$ rpki-client -vvf rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.mft File: CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.mft (raw, json) Hash identifier: ooGlqOnz1oHz/CT+QKop2DcjqC2USgtQGaprv5WbCAc= Subject key identifier: DA:1D:FE:4C:D9:74:D5:09:99:1E:E4:F6:C2:D0:5E:44:93:C3:E3:E0 Authority key identifier: CD:2A:ED:58:0B:E4:5A:E6:DD:57:D4:E6:A5:5A:C9:2C:70:7F:CD:BC Certificate issuer: /CN=CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC Certificate serial: 57108323BD0C71CD687A396010571CDB356FA2DF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.cer Subject info access: rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.mft Manifest number: 0137 Signing time: Mon 20 Oct 2025 10:01:43 +0000 Manifest this update: Mon 20 Oct 2025 09:56:43 +0000 Manifest next update: Tue 21 Oct 2025 10:39:43 +0000 Files and hashes: 1: CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.crl (hash: zB5m/hjbY+tHXXVKQ6RrD48wACdHdurQQNpRlVVHLfY=) 2: 323830343a373334383a3a2f33322d3332203d3e20323632363930.roa (hash: ZETWz9B1XsvXE3LNR6Qez4qvCwG8K0rSb9shyRIBvpo=) 3: 3138372e38372e3234302e302f32302d3232203d3e20323632363930.roa (hash: R1WjUp/i2SEyHbR3H/pC5wqVSIyixKVkfBPPmkVfNTk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.crl rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:10:83:23:bd:0c:71:cd:68:7a:39:60:10:57:1c:db:35:6f:a2:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC Validity Not Before: Oct 20 09:56:43 2025 GMT Not After : Oct 21 10:39:43 2025 GMT Subject: CN=DA1DFE4CD974D509991EE4F6C2D05E4493C3E3E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:04:53:83:08:c0:b8:f7:26:82:e1:70:21:33: b6:c8:7a:33:9d:ee:64:c0:e4:fa:b4:98:a1:f8:37: 08:2b:98:6b:6e:ab:11:62:37:a4:fb:4f:6c:2e:36: b6:7d:b0:a7:4d:ba:55:d4:cf:52:dd:21:de:24:e8: 2b:cb:c8:42:12:12:aa:a5:64:ed:da:cf:c3:0f:06: 42:a9:ed:2f:6f:09:31:6c:88:aa:e2:8e:bd:f8:86: c9:a8:d4:d0:a5:8f:c4:6e:db:2d:7e:87:71:ff:bf: 3f:d8:5e:bb:25:49:92:e8:31:95:f9:76:49:d9:00: e4:89:65:74:29:86:79:5c:e1:e4:78:e6:24:46:15: a7:b3:df:eb:ff:d6:41:af:00:43:5f:f8:2b:4f:8b: a4:7e:9b:22:49:d4:08:06:f8:ad:52:01:bb:1f:80: 99:7f:c4:46:2d:43:d9:00:5b:05:ca:69:c2:a8:8f: f3:ad:6d:d8:a8:fc:36:50:21:5c:d0:23:e5:79:0e: 50:38:4b:dc:29:df:45:32:64:84:6c:4c:bb:d0:14: f8:c1:ac:2e:fd:4a:b0:53:e0:3c:3a:34:a8:23:f3: 62:67:91:fc:cd:c0:53:25:c2:fc:bb:8b:b6:3c:e5: 4d:b5:6a:0f:06:8d:e9:d2:61:a1:d0:c8:93:9c:f1: c2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1D:FE:4C:D9:74:D5:09:99:1E:E4:F6:C2:D0:5E:44:93:C3:E3:E0 X509v3 Authority Key Identifier: keyid:CD:2A:ED:58:0B:E4:5A:E6:DD:57:D4:E6:A5:5A:C9:2C:70:7F:CD:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:5b:e0:a2:aa:c6:41:93:9b:8b:ca:e6:7b:72:1f:36:82:89: 17:d2:d6:b7:9f:c5:0c:b4:6f:46:71:b3:cb:5e:ca:dd:25:ba: ac:be:68:d7:8c:29:3e:fb:98:1a:a9:c2:07:f6:23:38:ac:1f: ab:78:b9:59:27:86:c0:e2:ea:6d:d5:37:cf:7f:ad:86:ae:55: 7a:27:21:e8:c3:5e:a1:9f:d9:bb:10:7a:e6:08:23:51:9a:c4: 5d:fe:8a:93:62:a0:12:4b:0d:f5:11:69:ff:c2:49:db:da:55: 3c:3f:3f:d1:8d:9d:a3:eb:cf:5b:54:bb:19:93:a1:f1:e8:a3: 12:2a:35:f9:0e:68:e3:56:19:ea:ff:73:5f:ee:d2:25:c1:48: 1a:08:57:39:8b:ba:df:73:9e:95:96:a4:46:0b:40:a6:c7:cb: 8e:22:98:07:a4:0f:46:4b:3e:bd:66:db:67:cf:9f:d8:71:fb: f3:71:ff:54:b0:de:13:1e:78:f8:91:e6:f1:f6:df:30:32:0e: 24:37:7a:31:b6:33:d3:66:c8:bb:30:e0:ba:34:69:ed:cc:dd: 2f:07:68:9d:0a:34:22:1c:7c:56:5b:ca:89:6b:af:ff:8b:a7: 9a:7a:1f:9c:51:03:bf:f4:2b:fa:18:11:73:79:a6:66:c2:04: 73:32:2a:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVxCDI70Mcc1oejlgEFcc2zVvot8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyQUVENTgwQkU0NUFFNkRENTdENEU2QTU1QUM5MkM3 MDdGQ0RCQzAeFw0yNTEwMjAwOTU2NDNaFw0yNTEwMjExMDM5NDNaMDMxMTAvBgNV BAMTKERBMURGRTRDRDk3NEQ1MDk5OTFFRTRGNkMyRDA1RTQ0OTNDM0UzRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBFODCMC49yaC4XAhM7bIejOd 7mTA5Pq0mKH4NwgrmGtuqxFiN6T7T2wuNrZ9sKdNulXUz1LdId4k6CvLyEISEqql ZO3az8MPBkKp7S9vCTFsiKrijr34hsmo1NClj8Ru2y1+h3H/vz/YXrslSZLoMZX5 dknZAOSJZXQphnlc4eR45iRGFaez3+v/1kGvAENf+CtPi6R+myJJ1AgG+K1SAbsf gJl/xEYtQ9kAWwXKacKoj/Otbdio/DZQIVzQI+V5DlA4S9wp30UyZIRsTLvQFPjB rC79SrBT4Dw6NKgj82JnkfzNwFMlwvy7i7Y85U21ag8GjenSYaHQyJOc8cKpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2h3+TNl01QmZHuT2wtBeRJPD4+AwHwYDVR0j BBgwFoAUzSrtWAvkWubdV9TmpVrJLHB/zbwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODJ6cnVhU1RkYWNVMWFQc0FDSkc4bXFXY1A3a1c2SlF4ZkZ5WG15cnBO bVovMi9DRDJBRUQ1ODBCRTQ1QUU2REQ1N0Q0RTZBNTVBQzkyQzcwN0ZDREJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMkFFRDU4MEJFNDVBRTZE RDU3RDRFNkE1NUFDOTJDNzA3RkNEQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODJ6cnVhU1RkYWNVMWFQc0FDSkc4bXFXY1A3a1c2SlF4ZkZ5WG15cnBObVovMi9D RDJBRUQ1ODBCRTQ1QUU2REQ1N0Q0RTZBNTVBQzkyQzcwN0ZDREJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApFvgoqrGQZObi8rme3IfNoKJF9LWt5/FDLRvRnGzy17K3SW6rL5o14wpPvuY GqnCB/YjOKwfq3i5WSeGwOLqbdU3z3+thq5Veich6MNeoZ/ZuxB65ggjUZrEXf6K k2KgEksN9RFp/8JJ29pVPD8/0Y2do+vPW1S7GZOh8eijEio1+Q5o41YZ6v9zX+7S JcFIGghXOYu633OelZakRgtApsfLjiKYB6QPRks+vWbbZ8+f2HH783H/VLDeEx54 +JHm8fbfMDIOJDd6MbYz02bIuzDgujRp7czdLwdonQo0Ihx8VlvKiWuv/4unmnof nFEDv/Qr+hgRc3mmZsIEczIqOA== -----END CERTIFICATE-----Generated at Mon Oct 20 19:02:19 2025 by rpki-client