$ rpki-client -vvf rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft File: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft (raw, json) Hash identifier: 9ojrleTYrjIupSfmNX7rsvDHkC0p4Ez8Ohes3oFG1LA= Subject key identifier: BB:C7:F4:1A:EB:DE:13:9C:42:B0:33:A2:8E:D0:5B:2A:35:9B:AE:8E Authority key identifier: CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D Certificate issuer: /CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Certificate serial: 5583F12D209D9418627802CA69F735F49795649C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft Manifest number: 02E8 Signing time: Mon 03 Nov 2025 05:44:52 +0000 Manifest this update: Mon 03 Nov 2025 05:39:52 +0000 Manifest next update: Tue 04 Nov 2025 09:15:52 +0000 Files and hashes: 1: 3137392e39372e31362e302f32312d3234203d3e203238313831.roa (hash: h2W8XM2at3NYFJYnufJYaTXSX9GJvpJOp/TMajp4JtE=) 2: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl (hash: d6QCqlbr7E/m/0BkitQ6TL2g5TYUgw/YIAPuxmFZsOg=) 3: 323830343a6461633a3a2f33322d3438203d3e203238313831.roa (hash: JvwegUUzqtOYrCDplzNKYzOOoU16ChE9rMTQfVBPQa0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:83:f1:2d:20:9d:94:18:62:78:02:ca:69:f7:35:f4:97:95:64:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Validity Not Before: Nov 3 05:39:52 2025 GMT Not After : Nov 4 09:15:52 2025 GMT Subject: CN=BBC7F41AEBDE139C42B033A28ED05B2A359BAE8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:42:90:5f:9d:8c:46:8d:81:ee:6b:6e:d9:a4: 06:b1:3b:af:95:f4:72:d8:89:ee:ce:f4:90:08:d0: 05:53:34:61:68:d5:b7:83:33:78:26:9d:65:ed:22: 65:c1:e7:0b:34:11:7e:75:e7:93:a1:d3:ef:bb:d6: cb:de:29:7c:4e:d0:49:42:96:2b:4d:52:8d:1f:04: 06:8b:1e:30:bf:e3:ba:48:08:fd:2d:b0:b3:c8:6e: a0:9a:f1:53:02:d8:8d:32:2e:da:e0:a7:29:c0:58: 39:f2:66:a6:82:d2:93:62:5a:c5:f0:44:d1:1f:d0: aa:a4:ea:30:62:89:8b:e3:5f:36:10:9a:ee:8d:50: 0f:af:b2:41:8d:fc:97:53:39:84:e0:03:b2:9f:31: eb:b3:01:4f:79:6b:5b:70:00:55:8c:79:25:f2:a3: 3f:79:6b:d1:71:37:6b:2c:f9:56:ce:31:c7:73:7c: b1:17:bd:f8:c2:26:35:65:f9:fd:c2:c8:be:2c:e3: 79:c2:ca:80:36:60:64:20:5f:af:e0:0a:59:df:94: e4:be:6d:65:3b:4f:97:81:06:e8:01:dd:be:22:e9: 04:66:03:c5:7b:f2:66:ff:34:c5:c1:56:70:36:97: b7:bb:61:94:85:d5:0f:0c:fc:ed:ea:15:da:55:d6: b2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C7:F4:1A:EB:DE:13:9C:42:B0:33:A2:8E:D0:5B:2A:35:9B:AE:8E X509v3 Authority Key Identifier: keyid:CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:6b:a6:13:54:e3:0f:4d:ff:af:5a:05:8a:b8:14:7e:c4:b0: 6c:eb:61:b8:cc:4b:d2:94:19:70:af:c1:82:d0:1c:5e:3f:36: 4e:9b:45:38:eb:42:68:f8:1e:1d:fb:5c:2b:31:22:20:b5:67: 53:7d:ab:50:be:39:05:21:28:65:63:ec:7f:66:4e:e5:a1:0b: 41:ad:83:de:f8:63:3e:cd:ed:bd:c8:50:5b:20:70:cc:2a:04: a9:2e:96:e6:94:96:93:cd:09:ff:74:c8:28:92:1e:6f:74:d6: 15:19:d0:46:af:74:e2:e0:c1:19:fe:b5:ee:3a:69:2d:5f:49: ce:f6:6b:bc:39:f5:42:a1:60:bd:9d:73:91:76:f0:5c:29:d8: b5:f2:7a:0e:c9:bb:d3:72:d9:d8:f3:dc:ee:de:22:52:84:66: a6:da:d9:23:c3:2b:f4:d7:34:60:f2:8c:e5:f4:6c:b4:83:1d: 01:0f:b4:bb:4f:c3:ab:fb:a2:f6:b7:a0:d4:70:ff:82:b3:12: 65:a9:f3:d8:5c:9a:2d:d7:ee:87:d7:d0:39:75:bf:72:4b:87: 42:2f:66:8c:75:34:c5:12:d5:3c:7d:6a:d8:86:41:6d:33:b3: 0a:b0:34:25:d4:8f:52:b9:69:9c:ac:52:97:50:4a:ca:9b:95: f4:0d:f2:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVYPxLSCdlBhieALKafc19JeVZJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyMEVGQzBCOTlBOEE4NkI0QjRDRkExMDdCMDAxRDUw OEI3MjkwRDAeFw0yNTExMDMwNTM5NTJaFw0yNTExMDQwOTE1NTJaMDMxMTAvBgNV BAMTKEJCQzdGNDFBRUJERTEzOUM0MkIwMzNBMjhFRDA1QjJBMzU5QkFFOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPQpBfnYxGjYHua27ZpAaxO6+V 9HLYie7O9JAI0AVTNGFo1beDM3gmnWXtImXB5ws0EX5155Oh0++71sveKXxO0ElC litNUo0fBAaLHjC/47pICP0tsLPIbqCa8VMC2I0yLtrgpynAWDnyZqaC0pNiWsXw RNEf0Kqk6jBiiYvjXzYQmu6NUA+vskGN/JdTOYTgA7KfMeuzAU95a1twAFWMeSXy oz95a9FxN2ss+VbOMcdzfLEXvfjCJjVl+f3CyL4s43nCyoA2YGQgX6/gClnflOS+ bWU7T5eBBugB3b4i6QRmA8V78mb/NMXBVnA2l7e7YZSF1Q8M/O3qFdpV1rIDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUu8f0GuveE5xCsDOijtBbKjWbro4wHwYDVR0j BBgwFoAUyiDvwLmaioa0tM+hB7AB1Qi3KQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9Y R0cvMC9DQTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMjBFRkMwQjk5QThBODZC NEI0Q0ZBMTA3QjAwMUQ1MDhCNzI5MEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9YR0cvMC9D QTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAomumE1TjD03/r1oFirgUfsSwbOthuMxL0pQZcK/BgtAcXj82TptFOOtCaPge HftcKzEiILVnU32rUL45BSEoZWPsf2ZO5aELQa2D3vhjPs3tvchQWyBwzCoEqS6W 5pSWk80J/3TIKJIeb3TWFRnQRq904uDBGf617jppLV9JzvZrvDn1QqFgvZ1zkXbw XCnYtfJ6Dsm703LZ2PPc7t4iUoRmptrZI8Mr9Nc0YPKM5fRstIMdAQ+0u0/Dq/ui 9reg1HD/grMSZanz2FyaLdfuh9fQOXW/ckuHQi9mjHU0xRLVPH1q2IZBbTOzCrA0 JdSPUrlpnKxSl1BKypuV9A3y0A== -----END CERTIFICATE-----Generated at Tue Nov 4 00:25:58 2025 by rpki-client