$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft File: D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft (raw, json) Hash identifier: cc3z24AkjrUM/k4rF03msosxpBnfFpjsykLf5liXoz0= Subject key identifier: A5:AF:0E:3E:DB:90:80:56:F8:F1:0F:A1:1E:A4:73:27:02:CD:48:93 Authority key identifier: D5:A0:07:F1:72:9C:F7:7E:57:90:54:C4:8F:61:B1:DD:7A:66:52:AC Certificate issuer: /CN=D5A007F1729CF77E579054C48F61B1DD7A6652AC Certificate serial: 135B4849F36FD7B39F0D42F4FBCDDCB6730691C4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A007F1729CF77E579054C48F61B1DD7A6652AC.cer Subject info access: rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft Manifest number: 4E Signing time: Mon 20 Oct 2025 04:05:27 +0000 Manifest this update: Mon 20 Oct 2025 04:00:27 +0000 Manifest next update: Tue 21 Oct 2025 04:25:27 +0000 Files and hashes: 1: D5A007F1729CF77E579054C48F61B1DD7A6652AC.crl (hash: b5yf6+cG8PGWEHArJz12MvqcMTgDCQxmEJtZSsnljGc=) 2: 323830343a393138383a3a2f33322d3438203d3e20323734363437.roa (hash: Bni/gewlTpvsi/d7y06XdboHoggaWC2Q8LtTu0dJx4Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.crl rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A007F1729CF77E579054C48F61B1DD7A6652AC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5b:48:49:f3:6f:d7:b3:9f:0d:42:f4:fb:cd:dc:b6:73:06:91:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5A007F1729CF77E579054C48F61B1DD7A6652AC Validity Not Before: Oct 20 04:00:27 2025 GMT Not After : Oct 21 04:25:27 2025 GMT Subject: CN=A5AF0E3EDB908056F8F10FA11EA4732702CD4893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e1:26:ae:b1:9f:fc:33:04:71:b7:b8:aa:c9: 72:9f:4d:9f:4c:e5:a1:c8:03:10:8a:5b:e6:bc:f3: 62:a2:5d:6e:98:bc:94:06:74:7e:1f:b5:02:10:d2: a6:bb:75:3d:fa:0a:14:e2:96:d3:9e:fd:1a:45:7b: f5:87:9d:e3:ac:27:fb:5b:7e:1a:6a:8a:6e:25:8c: 03:72:50:22:d8:1e:fe:86:15:d8:0e:97:7b:eb:7a: b9:3a:53:da:13:54:14:16:b5:1f:15:ff:9d:13:20: 14:57:42:7a:19:e6:22:fc:9b:ec:42:15:6c:35:f8: 58:57:f1:0a:4f:99:bc:1d:e1:a6:df:96:8c:b1:78: 59:0c:56:25:35:2b:ad:98:1d:93:dc:37:8b:0f:d5: b2:73:47:f2:de:d5:1e:6f:81:23:b2:b2:f9:51:c6: ce:3b:38:f3:50:9f:c6:12:72:e9:7f:e7:87:d1:49: f7:22:d1:3c:c3:5b:3f:d6:66:07:ed:cd:d6:d8:6c: dd:1d:b1:64:48:b5:7a:83:ad:dd:03:35:59:42:b4: 86:5f:18:8c:92:32:3e:01:f0:ab:e5:f9:23:e4:bc: 42:3c:d3:57:68:79:fb:04:bd:88:c3:85:ae:a6:10: 00:94:2a:10:fb:c2:17:42:27:9e:75:a8:c3:13:23: 39:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AF:0E:3E:DB:90:80:56:F8:F1:0F:A1:1E:A4:73:27:02:CD:48:93 X509v3 Authority Key Identifier: keyid:D5:A0:07:F1:72:9C:F7:7E:57:90:54:C4:8F:61:B1:DD:7A:66:52:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A007F1729CF77E579054C48F61B1DD7A6652AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:79:68:11:0a:fa:cd:86:af:cf:d9:4e:4b:3c:1d:cb:ae:91: eb:a0:1d:73:fa:fb:a3:70:8f:0a:7d:b0:ae:e1:d9:60:43:6a: 48:9a:e7:45:fa:0c:0a:f5:ee:96:62:18:e9:3c:a4:10:15:85: 16:3e:4a:e2:9e:d7:ea:be:ad:98:31:8c:e5:a7:3c:c1:03:ab: a8:5a:9a:5c:69:68:eb:fa:21:2c:b7:52:0b:df:a0:74:7e:1f: eb:0b:e4:dc:97:c5:98:86:94:b0:c0:6c:a4:8b:95:af:4e:ad: ac:12:f7:2a:b3:d4:fd:b6:fc:08:5a:9c:1c:17:b7:7f:ed:ac: 35:95:a4:a5:0f:80:df:e7:09:fb:31:ab:38:4f:31:e0:ba:5c: a6:bc:4f:02:3d:ec:ac:e0:1e:5b:38:10:3d:10:fe:7b:3b:e8: 66:24:16:0f:f2:40:88:23:71:f7:e4:7e:cc:e7:c2:7f:7a:75: d9:f0:92:5e:1e:27:12:e1:e0:d7:68:89:44:52:d7:2b:7a:79: 24:ba:78:b5:b8:e4:8d:1b:47:88:65:01:91:da:f7:97:c6:84: e8:ae:37:e0:08:2a:74:53:dc:ce:79:79:af:f9:af:12:57:8f: 32:20:32:ed:9d:3f:99:7c:7b:0f:b9:d7:fe:4e:8c:63:85:7e: a7:40:08:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUE1tISfNv17OfDUL0+83ctnMGkcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVBMDA3RjE3MjlDRjc3RTU3OTA1NEM0OEY2MUIxREQ3 QTY2NTJBQzAeFw0yNTEwMjAwNDAwMjdaFw0yNTEwMjEwNDI1MjdaMDMxMTAvBgNV BAMTKEE1QUYwRTNFREI5MDgwNTZGOEYxMEZBMTFFQTQ3MzI3MDJDRDQ4OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN4SausZ/8MwRxt7iqyXKfTZ9M 5aHIAxCKW+a882KiXW6YvJQGdH4ftQIQ0qa7dT36ChTiltOe/RpFe/WHneOsJ/tb fhpqim4ljANyUCLYHv6GFdgOl3vrerk6U9oTVBQWtR8V/50TIBRXQnoZ5iL8m+xC FWw1+FhX8QpPmbwd4abfloyxeFkMViU1K62YHZPcN4sP1bJzR/Le1R5vgSOysvlR xs47OPNQn8YScul/54fRSfci0TzDWz/WZgftzdbYbN0dsWRItXqDrd0DNVlCtIZf GIySMj4B8Kvl+SPkvEI801doefsEvYjDha6mEACUKhD7whdCJ551qMMTIzk7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpa8OPtuQgFb48Q+hHqRzJwLNSJMwHwYDVR0j BBgwFoAU1aAH8XKc935XkFTEj2Gx3XpmUqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSENHTXJESjViRkFZVEw2bk1rVHREYzFKdmZnd3l0WmN3ck1SbjFrclJ6 akcvMC9ENUEwMDdGMTcyOUNGNzdFNTc5MDU0QzQ4RjYxQjFERDdBNjY1MkFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1QTAwN0YxNzI5Q0Y3N0U1 NzkwNTRDNDhGNjFCMUREN0E2NjUyQUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SENHTXJESjViRkFZVEw2bk1rVHREYzFKdmZnd3l0WmN3ck1SbjFrclJ6akcvMC9E NUEwMDdGMTcyOUNGNzdFNTc5MDU0QzQ4RjYxQjFERDdBNjY1MkFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMXloEQr6zYavz9lOSzwdy66R66Adc/r7o3CPCn2wruHZYENqSJrnRfoMCvXu lmIY6TykEBWFFj5K4p7X6r6tmDGM5ac8wQOrqFqaXGlo6/ohLLdSC9+gdH4f6wvk 3JfFmIaUsMBspIuVr06trBL3KrPU/bb8CFqcHBe3f+2sNZWkpQ+A3+cJ+zGrOE8x 4LpcprxPAj3srOAeWzgQPRD+ezvoZiQWD/JAiCNx9+R+zOfCf3p12fCSXh4nEuHg 12iJRFLXK3p5JLp4tbjkjRtHiGUBkdr3l8aE6K434AgqdFPcznl5r/mvElePMiAy 7Z0/mXx7D7nX/k6MY4V+p0AI3A== -----END CERTIFICATE-----Generated at Mon Oct 20 08:32:22 2025 by rpki-client