$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft File: CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft (raw, json) Hash identifier: LpulgCYXxskDatP6D8VGq103dDd3DAGvQJE19xpT9ag= Subject key identifier: DB:4D:66:40:01:44:E0:A0:AF:A4:F1:EA:EA:67:21:12:86:82:61:39 Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D Certificate issuer: /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D Certificate serial: 471F5C0519DB893AAAAD0A4C7761AB2B5A62DC68 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft Manifest number: 026D Signing time: Sun 02 Nov 2025 22:22:00 +0000 Manifest this update: Sun 02 Nov 2025 22:17:00 +0000 Manifest next update: Tue 04 Nov 2025 01:35:00 +0000 Files and hashes: 1: 3138372e38342e33352e302f32342d3234203d3e203533303532.roa (hash: bZVmKTe4oncs3dZRChOZ0UYNu+g+uqMW4C2vDaiETUQ=) 2: 3138372e38342e33322e302f32332d3233203d3e203533303532.roa (hash: EjrCf60Rtu0VafIasVQW6Z1H0RWmHru/DLLXdifrZ5U=) 3: 3138372e38342e34372e302f32342d3234203d3e203533303532.roa (hash: ptMqnRj8LqtTtDG+YnpbMJF32fawipWNhijOzS4MOEU=) 4: 3138372e38342e34342e302f32342d3234203d3e203533303532.roa (hash: 9Uw/JLq355+siGWWAMU/CgDbUsZIqm/MEzVaCAYKBtk=) 5: 323830343a326634383a323030303a3a2f33352d3335203d3e203533303532.roa (hash: Z8VMqKtS6c8oQSl/sZyuGYDCXY6Slrmo17tssEBJDrI=) 6: CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl (hash: Vpx2h9Kc+JVc8lE7lMnYC+/tPv47p26s45KlY/UV1xY=) 7: 3138372e38342e34352e302f32342d3234203d3e203533303532.roa (hash: 900GwKoLxuywtHi2SqZ8G9+u+NIBylaMovKRM4pBjzA=) 8: 3138372e38342e33322e302f32322d3232203d3e203533303532.roa (hash: vOhIqgDTIadDaon1gt7fCVy/mpXJQkIz6qG3ekLd3T0=) 9: 323830343a326634383a343030303a3a2f33362d3336203d3e203533303532.roa (hash: i+HC1DDB2921eTVEjjqDNcq5RxoE+kOgojnIe172JKk=) 10: 3138372e38342e33332e302f32342d3234203d3e203533303532.roa (hash: btC3yb2gw201qNYvn2GqTUoBvBbe/gJJzsej3Db9zs4=) 11: 3138372e38342e34342e302f32322d3232203d3e203533303532.roa (hash: 9TZ27uObGwwd8p5TrpjhMQuSRIxIL+nppt+AbR+BmNI=) 12: 323830343a326634383a343030303a3a2f33352d3335203d3e203533303532.roa (hash: bJTlkydbXUGBFokn1m1/Z4uHnSRjk6Hkb7sXiET52kk=) 13: 3138372e38342e33322e302f32342d3234203d3e203533303532.roa (hash: g5ktHwBrPb8+EV88G9qM6/0Gv9hItwrPCf8Q+6f8vzk=) 14: 3138372e38342e34362e302f32332d3233203d3e203533303532.roa (hash: UClQSg5d2LzxtVMA205cUo5yxx7LvOnaqlInimQg1EE=) 15: 3138372e38342e34342e302f32332d3233203d3e203533303532.roa (hash: xD4wdwwwR+oV8RsTzFOurC+sut3yZ7juddhGug2RQrw=) 16: 323830343a326634383a343030313a3a2f34382d3438203d3e203533303532.roa (hash: p8Q9xfZr584df8txYSR0rLNpxjNicadK5aC0oskhtTk=) 17: 3138372e38342e34362e302f32342d3234203d3e203533303532.roa (hash: nXz/KIfSPddgcWo+NtatqCl+xZjVvZgyj/lvyTHw/C4=) 18: 323830343a326634383a3a2f33352d3335203d3e203533303532.roa (hash: 6PLeUvtT+KVe+DrjTNHr6wre2GRXcTCr12nAkWKXpjw=) 19: 3138372e38342e33342e302f32332d3233203d3e203533303532.roa (hash: u32/uZ4yBcFZXvw1hLPy5wYAoSgbMpUkCDwo8kvjvVg=) 20: 3138372e38342e33342e302f32342d3234203d3e203533303532.roa (hash: lmgeY7fAaR10ssIywHoCCyP8LGBH5UNBrGPC7eZ4zQc=) 21: 3138372e38342e34332e302f32342d3234203d3e203533303532.roa (hash: 9wBAR6EySCOoaeFgP1A76cbE58LPawf6gcKLInE4pnU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 01:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:1f:5c:05:19:db:89:3a:aa:ad:0a:4c:77:61:ab:2b:5a:62:dc:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D Validity Not Before: Nov 2 22:17:00 2025 GMT Not After : Nov 4 01:35:00 2025 GMT Subject: CN=DB4D66400144E0A0AFA4F1EAEA67211286826139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:51:e6:e3:39:ad:4b:86:20:f8:c8:e4:f7:52: 17:6d:55:3c:dc:9b:8a:21:bc:1d:0b:1a:23:c0:1c: 80:21:3b:49:64:11:e5:34:b1:fd:a0:cd:7e:3e:ea: 4a:13:4e:f9:aa:97:f8:be:02:db:b4:5f:22:24:2c: 67:24:c1:9c:9b:dc:0f:d0:dd:e6:fb:52:7c:34:4c: b7:fc:2e:75:a6:a0:e9:87:05:4f:be:f5:7a:14:a9: 38:82:0d:ba:2d:62:87:26:bf:52:f9:b1:85:af:2f: cf:5d:a2:36:db:f3:1e:25:3a:c1:7f:96:85:9c:72: 2b:e7:ac:5a:83:c0:a0:65:d6:ff:7e:2b:e2:0f:e2: 8b:54:f9:d5:c0:2e:4b:11:a3:00:37:e3:fd:1d:56: 18:03:8e:ba:c4:a8:8d:97:14:2a:46:e4:49:c1:14: e9:ae:59:98:a3:f4:49:c8:9a:e5:41:62:6e:97:c1: 05:67:9c:7d:39:18:1b:eb:37:c5:f3:fd:f1:6b:e4: 75:7e:bb:4c:33:95:71:a6:8a:8a:e6:e4:4e:27:5d: d6:ce:19:54:b9:5b:01:66:04:fc:ce:5b:6c:87:7b: 4a:67:4a:0d:47:41:14:b4:fc:8f:ff:70:23:9a:8c: 1a:00:85:21:b0:f1:8a:a4:f7:7e:5a:1e:96:d2:55: 71:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4D:66:40:01:44:E0:A0:AF:A4:F1:EA:EA:67:21:12:86:82:61:39 X509v3 Authority Key Identifier: keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:29:fc:17:9c:87:ea:43:be:58:ba:78:74:5e:df:16:4e:54: f6:87:33:3d:ac:3e:62:8a:1c:ed:f4:3d:79:53:5b:a1:da:67: 45:94:cd:92:33:06:ac:91:00:ca:5e:51:57:57:06:5f:04:7e: 4e:64:09:3f:e8:6a:e8:90:eb:34:10:17:3d:d2:88:11:25:c5: 9c:5f:16:6e:a2:df:25:f6:1f:fa:c9:11:2c:fd:2a:ee:c2:45: ba:61:af:4f:5a:5e:37:62:28:ce:65:21:19:82:5a:b6:2b:23: 78:51:73:11:58:08:8a:08:eb:18:04:87:b7:ba:30:af:73:c4: df:18:7d:12:2a:28:0e:3e:07:9c:d2:3d:64:dd:cb:a2:5d:e9: 35:49:65:45:07:8e:1a:b0:d8:e3:02:89:b6:28:9d:e2:7d:8d: c0:e8:e0:7e:97:6a:a1:54:05:5a:d0:af:09:d9:16:db:44:5c: a8:5c:5f:6a:52:7a:fa:c3:83:4d:6a:1b:ab:52:93:7a:38:cf: 54:e8:f2:2b:4b:f6:21:ed:99:a3:5f:83:10:de:fb:22:83:32: 7a:04:08:1a:01:b5:cd:83:d9:ee:71:a1:28:94:9a:95:3f:e1: 4f:95:1a:3a:d7:f5:a4:f2:96:96:6c:a3:0a:6c:77:bb:68:a7: da:8d:de:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURx9cBRnbiTqqrQpMd2GrK1pi3GgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBNjUxNEQyREQxQUY0NkU3OTdEOTFDMzM0Qzc4QTQ0 OUI3NDAzRDAeFw0yNTExMDIyMjE3MDBaFw0yNTExMDQwMTM1MDBaMDMxMTAvBgNV BAMTKERCNEQ2NjQwMDE0NEUwQTBBRkE0RjFFQUVBNjcyMTEyODY4MjYxMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUebjOa1LhiD4yOT3UhdtVTzc m4ohvB0LGiPAHIAhO0lkEeU0sf2gzX4+6koTTvmql/i+Atu0XyIkLGckwZyb3A/Q 3eb7Unw0TLf8LnWmoOmHBU++9XoUqTiCDbotYocmv1L5sYWvL89dojbb8x4lOsF/ loWccivnrFqDwKBl1v9+K+IP4otU+dXALksRowA34/0dVhgDjrrEqI2XFCpG5EnB FOmuWZij9EnImuVBYm6XwQVnnH05GBvrN8Xz/fFr5HV+u0wzlXGmiorm5E4nXdbO GVS5WwFmBPzOW2yHe0pnSg1HQRS0/I//cCOajBoAhSGw8Yqk935aHpbSVXH1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU201mQAFE4KCvpPHq6mchEoaCYTkwHwYDVR0j BBgwFoAUyqZRTS3Rr0bnl9kcM0x4pEm3QD0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVlVM3VMUWdVWHU1RWJSazd1V01hWmRmTENLQmdqUW1YOUZnMnRDdzVM RFUvMC9DQUE2NTE0RDJERDFBRjQ2RTc5N0Q5MUMzMzRDNzhBNDQ5Qjc0MDNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBQTY1MTREMkREMUFGNDZF Nzk3RDkxQzMzNEM3OEE0NDlCNzQwM0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVlVM3VMUWdVWHU1RWJSazd1V01hWmRmTENLQmdqUW1YOUZnMnRDdzVMRFUvMC9D QUE2NTE0RDJERDFBRjQ2RTc5N0Q5MUMzMzRDNzhBNDQ5Qjc0MDNELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnSn8F5yH6kO+WLp4dF7fFk5U9oczPaw+Yooc7fQ9eVNbodpnRZTNkjMGrJEA yl5RV1cGXwR+TmQJP+hq6JDrNBAXPdKIESXFnF8WbqLfJfYf+skRLP0q7sJFumGv T1peN2IozmUhGYJatisjeFFzEVgIigjrGASHt7owr3PE3xh9EiooDj4HnNI9ZN3L ol3pNUllRQeOGrDY4wKJtiid4n2NwOjgfpdqoVQFWtCvCdkW20RcqFxfalJ6+sOD TWobq1KTejjPVOjyK0v2Ie2Zo1+DEN77IoMyegQIGgG1zYPZ7nGhKJSalT/hT5Ua Otf1pPKWlmyjCmx3u2in2o3ePA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:13:20 2025 by rpki-client