$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft File: D95738A14AD98B305087E048FD2E4821E5E2299A.mft (raw, json) Hash identifier: 0KlqTGwbJlPlnxFkVq+Ef71jK2vYuw1LeRey1nTQtbY= Subject key identifier: AD:C5:D5:5F:E7:EF:C4:F3:40:88:B1:1E:43:0C:FE:E1:AD:2E:FB:DE Authority key identifier: D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A Certificate issuer: /CN=D95738A14AD98B305087E048FD2E4821E5E2299A Certificate serial: 7EFC7D520D1AD76D3B740CA50A9CE5ED14C73CAD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft Manifest number: 0102 Signing time: Mon 20 Oct 2025 18:51:14 +0000 Manifest this update: Mon 20 Oct 2025 18:46:14 +0000 Manifest next update: Tue 21 Oct 2025 21:15:14 +0000 Files and hashes: 1: 3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa (hash: 3dEyGzKHFOd9LeZVxU1UzcBmIS+t2RbJviuI4dC12Lk=) 2: 3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa (hash: g6mPrnM05WB2yDxH6Zlq8hbCsk4V+orsbGR3GF+AKT8=) 3: D95738A14AD98B305087E048FD2E4821E5E2299A.crl (hash: i5av7ey3Xpf/wZx1pTS92NY2OIDnBlPBCENMQzbz0z4=) 4: 323830343a313235343a3a2f33322d3332203d3e20323633343730.roa (hash: ELWb7rC3fgvn1sa3PxipINIruhW615Gy+69ajKYPWzI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 21:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:fc:7d:52:0d:1a:d7:6d:3b:74:0c:a5:0a:9c:e5:ed:14:c7:3c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D95738A14AD98B305087E048FD2E4821E5E2299A Validity Not Before: Oct 20 18:46:14 2025 GMT Not After : Oct 21 21:15:14 2025 GMT Subject: CN=ADC5D55FE7EFC4F34088B11E430CFEE1AD2EFBDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a6:b1:e4:f0:80:8b:ae:9d:82:1d:03:c7:56: dc:cb:d2:ab:1e:56:a7:e0:ad:87:2b:41:c1:9a:f3: 75:00:86:e2:24:b6:2c:40:1f:3c:b0:e4:35:67:10: 91:a1:7d:53:5b:20:d1:21:df:9e:74:5b:40:9e:fa: 7e:8c:13:ad:53:5e:7e:1d:c6:42:62:b4:3d:7d:9a: 12:d8:7c:f8:34:05:2d:64:2d:3c:3f:f2:12:a1:b0: 2d:ee:85:e4:e0:32:42:7a:05:5d:58:9a:1b:7c:79: 7c:41:e8:bf:57:28:0b:96:c0:1f:b4:bf:73:f5:50: fa:19:ac:86:08:91:81:7b:53:2b:9b:f8:0a:85:aa: f4:e9:5d:4b:61:dd:1d:5f:a0:c1:2e:1a:64:c3:87: a6:07:64:c4:3e:91:48:3f:4e:45:0e:23:43:66:7a: 07:c8:e2:6e:5c:bb:19:89:19:91:aa:3b:04:be:4d: e9:e4:42:54:6c:a6:d3:65:d1:8f:6b:a7:5f:cb:ec: cc:0a:e6:02:ea:a9:af:a9:c6:be:50:c6:c4:7a:c8: 9d:71:ef:08:5e:bb:cb:92:34:8a:e6:20:be:53:87: 25:4e:a2:3d:8e:51:de:ee:15:fd:b8:10:7b:2e:9c: 06:2e:20:86:68:e1:17:86:42:9f:d2:e0:2e:05:34: 3f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C5:D5:5F:E7:EF:C4:F3:40:88:B1:1E:43:0C:FE:E1:AD:2E:FB:DE X509v3 Authority Key Identifier: keyid:D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:19:a3:1d:f5:52:58:ac:46:a4:fe:24:fc:bf:0f:65:23:e1: b4:9d:59:bf:a7:cf:ce:bd:34:9e:16:21:e1:55:2e:b4:0d:b4: de:4f:08:8d:18:1f:58:d5:5b:ce:a9:72:6c:f9:e2:e4:36:ae: 59:d4:99:05:66:60:eb:29:e4:1a:13:41:0e:4b:e2:67:83:bb: ba:80:49:e9:d3:6b:d5:2a:e7:af:da:62:cc:8b:d2:16:9a:1b: 33:9f:3b:dd:35:38:44:6a:12:f9:3b:9a:13:50:25:00:b5:1b: fc:c0:77:0a:62:81:b6:e2:3b:d6:57:0e:cd:7c:e4:11:6a:77: 28:d9:14:a0:f5:78:8d:71:f6:06:7a:6e:d8:15:b6:1e:0b:2c: 5e:3f:36:99:07:2f:39:5c:45:9e:b1:fc:48:ec:eb:a0:04:1d: bf:ed:ad:0e:1f:25:fb:8a:ed:58:d1:57:ee:9a:d1:3b:3c:ce: e9:9a:b2:e7:ae:b5:87:4e:34:5e:95:de:80:20:d3:89:c5:52: 13:26:03:05:85:88:fb:f4:19:52:52:54:8e:41:c9:bf:b5:bc: e2:59:11:a7:47:af:da:75:fa:6f:23:a4:d3:9c:d0:84:5b:f3: 8a:8f:e6:46:1d:56:7a:a4:af:43:e6:ce:dc:e2:60:ca:7a:8a: e9:b2:d1:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfvx9Ug0a1207dAylCpzl7RTHPK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk1NzM4QTE0QUQ5OEIzMDUwODdFMDQ4RkQyRTQ4MjFF NUUyMjk5QTAeFw0yNTEwMjAxODQ2MTRaFw0yNTEwMjEyMTE1MTRaMDMxMTAvBgNV BAMTKEFEQzVENTVGRTdFRkM0RjM0MDg4QjExRTQzMENGRUUxQUQyRUZCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWprHk8ICLrp2CHQPHVtzL0qse VqfgrYcrQcGa83UAhuIktixAHzyw5DVnEJGhfVNbINEh3550W0Ce+n6ME61TXn4d xkJitD19mhLYfPg0BS1kLTw/8hKhsC3uheTgMkJ6BV1Ymht8eXxB6L9XKAuWwB+0 v3P1UPoZrIYIkYF7Uyub+AqFqvTpXUth3R1foMEuGmTDh6YHZMQ+kUg/TkUOI0Nm egfI4m5cuxmJGZGqOwS+TenkQlRsptNl0Y9rp1/L7MwK5gLqqa+pxr5QxsR6yJ1x 7wheu8uSNIrmIL5ThyVOoj2OUd7uFf24EHsunAYuIIZo4ReGQp/S4C4FND/dAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrcXVX+fvxPNAiLEeQwz+4a0u+94wHwYDVR0j BBgwFoAU2Vc4oUrZizBQh+BI/S5IIeXiKZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2 UFkvMC9EOTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NTczOEExNEFEOThCMzA1 MDg3RTA0OEZEMkU0ODIxRTVFMjI5OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2UFkvMC9E OTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuRmjHfVSWKxGpP4k/L8PZSPhtJ1Zv6fPzr00nhYh4VUutA203k8IjRgfWNVb zqlybPni5DauWdSZBWZg6ynkGhNBDkviZ4O7uoBJ6dNr1Srnr9pizIvSFpobM587 3TU4RGoS+TuaE1AlALUb/MB3CmKBtuI71lcOzXzkEWp3KNkUoPV4jXH2Bnpu2BW2 HgssXj82mQcvOVxFnrH8SOzroAQdv+2tDh8l+4rtWNFX7prROzzO6Zqy5661h040 XpXegCDTicVSEyYDBYWI+/QZUlJUjkHJv7W84lkRp0ev2nX6byOk05zQhFvzio/m Rh1WeqSvQ+bO3OJgynqK6bLRow== -----END CERTIFICATE-----Generated at Mon Oct 20 22:47:17 2025 by rpki-client