$ rpki-client -vvf rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft File: C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft (raw, json) Hash identifier: rI133JYDOgAi4amKD0vE5SQgC0hWUgIcZWFQtyxAaX0= Subject key identifier: 49:CD:6D:12:71:81:84:E2:F1:D5:D8:6A:9F:87:77:9B:01:D2:B6:75 Authority key identifier: C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88 Certificate issuer: /CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88 Certificate serial: 23134E237440C9B4A5661CF5F66069FC0A4F4BC1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer Subject info access: rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft Manifest number: 02B0 Signing time: Mon 03 Nov 2025 08:27:36 +0000 Manifest this update: Mon 03 Nov 2025 08:22:36 +0000 Manifest next update: Tue 04 Nov 2025 11:12:36 +0000 Files and hashes: 1: 323830343a353264303a3a2f33322d3438203d3e20323638353433.roa (hash: Qrd0JpxRdK63UXPHTnI5YXQzpZ6Yil2JDfrC15kjcbA=) 2: C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl (hash: gKPeePJZBfDBYe5FMtZeXPqwCjnKOYUxGO08YMvCIwU=) 3: 34352e3136312e3133362e302f32322d3234203d3e20323638353433.roa (hash: +UWLRPcrCNkkl3d7+jayjTCSeAxunhCr55Vu+UR33iY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:13:4e:23:74:40:c9:b4:a5:66:1c:f5:f6:60:69:fc:0a:4f:4b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88 Validity Not Before: Nov 3 08:22:36 2025 GMT Not After : Nov 4 11:12:36 2025 GMT Subject: CN=49CD6D12718184E2F1D5D86A9F87779B01D2B675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0b:45:b0:bc:59:b2:91:b7:30:0d:5e:36:6b: a1:83:cc:52:43:4f:00:d9:2e:3b:14:5c:96:9d:e2: 9b:7c:c4:f6:83:7a:38:df:bb:6d:a1:53:51:5c:14: e1:a0:51:f4:50:2e:90:72:9a:f0:61:1f:00:6c:ea: 3b:e4:4e:b2:02:ad:7c:26:11:dd:ee:60:a4:0e:e9: ff:8a:24:41:4f:93:75:45:dd:72:c2:cf:4d:80:55: ed:05:83:40:39:8b:ee:8f:09:6e:30:7d:c5:54:69: 52:a9:76:64:2c:79:2c:94:30:cc:57:b2:4a:b1:1a: 51:77:70:ec:a0:64:49:5c:30:03:0f:d4:b5:92:15: 2b:87:65:25:6c:95:8f:a9:f6:63:ae:cf:0c:06:bd: 74:b6:f7:f4:8d:50:2f:f0:7b:74:fe:fb:88:40:c4: c6:7e:84:9d:ee:7f:df:1d:7f:d9:53:92:5f:21:01: e1:cd:3c:71:76:07:43:75:8e:4d:30:15:cd:1f:92: 9b:51:b4:67:3f:24:28:f8:14:fd:50:38:b9:11:c7: 6b:40:53:f9:dc:34:de:8b:6c:a5:48:f5:e3:6d:b4: c1:9e:38:56:94:eb:58:7d:de:a9:e1:b9:53:33:e1: 02:51:81:ee:d9:d6:62:5f:41:73:af:fd:b3:5c:c1: 41:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CD:6D:12:71:81:84:E2:F1:D5:D8:6A:9F:87:77:9B:01:D2:B6:75 X509v3 Authority Key Identifier: keyid:C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5f:c3:eb:aa:9c:52:75:d5:75:0f:d7:26:6c:62:87:37:73: 86:ba:45:09:97:70:22:4f:29:0f:a7:cc:95:59:85:28:30:e2: 6d:62:d8:9b:c2:91:e8:58:ee:ca:14:90:ca:2e:27:2e:46:87: b6:a0:b7:e2:2c:3f:4b:42:37:4b:12:3b:ee:a9:59:d7:55:c2: e4:de:3a:f6:c2:81:cd:1d:d5:63:45:19:af:c9:a6:26:50:13: 40:ae:4f:91:de:f4:a7:cc:61:91:61:a1:a4:63:4f:71:3b:56: 8a:57:16:17:d1:b0:f9:0b:a7:db:3b:42:99:c1:80:3a:38:7e: 9e:7f:a7:c6:92:df:5f:82:b2:71:59:52:64:b4:89:81:8e:b2: 40:c3:dc:1a:9a:90:f8:53:2a:a6:49:e0:2c:4c:85:63:17:b1: 9d:41:df:37:55:63:10:08:17:b3:1e:be:ca:5f:91:9d:d5:58: af:be:a6:3c:3d:39:51:ab:84:58:dc:98:e8:73:7a:42:36:77: bf:cd:df:34:92:20:95:5e:af:57:05:fd:03:99:e7:f8:c1:b3: d9:9a:47:61:2f:17:6d:f7:5c:08:58:a6:69:41:03:b0:44:54: eb:89:b4:45:fa:a8:99:c0:56:88:7b:d9:58:11:bc:d6:60:64: a5:a6:69:f8 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUIxNOI3RAybSlZhz19mBp/ApPS8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQjdDMUE1MkU3NUMwRDRCMzk0RTA5RkM2M0VBQ0ZG RDY5MkQ4ODAeFw0yNTExMDMwODIyMzZaFw0yNTExMDQxMTEyMzZaMDMxMTAvBgNV BAMTKDQ5Q0Q2RDEyNzE4MTg0RTJGMUQ1RDg2QTlGODc3NzlCMDFEMkI2NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPC0WwvFmykbcwDV42a6GDzFJD TwDZLjsUXJad4pt8xPaDejjfu22hU1FcFOGgUfRQLpBymvBhHwBs6jvkTrICrXwm Ed3uYKQO6f+KJEFPk3VF3XLCz02AVe0Fg0A5i+6PCW4wfcVUaVKpdmQseSyUMMxX skqxGlF3cOygZElcMAMP1LWSFSuHZSVslY+p9mOuzwwGvXS29/SNUC/we3T++4hA xMZ+hJ3uf98df9lTkl8hAeHNPHF2B0N1jk0wFc0fkptRtGc/JCj4FP1QOLkRx2tA U/ncNN6LbKVI9eNttMGeOFaU61h93qnhuVMz4QJRge7Z1mJfQXOv/bNcwUEhAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUSc1tEnGBhOLx1dhqn4d3mwHStnUwHwYDVR0j BBgwFoAUwst8GlLnXA1LOU4J/GPqz/1pLYgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby84V3RoTnNhcHRCc1BFRWU4YUxmeEhBeWFTeEFublQ5eXVXZWdIU2RITVZN LzAvQzJDQjdDMUE1MkU3NUMwRDRCMzk0RTA5RkM2M0VBQ0ZGRDY5MkQ4OC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DMkNCN0MxQTUyRTc1QzBENEIz OTRFMDlGQzYzRUFDRkZENjkyRDg4LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhX dGhOc2FwdEJzUEVFZThhTGZ4SEF5YVN4QW5uVDl5dVdlZ0hTZEhNVk0vMC9DMkNC N0MxQTUyRTc1QzBENEIzOTRFMDlGQzYzRUFDRkZENjkyRDg4Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA P1/D66qcUnXVdQ/XJmxihzdzhrpFCZdwIk8pD6fMlVmFKDDibWLYm8KR6FjuyhSQ yi4nLkaHtqC34iw/S0I3SxI77qlZ11XC5N469sKBzR3VY0UZr8mmJlATQK5Pkd70 p8xhkWGhpGNPcTtWilcWF9Gw+Qun2ztCmcGAOjh+nn+nxpLfX4KycVlSZLSJgY6y QMPcGpqQ+FMqpkngLEyFYxexnUHfN1VjEAgXsx6+yl+RndVYr76mPD05UauEWNyY 6HN6QjZ3v83fNJIglV6vVwX9A5nn+MGz2ZpHYS8XbfdcCFimaUEDsERU64m0Rfqo mcBWiHvZWBG81mBkpaZp+A== -----END CERTIFICATE-----Generated at Mon Nov 3 12:31:21 2025 by rpki-client