$ rpki-client -vvf rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft File: A653D5055FC338B089E2C732382682788F082F11.mft (raw, json) Hash identifier: SqNNffcMDyzG6/QUnlRuA9xhu8JhGF6ZDGPl2crvp4s= Subject key identifier: C8:26:7F:33:DF:89:A6:1F:20:DB:08:1D:CB:05:DB:8B:EC:A3:89:50 Authority key identifier: A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11 Certificate issuer: /CN=A653D5055FC338B089E2C732382682788F082F11 Certificate serial: 436C09508C338F55309C890C9D9E1CB4DE68D6DB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer Subject info access: rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft Manifest number: 02EE Signing time: Sun 19 Oct 2025 21:19:12 +0000 Manifest this update: Sun 19 Oct 2025 21:14:12 +0000 Manifest next update: Tue 21 Oct 2025 00:19:12 +0000 Files and hashes: 1: 3137302e38312e34302e302f32322d3234203d3e20323636343030.roa (hash: fnk6G+39Qn8k6OBmu2nwg3cM52nnrkQXQ11Kyh5Qn1o=) 2: A653D5055FC338B089E2C732382682788F082F11.crl (hash: mx7UYwNSAEwVidGkUK91fViuMTF4H6wUV658Fy1wHL0=) 3: 323830343a333734343a3a2f33322d313238203d3e20323636343030.roa (hash: 40WaVP8Svoxs+qZKP+igdLA9rTsAwD+SLbjFEI4LGxs=) 4: 34352e3232342e3132382e302f32322d3234203d3e20323636343030.roa (hash: uvd4+Ma33hGXSlt80NtGV3afPFZnfl9FFnr+LvjlmzM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 00:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:6c:09:50:8c:33:8f:55:30:9c:89:0c:9d:9e:1c:b4:de:68:d6:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A653D5055FC338B089E2C732382682788F082F11 Validity Not Before: Oct 19 21:14:12 2025 GMT Not After : Oct 21 00:19:12 2025 GMT Subject: CN=C8267F33DF89A61F20DB081DCB05DB8BECA38950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:e6:55:74:1c:0f:7c:27:1c:59:4e:17:93: 68:dd:9a:22:93:a5:3c:b5:a9:18:58:8a:aa:fc:fd: 05:20:d0:10:e6:7d:df:f3:49:85:1a:5f:28:f2:41: 72:cb:5b:9b:f8:40:31:4d:1c:9b:8d:82:00:c8:8a: bc:fa:85:a8:d2:fe:81:55:91:b7:fb:58:cf:cb:5e: e1:7a:06:09:3a:4e:f6:3a:6c:76:23:c6:b7:4e:63: 9f:0b:4f:e3:e7:18:44:c3:1b:c5:9d:9e:91:e4:a8: 9c:ec:ee:e1:27:08:89:aa:66:dd:69:0a:b5:88:12: 58:41:50:ed:09:3a:a7:65:98:30:72:46:2c:62:ef: c0:b8:0b:30:8e:01:28:42:fc:c8:e2:de:7b:67:59: 55:a3:61:b1:04:7c:73:65:a7:1e:9d:4b:da:bd:46: 31:5d:5f:df:4b:c9:3a:0a:37:7d:28:83:01:ee:95: fe:46:5e:44:4e:37:4b:cb:6a:83:8c:9e:95:e7:0a: 65:ec:4d:fe:eb:44:81:80:b5:8f:13:e1:23:b4:1e: 75:ed:38:2b:7f:4e:3a:78:dd:3b:1b:b8:bd:4f:e0: ae:f5:a2:2c:7b:cb:89:10:8a:a3:35:61:7d:e6:51: 34:82:d8:32:8d:27:0c:6d:74:4d:ac:48:c9:0a:45: ea:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:26:7F:33:DF:89:A6:1F:20:DB:08:1D:CB:05:DB:8B:EC:A3:89:50 X509v3 Authority Key Identifier: keyid:A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:87:db:12:02:13:66:f4:58:1d:ea:57:1e:73:9b:03:23:9f: 42:e7:e8:75:89:e4:bf:c2:53:d0:38:d1:c2:61:42:e5:0a:50: 0a:3c:6b:ba:a6:83:1f:55:8f:bf:54:11:18:23:6b:4c:c7:2f: 9d:b2:b5:95:06:da:a6:f9:54:ab:a8:dc:a5:a0:ae:81:85:6a: 92:cf:b9:26:4d:1c:8f:4b:87:ea:39:cb:a3:35:cf:15:3f:33: b1:d0:1d:47:d4:7b:39:91:71:48:be:bb:ab:f5:68:d0:3d:3e: 1a:1e:8b:19:4f:62:21:15:ac:e1:ec:c7:1e:99:5b:90:6d:05: 9a:ab:f0:f5:5e:66:f3:bd:78:32:71:17:e1:e6:08:b5:b3:9d: 80:56:c5:e6:a9:a4:9a:32:5e:df:86:6d:2d:8c:13:6e:6f:4c: 96:bc:32:1b:c9:7a:1c:68:58:53:e8:d1:49:16:41:ac:86:1f: 63:71:34:2c:fd:6d:37:26:d5:0d:0a:28:1f:34:c9:29:38:a3: 30:24:c9:ca:2f:f7:63:ec:7f:4d:2f:b9:ac:c7:f6:fd:d5:56: bc:64:2d:f9:32:48:f7:63:06:4c:a3:7d:59:b0:03:de:2e:9e: 65:6a:74:fe:42:84:33:04:2d:a9:a1:b0:37:44:03:e0:c2:0a: 32:84:39:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ2wJUIwzj1UwnIkMnZ4ctN5o1tswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1M0Q1MDU1RkMzMzhCMDg5RTJDNzMyMzgyNjgyNzg4 RjA4MkYxMTAeFw0yNTEwMTkyMTE0MTJaFw0yNTEwMjEwMDE5MTJaMDMxMTAvBgNV BAMTKEM4MjY3RjMzREY4OUE2MUYyMERCMDgxRENCMDVEQjhCRUNBMzg5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1D+ZVdBwPfCccWU4Xk2jdmiKT pTy1qRhYiqr8/QUg0BDmfd/zSYUaXyjyQXLLW5v4QDFNHJuNggDIirz6hajS/oFV kbf7WM/LXuF6Bgk6TvY6bHYjxrdOY58LT+PnGETDG8WdnpHkqJzs7uEnCImqZt1p CrWIElhBUO0JOqdlmDByRixi78C4CzCOAShC/Mji3ntnWVWjYbEEfHNlpx6dS9q9 RjFdX99LyToKN30ogwHulf5GXkRON0vLaoOMnpXnCmXsTf7rRIGAtY8T4SO0HnXt OCt/Tjp43TsbuL1P4K71oix7y4kQiqM1YX3mUTSC2DKNJwxtdE2sSMkKReoRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyCZ/M9+Jph8g2wgdywXbi+yjiVAwHwYDVR0j BBgwFoAUplPVBV/DOLCJ4scyOCaCeI8ILxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0J2QmNLODNqZkttdGVVWmhKS3FnN1B0a2R4N1h0TnFGZ0RqNGI0cmdv aXgvMS9BNjUzRDUwNTVGQzMzOEIwODlFMkM3MzIzODI2ODI3ODhGMDgyRjExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2NTNENTA1NUZDMzM4QjA4 OUUyQzczMjM4MjY4Mjc4OEYwODJGMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0J2QmNLODNqZkttdGVVWmhKS3FnN1B0a2R4N1h0TnFGZ0RqNGI0cmdvaXgvMS9B NjUzRDUwNTVGQzMzOEIwODlFMkM3MzIzODI2ODI3ODhGMDgyRjExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEofbEgITZvRYHepXHnObAyOfQufodYnkv8JT0DjRwmFC5QpQCjxruqaDH1WP v1QRGCNrTMcvnbK1lQbapvlUq6jcpaCugYVqks+5Jk0cj0uH6jnLozXPFT8zsdAd R9R7OZFxSL67q/Vo0D0+Gh6LGU9iIRWs4ezHHplbkG0Fmqvw9V5m8714MnEX4eYI tbOdgFbF5qmkmjJe34ZtLYwTbm9MlrwyG8l6HGhYU+jRSRZBrIYfY3E0LP1tNybV DQooHzTJKTijMCTJyi/3Y+x/TS+5rMf2/dVWvGQt+TJI92MGTKN9WbAD3i6eZWp0 /kKEMwQtqaGwN0QD4MIKMoQ59g== -----END CERTIFICATE-----Generated at Mon Oct 20 12:45:06 2025 by rpki-client