$ rpki-client -vvf rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.mft File: C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.mft (raw, json) Hash identifier: zDSHNWUpi8v7RhxM8E5SaQ4ubZRMV/sQyzGrvnH0OdM= Subject key identifier: 0C:10:AA:19:0E:2A:7B:32:D3:00:59:04:BD:28:00:13:D0:F0:24:5B Authority key identifier: C1:EB:54:5F:26:E5:2D:C8:9E:77:A7:72:F1:AD:8A:6B:70:57:B2:D8 Certificate issuer: /CN=C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8 Certificate serial: 55926610373B3AD09D53CA0A107085BEF783BFA7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.mft Manifest number: 2D Signing time: Sun 02 Nov 2025 22:56:05 +0000 Manifest this update: Sun 02 Nov 2025 22:51:05 +0000 Manifest next update: Tue 04 Nov 2025 00:43:05 +0000 Files and hashes: 1: C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.crl (hash: oHaTJ5bi27s8OOE3XZOPzE4AAoEueVs96ZTaGvHyV7Y=) 2: 3137372e31322e3232302e302f32322d3234203d3e20323730373531.roa (hash: b8uK8SK9lypoIfDWw1v0evX0i9JkB2JRA3ywki39qhU=) 3: 323830343a373064343a3a2f33322d3438203d3e20323730373531.roa (hash: BBQfvfs5At2uATUo3OhItBuxlawLkJ1AX7cM59tiKVk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.crl rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:92:66:10:37:3b:3a:d0:9d:53:ca:0a:10:70:85:be:f7:83:bf:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8 Validity Not Before: Nov 2 22:51:05 2025 GMT Not After : Nov 4 00:43:05 2025 GMT Subject: CN=0C10AA190E2A7B32D3005904BD280013D0F0245B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ec:c8:08:e5:cc:3b:a9:1d:9a:28:29:16:80: c8:96:07:4b:d6:46:07:a7:bf:f6:58:41:f9:91:3a: 57:14:99:c8:33:1b:e2:40:c6:3b:c3:29:72:5b:f9: 3c:4d:87:de:49:7c:6e:35:08:c8:36:bd:fe:45:7f: 51:b7:b2:b4:60:6d:a8:6b:de:55:3b:d4:d5:a1:c9: 8a:9f:8e:8b:d1:68:a4:3e:36:95:4b:7f:c6:2e:d6: fe:3f:c1:c3:55:69:68:46:27:d5:24:32:ad:87:d1: d2:d0:16:39:e7:57:e5:1d:e0:f4:52:83:cc:f3:6b: 93:05:9a:7a:14:fa:bb:12:6b:df:70:03:0d:20:d4: 1a:7c:de:61:22:14:bc:bd:18:ab:6b:87:f8:9a:bb: 9e:9e:0a:ec:e3:c9:9b:3d:62:1a:b6:50:21:fa:99: 16:45:6b:94:5e:b4:10:8e:58:9d:81:74:30:d6:a3: 8f:d9:8a:e3:6e:1a:9e:8c:79:9f:62:6d:4c:7c:4d: ba:da:f6:de:03:49:ec:9a:8e:34:17:55:58:dd:fd: dd:8e:5b:c5:d0:0d:3b:17:6f:0d:f3:5a:7b:d3:c8: cf:57:dd:f9:cf:85:8a:87:f3:63:47:9b:cd:8d:71: cb:e9:44:29:67:84:d4:89:88:1b:fc:a3:07:a5:5c: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:10:AA:19:0E:2A:7B:32:D3:00:59:04:BD:28:00:13:D0:F0:24:5B X509v3 Authority Key Identifier: keyid:C1:EB:54:5F:26:E5:2D:C8:9E:77:A7:72:F1:AD:8A:6B:70:57:B2:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:0b:d7:c0:46:71:4a:af:5a:d2:2a:e6:eb:2d:7c:66:1f:07: 84:42:49:6a:4a:cf:c5:30:38:4c:6a:bd:32:e8:e0:27:f5:b2: 8b:b8:d8:f0:a8:0b:d9:e3:8e:5b:70:62:ed:cd:a1:03:22:e7: 92:00:1e:98:65:1d:28:fb:5b:8e:c0:43:e2:2c:42:62:be:ec: 0a:54:6d:92:b1:74:a8:b5:59:b7:82:88:a9:89:7c:9c:c7:de: da:d0:7e:26:68:ef:95:22:fb:c3:76:74:b1:bb:e0:71:0b:2c: a6:30:15:97:95:e1:f9:c1:03:df:f7:6d:16:3c:e0:e7:e8:7b: 54:bc:da:e7:ca:ef:60:b1:e1:5e:ba:fb:5f:d5:fd:89:e4:8b: d4:84:99:e2:2f:5e:e2:b9:fb:c0:c1:b3:f7:18:6e:bf:5c:24: 1c:ea:f3:f9:cd:d4:a3:63:51:19:f0:1c:8d:b5:32:bd:f8:4f: da:88:93:8f:90:96:c3:bc:99:79:a5:fc:da:0d:54:bb:a9:20: 02:b3:09:c3:1a:d1:f4:47:78:92:2e:08:8f:a0:39:02:4e:be: b1:4d:45:ae:06:8e:fe:7b:c6:d6:47:98:0a:0a:6c:2a:91:cd: 34:a7:ab:f8:24:b3:c6:7e:cb:c5:82:38:2d:0f:3b:37:e1:13: 7d:92:d9:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVZJmEDc7OtCdU8oKEHCFvveDv6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFFQjU0NUYyNkU1MkRDODlFNzdBNzcyRjFBRDhBNkI3 MDU3QjJEODAeFw0yNTExMDIyMjUxMDVaFw0yNTExMDQwMDQzMDVaMDMxMTAvBgNV BAMTKDBDMTBBQTE5MEUyQTdCMzJEMzAwNTkwNEJEMjgwMDEzRDBGMDI0NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY7MgI5cw7qR2aKCkWgMiWB0vW Rgenv/ZYQfmROlcUmcgzG+JAxjvDKXJb+TxNh95JfG41CMg2vf5Ff1G3srRgbahr 3lU71NWhyYqfjovRaKQ+NpVLf8Yu1v4/wcNVaWhGJ9UkMq2H0dLQFjnnV+Ud4PRS g8zza5MFmnoU+rsSa99wAw0g1Bp83mEiFLy9GKtrh/iau56eCuzjyZs9Yhq2UCH6 mRZFa5RetBCOWJ2BdDDWo4/ZiuNuGp6MeZ9ibUx8Tbra9t4DSeyajjQXVVjd/d2O W8XQDTsXbw3zWnvTyM9X3fnPhYqH82NHm82NccvpRClnhNSJiBv8owelXFldAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDBCqGQ4qezLTAFkEvSgAE9DwJFswHwYDVR0j BBgwFoAUwetUXyblLcied6dy8a2Ka3BXstgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlJuRFlCUTZFcHVkSExEbTF4MjI2dWluc1Q5cG81NHh6SGZDeWo0RzNM dGovMC9DMUVCNTQ1RjI2RTUyREM4OUU3N0E3NzJGMUFEOEE2QjcwNTdCMkQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxRUI1NDVGMjZFNTJEQzg5 RTc3QTc3MkYxQUQ4QTZCNzA1N0IyRDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlJuRFlCUTZFcHVkSExEbTF4MjI2dWluc1Q5cG81NHh6SGZDeWo0RzNMdGovMC9D MUVCNTQ1RjI2RTUyREM4OUU3N0E3NzJGMUFEOEE2QjcwNTdCMkQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEwvXwEZxSq9a0irm6y18Zh8HhEJJakrPxTA4TGq9MujgJ/Wyi7jY8KgL2eOO W3Bi7c2hAyLnkgAemGUdKPtbjsBD4ixCYr7sClRtkrF0qLVZt4KIqYl8nMfe2tB+ JmjvlSL7w3Z0sbvgcQsspjAVl5Xh+cED3/dtFjzg5+h7VLza58rvYLHhXrr7X9X9 ieSL1ISZ4i9e4rn7wMGz9xhuv1wkHOrz+c3Uo2NRGfAcjbUyvfhP2oiTj5CWw7yZ eaX82g1Uu6kgArMJwxrR9Ed4ki4Ij6A5Ak6+sU1FrgaO/nvG1keYCgpsKpHNNKer +CSzxn7LxYI4LQ87N+ETfZLZYw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:05:57 2025 by rpki-client