$ rpki-client -vvf rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft File: CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft (raw, json) Hash identifier: xFWsmxoxAQKAsdNPKlSeWxT3g7peGY0nwCWAHg6bqDU= Subject key identifier: 88:83:B6:B1:24:68:2E:F2:5C:EB:E4:8F:13:E6:02:FD:F3:45:1F:59 Authority key identifier: CE:47:DB:DD:28:40:AA:7B:CB:7E:5B:EF:8D:2B:B7:AD:F7:98:56:08 Certificate issuer: /CN=CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608 Certificate serial: 406FFF8DF3266E05EC92D983EF4AC92F6F44BB86 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer Subject info access: rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft Manifest number: EA Signing time: Sun 19 Oct 2025 20:05:25 +0000 Manifest this update: Sun 19 Oct 2025 20:00:25 +0000 Manifest next update: Mon 20 Oct 2025 23:55:25 +0000 Files and hashes: 1: 3230302e33362e3139362e302f32322d3332203d3e20323731343233.roa (hash: BN0yNSQYHzO/8PLxpClNHqjhVJbCaoMDHFJ1JsHe/LA=) 2: CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.crl (hash: BtI/bmyJ6aK3IctsVCi9KFmyxQhe+tHBQCSnktRS8bk=) 3: 323830343a376234633a3a2f33322d313238203d3e20323731343233.roa (hash: D6UugD7LMSE82MNKuHZ6AsbY2I0FQkZFbm92FJ5UaBg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.crl rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 23:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:6f:ff:8d:f3:26:6e:05:ec:92:d9:83:ef:4a:c9:2f:6f:44:bb:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608 Validity Not Before: Oct 19 20:00:25 2025 GMT Not After : Oct 20 23:55:25 2025 GMT Subject: CN=8883B6B124682EF25CEBE48F13E602FDF3451F59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2b:db:72:51:2c:18:ac:ff:70:29:a0:ea:a8: 75:76:9f:ad:40:a0:37:62:7f:21:ef:83:42:94:e2: f5:9e:51:93:2d:fc:20:8a:f1:ea:d5:23:fa:7f:69: 31:39:bf:17:b3:52:fb:11:29:2c:ea:c0:82:d3:91: 5a:38:fb:fd:b6:a1:f5:3d:4e:ea:78:b9:f2:90:04: 06:ef:b2:4b:04:ea:e5:c2:01:1b:92:35:46:98:e4: 66:38:21:7e:bf:7e:e1:e4:0d:98:5f:1d:85:6c:31: a8:47:15:6f:1c:9c:55:6d:ec:5d:c1:04:09:33:80: 1c:2b:9b:7c:d3:9c:62:77:b9:19:2b:1b:42:34:28: 8a:e9:8b:37:fc:e1:0a:dd:b9:86:2f:47:3b:2a:35: 1d:4d:db:8f:b3:4d:fb:92:99:c9:e0:dd:6b:0a:77: 87:73:f2:0d:5a:21:5d:5a:79:99:c4:38:aa:d6:1d: 21:22:7a:65:a3:da:4f:fb:d2:f5:d7:c1:b3:95:c5: 54:1c:7c:82:af:29:9e:55:74:fc:9e:85:36:a7:fc: 21:97:2d:50:62:5d:0c:5c:06:26:a0:da:5c:51:55: f0:6f:8f:90:fa:4c:e3:f1:03:40:38:6c:bc:df:59: f5:9a:6d:87:d2:e8:4b:8f:4a:9b:02:ac:36:c0:8b: 8f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:83:B6:B1:24:68:2E:F2:5C:EB:E4:8F:13:E6:02:FD:F3:45:1F:59 X509v3 Authority Key Identifier: keyid:CE:47:DB:DD:28:40:AA:7B:CB:7E:5B:EF:8D:2B:B7:AD:F7:98:56:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:2e:7f:e9:ab:fd:d6:74:83:ed:b2:ad:fe:40:42:32:e9:c2: f8:f0:9f:bb:f1:c1:45:a8:c4:a6:3a:e3:88:de:5c:9c:c1:bb: 4e:1d:cd:26:7b:53:9f:40:b4:3a:1f:af:ce:39:cb:5d:d6:a5: 27:79:51:7d:74:fe:02:8c:3f:2f:22:f4:8c:29:ec:0e:00:0a: 49:c6:3a:b9:eb:f6:70:88:65:93:b7:b2:85:b5:3c:2b:fb:3f: 5a:05:8e:c1:bb:df:e1:56:83:da:31:b1:13:fc:45:21:08:85: f9:13:56:d6:6c:85:05:0f:86:67:15:95:9c:0a:15:5d:2c:70: 17:62:0f:5c:ef:0a:88:77:df:98:88:13:87:a8:83:d4:68:b4: 2f:85:74:50:59:6c:b4:8a:23:06:d4:1a:a4:8e:f2:11:93:30: 42:bb:35:05:30:f2:cf:5c:14:c3:78:95:ee:79:f3:b9:f7:c4: 60:fb:3d:27:b2:78:96:a9:74:4e:3a:dd:ca:c5:c4:4c:7e:bb: ae:3b:00:df:85:8e:a1:25:30:37:3b:55:26:78:7f:92:43:7f: ad:96:1e:b2:1d:84:ac:11:06:81:cc:43:bf:96:47:fe:5c:3f: ab:80:a0:92:59:15:5d:a8:30:74:77:7f:98:ca:a0:93:42:d6: 96:f0:d9:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQG//jfMmbgXsktmD70rJL29Eu4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0N0RCREQyODQwQUE3QkNCN0U1QkVGOEQyQkI3QURG Nzk4NTYwODAeFw0yNTEwMTkyMDAwMjVaFw0yNTEwMjAyMzU1MjVaMDMxMTAvBgNV BAMTKDg4ODNCNkIxMjQ2ODJFRjI1Q0VCRTQ4RjEzRTYwMkZERjM0NTFGNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAK9tyUSwYrP9wKaDqqHV2n61A oDdifyHvg0KU4vWeUZMt/CCK8erVI/p/aTE5vxezUvsRKSzqwILTkVo4+/22ofU9 Tup4ufKQBAbvsksE6uXCARuSNUaY5GY4IX6/fuHkDZhfHYVsMahHFW8cnFVt7F3B BAkzgBwrm3zTnGJ3uRkrG0I0KIrpizf84QrduYYvRzsqNR1N24+zTfuSmcng3WsK d4dz8g1aIV1aeZnEOKrWHSEiemWj2k/70vXXwbOVxVQcfIKvKZ5VdPyehTan/CGX LVBiXQxcBiag2lxRVfBvj5D6TOPxA0A4bLzfWfWabYfS6EuPSpsCrDbAi4+9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiIO2sSRoLvJc6+SPE+YC/fNFH1kwHwYDVR0j BBgwFoAUzkfb3ShAqnvLflvvjSu3rfeYVggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWh2Yjk0QnRQM0M4YjRHVmd5R3RmWUFBS1M4a3ZqSHR4MzZtZFoyOWUy czYvMC9DRTQ3REJERDI4NDBBQTdCQ0I3RTVCRUY4RDJCQjdBREY3OTg1NjA4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNDdEQkREMjg0MEFBN0JD QjdFNUJFRjhEMkJCN0FERjc5ODU2MDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWh2Yjk0QnRQM0M4YjRHVmd5R3RmWUFBS1M4a3ZqSHR4MzZtZFoyOWUyczYvMC9D RTQ3REJERDI4NDBBQTdCQ0I3RTVCRUY4RDJCQjdBREY3OTg1NjA4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACS5/6av91nSD7bKt/kBCMunC+PCfu/HBRajEpjrjiN5cnMG7Th3NJntTn0C0 Oh+vzjnLXdalJ3lRfXT+Aow/LyL0jCnsDgAKScY6uev2cIhlk7eyhbU8K/s/WgWO wbvf4VaD2jGxE/xFIQiF+RNW1myFBQ+GZxWVnAoVXSxwF2IPXO8KiHffmIgTh6iD 1Gi0L4V0UFlstIojBtQapI7yEZMwQrs1BTDyz1wUw3iV7nnzuffEYPs9J7J4lql0 TjrdysXETH67rjsA34WOoSUwNztVJnh/kkN/rZYesh2ErBEGgcxDv5ZH/lw/q4Cg klkVXagwdHd/mMqgk0LWlvDZIw== -----END CERTIFICATE-----Generated at Mon Oct 20 06:21:10 2025 by rpki-client