$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/4/5646CD4EC34719AEE7243FF1E2B79C100E9EAB53.mft File: 5646CD4EC34719AEE7243FF1E2B79C100E9EAB53.mft (raw, json) Hash identifier: mztxq5edxwJCtvG9pLdNCKuUPquadLq+BlVC66erjwM= Subject key identifier: F4:E1:13:AB:A6:AA:A2:A0:60:42:9D:A9:72:7F:02:43:48:8C:8E:80 Authority key identifier: 56:46:CD:4E:C3:47:19:AE:E7:24:3F:F1:E2:B7:9C:10:0E:9E:AB:53 Certificate issuer: /CN=5646CD4EC34719AEE7243FF1E2B79C100E9EAB53 Certificate serial: 19BD11B76A5A5962342757477E7F56876315F399 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5646CD4EC34719AEE7243FF1E2B79C100E9EAB53.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/4/5646CD4EC34719AEE7243FF1E2B79C100E9EAB53.mft Manifest number: 1D Signing time: Sun 19 Oct 2025 21:00:51 +0000 Manifest this update: Sun 19 Oct 2025 20:55:50 +0000 Manifest next update: Mon 20 Oct 2025 22:37:50 +0000 Files and hashes: 1: 3230302e3135322e38302e302f32302d3234203d3e203232373036.roa (hash: ZtDsS1J9nV9Ge1saZGL2mfkCkxz9M0ovIEcxBHaseWg=) 2: 5646CD4EC34719AEE7243FF1E2B79C100E9EAB53.crl (hash: +2F6yf/UJDlb+HlHlCrR2Fuy4zVrCsU1bft5h9u0gto=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/4/5646CD4EC34719AEE7243FF1E2B79C100E9EAB53.crl rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/4/5646CD4EC34719AEE7243FF1E2B79C100E9EAB53.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5646CD4EC34719AEE7243FF1E2B79C100E9EAB53.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 22:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:bd:11:b7:6a:5a:59:62:34:27:57:47:7e:7f:56:87:63:15:f3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5646CD4EC34719AEE7243FF1E2B79C100E9EAB53 Validity Not Before: Oct 19 20:55:50 2025 GMT Not After : Oct 20 22:37:50 2025 GMT Subject: CN=F4E113ABA6AAA2A060429DA9727F0243488C8E80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c8:74:22:0f:d2:f1:ae:9d:96:99:f5:89:ec: 79:5e:77:dc:13:cd:6f:0c:1d:24:ac:a6:b8:2e:40: 71:4d:5a:b8:ca:4f:81:8d:3b:b4:9a:85:f8:43:a1: c1:70:8c:dc:17:ca:91:8d:11:03:02:58:ad:18:a7: a9:d6:39:19:19:e7:46:90:ac:1c:87:29:c8:18:4c: 83:62:05:7e:be:06:32:7c:76:31:63:56:9a:f0:43: a6:52:20:e6:37:cd:72:af:ef:8c:54:ba:09:4f:0c: 67:d7:5c:16:90:66:c1:c2:03:c3:f9:33:ff:86:a3: b3:c9:bd:86:4e:6f:f8:c6:53:13:c5:e8:2c:3d:05: 49:f6:64:f9:e2:71:06:ee:37:84:7f:e4:31:34:43: fa:a4:77:8a:0a:a8:c5:ab:7c:81:10:b7:9c:b9:6f: ac:49:e8:30:63:dc:30:61:cc:38:64:27:7f:5d:d2: 89:9e:48:db:27:8a:8a:9b:e2:e3:1a:ba:05:56:69: 4c:4c:bb:85:03:b7:89:8f:45:2b:2f:b4:c8:9f:2a: 59:77:3e:3e:1b:7a:b7:04:19:4b:da:69:f4:a9:48: 5a:c4:58:04:c4:fb:64:56:3a:3c:5a:95:80:76:24: 1f:21:5a:91:c7:bc:9c:f0:b2:3e:7a:59:c0:58:51: 2a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E1:13:AB:A6:AA:A2:A0:60:42:9D:A9:72:7F:02:43:48:8C:8E:80 X509v3 Authority Key Identifier: keyid:56:46:CD:4E:C3:47:19:AE:E7:24:3F:F1:E2:B7:9C:10:0E:9E:AB:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/4/5646CD4EC34719AEE7243FF1E2B79C100E9EAB53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5646CD4EC34719AEE7243FF1E2B79C100E9EAB53.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/4/5646CD4EC34719AEE7243FF1E2B79C100E9EAB53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:b6:82:3a:8c:a9:c6:db:c2:a5:6f:c1:fe:de:71:ef:f1:76: b6:80:2a:d7:36:c9:d6:b8:5f:7b:c2:0f:2b:49:40:f3:f1:3c: bd:0b:26:e4:d7:7b:3b:70:9a:7c:fa:d1:39:5a:58:f3:53:54: 6f:4d:eb:1c:fa:71:02:94:ed:cc:2c:f1:d1:0f:a7:0f:d2:4d: d2:50:22:92:0d:1d:ba:de:c3:fd:c9:ea:27:9b:f4:4d:4c:ac: 4c:a5:31:e1:0a:de:1e:42:cf:3c:3a:50:6f:51:e2:1c:b4:bf: c4:95:b8:4d:50:10:10:73:8b:8c:af:af:55:2f:56:ff:08:80: 24:89:43:97:1e:d2:b8:56:d5:4c:8a:6a:2b:db:b3:80:5c:3f: b1:78:bf:a3:a5:0c:53:26:d3:ec:11:07:21:e4:24:a4:73:c0: 86:7f:70:a6:a7:0e:86:00:90:bb:0b:e7:62:5b:9f:c6:a0:5d: 83:fd:61:5e:7c:74:84:bc:7d:de:52:d5:7f:0d:63:a1:e5:a7: 2e:c5:75:75:4e:ed:cf:ee:b0:39:cc:2d:ca:b1:d8:ef:53:cb: 99:23:05:c5:18:f4:e1:92:6a:a2:f3:9f:bb:b4:47:89:df:a2: 23:8c:2d:a5:e5:a3:7e:03:0c:9e:80:a9:b7:ee:3b:7e:9e:43: fa:85:72:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGb0Rt2paWWI0J1dHfn9Wh2MV85kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY0NkNENEVDMzQ3MTlBRUU3MjQzRkYxRTJCNzlDMTAw RTlFQUI1MzAeFw0yNTEwMTkyMDU1NTBaFw0yNTEwMjAyMjM3NTBaMDMxMTAvBgNV BAMTKEY0RTExM0FCQTZBQUEyQTA2MDQyOURBOTcyN0YwMjQzNDg4QzhFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwyHQiD9Lxrp2WmfWJ7Hled9wT zW8MHSSsprguQHFNWrjKT4GNO7SahfhDocFwjNwXypGNEQMCWK0Yp6nWORkZ50aQ rByHKcgYTINiBX6+BjJ8djFjVprwQ6ZSIOY3zXKv74xUuglPDGfXXBaQZsHCA8P5 M/+Go7PJvYZOb/jGUxPF6Cw9BUn2ZPnicQbuN4R/5DE0Q/qkd4oKqMWrfIEQt5y5 b6xJ6DBj3DBhzDhkJ39d0omeSNsnioqb4uMaugVWaUxMu4UDt4mPRSsvtMifKll3 Pj4bercEGUvaafSpSFrEWATE+2RWOjxalYB2JB8hWpHHvJzwsj56WcBYUSq1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9OETq6aqoqBgQp2pcn8CQ0iMjoAwHwYDVR0j BBgwFoAUVkbNTsNHGa7nJD/x4recEA6eq1MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40 bVkvNC81NjQ2Q0Q0RUMzNDcxOUFFRTcyNDNGRjFFMkI3OUMxMDBFOUVBQjUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2NDZDRDRFQzM0NzE5QUVF NzI0M0ZGMUUyQjc5QzEwMEU5RUFCNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40bVkvNC81 NjQ2Q0Q0RUMzNDcxOUFFRTcyNDNGRjFFMkI3OUMxMDBFOUVBQjUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmbaCOoypxtvCpW/B/t5x7/F2toAq1zbJ1rhfe8IPK0lA8/E8vQsm5Nd7O3Ca fPrROVpY81NUb03rHPpxApTtzCzx0Q+nD9JN0lAikg0dut7D/cnqJ5v0TUysTKUx 4QreHkLPPDpQb1HiHLS/xJW4TVAQEHOLjK+vVS9W/wiAJIlDlx7SuFbVTIpqK9uz gFw/sXi/o6UMUybT7BEHIeQkpHPAhn9wpqcOhgCQuwvnYlufxqBdg/1hXnx0hLx9 3lLVfw1joeWnLsV1dU7tz+6wOcwtyrHY71PLmSMFxRj04ZJqovOfu7RHid+iI4wt peWjfgMMnoCpt+47fp5D+oVyfw== -----END CERTIFICATE-----Generated at Mon Oct 20 09:09:15 2025 by rpki-client