$ rpki-client -vvf rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft File: CBB8A038671DF77F8F9579424916B82CCF45F66A.mft (raw, json) Hash identifier: auTy1+EbR/NvVdJ9qa6I7gsp00BTVdIRubuwvOsEEMM= Subject key identifier: A1:C6:3F:76:4D:F0:BF:6A:18:66:65:3B:3F:D5:A2:64:18:13:99:14 Authority key identifier: CB:B8:A0:38:67:1D:F7:7F:8F:95:79:42:49:16:B8:2C:CF:45:F6:6A Certificate issuer: /CN=CBB8A038671DF77F8F9579424916B82CCF45F66A Certificate serial: 376271CECE1B313587D90D0969A4DDD1E0D82342 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer Subject info access: rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft Manifest number: 02B8 Signing time: Mon 03 Nov 2025 15:25:04 +0000 Manifest this update: Mon 03 Nov 2025 15:20:04 +0000 Manifest next update: Tue 04 Nov 2025 15:45:04 +0000 Files and hashes: 1: 323830343a323664633a3a2f33322d3438203d3e20323633383631.roa (hash: L76D7obGrGrGOSqjmP2LByNTd+coHbUwi6bz+t8bMZ8=) 2: 3133382e3138362e32342e302f32322d3234203d3e20323633383631.roa (hash: ylKLBA46nPd7SSwT5MJlkcpCfmZ5mt/KAcixPXGZuno=) 3: CBB8A038671DF77F8F9579424916B82CCF45F66A.crl (hash: Hjlv2tCWSSsNCi/Av/Q58Q4TY1TaxBLR0xnvsLWyXJA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.crl rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 15:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:62:71:ce:ce:1b:31:35:87:d9:0d:09:69:a4:dd:d1:e0:d8:23:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB8A038671DF77F8F9579424916B82CCF45F66A Validity Not Before: Nov 3 15:20:04 2025 GMT Not After : Nov 4 15:45:04 2025 GMT Subject: CN=A1C63F764DF0BF6A1866653B3FD5A26418139914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:17:2b:eb:36:a9:b9:ac:f8:56:6e:34:b0:7b: 9e:a4:b3:83:eb:c3:e7:d5:ca:73:fc:ed:e0:d4:3d: 74:25:14:bc:24:03:70:e2:bb:fd:63:16:9c:cb:bd: f7:b5:b6:4e:4e:10:c6:1f:2f:a6:e9:43:07:ad:b9: ec:71:42:69:d3:c7:e3:18:d9:64:84:fb:ed:c5:e3: 9a:e7:27:79:d5:3c:37:96:a5:9d:bc:48:97:35:81: 48:23:3d:f6:2c:a6:e3:1c:6c:51:fc:fa:68:21:f9: 5d:51:9c:72:55:e5:03:19:43:e2:b2:65:74:6a:a2: e0:c3:a7:74:cf:ad:ff:17:f5:ea:81:30:27:14:13: 68:73:f7:9b:96:c5:2a:60:84:71:b4:7f:1a:ac:c1: a1:8a:93:70:a5:8f:02:97:0c:d8:3d:f9:f8:e3:68: e9:9e:a2:8e:a5:ab:5a:a3:57:a5:33:9c:0e:6a:47: 80:44:35:dc:a7:63:be:47:32:e0:99:83:83:76:50: bb:77:b4:6e:22:cc:09:64:02:15:80:ed:fa:a7:f5: d8:b0:f1:4b:48:e3:82:ec:07:40:be:71:0d:bb:7a: 6b:cf:c6:43:5a:e2:d2:fa:a9:0e:e3:73:ec:10:39: 55:44:09:8f:c4:f8:8d:90:bf:94:f1:95:68:7e:40: ec:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C6:3F:76:4D:F0:BF:6A:18:66:65:3B:3F:D5:A2:64:18:13:99:14 X509v3 Authority Key Identifier: keyid:CB:B8:A0:38:67:1D:F7:7F:8F:95:79:42:49:16:B8:2C:CF:45:F6:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:28:d4:01:61:18:b9:fc:7b:61:b1:b9:25:19:55:3b:f0:0f: 3e:cc:18:2e:49:5c:b0:21:52:1f:bc:43:04:71:b9:0d:74:27: 27:25:2a:38:19:b8:f2:b5:49:1c:04:78:1c:d7:3b:e4:91:7e: a0:0b:9d:19:4c:6e:94:b2:8b:1c:4f:9d:e9:07:6b:3a:64:88: 67:4a:c4:76:3e:f2:f9:bc:f1:c5:57:7b:67:02:f3:9f:e1:1d: 90:1a:b1:51:25:d1:9a:16:05:78:07:b9:b8:ff:67:5e:f0:ac: 96:13:fc:37:21:bb:5c:fd:8a:f6:35:dc:65:5e:9d:00:7c:6f: 02:eb:c1:0d:fd:6b:60:c7:68:06:50:bd:e4:67:10:37:04:f5: a2:86:e7:a3:e0:3f:ee:09:32:dc:72:07:cb:60:59:f5:90:17: 37:a6:83:b3:6b:3d:79:b7:ba:ca:68:39:96:39:81:dd:61:cb: 27:7b:83:b1:44:da:6e:c8:eb:d9:27:98:a3:3a:c5:74:40:e5: 93:50:0d:3c:62:15:e6:98:15:3c:ba:dd:a3:a9:dd:8c:c5:56: 25:54:55:f0:cc:07:6c:48:5e:65:cd:e9:20:23:51:ab:70:a6: 4d:7b:5f:2a:c8:f5:5d:75:c8:a2:ad:f9:c8:de:cd:d0:97:c0: 86:ab:ec:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN2Jxzs4bMTWH2Q0JaaTd0eDYI0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCOEEwMzg2NzFERjc3RjhGOTU3OTQyNDkxNkI4MkND RjQ1RjY2QTAeFw0yNTExMDMxNTIwMDRaFw0yNTExMDQxNTQ1MDRaMDMxMTAvBgNV BAMTKEExQzYzRjc2NERGMEJGNkExODY2NjUzQjNGRDVBMjY0MTgxMzk5MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuFyvrNqm5rPhWbjSwe56ks4Pr w+fVynP87eDUPXQlFLwkA3Diu/1jFpzLvfe1tk5OEMYfL6bpQwetuexxQmnTx+MY 2WSE++3F45rnJ3nVPDeWpZ28SJc1gUgjPfYspuMcbFH8+mgh+V1RnHJV5QMZQ+Ky ZXRqouDDp3TPrf8X9eqBMCcUE2hz95uWxSpghHG0fxqswaGKk3CljwKXDNg9+fjj aOmeoo6lq1qjV6UznA5qR4BENdynY75HMuCZg4N2ULt3tG4izAlkAhWA7fqn9diw 8UtI44LsB0C+cQ27emvPxkNa4tL6qQ7jc+wQOVVECY/E+I2Qv5TxlWh+QOwRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUocY/dk3wv2oYZmU7P9WiZBgTmRQwHwYDVR0j BBgwFoAUy7igOGcd93+PlXlCSRa4LM9F9mowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFJwSDFUQ0pFckxpMkY1YWdOTHRCS0ZpaEpLZ0tyamRjQnNIdnFUS2s1 RG8vMC9DQkI4QTAzODY3MURGNzdGOEY5NTc5NDI0OTE2QjgyQ0NGNDVGNjZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCQjhBMDM4NjcxREY3N0Y4 Rjk1Nzk0MjQ5MTZCODJDQ0Y0NUY2NkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFJwSDFUQ0pFckxpMkY1YWdOTHRCS0ZpaEpLZ0tyamRjQnNIdnFUS2s1RG8vMC9D QkI4QTAzODY3MURGNzdGOEY5NTc5NDI0OTE2QjgyQ0NGNDVGNjZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANCjUAWEYufx7YbG5JRlVO/APPswYLklcsCFSH7xDBHG5DXQnJyUqOBm48rVJ HAR4HNc75JF+oAudGUxulLKLHE+d6QdrOmSIZ0rEdj7y+bzxxVd7ZwLzn+EdkBqx USXRmhYFeAe5uP9nXvCslhP8NyG7XP2K9jXcZV6dAHxvAuvBDf1rYMdoBlC95GcQ NwT1oobno+A/7gky3HIHy2BZ9ZAXN6aDs2s9ebe6ymg5ljmB3WHLJ3uDsUTabsjr 2SeYozrFdEDlk1ANPGIV5pgVPLrdo6ndjMVWJVRV8MwHbEheZc3pICNRq3CmTXtf Ksj1XXXIoq35yN7N0JfAhqvsfA== -----END CERTIFICATE-----Generated at Tue Nov 4 05:06:08 2025 by rpki-client