$ rpki-client -vvf rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft File: CAAC943455AAA15F91CE50FF2493F762682C2729.mft (raw, json) Hash identifier: LevHq6vEPySReoSsu+sLEsPS+aOgcoeb/CO7KSnA9l0= Subject key identifier: 1A:0D:B9:B7:EF:F5:1B:93:03:41:25:FE:78:D9:8B:EA:2B:B0:06:D7 Authority key identifier: CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29 Certificate issuer: /CN=CAAC943455AAA15F91CE50FF2493F762682C2729 Certificate serial: 60F4B818F9D37F1628AC869C956B5A906FD9506F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer Subject info access: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft Manifest number: 02F7 Signing time: Mon 20 Oct 2025 23:25:24 +0000 Manifest this update: Mon 20 Oct 2025 23:20:24 +0000 Manifest next update: Wed 22 Oct 2025 02:00:24 +0000 Files and hashes: 1: 3137372e35322e34302e302f32322d3234203d3e20323632343337.roa (hash: E3nbOYHXA5sCh8uuqp16XW2886aMw7JwoLjFWeA2Urc=) 2: CAAC943455AAA15F91CE50FF2493F762682C2729.crl (hash: YWStYcG7tCh7g2gPthUHWYkAwwA69kh2dI+FBqsbPPY=) 3: 323830343a3437633a3a2f33322d3438203d3e20323632343337.roa (hash: n6sYyIPIBbvhPsqtdp3i8l0Ppf9FFwjJIF3DL+P8GlE=) 4: 3137302e38322e382e302f32322d3234203d3e20323632343337.roa (hash: JnXqPH2nriNBGIqM4gPPtYFvnJ7m1OEcCyNN4SMeflI=) 5: 3230312e3137352e34382e302f32322d3234203d3e20323632343337.roa (hash: qrrQQPAmrbXv0WBE9xtoHoKBeLqUXodpmZjSti9EBaI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Oct 2025 00:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f4:b8:18:f9:d3:7f:16:28:ac:86:9c:95:6b:5a:90:6f:d9:50:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAAC943455AAA15F91CE50FF2493F762682C2729 Validity Not Before: Oct 20 23:20:24 2025 GMT Not After : Oct 22 02:00:24 2025 GMT Subject: CN=1A0DB9B7EFF51B93034125FE78D98BEA2BB006D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d1:5c:53:d8:c0:39:60:9f:f0:2d:63:b8:64: 11:b2:30:16:3c:a7:33:f0:20:1f:b5:ae:14:80:2a: 21:f1:7e:10:76:a6:1e:59:4e:c7:ab:4f:c9:be:59: 3c:27:ec:d6:4e:3d:4c:64:32:aa:bb:b8:f9:fb:bd: 56:bd:8b:9f:07:56:5a:f1:f9:5f:7f:0d:38:fb:d6: 96:0a:69:c0:ac:da:a9:49:ea:65:80:8d:d4:bb:46: 27:c7:85:e0:45:ef:80:b5:40:a1:98:e4:9c:2e:50: 15:5f:d9:fb:17:48:f0:7b:85:25:a8:86:f9:f9:6f: 26:42:6e:9c:52:76:87:4b:23:f7:b3:b7:63:db:34: a8:23:d3:e3:4e:0c:12:80:b9:08:5c:85:f3:98:2a: da:03:df:59:79:0e:8d:3f:e8:95:87:ad:7c:14:52: a2:df:4a:84:3b:23:50:e7:da:1c:c8:e9:3b:e6:c0: 15:16:7e:4b:74:39:e4:d2:07:bd:ee:28:b1:62:4d: 34:a6:ca:f3:8c:ec:aa:ba:2e:6d:19:5a:f7:54:fd: bb:5d:91:47:54:d3:3d:95:19:eb:e3:70:32:42:66: 39:23:a7:7c:91:98:f1:f7:10:ef:44:6b:f8:7b:56: b7:e4:6d:07:ec:0b:92:cc:51:75:93:77:aa:59:fd: 60:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0D:B9:B7:EF:F5:1B:93:03:41:25:FE:78:D9:8B:EA:2B:B0:06:D7 X509v3 Authority Key Identifier: keyid:CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:9f:b3:72:1b:f9:e4:e7:9b:3a:66:6c:d1:33:9b:1c:0f:71: ba:18:6f:f7:94:5d:c8:a0:03:bb:da:fd:c6:37:d9:e4:4f:03: e7:b2:ce:25:b0:ac:b2:1a:ca:00:a0:51:67:36:85:f1:17:5f: fc:59:e8:ae:e5:4f:d4:0d:69:2d:54:bf:72:cb:7d:75:e5:8b: 60:81:c2:12:77:e0:d7:ae:c2:af:73:d6:7f:45:d3:14:a9:eb: 08:c8:34:20:24:a5:52:a2:a4:de:7e:01:1f:81:4c:47:f2:bd: 69:f6:3c:f8:de:db:46:59:06:33:60:4c:28:8b:4d:64:d3:4b: 83:9d:f8:8b:c5:46:bd:bd:17:80:d6:83:78:3d:ae:d2:54:06: 49:40:5a:2f:cd:ef:41:42:e5:9a:cc:e8:a6:7c:e1:f4:5b:dc: bc:c7:c2:f1:cc:94:54:3a:06:19:fb:8a:c1:34:59:06:ea:46: be:ca:38:4a:2e:7f:a0:cd:69:80:a9:ee:cc:fa:31:89:0b:a9: 1a:c3:3c:0d:c2:2c:97:87:f1:d3:ee:27:6b:da:99:4a:55:e0: 46:23:70:91:aa:96:8f:a0:21:a4:25:56:23:98:8e:b6:73:d3: 87:df:63:64:2f:1b:ec:34:a2:67:2a:35:2a:cc:4b:69:c5:7d: 12:3c:79:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYPS4GPnTfxYorIaclWtakG/ZUG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBQzk0MzQ1NUFBQTE1RjkxQ0U1MEZGMjQ5M0Y3NjI2 ODJDMjcyOTAeFw0yNTEwMjAyMzIwMjRaFw0yNTEwMjIwMjAwMjRaMDMxMTAvBgNV BAMTKDFBMERCOUI3RUZGNTFCOTMwMzQxMjVGRTc4RDk4QkVBMkJCMDA2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0VxT2MA5YJ/wLWO4ZBGyMBY8 pzPwIB+1rhSAKiHxfhB2ph5ZTserT8m+WTwn7NZOPUxkMqq7uPn7vVa9i58HVlrx +V9/DTj71pYKacCs2qlJ6mWAjdS7RifHheBF74C1QKGY5JwuUBVf2fsXSPB7hSWo hvn5byZCbpxSdodLI/ezt2PbNKgj0+NODBKAuQhchfOYKtoD31l5Do0/6JWHrXwU UqLfSoQ7I1Dn2hzI6TvmwBUWfkt0OeTSB73uKLFiTTSmyvOM7Kq6Lm0ZWvdU/btd kUdU0z2VGevjcDJCZjkjp3yRmPH3EO9Ea/h7VrfkbQfsC5LMUXWTd6pZ/WBjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGg25t+/1G5MDQSX+eNmL6iuwBtcwHwYDVR0j BBgwFoAUyqyUNFWqoV+RzlD/JJP3YmgsJykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1V2c0NiSEd3NXZVZ3NFcUxTVzdQa0RiNnk4UUR2MVpCNmp1TmZBOXp1 NUwvMC9DQUFDOTQzNDU1QUFBMTVGOTFDRTUwRkYyNDkzRjc2MjY4MkMyNzI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBQUM5NDM0NTVBQUExNUY5 MUNFNTBGRjI0OTNGNzYyNjgyQzI3MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1V2c0NiSEd3NXZVZ3NFcUxTVzdQa0RiNnk4UUR2MVpCNmp1TmZBOXp1NUwvMC9D QUFDOTQzNDU1QUFBMTVGOTFDRTUwRkYyNDkzRjc2MjY4MkMyNzI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0J+zchv55OebOmZs0TObHA9xuhhv95RdyKADu9r9xjfZ5E8D57LOJbCsshrK AKBRZzaF8Rdf/FnoruVP1A1pLVS/cst9deWLYIHCEnfg167Cr3PWf0XTFKnrCMg0 ICSlUqKk3n4BH4FMR/K9afY8+N7bRlkGM2BMKItNZNNLg534i8VGvb0XgNaDeD2u 0lQGSUBaL83vQULlmszopnzh9FvcvMfC8cyUVDoGGfuKwTRZBupGvso4Si5/oM1p gKnuzPoxiQupGsM8DcIsl4fx0+4na9qZSlXgRiNwkaqWj6AhpCVWI5iOtnPTh99j ZC8b7DSiZyo1KsxLacV9Ejx5Pg== -----END CERTIFICATE-----Generated at Tue Oct 21 02:04:02 2025 by rpki-client