$ rpki-client -vvf rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft File: CA5EB04FC8DA601024E12F23EF139B499E69972D.mft (raw, json) Hash identifier: FHYPOy5ys2mxXeIvX5ZT2LAcCYjSlmsKY7cnO0TtmVQ= Subject key identifier: 44:B4:63:17:06:02:A5:95:37:37:C6:C7:F9:F1:E7:72:D2:C4:77:61 Authority key identifier: CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D Certificate issuer: /CN=CA5EB04FC8DA601024E12F23EF139B499E69972D Certificate serial: 628716FCCC22F355E86321C1F8F12444746AFA2D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer Subject info access: rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft Manifest number: 0303 Signing time: Sun 02 Nov 2025 20:28:01 +0000 Manifest this update: Sun 02 Nov 2025 20:23:01 +0000 Manifest next update: Mon 03 Nov 2025 23:42:01 +0000 Files and hashes: 1: CA5EB04FC8DA601024E12F23EF139B499E69972D.crl (hash: 9BGgczjjhYdjP5a50ckvc/GuOTXIStELmoLU69tRgn8=) 2: 3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa (hash: dl2xxNKmpGyFGlF7VUwUzm3hSJXtz/mVLOM/KbR/f88=) 3: 323830343a373634383a3a2f33322d3438203d3e20323731313031.roa (hash: 6V0YrvLeMIiLEZTlyxZrdu23I1DIkWgF0T9EpN6P57k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 23:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:87:16:fc:cc:22:f3:55:e8:63:21:c1:f8:f1:24:44:74:6a:fa:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA5EB04FC8DA601024E12F23EF139B499E69972D Validity Not Before: Nov 2 20:23:01 2025 GMT Not After : Nov 3 23:42:01 2025 GMT Subject: CN=44B463170602A5953737C6C7F9F1E772D2C47761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:aa:f8:b9:13:ed:6c:c2:f7:30:02:ce:30:44: e9:72:35:00:a8:25:fd:50:34:2b:6c:a9:71:66:fd: f8:b4:37:6c:22:aa:8a:eb:d8:ca:0f:ba:50:fd:23: 0e:47:10:95:d6:91:82:ef:fd:e9:99:d9:50:d2:77: 09:50:f9:95:da:84:7e:12:bc:55:02:9e:41:6c:a7: 7b:80:0e:3f:29:f6:4f:c4:41:04:61:a6:f5:da:cb: 55:63:c9:59:a6:a8:96:b8:84:63:c4:d1:02:b9:a5: 4b:ce:f4:f8:53:18:0c:72:61:69:26:d0:cc:25:38: 34:34:bd:b9:df:8c:68:a1:22:0d:d2:77:7e:c9:bb: d3:08:1c:3d:8d:3a:f8:bb:aa:1a:5f:c3:9b:6e:23: 32:2f:18:ba:a8:85:f8:18:77:49:f1:7e:e0:f3:2b: 08:e3:24:83:3c:66:82:bd:01:b3:3b:49:a7:54:fe: e9:17:f9:a7:05:8f:0c:77:e9:fc:fa:9a:84:5b:13: 87:dc:dc:38:cc:6d:ac:d3:fe:b8:90:82:c1:94:3c: b5:d5:32:46:dd:d8:c0:c2:a5:e2:1d:68:d8:ca:36: 98:c1:42:d9:92:fb:56:39:b9:95:5a:7c:27:1f:e2: f1:54:26:a5:a6:ee:d2:12:c7:93:e4:58:31:2f:3a: d4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B4:63:17:06:02:A5:95:37:37:C6:C7:F9:F1:E7:72:D2:C4:77:61 X509v3 Authority Key Identifier: keyid:CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:6e:0d:67:fd:b8:01:83:50:27:b2:0b:8e:7b:82:15:31:4f: 8c:21:51:19:83:b8:e7:98:33:c5:4e:e9:8f:13:60:70:59:1b: df:65:34:15:68:36:c5:57:35:95:45:f0:b0:85:cc:3b:a5:35: b5:e0:2d:bd:29:da:5f:86:bb:48:45:16:10:15:34:97:52:bb: 86:25:66:13:21:12:c8:33:98:1b:5a:7b:71:9a:82:a7:2b:06: ef:65:e7:61:b0:f6:df:42:47:34:fc:e1:b9:0e:07:7b:fb:43: b0:7b:ae:2a:b2:ff:d3:fb:bc:f8:d5:88:fa:b7:e5:6f:e4:eb: 2d:0b:1b:a5:f3:1b:cf:ba:7e:24:b2:a4:90:3b:c7:cc:65:04: d4:81:09:7a:5c:b7:b3:c1:42:e2:d4:71:38:ab:da:2d:8c:1f: 5e:40:93:d8:e3:f4:d3:d3:58:8e:a3:d1:76:74:a5:73:b8:fb: 19:04:1f:ca:c3:d2:e7:93:0f:09:d3:89:64:fb:a4:d4:17:4f: 57:4b:68:84:1f:bb:2f:a6:d2:a4:c4:fc:e4:c9:61:09:3c:19: 3e:be:23:e1:ef:30:44:9b:da:13:5f:58:c3:1e:5e:b2:c4:93: 87:5d:60:a8:61:c3:6a:89:c0:b9:1e:a5:a2:bc:2f:18:94:d6: fc:d5:fe:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYocW/Mwi81XoYyHB+PEkRHRq+i0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1RUIwNEZDOERBNjAxMDI0RTEyRjIzRUYxMzlCNDk5 RTY5OTcyRDAeFw0yNTExMDIyMDIzMDFaFw0yNTExMDMyMzQyMDFaMDMxMTAvBgNV BAMTKDQ0QjQ2MzE3MDYwMkE1OTUzNzM3QzZDN0Y5RjFFNzcyRDJDNDc3NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeqvi5E+1swvcwAs4wROlyNQCo Jf1QNCtsqXFm/fi0N2wiqorr2MoPulD9Iw5HEJXWkYLv/emZ2VDSdwlQ+ZXahH4S vFUCnkFsp3uADj8p9k/EQQRhpvXay1VjyVmmqJa4hGPE0QK5pUvO9PhTGAxyYWkm 0MwlODQ0vbnfjGihIg3Sd37Ju9MIHD2NOvi7qhpfw5tuIzIvGLqohfgYd0nxfuDz KwjjJIM8ZoK9AbM7SadU/ukX+acFjwx36fz6moRbE4fc3DjMbazT/riQgsGUPLXV Mkbd2MDCpeIdaNjKNpjBQtmS+1Y5uZVafCcf4vFUJqWm7tISx5PkWDEvOtRDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURLRjFwYCpZU3N8bH+fHnctLEd2EwHwYDVR0j BBgwFoAUyl6wT8jaYBAk4S8j7xObSZ5ply0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDdxNWZZVVZxQXpicmtMUW80UG9ZUzJrR3Y4R1hzS25OOHFBWXc1Ukd4 MkYvMS9DQTVFQjA0RkM4REE2MDEwMjRFMTJGMjNFRjEzOUI0OTlFNjk5NzJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBNUVCMDRGQzhEQTYwMTAy NEUxMkYyM0VGMTM5QjQ5OUU2OTk3MkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NDdxNWZZVVZxQXpicmtMUW80UG9ZUzJrR3Y4R1hzS25OOHFBWXc1Ukd4MkYvMS9D QTVFQjA0RkM4REE2MDEwMjRFMTJGMjNFRjEzOUI0OTlFNjk5NzJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIG4NZ/24AYNQJ7ILjnuCFTFPjCFRGYO455gzxU7pjxNgcFkb32U0FWg2xVc1 lUXwsIXMO6U1teAtvSnaX4a7SEUWEBU0l1K7hiVmEyESyDOYG1p7cZqCpysG72Xn YbD230JHNPzhuQ4He/tDsHuuKrL/0/u8+NWI+rflb+TrLQsbpfMbz7p+JLKkkDvH zGUE1IEJely3s8FC4tRxOKvaLYwfXkCT2OP009NYjqPRdnSlc7j7GQQfysPS55MP CdOJZPuk1BdPV0tohB+7L6bSpMT85MlhCTwZPr4j4e8wRJvaE19Ywx5essSTh11g qGHDaonAuR6lorwvGJTW/NX+nA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:27:39 2025 by rpki-client