$ rpki-client -vvf rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft File: CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft (raw, json) Hash identifier: uyb84UsuIz7if+LnUzUM03Bpb2gB6P0FAq044yoShf0= Subject key identifier: 47:10:AB:34:35:EA:E0:96:46:12:B4:4E:0B:53:92:D1:18:9F:4F:49 Authority key identifier: CB:22:4E:C9:F8:B4:CE:EA:2F:2D:6E:2F:B6:E2:FD:AD:B6:AA:C8:A1 Certificate issuer: /CN=CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1 Certificate serial: 69A355E47947995C767E4C8CE35141547599D166 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.cer Subject info access: rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft Manifest number: 38 Signing time: Mon 03 Nov 2025 09:32:24 +0000 Manifest this update: Mon 03 Nov 2025 09:27:24 +0000 Manifest next update: Tue 04 Nov 2025 11:41:24 +0000 Files and hashes: 1: 34352e3138372e32302e302f32322d3234203d3e20323639343833.roa (hash: fmu9Yn5/C/J+YfUZLc8KQ7P9FB91xBYqIaeFNXI3FjY=) 2: CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.crl (hash: gYBaODxh+PsPamKQbavAREBcHVBfQ5yxuy6y6t75kJw=) 3: 323830343a363535343a3a2f33322d3438203d3e20323639343833.roa (hash: TZWtfH5ij650ijLBJ9vtX7taN3u/arKIvGUt+j4npdE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.crl rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a3:55:e4:79:47:99:5c:76:7e:4c:8c:e3:51:41:54:75:99:d1:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1 Validity Not Before: Nov 3 09:27:24 2025 GMT Not After : Nov 4 11:41:24 2025 GMT Subject: CN=4710AB3435EAE0964612B44E0B5392D1189F4F49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3f:c9:2a:62:16:9b:dc:dd:10:c1:a2:84:87: 2c:57:a6:d1:4c:0e:22:38:58:5c:4b:9d:81:36:78: 14:1f:05:23:2c:85:b4:15:89:fb:6b:7a:c9:6a:4a: 0f:72:67:ae:ae:ca:2b:e4:06:b4:3d:66:65:30:bf: e0:42:2e:89:26:cd:8e:32:74:c5:11:f1:b2:30:10: 9b:a3:a2:c8:1e:2c:f5:86:20:2b:5a:29:21:c6:97: 18:82:73:c2:d8:92:85:dd:17:5e:d7:3d:0b:c5:9b: bf:25:33:c8:73:0f:b2:07:aa:fb:26:7a:34:88:01: 0e:84:b5:df:ba:95:88:1e:fb:f2:14:ec:2d:ea:97: 87:50:ce:98:46:f8:14:c6:8e:ee:b5:ff:61:62:64: 37:50:f4:7e:da:a9:48:1e:34:0a:0a:07:19:fc:9b: 7e:5b:f4:7a:76:ae:e0:3a:db:a8:6a:c7:eb:27:ea: 3c:8a:64:01:3b:6f:6e:90:a4:86:84:dd:bf:c9:b6: 2a:80:e5:d2:73:40:65:a0:26:62:28:fb:7f:34:18: b9:69:f5:0c:2c:ce:c5:95:3a:e4:fa:23:fd:3b:76: ff:26:57:11:1b:cc:c8:2d:c0:8e:77:eb:6e:96:72: da:fa:61:bf:27:34:44:16:0d:e2:a1:b5:64:62:6d: 0d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:10:AB:34:35:EA:E0:96:46:12:B4:4E:0B:53:92:D1:18:9F:4F:49 X509v3 Authority Key Identifier: keyid:CB:22:4E:C9:F8:B4:CE:EA:2F:2D:6E:2F:B6:E2:FD:AD:B6:AA:C8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:02:c5:46:56:e7:e3:b0:25:c5:d8:97:63:6d:e9:7e:4b:fa: a6:1e:ce:f7:0f:a7:a7:26:03:22:0b:ab:d0:08:2b:75:c3:af: 3b:21:ec:6d:cc:59:b0:c8:09:28:41:35:33:79:84:04:ca:c0: de:20:8a:01:50:b8:93:66:e4:30:7f:44:a0:cc:de:1b:cc:83: d8:03:3d:ba:91:5d:4f:eb:9a:1d:e4:08:14:52:82:c9:37:93: 63:2d:1c:c4:bb:ae:a5:f5:e7:6b:55:75:36:08:fe:7f:59:e6: 4d:47:b2:4c:33:ce:b9:0e:16:58:e5:ad:55:d1:3d:d2:57:62: 5f:92:45:28:0a:d8:ab:2f:27:57:41:ba:6a:f6:b3:90:1a:24: 75:c9:9a:5e:be:19:30:b9:43:3c:ab:e4:ae:03:3b:7f:34:7a: bd:0a:b7:fa:9a:df:fe:ee:37:f8:db:94:98:6d:1c:8b:c8:d8: 63:70:9b:72:10:90:dc:af:3f:50:46:1c:61:f9:a3:2f:68:9c: d7:49:e7:75:a1:63:91:53:41:ba:f3:29:a6:da:0f:b7:3e:72: f5:75:6d:c1:ad:e2:ec:e6:7a:c3:07:61:91:e3:32:eb:23:57: b1:e4:9c:9c:01:6e:a3:77:9d:82:05:1b:90:e5:5d:5b:90:8e: 5a:12:a2:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaaNV5HlHmVx2fkyM41FBVHWZ0WYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IyMjRFQzlGOEI0Q0VFQTJGMkQ2RTJGQjZFMkZEQURC NkFBQzhBMTAeFw0yNTExMDMwOTI3MjRaFw0yNTExMDQxMTQxMjRaMDMxMTAvBgNV BAMTKDQ3MTBBQjM0MzVFQUUwOTY0NjEyQjQ0RTBCNTM5MkQxMTg5RjRGNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfP8kqYhab3N0QwaKEhyxXptFM DiI4WFxLnYE2eBQfBSMshbQViftreslqSg9yZ66uyivkBrQ9ZmUwv+BCLokmzY4y dMUR8bIwEJujosgeLPWGICtaKSHGlxiCc8LYkoXdF17XPQvFm78lM8hzD7IHqvsm ejSIAQ6Etd+6lYge+/IU7C3ql4dQzphG+BTGju61/2FiZDdQ9H7aqUgeNAoKBxn8 m35b9Hp2ruA626hqx+sn6jyKZAE7b26QpIaE3b/JtiqA5dJzQGWgJmIo+380GLlp 9QwszsWVOuT6I/07dv8mVxEbzMgtwI53626Wctr6Yb8nNEQWDeKhtWRibQ3dAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURxCrNDXq4JZGErROC1OS0RifT0kwHwYDVR0j BBgwFoAUyyJOyfi0zuovLW4vtuL9rbaqyKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3BvS1g5TjhkY3VWVjc5dlIyZjZ3ODVjajN0cEJ6QXMyakE3cWk5VGNC dmsvMC9DQjIyNEVDOUY4QjRDRUVBMkYyRDZFMkZCNkUyRkRBREI2QUFDOEExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCMjI0RUM5RjhCNENFRUEy RjJENkUyRkI2RTJGREFEQjZBQUM4QTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N3BvS1g5TjhkY3VWVjc5dlIyZjZ3ODVjajN0cEJ6QXMyakE3cWk5VGNCdmsvMC9D QjIyNEVDOUY4QjRDRUVBMkYyRDZFMkZCNkUyRkRBREI2QUFDOEExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIwLFRlbn47AlxdiXY23pfkv6ph7O9w+npyYDIgur0AgrdcOvOyHsbcxZsMgJ KEE1M3mEBMrA3iCKAVC4k2bkMH9EoMzeG8yD2AM9upFdT+uaHeQIFFKCyTeTYy0c xLuupfXna1V1Ngj+f1nmTUeyTDPOuQ4WWOWtVdE90ldiX5JFKArYqy8nV0G6avaz kBokdcmaXr4ZMLlDPKvkrgM7fzR6vQq3+prf/u43+NuUmG0ci8jYY3CbchCQ3K8/ UEYcYfmjL2ic10nndaFjkVNBuvMpptoPtz5y9XVtwa3i7OZ6wwdhkeMy6yNXseSc nAFuo3edggUbkOVdW5COWhKixw== -----END CERTIFICATE-----Generated at Mon Nov 3 18:52:56 2025 by rpki-client