$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft File: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft (raw, json) Hash identifier: kuw12s1nbEgsdRN7v+YwwtAVh6vXSohOaRmGerWkeBw= Subject key identifier: 7C:52:9D:9B:9A:C6:CA:BF:80:DF:B4:38:3E:B2:AB:E7:A2:BA:67:C3 Authority key identifier: CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA Certificate issuer: /CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA Certificate serial: 19C7C0A5B67B627E2B98DB7C71A433BACDEB7963 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft Manifest number: 0305 Signing time: Mon 03 Nov 2025 03:26:33 +0000 Manifest this update: Mon 03 Nov 2025 03:21:33 +0000 Manifest next update: Tue 04 Nov 2025 06:20:33 +0000 Files and hashes: 1: 3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa (hash: N9HuU1W9ryFGU85A3ZfF+Ao4jsgW1hWTRMLA6XPYlk0=) 2: 323830343a333661303a3a2f33322d3335203d3e20323636333630.roa (hash: rXszqdwUvQGrhVWf0dQGexOPbYRtVFxMgBAZYV51XYo=) 3: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl (hash: lT96JsE/WWYL22m+TozuPbOBkt4RN0QQZwdc1IN71+o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c7:c0:a5:b6:7b:62:7e:2b:98:db:7c:71:a4:33:ba:cd:eb:79:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA Validity Not Before: Nov 3 03:21:33 2025 GMT Not After : Nov 4 06:20:33 2025 GMT Subject: CN=7C529D9B9AC6CABF80DFB4383EB2ABE7A2BA67C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3d:de:34:03:30:b8:63:98:0a:71:2c:2c:af: 0e:db:5e:c1:b6:fc:68:82:a4:42:b4:cb:81:c5:7c: e7:d2:be:fc:07:65:74:e4:36:0a:a8:f4:52:59:b4: 1c:b0:ed:bc:62:df:cd:e5:04:6c:d3:bc:2d:8d:c3: 18:e9:53:ce:f0:d2:89:c6:f1:a3:e7:8d:85:96:0c: eb:8a:3b:21:3d:48:c9:a7:e8:d2:a1:86:81:aa:71: af:37:bb:7f:23:6e:0e:9c:cd:1c:86:74:c9:1b:57: cc:d6:d5:58:18:9d:f9:f8:ec:83:27:c4:11:d0:ee: 7d:d6:4b:77:35:61:13:3f:13:c3:9b:21:15:82:7b: e8:a0:b2:e7:e6:35:ab:15:8a:41:06:16:62:5d:a1: f6:14:75:11:56:ae:3d:9b:8e:f8:20:1c:fb:a7:75: c2:ad:5d:78:72:4d:12:38:ad:33:3e:11:9b:68:f0: fb:42:52:1f:24:0e:0a:9a:0c:af:a4:c7:3f:21:87: dd:cf:14:da:2a:1f:ef:9e:5a:b4:93:74:be:1a:f0: ed:da:23:fb:80:20:e0:7f:f8:c6:2f:1f:b9:f4:98: cf:68:29:bb:28:49:fc:f9:aa:10:68:89:72:ae:0b: 36:ff:dd:ba:3b:ff:73:f8:e8:e0:65:32:81:e0:d0: 69:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:52:9D:9B:9A:C6:CA:BF:80:DF:B4:38:3E:B2:AB:E7:A2:BA:67:C3 X509v3 Authority Key Identifier: keyid:CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d9:db:aa:bf:76:10:fd:f6:15:77:04:3a:53:da:cd:ef:e4: 5a:fb:f0:58:85:89:10:dc:5a:c0:6e:41:e5:81:d9:0e:7a:52: f0:84:da:c1:a9:de:79:46:e1:12:2f:6a:d2:05:0e:96:29:6b: e6:80:b9:b9:17:e4:60:41:47:1f:32:1a:53:ce:b3:0b:42:59: 07:9b:6f:16:7c:ab:96:28:b3:f8:b2:87:c7:c1:7c:85:fc:f4: 6a:8c:52:0c:bb:5f:1e:d2:1d:7a:9a:ad:e6:b2:43:ea:d6:e3: 9c:f6:d5:57:15:63:b1:0e:8a:33:b9:4a:ab:9b:df:aa:ba:83: a1:cc:9b:59:ca:7f:c8:ac:3c:4f:a6:7d:49:b5:8c:3a:4e:a3: 27:af:24:1c:8b:5c:c5:2d:a4:ab:63:40:39:1a:5f:54:a7:41: 33:ae:15:e6:7f:9f:3c:14:44:23:c7:2d:a9:02:6f:01:a0:4a: dc:c2:ec:2d:b5:99:86:9a:ac:11:5a:1d:49:ea:af:fd:7d:fc: 53:b7:00:92:11:25:e1:99:76:25:49:17:d3:9c:4c:d3:88:a0: 3c:a6:27:ef:69:cd:46:f4:cf:29:75:88:5c:79:2c:cf:e1:c2: f5:d1:61:ed:34:58:4e:4f:1a:05:77:f3:f6:27:f5:f9:b4:e3: 16:8b:b0:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGcfApbZ7Yn4rmNt8caQzus3reWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExQzRCNTQ2MjIyRUUxNTZBMEQ0MzQ4RDJBQjAwNDNC REFCNEJFQTAeFw0yNTExMDMwMzIxMzNaFw0yNTExMDQwNjIwMzNaMDMxMTAvBgNV BAMTKDdDNTI5RDlCOUFDNkNBQkY4MERGQjQzODNFQjJBQkU3QTJCQTY3QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrPd40AzC4Y5gKcSwsrw7bXsG2 /GiCpEK0y4HFfOfSvvwHZXTkNgqo9FJZtByw7bxi383lBGzTvC2NwxjpU87w0onG 8aPnjYWWDOuKOyE9SMmn6NKhhoGqca83u38jbg6czRyGdMkbV8zW1VgYnfn47IMn xBHQ7n3WS3c1YRM/E8ObIRWCe+igsufmNasVikEGFmJdofYUdRFWrj2bjvggHPun dcKtXXhyTRI4rTM+EZto8PtCUh8kDgqaDK+kxz8hh93PFNoqH++eWrSTdL4a8O3a I/uAIOB/+MYvH7n0mM9oKbsoSfz5qhBoiXKuCzb/3bo7/3P46OBlMoHg0Gm7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfFKdm5rGyr+A37Q4PrKr56K6Z8MwHwYDVR0j BBgwFoAUyhxLVGIi7hVqDUNI0qsAQ72rS+owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBK U1MvMS9DQTFDNEI1NDYyMjJFRTE1NkEwRDQzNDhEMkFCMDA0M0JEQUI0QkVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMUM0QjU0NjIyMkVFMTU2 QTBENDM0OEQyQUIwMDQzQkRBQjRCRUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBKU1MvMS9D QTFDNEI1NDYyMjJFRTE1NkEwRDQzNDhEMkFCMDA0M0JEQUI0QkVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHdnbqr92EP32FXcEOlPaze/kWvvwWIWJENxawG5B5YHZDnpS8ITawaneeUbh Ei9q0gUOlilr5oC5uRfkYEFHHzIaU86zC0JZB5tvFnyrliiz+LKHx8F8hfz0aoxS DLtfHtIdepqt5rJD6tbjnPbVVxVjsQ6KM7lKq5vfqrqDocybWcp/yKw8T6Z9SbWM Ok6jJ68kHItcxS2kq2NAORpfVKdBM64V5n+fPBREI8ctqQJvAaBK3MLsLbWZhpqs EVodSeqv/X38U7cAkhEl4Zl2JUkX05xM04igPKYn72nNRvTPKXWIXHksz+HC9dFh 7TRYTk8aBXfz9if1+bTjFouwsA== -----END CERTIFICATE-----Generated at Mon Nov 3 05:43:49 2025 by rpki-client