$ rpki-client -vvf rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft File: CA5EB04FC8DA601024E12F23EF139B499E69972D.mft (raw, json) Hash identifier: bTRZySro2L8w5ocJ1rLEcvlPLWhSrH5DWHLDNDYNxfQ= Subject key identifier: DF:2D:73:9F:A9:2B:80:AE:F0:39:43:4B:56:96:70:6B:52:08:61:EB Authority key identifier: CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D Certificate issuer: /CN=CA5EB04FC8DA601024E12F23EF139B499E69972D Certificate serial: 69FA27B84ACFCE62D4A17FFDFD66F4115BF5C72F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer Subject info access: rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft Manifest number: 02F0 Signing time: Mon 20 Oct 2025 03:25:21 +0000 Manifest this update: Mon 20 Oct 2025 03:20:21 +0000 Manifest next update: Tue 21 Oct 2025 03:29:21 +0000 Files and hashes: 1: 323830343a373634383a3a2f33322d3438203d3e20323731313031.roa (hash: 6V0YrvLeMIiLEZTlyxZrdu23I1DIkWgF0T9EpN6P57k=) 2: 3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa (hash: dl2xxNKmpGyFGlF7VUwUzm3hSJXtz/mVLOM/KbR/f88=) 3: CA5EB04FC8DA601024E12F23EF139B499E69972D.crl (hash: 4EGNLgndcVe6rnzdqfLzEzSLujP277S7geJ0ZZXu7r8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:fa:27:b8:4a:cf:ce:62:d4:a1:7f:fd:fd:66:f4:11:5b:f5:c7:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA5EB04FC8DA601024E12F23EF139B499E69972D Validity Not Before: Oct 20 03:20:21 2025 GMT Not After : Oct 21 03:29:21 2025 GMT Subject: CN=DF2D739FA92B80AEF039434B5696706B520861EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:92:ec:3c:0e:09:d6:96:12:7a:22:be:67:a3: 56:f2:ec:23:d1:f9:75:33:ac:74:69:8f:f4:55:d4: 0a:e2:c8:c5:68:2a:41:cb:30:ad:af:b9:33:05:a2: b6:b2:7b:13:22:7a:44:e9:c7:4e:30:ed:ab:d4:90: 68:b2:20:7b:44:a1:81:42:cc:ff:7f:ab:73:31:6e: 31:fa:31:ac:91:f8:d8:21:da:22:49:7b:1f:92:1a: 4a:80:e2:c4:b0:83:bd:94:96:ff:d2:7c:d7:6f:01: bc:47:c4:3c:68:cb:fa:d6:83:31:1a:34:d0:2e:a8: 78:7e:1c:94:d5:c5:54:f6:70:c7:c4:fb:ee:d1:53: c7:ec:57:56:93:56:5a:d3:ea:69:d9:0d:a1:75:e3: 0a:0c:f2:09:62:bf:65:b9:9e:04:93:aa:1d:3a:f5: 68:4f:7d:ac:a8:01:b5:2c:12:07:ec:bc:d4:50:07: ee:f0:fc:7e:dc:a1:17:0f:4f:b7:98:46:c2:42:5f: 66:ee:13:08:00:f3:11:1c:25:d7:ad:25:d6:c6:11: f9:b9:e5:35:90:93:2b:92:1e:c4:b8:61:af:0f:0b: 5f:c6:bd:bf:80:20:12:2d:a2:12:37:cf:90:71:00: 9d:e5:4e:e8:af:1b:8f:88:49:57:0b:f6:5d:1a:54: 13:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2D:73:9F:A9:2B:80:AE:F0:39:43:4B:56:96:70:6B:52:08:61:EB X509v3 Authority Key Identifier: keyid:CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:ab:3a:0a:c3:8f:80:8d:d0:07:fb:0f:ba:f9:8c:99:22:75: a2:a7:ee:56:ac:7e:06:5e:33:af:43:40:53:99:88:ce:0d:44: c8:24:35:8a:1d:50:33:ae:f7:c5:c2:b5:78:f0:c2:70:fa:59: 2b:77:e3:37:23:82:4e:b7:9e:f1:d4:3a:9f:a4:31:3b:26:02: 20:63:66:91:1f:8d:33:96:9c:cd:1f:3c:18:26:52:38:15:80: bf:8a:04:05:8a:49:75:15:c0:d4:77:77:12:5f:b2:8c:54:f2: c4:67:17:af:e5:2f:1c:4b:4e:f5:4b:04:3e:c2:bf:8b:4a:95: be:27:63:c5:a0:62:a0:70:ff:88:d7:f1:8d:4c:e2:66:c3:fb: b4:59:93:1e:de:ea:c7:da:23:14:b8:c0:8c:72:0d:47:e6:47: 23:ba:47:d6:5b:75:15:29:4d:d8:3e:1e:9c:82:02:2b:a1:95: da:07:fc:93:24:06:e5:81:e2:71:55:e6:35:f3:d1:49:f5:bf: c1:fd:ac:e3:04:ac:22:0e:87:74:24:82:e7:f2:3c:29:13:a7: db:43:d5:66:54:37:57:cf:31:23:7a:3a:b0:2e:64:50:d3:9e: 0b:dd:e4:dd:f6:ac:35:03:13:93:2c:bf:68:4b:45:e7:0c:c3: d0:eb:cc:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUafonuErPzmLUoX/9/Wb0EVv1xy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1RUIwNEZDOERBNjAxMDI0RTEyRjIzRUYxMzlCNDk5 RTY5OTcyRDAeFw0yNTEwMjAwMzIwMjFaFw0yNTEwMjEwMzI5MjFaMDMxMTAvBgNV BAMTKERGMkQ3MzlGQTkyQjgwQUVGMDM5NDM0QjU2OTY3MDZCNTIwODYxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSkuw8DgnWlhJ6Ir5no1by7CPR +XUzrHRpj/RV1AriyMVoKkHLMK2vuTMForayexMiekTpx04w7avUkGiyIHtEoYFC zP9/q3MxbjH6MayR+Ngh2iJJex+SGkqA4sSwg72Ulv/SfNdvAbxHxDxoy/rWgzEa NNAuqHh+HJTVxVT2cMfE++7RU8fsV1aTVlrT6mnZDaF14woM8gliv2W5ngSTqh06 9WhPfayoAbUsEgfsvNRQB+7w/H7coRcPT7eYRsJCX2buEwgA8xEcJdetJdbGEfm5 5TWQkyuSHsS4Ya8PC1/Gvb+AIBItohI3z5BxAJ3lTuivG4+ISVcL9l0aVBO/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3y1zn6krgK7wOUNLVpZwa1IIYeswHwYDVR0j BBgwFoAUyl6wT8jaYBAk4S8j7xObSZ5ply0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDdxNWZZVVZxQXpicmtMUW80UG9ZUzJrR3Y4R1hzS25OOHFBWXc1Ukd4 MkYvMS9DQTVFQjA0RkM4REE2MDEwMjRFMTJGMjNFRjEzOUI0OTlFNjk5NzJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBNUVCMDRGQzhEQTYwMTAy NEUxMkYyM0VGMTM5QjQ5OUU2OTk3MkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NDdxNWZZVVZxQXpicmtMUW80UG9ZUzJrR3Y4R1hzS25OOHFBWXc1Ukd4MkYvMS9D QTVFQjA0RkM4REE2MDEwMjRFMTJGMjNFRjEzOUI0OTlFNjk5NzJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgas6CsOPgI3QB/sPuvmMmSJ1oqfuVqx+Bl4zr0NAU5mIzg1EyCQ1ih1QM673 xcK1ePDCcPpZK3fjNyOCTree8dQ6n6QxOyYCIGNmkR+NM5aczR88GCZSOBWAv4oE BYpJdRXA1Hd3El+yjFTyxGcXr+UvHEtO9UsEPsK/i0qVvidjxaBioHD/iNfxjUzi ZsP7tFmTHt7qx9ojFLjAjHINR+ZHI7pH1lt1FSlN2D4enIICK6GV2gf8kyQG5YHi cVXmNfPRSfW/wf2s4wSsIg6HdCSC5/I8KROn20PVZlQ3V88xI3o6sC5kUNOeC93k 3fasNQMTkyy/aEtF5wzD0OvMOw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:40 2025 by rpki-client