$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft File: 1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft (raw, json) Hash identifier: N/6iqB5mt3j5fMD0Z2jkkDIR7Z7Gr5Dke7Nf5B6KXYQ= Subject key identifier: FB:3E:E4:2B:26:0D:CA:A4:2D:93:A7:CC:A2:22:3E:3C:75:56:C4:7B Authority key identifier: 1A:CA:9F:BA:B5:A5:57:98:45:3E:BC:32:81:3B:FF:AB:CB:11:12:C0 Certificate issuer: /CN=1ACA9FBAB5A55798453EBC32813BFFABCB1112C0 Certificate serial: 3BDECECDDE3BC14592132D6832AA459120A9E8B1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer Subject info access: rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft Manifest number: 5C Signing time: Mon 20 Oct 2025 08:00:29 +0000 Manifest this update: Mon 20 Oct 2025 07:55:29 +0000 Manifest next update: Tue 21 Oct 2025 09:53:29 +0000 Files and hashes: 1: 1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl (hash: UEjaFY1y+m9mwDFpNWdHiT1bbQPTGYUC/QEr4ZznT3E=) 2: 323830343a383237303a3a2f33322d3334203d3e203631363038.roa (hash: uUEwAyOnSKMgNrv6cimHSGDyRpN3j7PzrC2gtxszUfQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:de:ce:cd:de:3b:c1:45:92:13:2d:68:32:aa:45:91:20:a9:e8:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ACA9FBAB5A55798453EBC32813BFFABCB1112C0 Validity Not Before: Oct 20 07:55:29 2025 GMT Not After : Oct 21 09:53:29 2025 GMT Subject: CN=FB3EE42B260DCAA42D93A7CCA2223E3C7556C47B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:97:95:ac:45:db:88:de:26:ec:e5:34:ba:21: b7:d7:f9:97:40:3e:c7:3e:1b:91:a2:3c:0d:f3:64: 58:09:21:ce:69:84:79:fb:6b:a9:6a:f5:b8:f4:21: 62:15:fa:ab:98:4a:3d:c5:d0:46:75:42:22:41:e8: c9:9d:c0:b0:cc:2b:ee:ef:50:f8:50:5e:eb:73:0e: 3c:3f:f2:d3:e6:2a:cb:58:6e:94:25:97:10:9d:61: 0a:6d:f4:84:e6:35:a4:c8:4f:7a:40:ca:66:56:7a: a0:66:36:f5:02:7d:db:ca:57:39:15:f1:03:92:0a: 09:1a:b9:03:e4:a8:7b:ec:6e:3e:c6:f2:53:18:8e: 1c:77:c3:f6:86:2a:88:31:87:16:1c:2c:29:ef:b5: 7e:89:2d:3b:d0:99:11:e8:d5:3b:f7:49:38:1f:b0: 3e:ff:70:db:44:7f:fd:c4:df:32:57:a5:b8:f3:7e: 93:be:29:e8:0d:92:e3:47:ea:b2:12:29:0f:bf:c5: 3c:b0:81:63:dc:36:51:33:47:fe:e1:a2:fd:5f:50: 63:77:a7:c0:d7:5c:3e:b1:37:db:cc:1c:6a:17:74: ca:f2:7d:2a:55:c2:02:69:48:ee:e0:7d:5b:88:1f: 6f:59:aa:dd:92:09:d9:de:11:c7:cd:6c:73:b2:e8: 80:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3E:E4:2B:26:0D:CA:A4:2D:93:A7:CC:A2:22:3E:3C:75:56:C4:7B X509v3 Authority Key Identifier: keyid:1A:CA:9F:BA:B5:A5:57:98:45:3E:BC:32:81:3B:FF:AB:CB:11:12:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7c:10:4e:dd:66:3a:8c:5d:b3:30:76:98:57:c9:a4:89:b4: cb:90:f1:e7:21:de:13:14:27:b2:cb:af:90:1f:8d:e1:30:71: fd:51:62:f4:39:b3:77:af:38:b1:4e:99:c5:d6:63:0c:dd:11: d8:16:fd:20:e1:f3:a4:f0:fc:38:6d:a6:af:86:1d:2f:af:78: de:64:3f:86:2c:a0:36:5f:99:a6:5b:30:32:99:0f:e2:2c:77: 8b:c8:d3:05:18:47:f9:31:4b:3f:cc:0c:b4:45:60:cf:35:9b: 45:b9:1c:fd:32:a7:f3:d3:53:68:91:66:14:8b:8b:60:9d:cf: 2a:15:4f:30:02:5b:03:df:2a:67:60:b4:32:a9:98:f3:af:7a: 6f:c2:26:07:64:ce:5c:22:35:db:d2:1d:b3:07:cc:28:01:e1: 64:d0:df:ec:1f:4b:76:5d:b6:16:fe:35:b6:f4:e0:24:6b:ff: a8:45:02:a6:93:2c:71:0e:b6:ad:05:21:42:89:e0:86:a1:6a: c9:13:40:66:c5:8a:25:dd:2a:03:6c:fd:b2:eb:0e:fe:af:0a: 30:7e:62:fc:6e:fa:80:09:bf:73:25:7e:fa:7c:32:24:a1:ad: cb:94:25:09:7f:ac:48:43:1a:ae:f0:3d:c0:b1:71:33:fd:e8: 7f:5d:1b:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO97Ozd47wUWSEy1oMqpFkSCp6LEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFDQTlGQkFCNUE1NTc5ODQ1M0VCQzMyODEzQkZGQUJD QjExMTJDMDAeFw0yNTEwMjAwNzU1MjlaFw0yNTEwMjEwOTUzMjlaMDMxMTAvBgNV BAMTKEZCM0VFNDJCMjYwRENBQTQyRDkzQTdDQ0EyMjIzRTNDNzU1NkM0N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfl5WsRduI3ibs5TS6IbfX+ZdA Psc+G5GiPA3zZFgJIc5phHn7a6lq9bj0IWIV+quYSj3F0EZ1QiJB6MmdwLDMK+7v UPhQXutzDjw/8tPmKstYbpQllxCdYQpt9ITmNaTIT3pAymZWeqBmNvUCfdvKVzkV 8QOSCgkauQPkqHvsbj7G8lMYjhx3w/aGKogxhxYcLCnvtX6JLTvQmRHo1Tv3STgf sD7/cNtEf/3E3zJXpbjzfpO+KegNkuNH6rISKQ+/xTywgWPcNlEzR/7hov1fUGN3 p8DXXD6xN9vMHGoXdMryfSpVwgJpSO7gfVuIH29Zqt2SCdneEcfNbHOy6ICFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+z7kKyYNyqQtk6fMoiI+PHVWxHswHwYDVR0j BBgwFoAUGsqfurWlV5hFPrwygTv/q8sREsAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ05wQmtpdXM3cjZONVdTMVhYYlVWTWR5QnhrVmNqYTFIejZuQmpNSm5H Yk0vMC8xQUNBOUZCQUI1QTU1Nzk4NDUzRUJDMzI4MTNCRkZBQkNCMTExMkMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBQ0E5RkJBQjVBNTU3OTg0 NTNFQkMzMjgxM0JGRkFCQ0IxMTEyQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q05wQmtpdXM3cjZONVdTMVhYYlVWTWR5QnhrVmNqYTFIejZuQmpNSm5HYk0vMC8x QUNBOUZCQUI1QTU1Nzk4NDUzRUJDMzI4MTNCRkZBQkNCMTExMkMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKnwQTt1mOoxdszB2mFfJpIm0y5Dx5yHeExQnssuvkB+N4TBx/VFi9Dmzd684 sU6ZxdZjDN0R2Bb9IOHzpPD8OG2mr4YdL6943mQ/hiygNl+ZplswMpkP4ix3i8jT BRhH+TFLP8wMtEVgzzWbRbkc/TKn89NTaJFmFIuLYJ3PKhVPMAJbA98qZ2C0MqmY 8696b8ImB2TOXCI129IdswfMKAHhZNDf7B9Ldl22Fv41tvTgJGv/qEUCppMscQ62 rQUhQonghqFqyRNAZsWKJd0qA2z9susO/q8KMH5i/G76gAm/cyV++nwyJKGty5Ql CX+sSEMarvA9wLFxM/3of10bJg== -----END CERTIFICATE-----Generated at Mon Oct 20 22:41:14 2025 by rpki-client