$ rpki-client -vvf rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft File: CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft (raw, json) Hash identifier: YaEyln2QFPZX7dihsFt/27/aUflF+iE08XVFzRD/Bqk= Subject key identifier: 93:E3:FE:73:6E:89:C1:D4:22:A6:A0:FA:DD:6C:69:5E:A5:8C:F6:CC Authority key identifier: CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42 Certificate issuer: /CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842 Certificate serial: 42F3F3605AE1C9FE34AADCF6530DFB092978B63C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer Subject info access: rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft Manifest number: 0184 Signing time: Mon 03 Nov 2025 08:44:12 +0000 Manifest this update: Mon 03 Nov 2025 08:39:12 +0000 Manifest next update: Tue 04 Nov 2025 09:41:12 +0000 Files and hashes: 1: CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl (hash: RQPevhcFRikfTdH5LHxcol+QXQ5G9Et0jDsuHq8XXIM=) 2: 3139302e3131312e3136382e302f32322d3234203d3e20323730343138.roa (hash: mJq4dFqiva5H7E/DVQTNnmaU+jNCkwWuNtHA92VtrOU=) 3: 323830343a366262343a3a2f33322d3336203d3e20323730343138.roa (hash: iXw8eyww30FtkaY4pIbyQVccKqIHDDzs1Oowd0Qxomg=) 4: 323830343a366262343a663030303a3a2f34312d3431203d3e20323730343138.roa (hash: N2nTtvb8JXqHz8HSxYE4bRZRkUdpeFoYlVaINLv7iHM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f3:f3:60:5a:e1:c9:fe:34:aa:dc:f6:53:0d:fb:09:29:78:b6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842 Validity Not Before: Nov 3 08:39:12 2025 GMT Not After : Nov 4 09:41:12 2025 GMT Subject: CN=93E3FE736E89C1D422A6A0FADD6C695EA58CF6CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:4f:d4:16:0c:98:d9:60:57:0e:4f:d8:c4: 8f:8c:a9:35:7a:29:87:dc:52:5d:5d:6b:eb:52:ac: 14:7b:43:18:40:39:bc:bd:8f:4d:6e:d5:a0:17:49: f7:49:bf:3b:56:85:91:c3:28:43:16:65:ed:d9:fb: e7:00:08:d2:ac:37:5f:41:ee:df:0e:37:45:f9:e6: 51:a4:08:b6:3d:78:c4:06:17:c9:72:ff:00:ed:88: e8:0f:d1:a9:ae:5d:6c:ea:f3:73:47:69:90:d9:81: aa:cc:d2:33:a8:6d:63:98:93:77:58:dc:88:c1:6b: 27:2b:28:ac:f8:67:aa:5a:6f:82:35:bd:74:3f:9b: 65:24:58:6e:be:e2:12:94:f0:05:17:ea:f8:99:42: 35:29:9b:36:d8:da:6b:f1:cc:7f:54:da:44:52:ee: 09:a2:9e:bf:21:24:9a:83:ca:08:cc:d8:2b:97:65: d4:78:47:d9:b8:ac:1b:b6:31:b3:1b:a1:35:1b:5a: 4c:00:5a:be:51:64:23:bc:0a:36:4d:0b:22:f0:23: e1:35:50:2f:a6:8e:10:d5:04:b5:2a:2a:89:d4:93: 17:df:24:ec:df:9d:a3:00:9d:db:55:2c:83:c3:c2: 21:18:bb:3c:79:8f:ef:39:21:f9:40:26:e6:c3:4a: 39:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E3:FE:73:6E:89:C1:D4:22:A6:A0:FA:DD:6C:69:5E:A5:8C:F6:CC X509v3 Authority Key Identifier: keyid:CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e2:81:2a:89:b8:85:89:4f:2b:47:54:a5:4e:b2:e9:1a:ba: 66:90:22:24:36:6d:f1:a3:5c:b6:97:2d:aa:a9:09:6d:77:55: 94:22:90:3f:6a:16:64:5c:0e:6e:6e:90:e0:ed:43:36:22:0e: 49:e5:ef:12:75:7a:ae:e4:9d:e2:75:05:e4:55:52:84:99:3f: 8f:cc:4f:01:b7:c0:26:9e:60:dd:4a:08:e8:fd:ac:22:0b:29: be:5c:19:e0:d4:ea:e0:43:7a:5f:03:83:7b:06:e0:12:ec:2f: 44:d7:39:34:9f:a9:38:57:01:01:83:5e:40:f7:f7:28:c6:51: 8a:bc:87:4a:e7:89:24:b1:77:0d:a7:0c:4a:1e:0d:50:af:05: 16:f6:1f:05:b6:83:50:df:37:43:c5:47:f6:6f:6e:d6:cc:80: 80:17:d6:96:00:6a:75:39:e5:70:5a:05:e4:13:e1:81:6f:f9: 7f:1a:c2:43:82:dc:fb:a1:3b:72:15:8e:cd:61:57:57:f5:30: 64:c0:c5:dd:04:ee:d7:c3:c4:ec:ac:7b:52:bc:ca:54:cd:8f: 3d:d2:1a:40:7c:ff:97:92:a3:c6:93:c3:46:83:2b:69:9d:3d: 5b:21:9d:ee:63:3d:49:9d:10:86:f9:da:f0:ee:81:ae:03:9c: 0b:87:29:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQvPzYFrhyf40qtz2Uw37CSl4tjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFRjFGRDY2OTBEQ0NFRDUyMDUzMzhFRTBCQzdEMEUx ODhERTg0MjAeFw0yNTExMDMwODM5MTJaFw0yNTExMDQwOTQxMTJaMDMxMTAvBgNV BAMTKDkzRTNGRTczNkU4OUMxRDQyMkE2QTBGQURENkM2OTVFQTU4Q0Y2Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPU/UFgyY2WBXDk/YxI+MqTV6 KYfcUl1da+tSrBR7QxhAOby9j01u1aAXSfdJvztWhZHDKEMWZe3Z++cACNKsN19B 7t8ON0X55lGkCLY9eMQGF8ly/wDtiOgP0amuXWzq83NHaZDZgarM0jOobWOYk3dY 3IjBaycrKKz4Z6pab4I1vXQ/m2UkWG6+4hKU8AUX6viZQjUpmzbY2mvxzH9U2kRS 7gminr8hJJqDygjM2CuXZdR4R9m4rBu2MbMboTUbWkwAWr5RZCO8CjZNCyLwI+E1 UC+mjhDVBLUqKonUkxffJOzfnaMAndtVLIPDwiEYuzx5j+85IflAJubDSjnjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUk+P+c26JwdQipqD63WxpXqWM9swwHwYDVR0j BBgwFoAUze8f1mkNzO1SBTOO4Lx9DhiN6EIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUsxQjVEaU1zaHBDdHh3empXVTlXeGN5UkRaRzJ4SjhESkdyeXFCTDZ5 YUcvMC9DREVGMUZENjY5MERDQ0VENTIwNTMzOEVFMEJDN0QwRTE4OERFODQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NERUYxRkQ2NjkwRENDRUQ1 MjA1MzM4RUUwQkM3RDBFMTg4REU4NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUsxQjVEaU1zaHBDdHh3empXVTlXeGN5UkRaRzJ4SjhESkdyeXFCTDZ5YUcvMC9D REVGMUZENjY5MERDQ0VENTIwNTMzOEVFMEJDN0QwRTE4OERFODQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASOKBKom4hYlPK0dUpU6y6Rq6ZpAiJDZt8aNctpctqqkJbXdVlCKQP2oWZFwO bm6Q4O1DNiIOSeXvEnV6ruSd4nUF5FVShJk/j8xPAbfAJp5g3UoI6P2sIgspvlwZ 4NTq4EN6XwODewbgEuwvRNc5NJ+pOFcBAYNeQPf3KMZRiryHSueJJLF3DacMSh4N UK8FFvYfBbaDUN83Q8VH9m9u1syAgBfWlgBqdTnlcFoF5BPhgW/5fxrCQ4Lc+6E7 chWOzWFXV/UwZMDF3QTu18PE7Kx7UrzKVM2PPdIaQHz/l5KjxpPDRoMraZ09WyGd 7mM9SZ0Qhvna8O6BrgOcC4cpUw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:33:41 2025 by rpki-client