$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft File: CDB34CF4AFC01721153990AE1A10D922F7507546.mft (raw, json) Hash identifier: unLnQVj0PTyjndFmnLYdEoEMqLuP68cHRPZum03sAEE= Subject key identifier: 91:06:4B:61:30:EB:E2:84:45:CD:29:80:C5:87:B8:5E:A2:47:9C:D4 Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 Certificate issuer: /CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Certificate serial: 3D3F32E07EF8B85E817708F7B0A4922EB0D6F1CC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject info access: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft Manifest number: 0307 Signing time: Mon 03 Nov 2025 14:50:43 +0000 Manifest this update: Mon 03 Nov 2025 14:45:43 +0000 Manifest next update: Tue 04 Nov 2025 18:05:43 +0000 Files and hashes: 1: 3137302e38302e3233362e302f32322d3332203d3e20323634393030.roa (hash: A0IVZ0fDUe0zEY9+FBEhJi/Xpb3DJbrzWBmqTSyfkPo=) 2: 3136382e3232382e382e302f32322d3332203d3e20323634393030.roa (hash: iNkzV1rmrEjxTbsK7Aw/bkJX4Qyoo7gBNI4P1PI2lhY=) 3: 323830343a326639343a3a2f33322d3438203d3e20323634393030.roa (hash: vhvxSeJd+tzRkEzkUqJfnoWG2u32D84RmUUxjVexbJA=) 4: CDB34CF4AFC01721153990AE1A10D922F7507546.crl (hash: GBqDMd+aUHhky+kDWnX4RwYEUOZ4VABUdpwRBGmsSSY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 18:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:3f:32:e0:7e:f8:b8:5e:81:77:08:f7:b0:a4:92:2e:b0:d6:f1:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Validity Not Before: Nov 3 14:45:43 2025 GMT Not After : Nov 4 18:05:43 2025 GMT Subject: CN=91064B6130EBE28445CD2980C587B85EA2479CD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:44:d9:5e:67:18:64:83:bb:cf:fb:45:4b: 9c:eb:a2:2f:82:65:a3:31:02:48:7a:c9:16:02:95: 76:92:8b:17:b3:e9:2d:82:6f:6c:31:55:cc:fb:a4: e6:b6:4c:7b:4c:44:26:b8:b2:cb:51:9e:77:ba:6b: 40:da:3c:0b:71:5f:43:fd:a5:29:db:be:72:f2:8d: 6c:23:38:4e:6b:a4:7e:36:9f:d4:41:e3:4e:6a:7b: cc:eb:31:00:cb:20:c8:5c:99:b9:71:15:25:e4:07: e0:54:27:3c:55:ee:d3:f7:dc:60:d1:8b:4e:81:35: 95:58:7e:b3:f9:45:15:8b:b0:14:1d:53:ce:41:59: f9:cd:57:c8:1f:1a:8f:92:68:6a:92:84:1a:72:73: 3c:6d:bd:c1:5e:8f:e6:23:ba:8c:78:19:87:18:fa: 0e:a9:73:29:fb:db:41:06:3c:57:c0:4a:c0:79:a8: 78:9c:37:51:20:0c:10:a0:c1:35:53:8b:52:8c:43: ee:8f:3e:0f:cf:cb:d1:e8:66:7e:b8:ad:f2:67:d3: 7a:0f:81:fc:e6:53:16:2f:cf:37:3b:78:e9:c7:64: f3:d7:39:5a:c1:db:07:2c:51:5c:25:48:f5:5b:25: 58:7d:4c:6f:50:97:08:ce:05:d9:2f:24:df:9e:a9: fd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:06:4B:61:30:EB:E2:84:45:CD:29:80:C5:87:B8:5E:A2:47:9C:D4 X509v3 Authority Key Identifier: keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:8d:36:3b:eb:c9:a6:d4:fb:88:50:0a:cd:a2:c4:41:a8:fb: 7b:5e:f7:45:07:00:f5:14:a6:44:5e:3a:fd:88:d0:d4:e2:8b: e4:e1:ec:a0:61:91:a3:05:61:91:16:1c:f2:81:b2:6a:fe:c9: 8e:99:bf:a5:06:cd:24:81:5d:03:4d:5f:94:96:b8:93:40:eb: 12:64:05:b0:a6:93:83:da:fa:d1:d2:4d:2e:1f:8f:a6:77:bf: 38:b1:40:c7:e9:59:9d:d5:00:50:9d:6c:b6:8d:f8:da:73:c2: 84:dd:64:4e:f3:1e:20:f9:95:e1:02:e9:2d:0f:4f:8a:2a:bd: 2b:68:f7:51:f3:17:25:86:9a:d4:10:a3:ca:ea:bb:2d:40:fe: 04:6c:0f:57:8e:5f:dd:7d:b7:c3:2a:1d:ea:06:72:69:05:b8: 24:3b:1e:6d:ae:a2:8e:7d:9e:65:fa:73:87:67:ab:f4:00:b2: 83:af:67:ea:8d:b2:32:2b:80:be:0f:cf:7b:48:59:93:21:20: dd:1e:c8:db:be:98:0a:fc:ed:32:43:7f:a4:cb:92:06:f9:04: 11:7c:6f:76:11:56:f4:40:91:4f:8d:ef:c2:d7:b0:44:79:2e: 61:37:e8:d1:e1:e4:6c:4b:11:ac:90:bc:b9:f3:9e:f9:9c:c4: aa:99:ee:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPT8y4H74uF6Bdwj3sKSSLrDW8cwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCMzRDRjRBRkMwMTcyMTE1Mzk5MEFFMUExMEQ5MjJG NzUwNzU0NjAeFw0yNTExMDMxNDQ1NDNaFw0yNTExMDQxODA1NDNaMDMxMTAvBgNV BAMTKDkxMDY0QjYxMzBFQkUyODQ0NUNEMjk4MEM1ODdCODVFQTI0NzlDRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOETZXmcYZIO7z/tFS5zroi+C ZaMxAkh6yRYClXaSixez6S2Cb2wxVcz7pOa2THtMRCa4sstRnne6a0DaPAtxX0P9 pSnbvnLyjWwjOE5rpH42n9RB405qe8zrMQDLIMhcmblxFSXkB+BUJzxV7tP33GDR i06BNZVYfrP5RRWLsBQdU85BWfnNV8gfGo+SaGqShBpyczxtvcFej+Yjuox4GYcY +g6pcyn720EGPFfASsB5qHicN1EgDBCgwTVTi1KMQ+6PPg/Py9HoZn64rfJn03oP gfzmUxYvzzc7eOnHZPPXOVrB2wcsUVwlSPVbJVh9TG9QlwjOBdkvJN+eqf0LAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkQZLYTDr4oRFzSmAxYe4XqJHnNQwHwYDVR0j BBgwFoAUzbNM9K/AFyEVOZCuGhDZIvdQdUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhU RnEvMC9DREIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQjM0Q0Y0QUZDMDE3MjEx NTM5OTBBRTFBMTBEOTIyRjc1MDc1NDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhURnEvMC9D REIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ402O+vJptT7iFAKzaLEQaj7e173RQcA9RSmRF46/YjQ1OKL5OHsoGGRowVh kRYc8oGyav7Jjpm/pQbNJIFdA01flJa4k0DrEmQFsKaTg9r60dJNLh+Ppne/OLFA x+lZndUAUJ1sto342nPChN1kTvMeIPmV4QLpLQ9Piiq9K2j3UfMXJYaa1BCjyuq7 LUD+BGwPV45f3X23wyod6gZyaQW4JDseba6ijn2eZfpzh2er9ACyg69n6o2yMiuA vg/Pe0hZkyEg3R7I276YCvztMkN/pMuSBvkEEXxvdhFW9ECRT43vwtewRHkuYTfo 0eHkbEsRrJC8ufOe+ZzEqpnuKQ== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:20 2025 by rpki-client