$ rpki-client -vvf rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft File: CDD7619BD4F71987C247C8670D9064F291B3E36F.mft (raw, json) Hash identifier: QMhiYzdRuFd3koMgA4WFgKzkj0SQVGpMlpcDc6Ur2O8= Subject key identifier: 0C:88:8A:C1:12:DB:38:76:6A:A0:95:75:B3:E3:C7:9A:AA:3F:B3:0E Authority key identifier: CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F Certificate issuer: /CN=CDD7619BD4F71987C247C8670D9064F291B3E36F Certificate serial: 38523AB82B51EB39354B93A685D69D99A5FF1970 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer Subject info access: rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft Manifest number: 43 Signing time: Sun 19 Oct 2025 23:33:22 +0000 Manifest this update: Sun 19 Oct 2025 23:28:22 +0000 Manifest next update: Tue 21 Oct 2025 01:23:22 +0000 Files and hashes: 1: 323830343a393537633a3a2f33332d3333203d3e20323734353138.roa (hash: PF5brDyVR1cmEjB6iFotsFSX3QnhYTrcdVyGy4WP2OY=) 2: 323830343a393537633a3a2f33322d3332203d3e20323734353138.roa (hash: g+bfErnC5Q3MshvfTRGFVmz3DrgAhMm+FVSXUSNdGrU=) 3: 323830343a393537633a343030303a3a2f33342d3334203d3e20323734353138.roa (hash: L5n4ex8pE5gfPKDduuMFd0GMuURcKIBeSu7tDIDGTFY=) 4: 323830343a393537633a383030303a3a2f33342d3334203d3e20323734353138.roa (hash: mKtBkzh6XG4sTlhoPWFLc5Pd7DgaZ6VR/rArRM9AyYs=) 5: 323830343a393537633a3a2f33342d3334203d3e20323734353138.roa (hash: Wc2TzbM6iSZdak9WvaJANTvB62PhLpJCW7LSAbW5tsA=) 6: 323830343a393537633a633030303a3a2f33342d3334203d3e20323734353138.roa (hash: TVfyxkvcDydRQKBsatQmjUgY75O6YdchTD42+Bc59u4=) 7: CDD7619BD4F71987C247C8670D9064F291B3E36F.crl (hash: M7SNlz10UfwcXHeQ3NnjXMO/ReWuYaLmZqGlb0kexC8=) 8: 34352e362e3131392e302f32342d3234203d3e20323734353138.roa (hash: u49m43X6DK4A6wPfWeHoDfOnrEotXCa0jx043Jsqo6Y=) 9: 323830343a393537633a383030303a3a2f33332d3333203d3e20323734353138.roa (hash: 36hHf/D4ukU8mAlHpeyW/xW6TzW1Wdrh0++mjKsFN7A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 01:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:52:3a:b8:2b:51:eb:39:35:4b:93:a6:85:d6:9d:99:a5:ff:19:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD7619BD4F71987C247C8670D9064F291B3E36F Validity Not Before: Oct 19 23:28:22 2025 GMT Not After : Oct 21 01:23:22 2025 GMT Subject: CN=0C888AC112DB38766AA09575B3E3C79AAA3FB30E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ad:a9:9a:89:e5:0b:d0:b3:ff:dd:8d:b2:01: 41:74:3a:0b:b3:48:f5:b9:91:ae:b4:0f:37:b3:5a: 0f:24:f7:d6:8e:9b:31:a8:35:08:43:c2:3f:5d:b8: e7:7c:7b:11:47:e8:34:7a:10:2d:ac:93:ec:db:38: ce:d4:2f:1b:7a:ce:a7:e3:b9:bd:e4:01:38:22:1b: f8:1b:36:01:64:49:28:ad:de:b1:57:d7:2b:6f:89: 74:0b:23:f1:57:e2:2f:71:0f:25:a6:21:06:16:d5: 16:35:24:2d:8a:3c:9b:ad:3e:4f:ed:9a:c6:2b:1f: cc:c4:6b:e0:02:9e:34:6d:cc:11:47:cf:c0:fc:8d: 14:2e:0d:25:88:26:53:cb:7e:e1:e7:19:3a:13:cd: b7:bc:4a:8e:f8:9d:99:df:5f:97:ca:32:2c:96:69: a6:dc:5b:6d:7d:7a:6f:bb:bf:b7:c1:4a:a9:3a:04: e1:4c:2b:3f:cc:43:59:0d:6d:b8:a1:ba:bd:97:0f: 35:33:fc:20:0f:ab:05:32:0d:c7:9e:d9:4e:75:08: 89:fd:30:77:a9:e3:fd:0a:ba:19:99:dd:0d:e5:9b: 85:15:7b:db:74:72:8b:7f:8e:a0:69:d0:ac:f1:fd: 7e:08:1f:18:26:b1:6b:b2:19:b2:00:0d:36:a2:82: 2f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:88:8A:C1:12:DB:38:76:6A:A0:95:75:B3:E3:C7:9A:AA:3F:B3:0E X509v3 Authority Key Identifier: keyid:CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f8:e8:f6:00:3c:54:a9:5f:6c:84:cc:ef:67:0e:3f:08:7a: 11:52:ef:34:ba:72:aa:00:6f:1b:81:79:08:11:13:c6:89:70: d1:47:1a:49:a0:f0:d0:3b:9f:03:2c:45:56:01:03:c7:11:5f: c0:55:0b:3f:e2:15:d5:7c:8a:d7:7d:42:5d:f8:dd:8e:48:95: 1f:af:a0:13:35:42:41:8a:3d:3b:03:d6:8d:a8:d9:04:eb:e7: 80:ac:1f:39:94:bc:d4:84:15:bb:c9:0a:5f:c2:c4:0a:61:2b: 44:a9:03:cb:fb:0e:a5:0a:28:f1:3a:09:10:43:11:1c:bb:e7: 1e:a9:0e:5e:db:18:f5:ae:4b:8f:1c:07:65:d0:94:7f:ac:1c: db:42:04:cd:ac:85:bb:2e:25:04:5b:98:1f:94:62:a1:22:d3: e0:e7:a9:17:98:69:1a:b8:5c:ab:cf:46:b4:53:24:1a:30:78: f2:39:dc:aa:8a:c8:f4:5e:6b:bd:29:54:96:e0:45:1d:fc:82: 25:5d:59:8f:89:72:ae:18:ed:9d:7d:64:99:64:9d:c6:3b:90: 8d:fb:fd:9c:9e:4f:cf:9f:bd:c7:19:87:c6:63:1a:12:7f:c2: e4:a9:d3:63:07:83:33:76:1b:52:21:9c:cd:42:4e:98:cc:19: 14:7b:e4:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOFI6uCtR6zk1S5OmhdadmaX/GXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENzYxOUJENEY3MTk4N0MyNDdDODY3MEQ5MDY0RjI5 MUIzRTM2RjAeFw0yNTEwMTkyMzI4MjJaFw0yNTEwMjEwMTIzMjJaMDMxMTAvBgNV BAMTKDBDODg4QUMxMTJEQjM4NzY2QUEwOTU3NUIzRTNDNzlBQUEzRkIzMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcramaieUL0LP/3Y2yAUF0Oguz SPW5ka60DzezWg8k99aOmzGoNQhDwj9duOd8exFH6DR6EC2sk+zbOM7ULxt6zqfj ub3kATgiG/gbNgFkSSit3rFX1ytviXQLI/FX4i9xDyWmIQYW1RY1JC2KPJutPk/t msYrH8zEa+ACnjRtzBFHz8D8jRQuDSWIJlPLfuHnGToTzbe8So74nZnfX5fKMiyW aabcW219em+7v7fBSqk6BOFMKz/MQ1kNbbihur2XDzUz/CAPqwUyDcee2U51CIn9 MHep4/0KuhmZ3Q3lm4UVe9t0cot/jqBp0Kzx/X4IHxgmsWuyGbIADTaigi8/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDIiKwRLbOHZqoJV1s+PHmqo/sw4wHwYDVR0j BBgwFoAUzddhm9T3GYfCR8hnDZBk8pGz428wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHdIMWpIN3BicmtpNVhjOHBvbzJZeGFrem1hNXJkUFB0ejdMYXdTMWFi TDQvMC9DREQ3NjE5QkQ0RjcxOTg3QzI0N0M4NjcwRDkwNjRGMjkxQjNFMzZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NERDc2MTlCRDRGNzE5ODdD MjQ3Qzg2NzBEOTA2NEYyOTFCM0UzNkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHdIMWpIN3BicmtpNVhjOHBvbzJZeGFrem1hNXJkUFB0ejdMYXdTMWFiTDQvMC9D REQ3NjE5QkQ0RjcxOTg3QzI0N0M4NjcwRDkwNjRGMjkxQjNFMzZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFvjo9gA8VKlfbITM72cOPwh6EVLvNLpyqgBvG4F5CBETxolw0UcaSaDw0Duf AyxFVgEDxxFfwFULP+IV1XyK131CXfjdjkiVH6+gEzVCQYo9OwPWjajZBOvngKwf OZS81IQVu8kKX8LECmErRKkDy/sOpQoo8ToJEEMRHLvnHqkOXtsY9a5LjxwHZdCU f6wc20IEzayFuy4lBFuYH5RioSLT4OepF5hpGrhcq89GtFMkGjB48jncqorI9F5r vSlUluBFHfyCJV1Zj4lyrhjtnX1kmWSdxjuQjfv9nJ5Pz5+9xxmHxmMaEn/C5KnT YweDM3YbUiGczUJOmMwZFHvkow== -----END CERTIFICATE-----Generated at Mon Oct 20 09:08:13 2025 by rpki-client