUu+05hBW+3NIcCQwNJzeHzoMxyS6zD4X5T RLWQXRVScoJTIGTvQQ2IJa4UR67QezPduaxCAM6QdPa9xGDKLqc8aMFoYQiX2g/M kC2fEHn9s3bnNH/P1e7tnZgpwKFHmLaVjbANfS11Hy65N1Tpb0+dBxohvfwwxHnC rWePwdVMxQVzX7BoS+4Zv57YELtrGv9Y1cYs6ehyuHSybTqmkPL4UBEGrVfyhhfZ zsGzbr3MgxCA9ix/0/1KnMLjj9H4dQgMWKVdzXZQJVyEaNBTxdHiXxmgce5iG3sv biy1en1P8Fp8r8edoVBueuMShg== -----END CERTIFICATE-----Generated at Mon Oct 20 15:28:53 2025 by rpki-client