$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft File: 11CAB655737FE08C031052B869B67F7F82CCE9CC.mft (raw, json) Hash identifier: nv+yhPUfHXBXEvwhlgQ2px/nwr+942W1YOQTzHHVDKw= Subject key identifier: B7:3F:48:B3:36:1D:63:76:80:1E:40:C3:B0:A9:29:3F:07:B3:D8:FD Authority key identifier: 11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC Certificate issuer: /CN=11CAB655737FE08C031052B869B67F7F82CCE9CC Certificate serial: 5AEF4FC5583793EEA8545234D4FB82A1D6695871 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft Manifest number: 017F Signing time: Mon 03 Nov 2025 17:08:38 +0000 Manifest this update: Mon 03 Nov 2025 17:03:38 +0000 Manifest next update: Tue 04 Nov 2025 21:07:38 +0000 Files and hashes: 1: 11CAB655737FE08C031052B869B67F7F82CCE9CC.crl (hash: qj1IUa9cpi+uCaOhzRNRhlla84EjeaNyWkJUA8z6Lg0=) 2: 34352e342e38302e302f32322d3332203d3e20323635393333.roa (hash: Hjx5RjpzokA4knJgq0k249DxnjzKzpITikPCcGMUtr8=) 3: 3136342e3136332e302e302f32322d3332203d3e20323635393333.roa (hash: GHvq9r74x2Xc9pO/newiw9yIkLQrbVGTcJbcBnLLpsk=) 4: 323830343a343031343a3a2f33322d313238203d3e20323635393333.roa (hash: s5G6Z9jrVoevflU84bZ+yzQEF2Gyexpuwo5a+N4Yd7w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.crl rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ef:4f:c5:58:37:93:ee:a8:54:52:34:d4:fb:82:a1:d6:69:58:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11CAB655737FE08C031052B869B67F7F82CCE9CC Validity Not Before: Nov 3 17:03:38 2025 GMT Not After : Nov 4 21:07:38 2025 GMT Subject: CN=B73F48B3361D6376801E40C3B0A9293F07B3D8FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:80:c9:de:6e:e8:0f:09:20:0f:ac:67:d2:da: 79:36:1f:4b:ca:4d:e4:ac:6e:04:2b:5a:ce:67:fa: 3a:b6:ec:c1:ce:cc:fc:1c:60:75:e9:49:09:2d:0f: 00:75:10:52:3e:8c:17:74:fc:a3:f7:84:f5:e1:57: 85:72:32:02:b4:08:27:1c:f4:b8:e4:f7:f7:89:5a: d3:77:6b:7c:48:64:06:b2:06:27:5f:c7:01:af:2a: 2a:46:ef:18:f9:f1:f7:78:ab:fd:bd:c0:a0:cd:08: b6:ec:d6:9f:82:5f:81:35:0e:86:4b:5d:bd:a2:28: cf:cb:84:d0:b5:3e:86:78:34:9d:92:70:fb:71:9f: ea:b2:1f:a9:17:cb:fb:34:09:3f:f4:b4:35:80:f0: 98:0a:f6:57:bb:2c:54:48:89:5c:2d:bd:dd:b7:b1: 14:b0:cf:16:1b:29:13:07:72:ca:05:af:d4:11:6b: 03:55:34:4f:a1:34:29:5f:dd:55:27:81:38:05:af: 2e:00:55:07:3e:b9:0f:a0:d6:c4:98:99:9f:52:01: a0:93:6e:e4:22:3c:de:6b:c5:18:97:33:8f:9d:b2: 05:07:7b:30:81:9e:1d:52:9c:5b:b7:d7:ea:9c:cf: d6:08:c9:8b:cc:2c:b6:5a:4a:65:56:40:2e:1e:9a: a0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3F:48:B3:36:1D:63:76:80:1E:40:C3:B0:A9:29:3F:07:B3:D8:FD X509v3 Authority Key Identifier: keyid:11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c2:8a:86:91:e5:7c:16:6f:3c:16:88:49:43:f0:7b:ed:8e: 22:3e:60:40:20:95:83:7d:b7:fe:03:30:89:41:47:31:9d:30: c6:68:f8:8f:5b:77:81:e7:f1:5d:8d:54:d6:13:4f:d5:96:ed: db:fe:08:90:d5:0a:b2:7b:82:af:b7:5a:4a:a7:7a:ba:10:e0: 5d:f2:14:79:26:8c:35:c6:ed:3c:2a:d1:1e:b3:d1:0e:4c:85: e3:1c:9f:43:3f:a1:df:dd:9b:61:c9:18:c1:22:a4:70:5d:75: 70:68:e3:b3:a7:0f:47:49:9d:28:a9:89:95:6c:1f:7e:7a:a6: 74:44:25:53:65:63:7c:37:ab:b8:38:4e:89:78:6a:96:0a:cc: ac:83:64:54:ca:87:66:30:4a:03:98:a4:19:78:b8:3f:44:32: cd:d6:16:35:df:ea:2f:9e:07:09:fb:cc:3a:68:fc:6a:38:5d: e4:90:a3:b3:23:2c:7d:6e:0e:d1:13:fb:3a:93:e3:1e:67:42: 5b:6f:25:0a:2c:e3:8e:a2:bb:e3:05:dd:7e:80:2d:97:d6:f2: 4a:d8:75:bb:bd:96:2d:60:f0:2c:de:61:d7:32:9a:24:0e:41: bc:ea:26:02:b0:85:31:a0:a9:ea:5e:53:d5:10:f0:e7:94:7b: da:97:88:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWu9PxVg3k+6oVFI01PuCodZpWHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDQUI2NTU3MzdGRTA4QzAzMTA1MkI4NjlCNjdGN0Y4 MkNDRTlDQzAeFw0yNTExMDMxNzAzMzhaFw0yNTExMDQyMTA3MzhaMDMxMTAvBgNV BAMTKEI3M0Y0OEIzMzYxRDYzNzY4MDFFNDBDM0IwQTkyOTNGMDdCM0Q4RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSgMnebugPCSAPrGfS2nk2H0vK TeSsbgQrWs5n+jq27MHOzPwcYHXpSQktDwB1EFI+jBd0/KP3hPXhV4VyMgK0CCcc 9Ljk9/eJWtN3a3xIZAayBidfxwGvKipG7xj58fd4q/29wKDNCLbs1p+CX4E1DoZL Xb2iKM/LhNC1PoZ4NJ2ScPtxn+qyH6kXy/s0CT/0tDWA8JgK9le7LFRIiVwtvd23 sRSwzxYbKRMHcsoFr9QRawNVNE+hNClf3VUngTgFry4AVQc+uQ+g1sSYmZ9SAaCT buQiPN5rxRiXM4+dsgUHezCBnh1SnFu31+qcz9YIyYvMLLZaSmVWQC4emqCXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtz9IszYdY3aAHkDDsKkpPwez2P0wHwYDVR0j BBgwFoAUEcq2VXN/4IwDEFK4abZ/f4LM6cwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFlOblF1QTVNR1lqMUpXcEVQeFVUS0hZOWZHaWl2ZHQ3WWJDeWFCaW50 RHEvMC8xMUNBQjY1NTczN0ZFMDhDMDMxMDUyQjg2OUI2N0Y3RjgyQ0NFOUNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQ0FCNjU1NzM3RkUwOEMw MzEwNTJCODY5QjY3RjdGODJDQ0U5Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFlOblF1QTVNR1lqMUpXcEVQeFVUS0hZOWZHaWl2ZHQ3WWJDeWFCaW50RHEvMC8x MUNBQjY1NTczN0ZFMDhDMDMxMDUyQjg2OUI2N0Y3RjgyQ0NFOUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAesKKhpHlfBZvPBaISUPwe+2OIj5gQCCVg323/gMwiUFHMZ0wxmj4j1t3gefx XY1U1hNP1Zbt2/4IkNUKsnuCr7daSqd6uhDgXfIUeSaMNcbtPCrRHrPRDkyF4xyf Qz+h392bYckYwSKkcF11cGjjs6cPR0mdKKmJlWwffnqmdEQlU2VjfDeruDhOiXhq lgrMrINkVMqHZjBKA5ikGXi4P0QyzdYWNd/qL54HCfvMOmj8ajhd5JCjsyMsfW4O 0RP7OpPjHmdCW28lCizjjqK74wXdfoAtl9bySth1u72WLWDwLN5h1zKaJA5BvOom ArCFMaCp6l5T1RDw55R72peIqA== -----END CERTIFICATE-----Generated at Tue Nov 4 06:47:48 2025 by rpki-client