$ rpki-client -vvf rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft File: CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft (raw, json) Hash identifier: /DrjxkBXW1Tz5LUZRLK44q7QCJqXRLrxy073v8JTHlo= Subject key identifier: 0C:F2:C5:65:B6:FA:80:DF:B6:2F:F1:83:3D:74:32:86:A3:52:6E:B5 Authority key identifier: CE:19:9B:76:1A:B4:44:E8:2D:C4:91:8B:4D:38:91:7C:16:AE:C7:B8 Certificate issuer: /CN=CE199B761AB444E82DC4918B4D38917C16AEC7B8 Certificate serial: 036F83D3A7D9417F497D4E40805F26C3D3531FE1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft Manifest number: 01E5 Signing time: Mon 03 Nov 2025 18:20:41 +0000 Manifest this update: Mon 03 Nov 2025 18:15:41 +0000 Manifest next update: Tue 04 Nov 2025 18:47:41 +0000 Files and hashes: 1: CE199B761AB444E82DC4918B4D38917C16AEC7B8.crl (hash: rSy3qOcrYJevFcEAlDwpyaTZjgL7J/AShRMUPoSkZ1A=) 2: 3138362e3233322e37322e302f32322d3234203d3e203532383737.roa (hash: vZnrvgS14iRs4DGlunxgVeAKMhVG8f2YLw8vEFW6nxA=) 3: 323830343a3931633a3a2f33322d3634203d3e203532383737.roa (hash: OHO6Wx692w0lzVoYhuUmb0j0Y+S4c1BM1IIF4HtppJg=) 4: 3133382e39392e35362e302f32322d3234203d3e203532383737.roa (hash: UOzB7qg6Kku3e5MqvAoYRlabu2fWwzQQeTp5z2L0X+4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.crl rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 18:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6f:83:d3:a7:d9:41:7f:49:7d:4e:40:80:5f:26:c3:d3:53:1f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE199B761AB444E82DC4918B4D38917C16AEC7B8 Validity Not Before: Nov 3 18:15:41 2025 GMT Not After : Nov 4 18:47:41 2025 GMT Subject: CN=0CF2C565B6FA80DFB62FF1833D743286A3526EB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:32:85:bb:aa:e9:51:23:e3:ed:b7:e4:1b:fb: b2:20:4c:26:88:ea:87:42:60:53:d6:3a:96:23:94: 17:b3:b7:ff:ee:2e:76:43:6a:fe:5c:c3:8c:fe:97: 52:e8:04:4f:e8:ad:2d:b7:31:f8:eb:55:32:b8:c1: b1:93:40:dd:7c:d3:47:9c:84:29:84:e9:6f:6e:9f: 32:1f:55:5f:92:ba:b8:34:ad:46:db:32:67:56:5d: 4a:cd:5d:74:77:85:32:61:9b:e8:4a:15:db:a1:18: 37:aa:a6:e1:d4:28:2e:fe:65:04:72:c2:8d:75:02: b1:a8:78:43:25:fb:db:45:93:bf:70:c6:7a:24:0a: 81:78:2f:fc:68:6f:67:ee:12:76:40:ca:14:dd:9b: d4:9b:02:ed:23:4c:d8:f8:44:b8:1a:e9:00:67:eb: f0:ff:06:53:f4:1d:51:5f:74:0e:33:9a:3f:47:96: 6f:32:8b:68:42:52:f0:68:49:31:0a:1e:0e:a4:10: 23:81:9e:b0:99:19:28:7e:29:1e:09:dc:06:73:99: 68:fe:be:25:be:38:f3:b5:ef:45:a7:81:1b:db:e9: b8:fc:99:8d:74:9e:a2:23:e3:91:5a:ef:9b:a0:b2: ef:58:74:55:a6:61:0a:ab:93:34:dd:2d:a2:18:15: 67:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F2:C5:65:B6:FA:80:DF:B6:2F:F1:83:3D:74:32:86:A3:52:6E:B5 X509v3 Authority Key Identifier: keyid:CE:19:9B:76:1A:B4:44:E8:2D:C4:91:8B:4D:38:91:7C:16:AE:C7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:b4:f8:cc:60:17:9a:68:04:e2:c4:cb:27:ad:8a:7c:7d:4a: 84:eb:4b:ba:34:e0:b3:6c:67:be:da:03:50:b4:7a:73:2e:21: e7:04:a2:a8:5d:e3:7f:d1:b7:24:81:32:97:f4:bc:56:1d:bd: 74:5d:21:d3:83:17:e5:13:3a:4d:fc:e9:18:ce:64:d2:76:1c: 40:48:b6:f6:9e:94:29:93:dd:d0:a2:c8:55:f6:98:86:e7:3d: 33:c9:f3:15:50:ae:db:eb:a8:70:2d:36:54:1e:11:2e:f9:51: ec:49:e0:95:15:42:65:d4:a8:93:ac:21:71:5f:cb:77:75:17: bc:9c:0a:c4:1d:46:3e:9d:10:7f:67:8f:78:ec:32:ea:6f:d4: 3f:9d:fe:df:50:73:57:73:7d:8f:7c:d3:36:4c:b4:21:52:88: f9:f4:25:11:46:fd:64:eb:3f:03:4e:02:84:28:2d:e3:e5:85: 12:0b:7b:ca:15:56:11:d5:f0:ad:c5:d9:6e:f7:bd:5b:ad:7e: 3f:3f:74:c3:b5:2c:04:a2:13:02:b0:ad:37:1a:20:e2:12:47: f0:45:47:60:41:18:4b:6c:82:ba:d8:42:67:7d:6f:d7:65:66: 90:1c:8b:31:10:49:74:74:1d:fa:4c:dd:f1:c2:b2:45:e7:8f: 2f:11:a9:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA2+D06fZQX9JfU5AgF8mw9NTH+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxOTlCNzYxQUI0NDRFODJEQzQ5MThCNEQzODkxN0Mx NkFFQzdCODAeFw0yNTExMDMxODE1NDFaFw0yNTExMDQxODQ3NDFaMDMxMTAvBgNV BAMTKDBDRjJDNTY1QjZGQTgwREZCNjJGRjE4MzNENzQzMjg2QTM1MjZFQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSMoW7qulRI+Ptt+Qb+7IgTCaI 6odCYFPWOpYjlBezt//uLnZDav5cw4z+l1LoBE/orS23MfjrVTK4wbGTQN1800ec hCmE6W9unzIfVV+Surg0rUbbMmdWXUrNXXR3hTJhm+hKFduhGDeqpuHUKC7+ZQRy wo11ArGoeEMl+9tFk79wxnokCoF4L/xob2fuEnZAyhTdm9SbAu0jTNj4RLga6QBn 6/D/BlP0HVFfdA4zmj9Hlm8yi2hCUvBoSTEKHg6kECOBnrCZGSh+KR4J3AZzmWj+ viW+OPO170WngRvb6bj8mY10nqIj45Fa75ugsu9YdFWmYQqrkzTdLaIYFWfbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDPLFZbb6gN+2L/GDPXQyhqNSbrUwHwYDVR0j BBgwFoAUzhmbdhq0ROgtxJGLTTiRfBaux7gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHh0YVl6OFpkYmcyTWp3eUdEOXhTUWdUV2NnTXRDdmNUUkpKc1NyTGlq R2QvMC9DRTE5OUI3NjFBQjQ0NEU4MkRDNDkxOEI0RDM4OTE3QzE2QUVDN0I4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFMTk5Qjc2MUFCNDQ0RTgy REM0OTE4QjREMzg5MTdDMTZBRUM3QjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHh0YVl6OFpkYmcyTWp3eUdEOXhTUWdUV2NnTXRDdmNUUkpKc1NyTGlqR2QvMC9D RTE5OUI3NjFBQjQ0NEU4MkRDNDkxOEI0RDM4OTE3QzE2QUVDN0I4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYLT4zGAXmmgE4sTLJ62KfH1KhOtLujTgs2xnvtoDULR6cy4h5wSiqF3jf9G3 JIEyl/S8Vh29dF0h04MX5RM6TfzpGM5k0nYcQEi29p6UKZPd0KLIVfaYhuc9M8nz FVCu2+uocC02VB4RLvlR7EnglRVCZdSok6whcV/Ld3UXvJwKxB1GPp0Qf2ePeOwy 6m/UP53+31BzV3N9j3zTNky0IVKI+fQlEUb9ZOs/A04ChCgt4+WFEgt7yhVWEdXw rcXZbve9W61+Pz90w7UsBKITArCtNxog4hJH8EVHYEEYS2yCuthCZ31v12VmkByL MRBJdHQd+kzd8cKyReePLxGprA== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:53 2025 by rpki-client