$ rpki-client -vvf rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft File: CA09CE87D7962722451F9BB1B0BABEB641024526.mft (raw, json) Hash identifier: Z4ZifFvCbRJzR2Vwz8m7uybpujUTMfXwnMD98RVea7k= Subject key identifier: 5D:A8:1B:D1:6E:F7:70:34:E5:EE:47:F0:D5:03:9D:57:A3:A1:78:2C Authority key identifier: CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26 Certificate issuer: /CN=CA09CE87D7962722451F9BB1B0BABEB641024526 Certificate serial: 69828A9E03F68A4340F96FF60EBC995051EDAD4A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer Subject info access: rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft Manifest number: 01A0 Signing time: Mon 20 Oct 2025 02:29:58 +0000 Manifest this update: Mon 20 Oct 2025 02:24:58 +0000 Manifest next update: Tue 21 Oct 2025 03:18:58 +0000 Files and hashes: 1: 3136382e3232382e3136342e302f32322d3234203d3e20323634393231.roa (hash: NKXUigyoNgvGw8sUtLKz4YtdCSr4kmNU60Zrw78lgfY=) 2: 323830343a326666303a3a2f33322d3438203d3e20323634393231.roa (hash: hMF3hpHloqESzD4QlqhEjuvJdOxJcm128UKFYbCgFNs=) 3: CA09CE87D7962722451F9BB1B0BABEB641024526.crl (hash: P4jPrpIiIl3LL3WffhnpCe3YVfbSl0KMaxGPdlrZCvQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:82:8a:9e:03:f6:8a:43:40:f9:6f:f6:0e:bc:99:50:51:ed:ad:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA09CE87D7962722451F9BB1B0BABEB641024526 Validity Not Before: Oct 20 02:24:58 2025 GMT Not After : Oct 21 03:18:58 2025 GMT Subject: CN=5DA81BD16EF77034E5EE47F0D5039D57A3A1782C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:51:b3:8b:5c:86:19:f4:23:d7:53:4c:65:7f: d6:aa:fa:76:0d:e9:22:d6:5d:f9:75:64:91:a5:27: c4:60:05:6f:84:d7:51:e7:1e:3f:cb:c8:39:32:b5: 7f:60:cc:fd:41:c3:82:f2:78:f8:c0:04:aa:db:f0: 57:28:a5:90:09:b0:d2:7c:fe:89:cf:82:d4:d0:aa: a1:60:8b:cb:d1:eb:0d:14:ff:9c:69:21:23:83:b2: cb:19:ce:3c:75:2e:43:29:9c:75:dd:92:e4:7f:4d: 9e:45:26:52:5d:4e:0c:d4:e1:b5:1b:4b:a4:dd:ec: 13:3e:51:4c:7c:a3:8d:7d:45:b4:1f:ba:f7:27:bb: 3d:96:af:91:40:dd:c6:c5:a0:30:64:c6:a0:cc:f7: d5:1c:bb:35:e9:d4:7f:b0:0b:dd:4d:4b:35:dd:02: 4c:04:b5:51:15:47:34:43:f4:20:a2:f5:4c:e9:84: a9:e5:70:e7:93:f8:01:4d:6f:f5:37:e2:05:57:2f: ea:aa:ff:ff:42:02:15:44:2a:ae:e9:25:54:4f:82: 6a:e6:7b:82:74:a8:f9:2c:40:85:79:a0:66:6a:ed: 1f:4c:56:3d:54:e4:2b:70:65:78:64:bc:f8:5a:a7: e0:f7:d4:ed:e0:67:ad:15:89:a9:ff:da:64:e6:d2: 16:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A8:1B:D1:6E:F7:70:34:E5:EE:47:F0:D5:03:9D:57:A3:A1:78:2C X509v3 Authority Key Identifier: keyid:CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:40:b2:53:61:da:37:08:c1:b6:31:05:c8:7a:6f:e6:36:9e: 86:e0:9e:5e:28:04:c4:44:3e:48:3c:6f:38:87:d2:08:1f:5e: 5e:71:bd:1a:46:b2:25:a3:46:42:0a:37:a8:e0:3e:da:a5:d1: 67:16:61:8c:99:5f:28:58:85:0f:af:ce:aa:cc:2d:d8:dc:7c: 2b:49:79:7e:f5:ab:69:52:3c:b0:9f:8e:63:b3:b4:3b:f7:01: 7b:6d:40:b8:9f:6c:e2:85:a3:8c:c0:79:2e:10:64:c4:08:e6: a0:fc:88:6b:5c:c6:f0:4c:9d:76:cb:34:d1:f5:49:89:06:bb: b3:b5:3b:91:80:58:79:0d:94:f5:84:18:c0:15:30:fc:79:ce: 2e:52:c7:8a:48:2e:38:b7:cd:6b:3f:b9:2d:7b:8b:c5:1f:0c: cb:a8:ba:49:67:f3:71:b9:c1:e8:5c:b3:c5:58:75:c3:57:c0: 6c:9e:fb:88:9c:9e:c9:c5:d6:4c:a7:9b:73:ec:82:2f:7f:7f: 41:f2:8a:63:3d:68:d5:97:38:d7:71:ca:ab:b4:c2:ee:57:61: 9b:d8:91:97:2a:8d:f0:92:29:8e:99:fd:e8:01:f3:20:15:b5: cc:9b:3a:ff:1c:bc:19:79:c5:eb:42:6e:50:aa:71:37:48:08: 2a:f1:82:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaYKKngP2ikNA+W/2DryZUFHtrUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EwOUNFODdENzk2MjcyMjQ1MUY5QkIxQjBCQUJFQjY0 MTAyNDUyNjAeFw0yNTEwMjAwMjI0NThaFw0yNTEwMjEwMzE4NThaMDMxMTAvBgNV BAMTKDVEQTgxQkQxNkVGNzcwMzRFNUVFNDdGMEQ1MDM5RDU3QTNBMTc4MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCUbOLXIYZ9CPXU0xlf9aq+nYN 6SLWXfl1ZJGlJ8RgBW+E11HnHj/LyDkytX9gzP1Bw4LyePjABKrb8FcopZAJsNJ8 /onPgtTQqqFgi8vR6w0U/5xpISODsssZzjx1LkMpnHXdkuR/TZ5FJlJdTgzU4bUb S6Td7BM+UUx8o419RbQfuvcnuz2Wr5FA3cbFoDBkxqDM99UcuzXp1H+wC91NSzXd AkwEtVEVRzRD9CCi9UzphKnlcOeT+AFNb/U34gVXL+qq//9CAhVEKq7pJVRPgmrm e4J0qPksQIV5oGZq7R9MVj1U5CtwZXhkvPhap+D31O3gZ60Vian/2mTm0haFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXagb0W73cDTl7kfw1QOdV6OheCwwHwYDVR0j BBgwFoAUygnOh9eWJyJFH5uxsLq+tkECRSYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVRjbmFlblVoeXVrWmdWZVlaQVhCUEx2NHVqYk11c2ZaQ3FiNUMzR0ho ZVkvMS9DQTA5Q0U4N0Q3OTYyNzIyNDUxRjlCQjFCMEJBQkVCNjQxMDI0NTI2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMDlDRTg3RDc5NjI3MjI0 NTFGOUJCMUIwQkFCRUI2NDEwMjQ1MjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVRjbmFlblVoeXVrWmdWZVlaQVhCUEx2NHVqYk11c2ZaQ3FiNUMzR0hoZVkvMS9D QTA5Q0U4N0Q3OTYyNzIyNDUxRjlCQjFCMEJBQkVCNjQxMDI0NTI2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABkCyU2HaNwjBtjEFyHpv5jaehuCeXigExEQ+SDxvOIfSCB9eXnG9GkayJaNG Qgo3qOA+2qXRZxZhjJlfKFiFD6/Oqswt2Nx8K0l5fvWraVI8sJ+OY7O0O/cBe21A uJ9s4oWjjMB5LhBkxAjmoPyIa1zG8Eyddss00fVJiQa7s7U7kYBYeQ2U9YQYwBUw /HnOLlLHikguOLfNaz+5LXuLxR8My6i6SWfzcbnB6FyzxVh1w1fAbJ77iJyeycXW TKebc+yCL39/QfKKYz1o1Zc413HKq7TC7ldhm9iRlyqN8JIpjpn96AHzIBW1zJs6 /xy8GXnF60JuUKpxN0gIKvGCww== -----END CERTIFICATE-----Generated at Mon Oct 20 12:45:06 2025 by rpki-client