$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft File: CDB34CF4AFC01721153990AE1A10D922F7507546.mft (raw, json) Hash identifier: v+72lQ/XEjGEuvlUdsMHNEUprDrsTYb0iXy/YDhWU70= Subject key identifier: AF:9E:23:CB:E4:17:FF:8E:63:30:4B:B4:C8:D3:EC:01:64:A5:DD:75 Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 Certificate issuer: /CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Certificate serial: 23BEEB0E936DD6BCB188249625849CF3B75EB55F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject info access: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft Manifest number: 02F4 Signing time: Mon 20 Oct 2025 05:55:18 +0000 Manifest this update: Mon 20 Oct 2025 05:50:18 +0000 Manifest next update: Tue 21 Oct 2025 06:47:18 +0000 Files and hashes: 1: 3136382e3232382e382e302f32322d3332203d3e20323634393030.roa (hash: iNkzV1rmrEjxTbsK7Aw/bkJX4Qyoo7gBNI4P1PI2lhY=) 2: 323830343a326639343a3a2f33322d3438203d3e20323634393030.roa (hash: vhvxSeJd+tzRkEzkUqJfnoWG2u32D84RmUUxjVexbJA=) 3: 3137302e38302e3233362e302f32322d3332203d3e20323634393030.roa (hash: A0IVZ0fDUe0zEY9+FBEhJi/Xpb3DJbrzWBmqTSyfkPo=) 4: CDB34CF4AFC01721153990AE1A10D922F7507546.crl (hash: EgiPmwNwKEHrEqhSm8k1R1vqti6nMr9dUV34hBiUIPM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:be:eb:0e:93:6d:d6:bc:b1:88:24:96:25:84:9c:f3:b7:5e:b5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Validity Not Before: Oct 20 05:50:18 2025 GMT Not After : Oct 21 06:47:18 2025 GMT Subject: CN=AF9E23CBE417FF8E63304BB4C8D3EC0164A5DD75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4f:6f:8b:d2:38:5e:34:44:4d:d6:78:7b:c7: aa:e6:77:a1:ee:bc:3d:b7:bc:a6:af:ec:15:2d:09: 59:d4:eb:75:d8:8f:55:af:ba:f6:39:86:11:7e:2f: 56:21:f9:1d:26:03:9c:ae:d7:9b:a2:09:f5:34:58: d7:f5:5b:05:fc:ca:48:3b:88:d5:67:da:07:fd:cc: 6e:ab:1b:77:24:ba:8f:b0:16:8b:65:ff:24:09:1a: 77:46:64:a4:eb:ff:13:53:36:e9:b2:90:8c:ab:1b: 0b:75:f2:19:2b:19:24:d5:3f:ce:25:ca:c2:08:ce: ed:69:3a:84:6e:7a:e0:fe:45:fb:59:80:50:aa:77: 97:af:45:dd:ed:f3:98:81:a8:20:d0:6e:ca:18:ad: 75:0f:38:9c:64:fc:29:6d:b8:60:de:9c:f2:93:7b: 89:61:e4:7b:71:ac:4b:41:0f:82:0e:79:cf:ca:bd: 74:ab:21:b6:0b:87:30:6b:0d:58:31:a1:ab:0e:b7: 46:d9:a5:be:7c:24:3d:ee:cb:9f:ab:e3:1d:2e:e4: b9:e3:a9:ec:b4:6c:57:b7:5f:19:27:ea:29:28:3c: 92:03:02:df:aa:da:98:56:ec:d4:23:f2:1f:81:d5: da:74:8d:cc:e6:5c:90:af:3b:ff:77:3d:c0:eb:0a: cf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9E:23:CB:E4:17:FF:8E:63:30:4B:B4:C8:D3:EC:01:64:A5:DD:75 X509v3 Authority Key Identifier: keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:0d:72:81:82:e8:bf:36:42:8b:6b:12:65:aa:01:2c:b2:e8: 4b:1a:1a:51:9f:da:2a:43:b7:3e:4e:ec:ff:63:4a:75:e3:bd: 79:5f:79:29:03:a1:ad:ac:db:d7:f6:a2:df:00:55:11:b8:5f: 21:af:ac:66:94:43:ec:fb:fa:5f:3b:c1:67:11:9f:eb:a3:76: fc:8c:63:f8:1d:88:41:cd:a5:00:0d:21:6b:3b:bb:28:0e:6a: 5c:23:0e:a9:2f:f8:79:df:07:e5:08:a7:fc:2d:7f:51:f4:7f: b6:37:d6:ce:bc:1e:dd:c1:b6:aa:8e:79:f6:11:a3:63:5b:49: fa:de:da:55:bc:af:ea:8c:22:d7:98:02:42:8a:92:b9:9b:42: 23:7b:92:f6:01:94:32:a2:91:e8:df:2c:21:c2:0d:c3:7c:c0: 01:90:1d:53:72:72:10:c7:71:8a:35:79:8b:37:74:43:2b:87: 5b:e3:47:4e:8c:b3:3f:fe:50:de:bc:5e:e3:09:df:75:81:97: a0:e4:67:f0:25:75:56:eb:12:5f:04:47:34:3a:31:b7:4f:d5: 0d:d8:4a:cb:86:48:75:fa:4e:08:0d:e4:d6:c5:a9:cd:f4:b2: 85:92:2f:16:82:06:c3:c5:c3:7c:32:f7:63:85:1e:79:e0:62: 73:b5:34:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI77rDpNt1ryxiCSWJYSc87detV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCMzRDRjRBRkMwMTcyMTE1Mzk5MEFFMUExMEQ5MjJG NzUwNzU0NjAeFw0yNTEwMjAwNTUwMThaFw0yNTEwMjEwNjQ3MThaMDMxMTAvBgNV BAMTKEFGOUUyM0NCRTQxN0ZGOEU2MzMwNEJCNEM4RDNFQzAxNjRBNURENzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMT2+L0jheNERN1nh7x6rmd6Hu vD23vKav7BUtCVnU63XYj1WvuvY5hhF+L1Yh+R0mA5yu15uiCfU0WNf1WwX8ykg7 iNVn2gf9zG6rG3ckuo+wFotl/yQJGndGZKTr/xNTNumykIyrGwt18hkrGSTVP84l ysIIzu1pOoRueuD+RftZgFCqd5evRd3t85iBqCDQbsoYrXUPOJxk/CltuGDenPKT e4lh5HtxrEtBD4IOec/KvXSrIbYLhzBrDVgxoasOt0bZpb58JD3uy5+r4x0u5Lnj qey0bFe3Xxkn6ikoPJIDAt+q2phW7NQj8h+B1dp0jczmXJCvO/93PcDrCs9LAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUr54jy+QX/45jMEu0yNPsAWSl3XUwHwYDVR0j BBgwFoAUzbNM9K/AFyEVOZCuGhDZIvdQdUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhU RnEvMC9DREIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQjM0Q0Y0QUZDMDE3MjEx NTM5OTBBRTFBMTBEOTIyRjc1MDc1NDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhURnEvMC9D REIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARg1ygYLovzZCi2sSZaoBLLLoSxoaUZ/aKkO3Pk7s/2NKdeO9eV95KQOhrazb 1/ai3wBVEbhfIa+sZpRD7Pv6XzvBZxGf66N2/Ixj+B2IQc2lAA0hazu7KA5qXCMO qS/4ed8H5Qin/C1/UfR/tjfWzrwe3cG2qo559hGjY1tJ+t7aVbyv6owi15gCQoqS uZtCI3uS9gGUMqKR6N8sIcINw3zAAZAdU3JyEMdxijV5izd0QyuHW+NHToyzP/5Q 3rxe4wnfdYGXoORn8CV1VusSXwRHNDoxt0/VDdhKy4ZIdfpOCA3k1sWpzfSyhZIv FoIGw8XDfDL3Y4UeeeBic7U0JQ== -----END CERTIFICATE-----Generated at Mon Oct 20 12:38:14 2025 by rpki-client