$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft File: CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft (raw, json) Hash identifier: 9IloSbgiY0VNl/4FzoxrGiNEl6yhnCe46dcf0cbwTRQ= Subject key identifier: 11:35:FB:4E:AA:47:7E:B6:3A:2F:94:C5:7A:E9:71:06:1B:AA:CA:AC Authority key identifier: CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96 Certificate issuer: /CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96 Certificate serial: 2EF54FD49275FEEC5222E0C5C3D721C9B3CD3D5D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer Subject info access: rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft Manifest number: 02F1 Signing time: Mon 20 Oct 2025 07:50:03 +0000 Manifest this update: Mon 20 Oct 2025 07:45:03 +0000 Manifest next update: Tue 21 Oct 2025 09:24:03 +0000 Files and hashes: 1: 3230302e3132342e3137352e302f32342d3234203d3e20323730323739.roa (hash: 76In6FY6+iuAeEYRByeAicyXGMlVYFf2X3CYH3s/a1Y=) 2: 3230302e3132342e3137342e302f32342d3234203d3e20323730323739.roa (hash: fVRhOOtcOeieEVXaAUm+KUqKVK9Kq80KJlnipzsXd8Y=) 3: 3230302e3132342e3137332e302f32342d3234203d3e20323730323739.roa (hash: 01D5qhjJLkkhNf3Sz3aZcGRoiRACCWeyCYEQrfnlp+c=) 4: CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl (hash: Tz7iz0DfXzDZTGAh9lgKJwS1RaEioH6isI8pKQEYkN0=) 5: 323830343a363939343a3a2f33322d3332203d3e20323730323739.roa (hash: 8VEpB0xd0VX/j49eruyLM4U0ob1UYw5ULKbATLfjNDk=) 6: 3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa (hash: G21rYQorQc2vMjNSJNaeitlhvIhWXGxuqhbE6L3iV9I=) 7: 3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa (hash: VHq8ZEyoowCZWXDzrootpXLcNjZPy/BNrxBkB8brJ5I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f5:4f:d4:92:75:fe:ec:52:22:e0:c5:c3:d7:21:c9:b3:cd:3d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96 Validity Not Before: Oct 20 07:45:03 2025 GMT Not After : Oct 21 09:24:03 2025 GMT Subject: CN=1135FB4EAA477EB63A2F94C57AE971061BAACAAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:26:02:1e:92:fb:01:4a:2b:5e:d5:8b:7e:55: a7:b9:50:92:c9:48:d4:51:09:3a:ee:18:d2:d5:da: 6c:77:ea:4a:df:f1:d4:7d:e1:69:81:13:c7:e1:89: 40:e4:af:d7:49:b8:8e:76:ca:df:f8:bd:f1:47:18: fe:54:e2:11:a5:51:a0:8a:d4:ea:d5:0c:af:50:96: bb:fd:22:31:22:bb:c4:be:47:01:6a:1b:9f:88:c4: 64:3b:b5:f7:f1:0d:9e:13:30:08:32:10:9b:cb:c0: 29:44:6d:e5:18:de:2d:45:37:32:c0:f7:7e:46:dc: 88:dd:0c:b6:d5:57:77:fb:88:68:2a:c1:79:14:51: b7:9f:9a:92:c3:29:f8:65:60:aa:a0:23:94:3f:f9: 1d:f1:2a:26:87:a5:2d:9b:7a:cd:a3:e0:c0:7b:86: 7e:39:0e:72:a6:1e:2a:68:8e:61:dc:36:60:c0:8e: b1:a7:93:dc:60:93:1c:20:36:1e:92:36:25:00:ea: 14:ce:02:dd:3d:85:bb:d9:72:8d:d7:05:ad:5f:1c: 76:66:83:f7:b2:12:97:12:a7:92:e3:94:41:b4:bb: 38:57:8c:b4:53:d9:8b:34:1a:96:64:0b:82:50:17: 81:13:e9:5d:85:5f:07:61:f1:05:1e:5f:05:dc:9f: 88:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:35:FB:4E:AA:47:7E:B6:3A:2F:94:C5:7A:E9:71:06:1B:AA:CA:AC X509v3 Authority Key Identifier: keyid:CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e7:78:5f:60:3f:91:a8:c7:c7:d3:7a:06:b0:19:5f:21:5c: c0:10:1a:e8:cc:eb:71:67:08:82:00:59:cc:36:02:57:55:c3: 05:15:20:6e:cc:e6:53:a4:40:67:06:b8:33:6c:43:26:14:2f: 20:01:64:29:00:a1:99:17:ed:94:6b:ce:ed:5d:bc:59:89:3b: e3:de:a5:de:79:99:f2:f2:6e:e1:2b:81:7d:71:98:b9:ff:6b: 37:cb:41:b6:7a:48:61:12:d6:f7:07:f5:bd:79:d1:65:63:bd: 1b:e4:08:dc:b3:5f:7c:bc:51:22:b9:11:43:98:61:6e:a6:50: cc:4f:07:6f:e4:d3:51:65:78:00:d5:25:1a:3f:0f:de:1f:08: 7a:20:d1:61:79:2f:a7:11:fb:12:b2:e4:93:73:03:4c:26:48: 71:5d:e2:d3:06:ba:20:67:92:49:11:05:3a:c4:df:65:5b:f4: b9:1f:b0:61:c4:a7:d4:e9:54:3b:40:7b:91:55:d1:70:36:70: f2:cb:4e:af:6f:84:38:74:9a:25:86:d9:13:a0:32:a9:14:73: f5:78:7d:a4:e7:d1:c1:18:59:0c:52:4a:7f:f4:f3:6b:74:06: dd:22:bd:ef:28:77:d4:d2:8a:ae:eb:e6:2b:c2:8e:a2:73:3f: cb:66:62:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULvVP1JJ1/uxSIuDFw9chybPNPV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0MDg2QzUzQTBFMUExOUFFNUFBMDBBOTg3NEFCQkQ3 ODU2M0E5NjAeFw0yNTEwMjAwNzQ1MDNaFw0yNTEwMjEwOTI0MDNaMDMxMTAvBgNV BAMTKDExMzVGQjRFQUE0NzdFQjYzQTJGOTRDNTdBRTk3MTA2MUJBQUNBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUJgIekvsBSite1Yt+Vae5UJLJ SNRRCTruGNLV2mx36krf8dR94WmBE8fhiUDkr9dJuI52yt/4vfFHGP5U4hGlUaCK 1OrVDK9Qlrv9IjEiu8S+RwFqG5+IxGQ7tffxDZ4TMAgyEJvLwClEbeUY3i1FNzLA 935G3IjdDLbVV3f7iGgqwXkUUbefmpLDKfhlYKqgI5Q/+R3xKiaHpS2bes2j4MB7 hn45DnKmHipojmHcNmDAjrGnk9xgkxwgNh6SNiUA6hTOAt09hbvZco3XBa1fHHZm g/eyEpcSp5LjlEG0uzhXjLRT2Ys0GpZkC4JQF4ET6V2FXwdh8QUeXwXcn4hbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUETX7TqpHfrY6L5TFeulxBhuqyqwwHwYDVR0j BBgwFoAUzkCGxToOGhmuWqAKmHSrvXhWOpYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkt4ZVVXaVlLb3ZCQlZBVjU5Q2NRQXVDWVFaNHN6ZXFBRGNkM2hwUmZM Q1IvMS9DRTQwODZDNTNBMEUxQTE5QUU1QUEwMEE5ODc0QUJCRDc4NTYzQTk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNDA4NkM1M0EwRTFBMTlB RTVBQTAwQTk4NzRBQkJENzg1NjNBOTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qkt4ZVVXaVlLb3ZCQlZBVjU5Q2NRQXVDWVFaNHN6ZXFBRGNkM2hwUmZMQ1IvMS9D RTQwODZDNTNBMEUxQTE5QUU1QUEwMEE5ODc0QUJCRDc4NTYzQTk2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgud4X2A/kajHx9N6BrAZXyFcwBAa6MzrcWcIggBZzDYCV1XDBRUgbszmU6RA Zwa4M2xDJhQvIAFkKQChmRftlGvO7V28WYk7496l3nmZ8vJu4SuBfXGYuf9rN8tB tnpIYRLW9wf1vXnRZWO9G+QI3LNffLxRIrkRQ5hhbqZQzE8Hb+TTUWV4ANUlGj8P 3h8IeiDRYXkvpxH7ErLkk3MDTCZIcV3i0wa6IGeSSREFOsTfZVv0uR+wYcSn1OlU O0B7kVXRcDZw8stOr2+EOHSaJYbZE6AyqRRz9Xh9pOfRwRhZDFJKf/Tza3QG3SK9 7yh31NKKruvmK8KOonM/y2ZiAg== -----END CERTIFICATE-----Generated at Mon Oct 20 23:11:09 2025 by rpki-client