$ rpki-client -vvf rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft File: CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft (raw, json) Hash identifier: 94CdxLXqQyeUqH1HjU9TzEKwh/7BwAeEaDpUw/RLBwo= Subject key identifier: E4:72:00:71:DF:99:02:35:52:C6:25:7D:9D:B5:7B:68:1E:F2:9F:2F Authority key identifier: CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4 Certificate issuer: /CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4 Certificate serial: 0AB92A548593B6689D0FC0044762BC4BD04CE9EE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft Manifest number: 02EF Signing time: Mon 20 Oct 2025 13:23:57 +0000 Manifest this update: Mon 20 Oct 2025 13:18:57 +0000 Manifest next update: Tue 21 Oct 2025 15:22:57 +0000 Files and hashes: 1: 323830343a346262303a3a2f33322d3438203d3e20323637333234.roa (hash: VJdH/xHpD6ecg3kwn9yL7bslKKlhAKJoZBYlUI+LMxk=) 2: CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl (hash: dInFF4sTUQXF4OIpVWNnqPtYuS7OZKhtGrU8ntMky64=) 3: 34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa (hash: Bhu/eGNOOWFc2ep8aUehLXvNs4ymREZ2pdLGTh+BKL4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 15:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b9:2a:54:85:93:b6:68:9d:0f:c0:04:47:62:bc:4b:d0:4c:e9:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4 Validity Not Before: Oct 20 13:18:57 2025 GMT Not After : Oct 21 15:22:57 2025 GMT Subject: CN=E4720071DF99023552C6257D9DB57B681EF29F2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cb:28:0f:a8:57:de:29:34:8a:16:c8:79:a9: 03:b3:9c:16:c0:bf:89:ed:76:06:d4:ab:12:ca:63: 30:ad:9a:26:48:97:1e:40:d0:77:74:1b:7b:be:f6: ab:8d:33:eb:8d:c5:30:66:a9:7a:fc:31:21:2e:cf: 62:5f:39:96:1d:8f:a7:58:58:f7:6b:52:e2:7a:e9: 2b:ff:f7:ae:bb:af:52:3d:9c:ce:5a:bf:86:d6:76: 8c:dc:87:45:d8:1e:4a:a8:1e:c2:69:ec:50:f0:2d: 4a:99:04:18:a3:86:25:ec:7c:8a:9c:e6:83:9c:72: 72:bd:10:2a:6f:ff:11:78:f0:82:dd:17:74:4f:2e: 41:fc:fe:d9:a1:46:41:00:47:40:57:ef:47:02:25: 25:12:3b:0a:d8:66:a3:d3:ea:df:c3:e9:00:18:fc: 17:c0:ea:89:e6:85:c5:04:40:4b:07:42:3d:8f:86: 77:52:62:b9:c1:2f:9b:f7:63:2a:9e:fc:87:5e:75: 5c:c6:3c:0c:ad:25:1d:5c:b2:9f:bd:34:8e:fe:3f: 8a:d5:14:2f:a9:2d:fc:57:f5:1e:ca:54:b0:38:9a: 63:9a:0b:67:08:f9:3e:83:fb:ce:48:1b:ce:66:ee: 36:05:d4:3f:de:fb:78:3d:df:c3:56:3b:dd:5f:3e: 45:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:72:00:71:DF:99:02:35:52:C6:25:7D:9D:B5:7B:68:1E:F2:9F:2F X509v3 Authority Key Identifier: keyid:CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:85:52:70:73:02:da:3c:cd:5b:7e:bf:2b:18:79:b7:e2:6f: e4:59:f4:ac:35:c2:14:84:82:00:e1:75:9d:cc:24:74:a3:59: e6:73:86:54:d0:79:b3:89:be:de:58:9f:70:7c:e3:2a:c6:2e: 31:fe:53:d1:2c:95:e4:51:f0:48:a2:4b:0d:d4:90:06:5e:ed: 39:b7:67:6f:f5:d7:16:7e:83:f3:c5:12:47:55:ca:6f:80:ea: 67:79:e9:41:52:45:a0:18:78:d4:b9:c0:f4:19:c9:6b:9f:81: 92:45:7e:f3:b4:17:14:b7:08:0c:13:e9:48:73:23:48:7c:99: fd:91:5a:98:1f:40:47:69:cb:25:7e:6b:2f:a7:72:7f:87:71: 38:7e:fe:d1:5f:73:54:bb:c9:69:b2:29:ea:3f:8a:ad:59:16: bb:cd:33:b3:2f:99:c2:1a:2c:15:ba:a0:dc:43:f5:9e:cd:24: 49:be:bb:b2:22:16:16:93:dd:79:5b:57:79:79:f1:ca:ad:3f: a0:dc:0a:38:75:6f:19:c5:61:62:77:40:5e:af:d6:c5:2d:93: a4:72:01:9c:e0:41:93:37:8b:f3:9e:4a:a4:dd:41:c8:53:00: 8f:3b:8a:55:91:ae:36:63:12:d8:d6:d4:ae:9c:1f:b1:ac:e2: a7:58:27:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCrkqVIWTtmidD8AER2K8S9BM6e4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODE4MjVBNzVGM0RGM0IwMzNEMzU0NEY4ODI2NDg4 RjNGQThBNDAeFw0yNTEwMjAxMzE4NTdaFw0yNTEwMjExNTIyNTdaMDMxMTAvBgNV BAMTKEU0NzIwMDcxREY5OTAyMzU1MkM2MjU3RDlEQjU3QjY4MUVGMjlGMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKyygPqFfeKTSKFsh5qQOznBbA v4ntdgbUqxLKYzCtmiZIlx5A0Hd0G3u+9quNM+uNxTBmqXr8MSEuz2JfOZYdj6dY WPdrUuJ66Sv/9667r1I9nM5av4bWdozch0XYHkqoHsJp7FDwLUqZBBijhiXsfIqc 5oOccnK9ECpv/xF48ILdF3RPLkH8/tmhRkEAR0BX70cCJSUSOwrYZqPT6t/D6QAY /BfA6onmhcUEQEsHQj2PhndSYrnBL5v3Yyqe/IdedVzGPAytJR1csp+9NI7+P4rV FC+pLfxX9R7KVLA4mmOaC2cI+T6D+85IG85m7jYF1D/e+3g938NWO91fPkU9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5HIAcd+ZAjVSxiV9nbV7aB7yny8wHwYDVR0j BBgwFoAUzWgYJadfPfOwM9NUT4gmSI8/qKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDR5cExVd2Uya3ZubWpnWFluTlpEeUQyUzNKYzZRc3lnb1RhQThNUkw5 aW4vMS9DRDY4MTgyNUE3NUYzREYzQjAzM0QzNTQ0Rjg4MjY0ODhGM0ZBOEE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NENjgxODI1QTc1RjNERjNC MDMzRDM1NDRGODgyNjQ4OEYzRkE4QTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDR5cExVd2Uya3ZubWpnWFluTlpEeUQyUzNKYzZRc3lnb1RhQThNUkw5aW4vMS9D RDY4MTgyNUE3NUYzREYzQjAzM0QzNTQ0Rjg4MjY0ODhGM0ZBOEE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAToVScHMC2jzNW36/Kxh5t+Jv5Fn0rDXCFISCAOF1ncwkdKNZ5nOGVNB5s4m+ 3lifcHzjKsYuMf5T0SyV5FHwSKJLDdSQBl7tObdnb/XXFn6D88USR1XKb4DqZ3np QVJFoBh41LnA9BnJa5+BkkV+87QXFLcIDBPpSHMjSHyZ/ZFamB9AR2nLJX5rL6dy f4dxOH7+0V9zVLvJabIp6j+KrVkWu80zsy+ZwhosFbqg3EP1ns0kSb67siIWFpPd eVtXeXnxyq0/oNwKOHVvGcVhYndAXq/WxS2TpHIBnOBBkzeL855KpN1ByFMAjzuK VZGuNmMS2NbUrpwfsazip1gnGA== -----END CERTIFICATE-----Generated at Mon Oct 20 18:38:20 2025 by rpki-client