$ rpki-client -vvf rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft File: CDB4502328A17F5E10125CA4554E967C912340D3.mft (raw, json) Hash identifier: dQUrQ5KQ9StCf8GIgqmfEQ8mfx92b22LaB5L49RXDrQ= Subject key identifier: A4:8D:DD:12:01:EB:AC:A6:06:8E:8F:93:EB:5D:8C:40:DE:A1:70:A8 Authority key identifier: CD:B4:50:23:28:A1:7F:5E:10:12:5C:A4:55:4E:96:7C:91:23:40:D3 Certificate issuer: /CN=CDB4502328A17F5E10125CA4554E967C912340D3 Certificate serial: 6DC8F9B069DEE5FC59A99FE17047380084CEF687 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB4502328A17F5E10125CA4554E967C912340D3.cer Subject info access: rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft Manifest number: 3D Signing time: Sun 19 Oct 2025 22:10:17 +0000 Manifest this update: Sun 19 Oct 2025 22:05:17 +0000 Manifest next update: Tue 21 Oct 2025 00:44:17 +0000 Files and hashes: 1: CDB4502328A17F5E10125CA4554E967C912340D3.crl (hash: E8oxjLtOjrThcXROoTD84evjmfpQrv0hbS356UhNkuc=) 2: 323830343a393536343a3a2f33322d313238203d3e20323734353230.roa (hash: ERlKqTm+47mLiWypT+aX8LH7xhbod7WTHoUYvN7TwbY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.crl rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB4502328A17F5E10125CA4554E967C912340D3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 00:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c8:f9:b0:69:de:e5:fc:59:a9:9f:e1:70:47:38:00:84:ce:f6:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDB4502328A17F5E10125CA4554E967C912340D3 Validity Not Before: Oct 19 22:05:17 2025 GMT Not After : Oct 21 00:44:17 2025 GMT Subject: CN=A48DDD1201EBACA6068E8F93EB5D8C40DEA170A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:65:6f:ca:83:f4:61:e4:79:8d:69:51:eb:27: bd:3d:95:4b:9e:00:63:e0:a4:16:08:cd:1c:08:8a: bf:20:0a:4d:bb:1b:07:99:06:b7:c4:3a:e6:10:8f: 24:d8:5e:ae:2c:a8:ca:1a:2c:e6:3a:b9:13:a3:ba: a8:6a:ea:71:3d:d5:1e:7f:6d:b3:2c:88:c6:a6:79: 7d:17:37:9c:f5:36:ae:56:d8:d2:bc:13:4a:2a:64: f4:a3:79:91:55:6b:e1:55:f6:02:80:4d:7b:9a:e6: 68:8e:c2:41:a0:66:fd:6c:84:ba:5a:61:8b:c4:76: 5e:fe:6b:48:e7:d3:20:32:f8:73:30:02:14:8c:9c: d5:b9:fb:0b:1b:a6:f8:b2:3d:92:e5:b4:c2:01:de: 7d:a7:f4:49:8e:85:77:c5:e7:82:55:32:81:e7:78: df:98:7d:be:2c:d7:8d:45:8d:e2:a5:ed:39:0e:c7: 6d:e4:5e:d9:33:a0:e2:be:d0:eb:96:be:2c:6f:5a: c0:d7:14:c3:45:10:b8:44:6a:40:97:02:1d:48:30: e4:18:35:d1:3b:a3:7a:67:16:c9:05:bc:7a:01:fd: 6c:28:4f:fa:76:ac:ef:72:8d:c7:e5:90:03:11:ac: 10:fa:c3:56:19:50:78:2d:bf:67:a4:9f:fe:51:7b: ea:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8D:DD:12:01:EB:AC:A6:06:8E:8F:93:EB:5D:8C:40:DE:A1:70:A8 X509v3 Authority Key Identifier: keyid:CD:B4:50:23:28:A1:7F:5E:10:12:5C:A4:55:4E:96:7C:91:23:40:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB4502328A17F5E10125CA4554E967C912340D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e6:70:a4:8e:c9:85:47:de:ea:cc:b5:dc:79:a6:e2:ed:a7: ae:7e:e9:28:62:3d:48:ef:b2:9e:2f:4f:1e:0d:cf:f1:da:0e: 87:16:dc:89:71:dc:5c:df:bb:b1:69:04:b1:a4:3c:88:c1:60: 19:90:6a:f9:8b:ab:51:05:4e:21:26:f3:b7:3d:87:c4:fd:24: b5:de:d3:c4:84:20:7c:55:cb:11:5c:75:6c:50:19:66:2d:e1: 8a:6e:ad:e3:64:af:cb:92:6b:18:b7:3e:d5:c2:b4:08:06:1b: 9c:d5:b4:ca:b1:3b:63:b1:08:2f:a6:3c:3e:f5:8f:8d:45:01: 3e:0f:17:c6:99:3f:79:51:a6:8e:15:ed:9b:24:fd:4a:05:1b: 63:dc:72:ca:25:4b:e2:9e:28:74:8e:6d:e1:e6:e4:73:90:b1: 16:18:ab:af:05:ef:1a:3c:af:ee:d1:78:b0:53:b8:c3:ec:4b: f9:53:9f:6c:34:94:d1:60:46:77:4b:c6:3c:b3:31:02:6c:4d: 7c:37:a0:4f:64:ad:dc:73:f7:50:f9:fc:52:28:a1:b7:b5:09: e4:66:de:8d:ef:b0:67:3c:0e:79:4f:f6:9b:b1:eb:6f:46:80: c8:cc:2a:f8:53:e5:d9:3a:54:ba:0a:be:97:55:bb:44:bb:6d: 5c:2c:15:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbcj5sGne5fxZqZ/hcEc4AITO9ocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCNDUwMjMyOEExN0Y1RTEwMTI1Q0E0NTU0RTk2N0M5 MTIzNDBEMzAeFw0yNTEwMTkyMjA1MTdaFw0yNTEwMjEwMDQ0MTdaMDMxMTAvBgNV BAMTKEE0OERERDEyMDFFQkFDQTYwNjhFOEY5M0VCNUQ4QzQwREVBMTcwQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwZW/Kg/Rh5HmNaVHrJ709lUue AGPgpBYIzRwIir8gCk27GweZBrfEOuYQjyTYXq4sqMoaLOY6uROjuqhq6nE91R5/ bbMsiMameX0XN5z1Nq5W2NK8E0oqZPSjeZFVa+FV9gKATXua5miOwkGgZv1shLpa YYvEdl7+a0jn0yAy+HMwAhSMnNW5+wsbpviyPZLltMIB3n2n9EmOhXfF54JVMoHn eN+Yfb4s141FjeKl7TkOx23kXtkzoOK+0OuWvixvWsDXFMNFELhEakCXAh1IMOQY NdE7o3pnFskFvHoB/WwoT/p2rO9yjcflkAMRrBD6w1YZUHgtv2ekn/5Re+r/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpI3dEgHrrKYGjo+T612MQN6hcKgwHwYDVR0j BBgwFoAUzbRQIyihf14QElykVU6WfJEjQNMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRndUVlRwR3plMUVvRFlSRVhTb044UVlURmdmSGtZaDRzaG9Cb1drMTJH d2YvMC9DREI0NTAyMzI4QTE3RjVFMTAxMjVDQTQ1NTRFOTY3QzkxMjM0MEQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQjQ1MDIzMjhBMTdGNUUx MDEyNUNBNDU1NEU5NjdDOTEyMzQwRDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RndUVlRwR3plMUVvRFlSRVhTb044UVlURmdmSGtZaDRzaG9Cb1drMTJHd2YvMC9D REI0NTAyMzI4QTE3RjVFMTAxMjVDQTQ1NTRFOTY3QzkxMjM0MEQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqOZwpI7JhUfe6sy13Hmm4u2nrn7pKGI9SO+yni9PHg3P8doOhxbciXHcXN+7 sWkEsaQ8iMFgGZBq+YurUQVOISbztz2HxP0ktd7TxIQgfFXLEVx1bFAZZi3him6t 42Svy5JrGLc+1cK0CAYbnNW0yrE7Y7EIL6Y8PvWPjUUBPg8Xxpk/eVGmjhXtmyT9 SgUbY9xyyiVL4p4odI5t4ebkc5CxFhirrwXvGjyv7tF4sFO4w+xL+VOfbDSU0WBG d0vGPLMxAmxNfDegT2St3HP3UPn8Uiiht7UJ5Gbeje+wZzwOeU/2m7Hrb0aAyMwq +FPl2TpUugq+l1W7RLttXCwVxg== -----END CERTIFICATE-----Generated at Mon Oct 20 09:17:37 2025 by rpki-client