$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft File: CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft (raw, json) Hash identifier: 2pRG/h5XDHIPoSmb0DZResoXFyoMZUfxTYMVS80OEtg= Subject key identifier: 27:CB:B1:B2:DA:F1:2A:1E:7C:08:3A:64:0F:FA:8E:C4:AF:AD:BC:92 Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6 Certificate issuer: /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6 Certificate serial: 77217DEC67321BB67B1A1D4948906EA40F4158 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer Subject info access: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft Manifest number: 0306 Signing time: Mon 20 Oct 2025 20:30:24 +0000 Manifest this update: Mon 20 Oct 2025 20:25:24 +0000 Manifest next update: Tue 21 Oct 2025 21:49:24 +0000 Files and hashes: 1: CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl (hash: D4Abk+Z9YxSUq4dxWbIjk+tY61pJAHTue7JsciVL2cE=) 2: 3139312e33372e302e302f32332d3332203d3e20323633333436.roa (hash: dk4B0gt3xtrzpqeQPsPPmX3X8Bi3YSdbr9PQbjrctok=) 3: 323830343a313462383a3a2f33322d3438203d3e20323633333436.roa (hash: 2zUdDQoZI7lf2QCIRFGO2DVEseSLfvIofWeRJppw+oo=) 4: 3139312e33372e342e302f32332d3332203d3e20323633333436.roa (hash: JBgbUMOSfuDRal8tFPKZ1hnVKHMRHXaPlhWoUlyXRt0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 21:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:21:7d:ec:67:32:1b:b6:7b:1a:1d:49:48:90:6e:a4:0f:41:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6 Validity Not Before: Oct 20 20:25:24 2025 GMT Not After : Oct 21 21:49:24 2025 GMT Subject: CN=27CBB1B2DAF12A1E7C083A640FFA8EC4AFADBC92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:24:e6:af:72:95:84:f1:d9:4b:4d:17:52:06: 22:db:e4:06:78:e2:54:75:3d:df:9b:12:4c:d6:06: 54:1b:8e:12:ac:94:6b:f2:a9:20:f6:90:fd:f8:ca: 64:4b:a7:61:0c:76:c7:b9:58:89:94:4c:3b:17:a2: 1b:16:6f:a3:50:9e:0b:0d:0c:35:f7:72:bd:9b:3c: da:5b:d4:cd:ce:61:62:13:39:33:20:99:7a:0a:a7: 3f:26:df:cc:75:86:78:9e:98:09:35:c5:b8:97:9e: 67:d5:9c:df:d0:7c:02:5b:09:ef:3c:50:65:02:59: f3:6f:25:20:07:fd:70:7c:87:17:3f:c6:fe:a6:fd: 61:25:b5:1c:2f:2d:fb:9d:66:4b:fd:2d:cc:f3:e3: cb:cc:9b:e6:bf:1b:20:2a:bf:0a:ec:1b:83:79:d2: 13:fd:b0:3c:01:33:86:c1:14:69:c2:c8:1c:b8:e7: 61:29:e2:e7:e5:a7:de:38:03:a2:1b:cd:70:68:74: 20:e0:aa:a8:7d:29:63:43:b7:ed:86:73:eb:68:ed: 59:6e:9d:3d:f9:74:06:c6:01:bb:bb:d2:ba:98:86: 55:8e:47:ea:03:39:78:34:f5:dd:46:b8:a1:e4:f8: a3:55:74:f0:78:6e:84:7b:12:0c:3b:55:0a:c5:fe: e4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CB:B1:B2:DA:F1:2A:1E:7C:08:3A:64:0F:FA:8E:C4:AF:AD:BC:92 X509v3 Authority Key Identifier: keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:6c:65:33:b4:83:83:e0:2a:23:11:eb:d4:d0:82:12:05:41: 66:ce:69:a2:42:34:30:64:34:7f:3b:b1:ed:13:88:ca:d0:86: 40:49:32:1f:6e:9d:93:6c:11:69:91:8a:90:36:0b:8e:d8:cc: 42:2a:ba:fa:b5:62:d8:66:8b:0a:d6:5f:ab:63:40:59:82:81: 66:01:9d:8e:84:a7:11:7f:93:ac:0a:35:88:3b:e9:44:19:12: 18:27:cc:72:36:a2:44:14:95:2f:21:13:6a:98:05:fe:39:dc: cc:0e:ed:c8:40:c3:30:57:9d:20:9b:e1:f8:2f:8c:2e:1d:7a: c7:b7:e0:71:b5:a1:6a:21:c9:91:72:e6:e7:08:a2:d7:2e:41: 72:b5:48:55:c0:f6:4c:b5:d9:5a:d8:0b:67:43:9a:8b:c7:c7: 81:97:b7:e1:03:86:7e:58:9c:c9:58:49:bf:78:14:e1:72:76: fe:71:9a:65:31:57:5b:eb:53:42:62:ab:dc:4a:b1:5f:e7:20: 08:39:df:6d:70:11:38:df:7c:96:fa:66:fb:51:6c:36:3a:5a: cd:bb:68:a5:be:63:94:30:16:4e:cc:24:3c:27:41:fa:f2:68: 58:f5:e0:a5:ca:a0:b3:c4:54:73:aa:47:70:6a:8d:10:17:17: 60:d2:e0:91 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgITdyF97GcyG7Z7Gh1JSJBupA9BWDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDQTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZC QkJEQ0M2MB4XDTI1MTAyMDIwMjUyNFoXDTI1MTAyMTIxNDkyNFowMzExMC8GA1UE AxMoMjdDQkIxQjJEQUYxMkExRTdDMDgzQTY0MEZGQThFQzRBRkFEQkM5MjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANgk5q9ylYTx2UtNF1IGItvkBnji VHU935sSTNYGVBuOEqyUa/KpIPaQ/fjKZEunYQx2x7lYiZRMOxeiGxZvo1CeCw0M NfdyvZs82lvUzc5hYhM5MyCZegqnPybfzHWGeJ6YCTXFuJeeZ9Wc39B8AlsJ7zxQ ZQJZ828lIAf9cHyHFz/G/qb9YSW1HC8t+51mS/0tzPPjy8yb5r8bICq/Cuwbg3nS E/2wPAEzhsEUacLIHLjnYSni5+Wn3jgDohvNcGh0IOCqqH0pY0O37YZz62jtWW6d Pfl0BsYBu7vSupiGVY5H6gM5eDT13Ua4oeT4o1V08HhuhHsSDDtVCsX+5HUCAwEA AaOCAlkwggJVMB0GA1UdDgQWBBQny7Gy2vEqHnwIOmQP+o7Er628kjAfBgNVHSME GDAWgBTKhXkakmXog1LjgjYR5thNa7vcxjAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9DdW9WVTR6OTNaN1piNTlEelhjeGNYd2RTYWdSY0tWVkZTTmlHSHNaaTFr Si8wL0NBODU3OTFBOTI2NUU4ODM1MkUzODIzNjExRTZEODRENkJCQkRDQzYuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvQ0E4NTc5MUE5MjY1RTg4MzUy RTM4MjM2MTFFNkQ4NEQ2QkJCRENDNi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9D dW9WVTR6OTNaN1piNTlEelhjeGNYd2RTYWdSY0tWVkZTTmlHSHNaaTFrSi8wL0NB ODU3OTFBOTI2NUU4ODM1MkUzODIzNjExRTZEODRENkJCQkRDQzYubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAIbGUztIOD4CojEevU0IISBUFmzmmiQjQwZDR/O7HtE4jK0IZASTIfbp2TbBFp kYqQNguO2MxCKrr6tWLYZosK1l+rY0BZgoFmAZ2OhKcRf5OsCjWIO+lEGRIYJ8xy NqJEFJUvIRNqmAX+OdzMDu3IQMMwV50gm+H4L4wuHXrHt+BxtaFqIcmRcubnCKLX LkFytUhVwPZMtdla2AtnQ5qLx8eBl7fhA4Z+WJzJWEm/eBThcnb+cZplMVdb61NC YqvcSrFf5yAIOd9tcBE433yW+mb7UWw2OlrNu2ilvmOUMBZOzCQ8J0H68mhY9eCl yqCzxFRzqkdwao0QFxdg0uCR -----END CERTIFICATE-----Generated at Tue Oct 21 02:14:34 2025 by rpki-client