$ rpki-client -vvf rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft File: CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft (raw, json) Hash identifier: k1/0olX4zhHhGdlZG7JJSAzd8+VpobxQc2Mecft+WYI= Subject key identifier: 28:31:A7:EE:1E:C7:13:0B:75:9F:53:54:64:3B:E0:50:E3:E6:52:9B Authority key identifier: CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF Certificate issuer: /CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF Certificate serial: 353BFC9E8A3D9A4CCFA93066B0426307C33CF4C6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer Subject info access: rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft Manifest number: 022D Signing time: Tue 04 Nov 2025 14:04:39 +0000 Manifest this update: Tue 04 Nov 2025 13:59:39 +0000 Manifest next update: Wed 05 Nov 2025 15:15:39 +0000 Files and hashes: 1: CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl (hash: d0eVpFfXrcQXECJpToHVk5YF4noiFyF3O0rO04+alSQ=) 2: 3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa (hash: qR6iS5F06BWnuM8HyC9ItrpXDfvJvjlt1MMd4yffj18=) 3: 323830343a366336633a3a2f33322d3438203d3e20323730343637.roa (hash: 8gZng/LcYVjRvdKcIWLphoxYezlVpCWANLcyK6msRE4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 15:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3b:fc:9e:8a:3d:9a:4c:cf:a9:30:66:b0:42:63:07:c3:3c:f4:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF Validity Not Before: Nov 4 13:59:39 2025 GMT Not After : Nov 5 15:15:39 2025 GMT Subject: CN=2831A7EE1EC7130B759F5354643BE050E3E6529B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:04:66:94:82:93:ee:07:4e:d6:65:99:9a:13: 04:b9:04:3f:ac:79:6e:b0:10:37:cd:20:d3:4d:fd: a4:70:a3:09:5a:f1:bf:1a:2b:31:77:62:71:2b:58: 15:61:6d:b1:ca:94:7c:25:d0:f6:28:32:bb:f3:4b: 27:ca:3b:42:7f:15:04:2d:9e:f2:11:03:cf:90:ec: 58:62:19:b8:1b:77:49:51:db:72:61:75:de:32:ac: 42:3c:74:42:f4:17:21:bf:93:7f:76:64:8f:9c:ba: a1:01:4d:b6:57:e8:e7:1c:cd:14:d0:75:58:09:be: 42:c2:78:44:8d:7f:e6:6c:90:d6:99:89:aa:fb:9f: 9b:2f:67:9a:96:13:19:73:75:be:c0:16:05:b4:21: c8:8f:10:10:0b:d8:77:18:a2:f5:93:96:91:6b:dd: 8c:07:b1:cf:d6:b3:8a:84:3a:91:a9:6f:f7:c6:17: c2:b1:c8:92:88:c0:b2:9b:9b:05:e2:d4:25:b4:8c: 02:f6:83:d7:8e:d7:ab:e6:0d:32:10:ac:5a:9c:be: 10:da:70:d4:18:43:cb:50:5c:d2:19:ed:f3:f2:43: a1:c0:e5:60:bd:26:60:a6:52:cf:14:1e:f2:8e:fd: 36:73:a4:3a:2d:fc:69:2c:35:c2:af:1d:18:86:e6: ea:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:31:A7:EE:1E:C7:13:0B:75:9F:53:54:64:3B:E0:50:E3:E6:52:9B X509v3 Authority Key Identifier: keyid:CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:6e:cb:80:cb:cb:bf:42:0e:50:42:38:1a:77:1d:d1:f1:17: 52:60:f7:26:18:6e:88:21:ed:54:3f:a6:e3:79:70:ba:98:a2: b2:30:76:75:21:13:1b:87:14:c8:9e:81:6f:de:98:99:74:9d: 33:70:09:b8:d1:25:d2:1d:a8:ba:33:c3:b8:4c:02:71:d1:1c: 65:cf:a5:3d:0a:05:cd:1d:38:5e:b0:38:79:fd:b6:e3:cb:5d: 5e:c4:e5:1d:76:b4:96:92:7e:5e:a1:b1:76:a0:2e:55:0e:12: da:94:ad:98:00:30:31:d2:d6:5a:ce:04:fd:5c:9d:a9:41:3b: d7:62:79:d4:d6:01:e1:dc:a8:6b:33:9a:af:e8:c8:26:cc:a9: 69:12:be:17:aa:08:26:76:71:af:1f:48:56:20:61:dc:eb:fa: 62:a9:4f:64:cb:6c:d6:96:7e:b2:a2:0e:4a:76:1c:92:d0:d5: 87:f4:d4:82:31:98:3e:7c:a4:26:73:e5:63:2b:f7:8f:ec:07: 1d:ce:cd:24:14:89:de:19:70:28:17:44:95:4b:85:01:e4:1a: 03:2b:d7:63:0a:02:e8:aa:a8:95:25:03:2c:05:ef:bb:7e:35: 4b:cd:ce:82:04:9e:36:20:f4:c6:f3:64:c6:80:75:48:a6:b2: ba:7c:74:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNTv8noo9mkzPqTBmsEJjB8M89MYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGNTIwNEI0MTE2OUNCQkYyRjY4QTUwMEUwMzZGQkE2 QzNDM0JFRjAeFw0yNTExMDQxMzU5MzlaFw0yNTExMDUxNTE1MzlaMDMxMTAvBgNV BAMTKDI4MzFBN0VFMUVDNzEzMEI3NTlGNTM1NDY0M0JFMDUwRTNFNjUyOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBGaUgpPuB07WZZmaEwS5BD+s eW6wEDfNINNN/aRwowla8b8aKzF3YnErWBVhbbHKlHwl0PYoMrvzSyfKO0J/FQQt nvIRA8+Q7FhiGbgbd0lR23Jhdd4yrEI8dEL0FyG/k392ZI+cuqEBTbZX6OcczRTQ dVgJvkLCeESNf+ZskNaZiar7n5svZ5qWExlzdb7AFgW0IciPEBAL2HcYovWTlpFr 3YwHsc/Ws4qEOpGpb/fGF8KxyJKIwLKbmwXi1CW0jAL2g9eO16vmDTIQrFqcvhDa cNQYQ8tQXNIZ7fPyQ6HA5WC9JmCmUs8UHvKO/TZzpDot/GksNcKvHRiG5uoHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKDGn7h7HEwt1n1NUZDvgUOPmUpswHwYDVR0j BBgwFoAUyvUgS0EWnLvy9opQDgNvumw8O+8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDVnZGczakZpaWJzdjlIMnhqcjFVN3pkdkNYc3NHaGFnYmFSd3JIVzZK RTkvMC9DQUY1MjA0QjQxMTY5Q0JCRjJGNjhBNTAwRTAzNkZCQTZDM0MzQkVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRjUyMDRCNDExNjlDQkJG MkY2OEE1MDBFMDM2RkJBNkMzQzNCRUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NDVnZGczakZpaWJzdjlIMnhqcjFVN3pkdkNYc3NHaGFnYmFSd3JIVzZKRTkvMC9D QUY1MjA0QjQxMTY5Q0JCRjJGNjhBNTAwRTAzNkZCQTZDM0MzQkVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAom7LgMvLv0IOUEI4Gncd0fEXUmD3JhhuiCHtVD+m43lwupiisjB2dSETG4cU yJ6Bb96YmXSdM3AJuNEl0h2oujPDuEwCcdEcZc+lPQoFzR04XrA4ef2248tdXsTl HXa0lpJ+XqGxdqAuVQ4S2pStmAAwMdLWWs4E/VydqUE712J51NYB4dyoazOar+jI JsypaRK+F6oIJnZxrx9IViBh3Ov6YqlPZMts1pZ+sqIOSnYcktDVh/TUgjGYPnyk JnPlYyv3j+wHHc7NJBSJ3hlwKBdElUuFAeQaAyvXYwoC6KqolSUDLAXvu341S83O ggSeNiD0xvNkxoB1SKayunx0Hg== -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:09 2025 by rpki-client