$ rpki-client -vvf rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft File: CDCD83F4405AFD2B52943F9838374A340858512F.mft (raw, json) Hash identifier: wgrhpIa34uIAQbl6S42uWzuzWwrub+ADcS14oaUrRpg= Subject key identifier: 7A:12:D2:F3:1B:CB:B9:BA:95:90:74:19:02:C2:16:D6:21:43:BE:84 Authority key identifier: CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F Certificate issuer: /CN=CDCD83F4405AFD2B52943F9838374A340858512F Certificate serial: 5AC20D24C3E5B8207EA52B6E1F3A37CBF9E6F689 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer Subject info access: rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft Manifest number: 0308 Signing time: Mon 03 Nov 2025 09:24:18 +0000 Manifest this update: Mon 03 Nov 2025 09:19:18 +0000 Manifest next update: Tue 04 Nov 2025 12:52:18 +0000 Files and hashes: 1: 323830343a356534343a3a2f33322d3430203d3e20323639303232.roa (hash: o1wONqPOD2DiPspwJs9O0pk4Qff+Oqik6HEtMjHrJk0=) 2: 34352e3137382e3134342e302f32322d3234203d3e20323639303232.roa (hash: aJllC4bfN18sF7GVNwni9H6S3Ips8TngUuVzjDQk1mw=) 3: CDCD83F4405AFD2B52943F9838374A340858512F.crl (hash: cTXszM2W2tG9bE1EP7Ib7ibCMGQuiUxukSdRM79c7a8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c2:0d:24:c3:e5:b8:20:7e:a5:2b:6e:1f:3a:37:cb:f9:e6:f6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDCD83F4405AFD2B52943F9838374A340858512F Validity Not Before: Nov 3 09:19:18 2025 GMT Not After : Nov 4 12:52:18 2025 GMT Subject: CN=7A12D2F31BCBB9BA9590741902C216D62143BE84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6b:9c:96:87:11:e3:f1:f3:22:fa:c1:9b:0e: e8:22:55:ce:b4:8c:31:e6:ce:5b:ee:c1:dc:ce:85: 4a:11:bd:e7:34:6a:d0:e5:d0:78:d6:fe:c5:7e:fa: a0:f8:e9:90:04:ed:7d:0c:8d:05:b0:fb:29:9e:60: 3b:6d:0e:88:61:b7:02:0b:99:7a:3d:c9:3e:c4:02: 83:30:26:9a:35:53:82:af:86:2c:78:f0:41:e9:0f: 6d:76:d3:be:e0:d8:99:10:c4:c4:bc:43:b6:80:fd: f1:46:42:58:e3:05:24:13:95:e6:1a:70:46:9d:94: b9:4e:29:6d:d8:6e:b7:b3:66:e6:03:8e:0b:86:86: 98:81:d7:5f:72:46:a6:6e:bd:9a:d7:0f:61:d8:73: e5:ca:7d:05:8c:8d:e2:2b:cc:c6:21:9f:08:cb:c8: 70:6b:d4:39:6f:1a:4a:81:80:4f:7a:e3:bb:ce:1b: 2b:35:1b:38:6f:7f:cf:c3:05:08:b2:fb:50:b1:9f: 60:5f:49:40:96:18:8d:38:42:eb:f4:fd:94:f5:0f: d2:b9:45:0e:f2:9b:1a:d1:13:23:b6:d0:86:49:5a: 2b:c3:b8:69:75:c8:dc:9f:24:b0:f7:94:26:a4:84: 60:16:06:72:ef:dc:04:aa:e3:61:fa:1c:66:b0:a0: a7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:12:D2:F3:1B:CB:B9:BA:95:90:74:19:02:C2:16:D6:21:43:BE:84 X509v3 Authority Key Identifier: keyid:CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:8a:5d:97:2c:1c:6b:f4:ff:3c:9d:c4:44:44:d6:60:91:f0: 3b:bf:0d:a6:e7:2b:1e:d1:f2:b4:20:c8:51:b0:c7:c8:9c:b2: 5a:c4:78:e6:80:a4:ed:91:30:f3:dc:d0:b1:61:df:81:d9:d6: e3:fa:77:fa:c2:0b:36:86:77:0a:a8:bd:c4:16:ae:4b:84:e1: a4:02:c1:73:22:08:16:9b:04:6e:a2:d4:61:5a:31:51:13:e0: 14:91:95:25:0c:61:73:f9:c1:58:13:0d:0f:de:e0:8c:ac:ab: 64:42:e5:e4:d6:e9:a5:d2:69:9b:c1:4e:8d:89:60:98:3e:40: 39:97:b9:3d:48:c9:96:b9:41:11:4a:e8:f6:ed:48:1d:97:20: f6:01:84:21:5f:67:a2:42:f2:38:ca:78:da:1b:6c:46:72:99: 12:96:91:27:70:ab:86:38:d1:61:fe:b0:d9:4c:19:e7:c8:76: 95:de:73:96:5a:e3:84:db:29:fb:60:cc:a4:41:53:7b:ec:15: 3b:92:65:84:90:fa:bb:93:1c:13:b7:9a:86:5b:f3:1e:1f:0f: da:73:a7:b2:1e:53:96:6a:d7:db:6c:5b:e6:c6:35:d8:2f:ba: b7:d4:40:7c:31:06:60:b0:a9:ef:f6:23:d1:48:c3:5d:46:8a: 99:63:91:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWsINJMPluCB+pStuHzo3y/nm9okwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDRDgzRjQ0MDVBRkQyQjUyOTQzRjk4MzgzNzRBMzQw ODU4NTEyRjAeFw0yNTExMDMwOTE5MThaFw0yNTExMDQxMjUyMThaMDMxMTAvBgNV BAMTKDdBMTJEMkYzMUJDQkI5QkE5NTkwNzQxOTAyQzIxNkQ2MjE0M0JFODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHa5yWhxHj8fMi+sGbDugiVc60 jDHmzlvuwdzOhUoRvec0atDl0HjW/sV++qD46ZAE7X0MjQWw+ymeYDttDohhtwIL mXo9yT7EAoMwJpo1U4Kvhix48EHpD212077g2JkQxMS8Q7aA/fFGQljjBSQTleYa cEadlLlOKW3YbrezZuYDjguGhpiB119yRqZuvZrXD2HYc+XKfQWMjeIrzMYhnwjL yHBr1DlvGkqBgE9647vOGys1Gzhvf8/DBQiy+1Cxn2BfSUCWGI04Quv0/ZT1D9K5 RQ7ymxrREyO20IZJWivDuGl1yNyfJLD3lCakhGAWBnLv3ASq42H6HGawoKfPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUehLS8xvLubqVkHQZAsIW1iFDvoQwHwYDVR0j BBgwFoAUzc2D9EBa/StSlD+YODdKNAhYUS8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHdWRUdIcFBzQnVHZndZMUQ5eFZCTkRDUjZ3UjZ3NmVpaHRhWjZORDND eDgvMi9DRENEODNGNDQwNUFGRDJCNTI5NDNGOTgzODM3NEEzNDA4NTg1MTJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQ0Q4M0Y0NDA1QUZEMkI1 Mjk0M0Y5ODM4Mzc0QTM0MDg1ODUxMkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHdWRUdIcFBzQnVHZndZMUQ5eFZCTkRDUjZ3UjZ3NmVpaHRhWjZORDNDeDgvMi9D RENEODNGNDQwNUFGRDJCNTI5NDNGOTgzODM3NEEzNDA4NTg1MTJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlIpdlywca/T/PJ3ERETWYJHwO78NpucrHtHytCDIUbDHyJyyWsR45oCk7ZEw 89zQsWHfgdnW4/p3+sILNoZ3Cqi9xBauS4ThpALBcyIIFpsEbqLUYVoxURPgFJGV JQxhc/nBWBMND97gjKyrZELl5NbppdJpm8FOjYlgmD5AOZe5PUjJlrlBEUro9u1I HZcg9gGEIV9nokLyOMp42htsRnKZEpaRJ3CrhjjRYf6w2UwZ58h2ld5zllrjhNsp +2DMpEFTe+wVO5JlhJD6u5McE7eahlvzHh8P2nOnsh5TlmrX22xb5sY12C+6t9RA fDEGYLCp7/Yj0UjDXUaKmWORkg== -----END CERTIFICATE-----Generated at Tue Nov 4 00:11:35 2025 by rpki-client