$ rpki-client -vvf rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft File: CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft (raw, json) Hash identifier: 20o/jV33/dRpNr5g/gzqDg5wvoDFMtPZQmhmpMispfI= Subject key identifier: E1:0F:95:3F:08:42:E8:68:50:10:BE:9A:C5:AC:4E:C7:E9:4E:A4:DA Authority key identifier: CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE Certificate issuer: /CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE Certificate serial: 12D6F8E00DE903025BCD39D61D4A06BD3D28BDC6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer Subject info access: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft Manifest number: 02F3 Signing time: Mon 20 Oct 2025 00:03:31 +0000 Manifest this update: Sun 19 Oct 2025 23:58:31 +0000 Manifest next update: Tue 21 Oct 2025 00:06:31 +0000 Files and hashes: 1: 323830343a6362303a3a2f33322d3438203d3e203532373432.roa (hash: mRxu11XcEscOClSKiTBJjxbSJvEsYBDMWoxEVFfNJj8=) 2: CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl (hash: S7vV5ENNl35QXtoZaYcPGlQVVH+tWcoc+D/mIp7xno0=) 3: 3133382e3131382e3235322e302f32322d3234203d3e203532373432.roa (hash: VlQMtP6NQInhiwVIoJiXBUj4Ie/wB4WGdHL21LfKPc8=) 4: 3137372e3133302e31362e302f32302d3234203d3e203532373432.roa (hash: 9l8kTSfO14FYIp88kOmGp0EuZJyDmBsCUWflQkx6Kmo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 00:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:d6:f8:e0:0d:e9:03:02:5b:cd:39:d6:1d:4a:06:bd:3d:28:bd:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE Validity Not Before: Oct 19 23:58:31 2025 GMT Not After : Oct 21 00:06:31 2025 GMT Subject: CN=E10F953F0842E8685010BE9AC5AC4EC7E94EA4DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c3:92:70:e0:5e:6e:89:0d:10:d1:31:b6:0a: c5:91:8a:f3:66:1c:ef:b0:eb:f4:eb:72:74:f8:7e: 31:3a:c3:09:b4:0d:8c:a5:07:0b:b8:4a:ae:45:41: 6f:24:6e:e2:99:0f:13:5c:ee:11:85:2b:ec:3e:5f: 95:84:59:72:fc:05:90:25:bf:5b:0b:60:ba:27:4c: a8:5e:d4:62:82:50:ee:c6:1a:70:8f:3a:ea:92:6b: 96:96:ff:7e:20:af:a4:ac:2f:8d:2e:ba:4a:aa:7a: 34:3c:e8:5e:6e:38:74:15:5c:32:d2:7c:0f:68:e3: 9a:23:c4:ec:88:be:05:72:5a:15:78:a1:3d:b9:5d: 62:33:86:88:af:f1:ae:ef:8d:7f:49:89:91:88:b6: 9a:44:ec:b7:34:71:16:fe:04:c2:7b:9f:a9:32:d2: 48:b5:e6:01:36:d7:e8:4d:af:5b:9d:ea:02:4d:f2: 0c:91:53:6f:e1:c4:44:d4:4d:d4:20:fd:73:06:0a: 7b:de:dd:50:74:2a:c0:d1:d6:82:1c:d6:a1:c4:ee: c4:b7:34:8e:5e:3b:24:d4:d1:97:1a:15:17:c0:f0: fb:4d:2d:db:cd:0b:3b:c5:f3:94:e5:fb:ac:2e:d6: 0e:31:74:4c:5e:b0:c0:36:16:65:07:b7:8f:32:db: 1a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0F:95:3F:08:42:E8:68:50:10:BE:9A:C5:AC:4E:C7:E9:4E:A4:DA X509v3 Authority Key Identifier: keyid:CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:64:92:af:33:18:7a:37:54:0e:83:45:39:04:4c:d7:c4:46: bb:76:a1:5c:35:97:0e:1f:86:7f:62:ab:04:d0:1e:88:30:3d: e2:70:2d:e5:1b:6e:e9:63:5a:31:53:42:9d:0a:e7:da:b2:ef: 7b:ff:1a:e7:ed:f0:86:e9:55:ca:1f:cd:25:dc:b2:d1:4f:41: d5:44:a8:de:65:88:62:83:78:97:78:d5:de:24:f7:97:86:43: dd:18:f0:b1:34:05:a2:a7:23:7a:ca:d3:90:3a:3e:42:1e:f0: 3e:e9:92:e1:09:ee:00:06:f2:50:3f:67:fc:32:14:bb:08:98: 43:79:07:73:94:07:c2:61:b8:ea:f3:17:90:fe:ef:c7:cf:8d: 88:b5:f6:b7:54:39:e5:dc:80:de:2c:d1:8a:fe:ed:cd:8a:c4: 28:57:cc:58:1e:05:7b:00:4c:df:8d:e3:06:ba:bc:6e:8d:91: 67:0c:e5:59:a5:12:a3:f7:4a:e7:f2:e8:ab:30:9e:b0:82:7a: 86:10:ac:85:96:e9:e1:4d:af:b5:0b:d8:27:34:bf:bd:2b:66: 91:ac:1c:f3:c6:8e:c5:81:da:62:9f:14:be:b0:e3:74:ee:45: ae:1b:c7:39:e8:58:68:ea:fd:30:c8:1b:fa:cb:09:74:b9:d2: 50:cf:10:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEtb44A3pAwJbzTnWHUoGvT0ovcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCNzU4MkYyODY5OUYzNTEwNjlDOEM3NkNDOTcxNjdC RjdCQjJFRTAeFw0yNTEwMTkyMzU4MzFaFw0yNTEwMjEwMDA2MzFaMDMxMTAvBgNV BAMTKEUxMEY5NTNGMDg0MkU4Njg1MDEwQkU5QUM1QUM0RUM3RTk0RUE0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdw5Jw4F5uiQ0Q0TG2CsWRivNm HO+w6/TrcnT4fjE6wwm0DYylBwu4Sq5FQW8kbuKZDxNc7hGFK+w+X5WEWXL8BZAl v1sLYLonTKhe1GKCUO7GGnCPOuqSa5aW/34gr6SsL40uukqqejQ86F5uOHQVXDLS fA9o45ojxOyIvgVyWhV4oT25XWIzhoiv8a7vjX9JiZGItppE7Lc0cRb+BMJ7n6ky 0ki15gE21+hNr1ud6gJN8gyRU2/hxETUTdQg/XMGCnve3VB0KsDR1oIc1qHE7sS3 NI5eOyTU0ZcaFRfA8PtNLdvNCzvF85Tl+6wu1g4xdExesMA2FmUHt48y2xp9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4Q+VPwhC6GhQEL6axaxOx+lOpNowHwYDVR0j BBgwFoAUz7dYLyhpnzUQacjHbMlxZ797su4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkNuZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVy VDcvMS9DRkI3NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGQjc1ODJGMjg2OTlGMzUx MDY5QzhDNzZDQzk3MTY3QkY3QkIyRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkNuZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVyVDcvMS9D RkI3NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAmSSrzMYejdUDoNFOQRM18RGu3ahXDWXDh+Gf2KrBNAeiDA94nAt5Rtu6WNa MVNCnQrn2rLve/8a5+3whulVyh/NJdyy0U9B1USo3mWIYoN4l3jV3iT3l4ZD3Rjw sTQFoqcjesrTkDo+Qh7wPumS4QnuAAbyUD9n/DIUuwiYQ3kHc5QHwmG46vMXkP7v x8+NiLX2t1Q55dyA3izRiv7tzYrEKFfMWB4FewBM343jBrq8bo2RZwzlWaUSo/dK 5/LoqzCesIJ6hhCshZbp4U2vtQvYJzS/vStmkawc88aOxYHaYp8UvrDjdO5FrhvH OehYaOr9MMgb+ssJdLnSUM8Qbg== -----END CERTIFICATE-----Generated at Mon Oct 20 09:33:13 2025 by rpki-client