$ rpki-client -vvf rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft File: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft (raw, json) Hash identifier: rRYjGEqO9XBwJwMUgDqQJ9KJ3zgjBeGounNsXBOAmFU= Subject key identifier: D6:03:3D:CD:9A:BC:D7:6A:C2:7E:BD:DA:29:16:5A:80:95:35:00:36 Authority key identifier: CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7 Certificate issuer: /CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7 Certificate serial: 0ECF48F2C7CE7EEE07FF56C7AFC0D8795A079E81 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer Subject info access: rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft Manifest number: 02EC Signing time: Sun 19 Oct 2025 22:39:17 +0000 Manifest this update: Sun 19 Oct 2025 22:34:17 +0000 Manifest next update: Tue 21 Oct 2025 01:19:17 +0000 Files and hashes: 1: 323830343a333736383a3a2f33322d313238203d3e20323636343130.roa (hash: VBCnHU5TBlO8GQbvm38yaXyrz4vjADhjKHV3unpcPFM=) 2: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl (hash: HfGvHFpIkGRZ4+cjiwWR4jv3g8oHRDLpGOQwHOgImE4=) 3: 3137302e38302e38302e302f32322d3332203d3e20323636343130.roa (hash: mc7zyxlcDWTpf8MHBgckQ6SrkcbI0QSEbJyTbgaFwFE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 01:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cf:48:f2:c7:ce:7e:ee:07:ff:56:c7:af:c0:d8:79:5a:07:9e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7 Validity Not Before: Oct 19 22:34:17 2025 GMT Not After : Oct 21 01:19:17 2025 GMT Subject: CN=D6033DCD9ABCD76AC27EBDDA29165A8095350036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:da:22:b8:cc:56:da:ce:3b:bb:cd:f3:35:78: 48:81:21:5d:c8:33:d3:1f:a1:b4:91:67:7c:58:93: 93:65:4d:8b:c2:c5:01:dc:48:74:da:ed:9d:3c:11: d3:51:2c:73:d0:96:1b:33:3f:74:19:ac:2f:82:57: 62:5d:73:1e:6c:64:cc:17:8f:20:d0:06:98:e8:e9: cf:5c:46:1e:bc:50:89:84:80:06:9f:e6:1a:2d:b9: 30:14:09:54:41:70:de:19:50:8d:58:e9:fc:eb:43: 4c:3e:61:b8:54:ff:7f:22:04:c6:c7:bc:63:f4:7a: a6:6c:39:92:c5:64:11:c6:83:9b:a0:d5:09:08:c5: f4:f6:b7:c6:da:00:38:ca:c3:88:f9:69:e7:cd:db: ca:50:8e:9c:13:c7:16:a9:17:3d:8a:9e:1e:01:96: c0:55:ac:fd:3c:9d:17:6c:30:af:3b:75:5f:45:05: bf:2c:41:5a:fc:fc:96:01:eb:89:78:f2:ae:45:d5: 12:fc:10:01:1d:91:12:2e:77:89:07:a7:43:b1:e9: eb:83:38:76:8d:da:03:e0:30:06:d4:db:ed:4e:52: 59:c1:eb:32:24:31:9b:07:c7:bd:8b:66:9e:1c:43: 94:2c:2a:78:a0:0c:bb:6c:e2:75:74:e6:be:b3:3f: 7f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:03:3D:CD:9A:BC:D7:6A:C2:7E:BD:DA:29:16:5A:80:95:35:00:36 X509v3 Authority Key Identifier: keyid:CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:52:bb:6d:60:9b:45:77:93:de:98:5f:45:e0:4e:68:cc:bb: 70:d4:ea:cb:2d:93:07:b1:cd:81:f6:96:4f:42:fe:c2:50:87: 8b:48:1c:73:b5:e1:38:c0:2f:f1:41:57:34:2e:37:26:3e:58: 23:9a:19:17:bf:a1:dc:96:94:46:88:95:9b:a2:84:6f:74:11: b0:94:36:29:cc:4a:3c:b2:99:1c:b3:23:10:b5:e3:ca:39:94: a3:b6:9f:78:16:d4:f2:96:41:2d:a4:54:2b:c8:77:63:89:e2: 2f:25:66:14:52:7f:c7:97:85:1a:03:22:96:b5:df:cf:69:82: fd:bd:61:d2:0b:2d:3e:08:b3:8b:f7:bb:d3:61:b1:41:f4:f3: 0b:4a:5b:16:9b:22:05:05:40:89:fd:9c:9f:a3:f0:f6:5f:f6: 98:98:01:63:4a:e1:73:c0:ee:a7:50:7d:4a:47:83:4f:c1:c2: 3e:87:4a:b0:c9:b1:9c:c3:33:63:c7:8d:2c:47:73:5e:b8:29: 6d:c4:fe:f8:3f:22:e7:1b:c6:96:f9:b6:a4:c7:ae:a0:bf:c9: ed:d3:e2:14:8b:6d:63:af:6c:2f:2e:61:fe:5b:f3:27:ac:98: d5:f7:ee:b0:46:7b:6c:52:76:85:82:92:77:fe:aa:8b:e9:0a: db:09:6e:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDs9I8sfOfu4H/1bHr8DYeVoHnoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JGRTkzNzY5RERCRkNBNzA0RjgzNjA0MDdGNTVCMEQ4 RkE4NkNDNzAeFw0yNTEwMTkyMjM0MTdaFw0yNTEwMjEwMTE5MTdaMDMxMTAvBgNV BAMTKEQ2MDMzRENEOUFCQ0Q3NkFDMjdFQkREQTI5MTY1QTgwOTUzNTAwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo2iK4zFbazju7zfM1eEiBIV3I M9MfobSRZ3xYk5NlTYvCxQHcSHTa7Z08EdNRLHPQlhszP3QZrC+CV2Jdcx5sZMwX jyDQBpjo6c9cRh68UImEgAaf5hotuTAUCVRBcN4ZUI1Y6fzrQ0w+YbhU/38iBMbH vGP0eqZsOZLFZBHGg5ug1QkIxfT2t8baADjKw4j5aefN28pQjpwTxxapFz2Knh4B lsBVrP08nRdsMK87dV9FBb8sQVr8/JYB64l48q5F1RL8EAEdkRIud4kHp0Ox6euD OHaN2gPgMAbU2+1OUlnB6zIkMZsHx72LZp4cQ5QsKnigDLts4nV05r6zP3/HAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1gM9zZq812rCfr3aKRZagJU1ADYwHwYDVR0j BBgwFoAUy/6Tdp3b/KcE+DYEB/VbDY+obMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzNSc0JOc2NLNVZqNkVHMmlueDRqTGl2a1FHcDg3ZVFoM0s5dEhlZ3pW bmUvMS9DQkZFOTM3NjlEREJGQ0E3MDRGODM2MDQwN0Y1NUIwRDhGQTg2Q0M3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCRkU5Mzc2OUREQkZDQTcw NEY4MzYwNDA3RjU1QjBEOEZBODZDQzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzNSc0JOc2NLNVZqNkVHMmlueDRqTGl2a1FHcDg3ZVFoM0s5dEhlZ3pWbmUvMS9D QkZFOTM3NjlEREJGQ0E3MDRGODM2MDQwN0Y1NUIwRDhGQTg2Q0M3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc1K7bWCbRXeT3phfReBOaMy7cNTqyy2TB7HNgfaWT0L+wlCHi0gcc7XhOMAv 8UFXNC43Jj5YI5oZF7+h3JaURoiVm6KEb3QRsJQ2KcxKPLKZHLMjELXjyjmUo7af eBbU8pZBLaRUK8h3Y4niLyVmFFJ/x5eFGgMilrXfz2mC/b1h0gstPgizi/e702Gx QfTzC0pbFpsiBQVAif2cn6Pw9l/2mJgBY0rhc8Dup1B9SkeDT8HCPodKsMmxnMMz Y8eNLEdzXrgpbcT++D8i5xvGlvm2pMeuoL/J7dPiFIttY69sLy5h/lvzJ6yY1ffu sEZ7bFJ2hYKSd/6qi+kK2wlujg== -----END CERTIFICATE-----Generated at Mon Oct 20 12:45:01 2025 by rpki-client