$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft File: CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft (raw, json) Hash identifier: gs0PJRITgkog7AUqMwV4q86FpbEQVhQZcRxmUJUQF6I= Subject key identifier: BE:D1:56:EF:65:24:8B:2F:9E:20:24:79:A9:3D:39:C6:41:49:B3:65 Authority key identifier: CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB Certificate issuer: /CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB Certificate serial: 5EC5709D00CC15C41FFBFF9D452052B03D9C1B03 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer Subject info access: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft Manifest number: B7 Signing time: Mon 03 Nov 2025 08:44:29 +0000 Manifest this update: Mon 03 Nov 2025 08:39:29 +0000 Manifest next update: Tue 04 Nov 2025 12:07:29 +0000 Files and hashes: 1: 3230302e37332e3231362e302f32332d3233203d3e20323730343833.roa (hash: rK0IOV+EidUJoiUuH5PAx/A/dJ9zzuIc7Z7E9C5lbSQ=) 2: 3230302e37332e3231382e302f32342d3234203d3e20323730343833.roa (hash: LSJphWIa9vFPrdJlMAauYotdxkp6+3n2ZeeAZXIioRI=) 3: 3230302e37332e3231372e302f32342d3234203d3e20323730343833.roa (hash: qOo8IcZVlwTbd0IrCacSIIPW2ym2IRab0LHbvl6QFN4=) 4: 3230302e37332e3231362e302f32342d3234203d3e20323730343833.roa (hash: O22CqyazHO7QsfMKVz3bn+StHnBcbRXfWsVfyk+nEJo=) 5: 323830343a366361383a3a2f33322d3332203d3e20323730343833.roa (hash: A6lX3qzZ/VyUkzt2oHNgr7S5bRZ3Oe6wwfxFH6a3dFk=) 6: CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl (hash: cQS9a2EqMJgLS+9WIsdZzHXvCAPgfsIrz2H9fHL/8nU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c5:70:9d:00:cc:15:c4:1f:fb:ff:9d:45:20:52:b0:3d:9c:1b:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB Validity Not Before: Nov 3 08:39:29 2025 GMT Not After : Nov 4 12:07:29 2025 GMT Subject: CN=BED156EF65248B2F9E202479A93D39C64149B365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1f:0a:c8:11:87:a5:5a:b4:f1:37:28:d1:6c: 4d:be:0d:cb:b8:e8:88:cf:6f:bd:fc:dd:13:5f:b3: ea:f8:d1:59:85:a5:da:16:5f:d1:5f:bb:7f:26:ba: 12:f7:66:14:45:80:db:03:04:fa:39:de:77:c6:94: 33:72:8f:18:eb:05:c7:59:4e:1d:72:f2:5c:86:d6: 38:3e:5e:3e:5f:56:3a:84:a2:f9:2b:8d:26:40:99: cc:ae:40:d8:01:91:c2:43:8d:f1:f6:5e:fc:8e:d6: b3:fd:9e:78:8e:ae:fb:68:62:be:93:bf:82:52:1b: b0:58:ae:97:b9:d0:e2:46:7e:96:27:f9:b8:f1:40: 3a:0d:af:30:0c:9f:f5:01:5c:c9:b4:db:a0:20:e0: 2e:6b:b1:f1:a2:2f:48:f2:1c:3e:0f:58:bb:19:a6: 4f:90:cb:e9:2d:55:d2:85:df:96:98:76:75:b0:54: 60:e1:dd:b0:80:fd:cf:ff:fc:a7:22:4f:2b:ab:56: b1:9a:d5:55:15:be:9d:02:3e:c3:76:17:9e:68:2f: ea:34:f7:ba:fc:18:89:73:67:d6:8d:3e:72:ea:44: 4c:1e:2c:ba:b9:86:79:92:da:ff:30:da:be:a9:68: 1a:9a:d5:3b:46:5a:26:b6:90:79:3a:ff:a4:3b:fd: 46:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D1:56:EF:65:24:8B:2F:9E:20:24:79:A9:3D:39:C6:41:49:B3:65 X509v3 Authority Key Identifier: keyid:CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:29:da:a8:d7:7e:17:7a:7d:d2:73:44:b8:cb:2e:46:b7:a8: 4c:b7:01:59:2e:fa:64:65:2a:93:3e:60:ec:f0:1a:95:9f:98: b1:18:42:c5:77:3e:e2:51:c4:48:7f:be:8f:e9:b3:dc:7c:ad: ed:58:2c:6b:ba:56:14:0a:39:9a:a8:34:6f:2c:65:a8:c9:e0: 68:f6:10:9d:f3:50:72:b9:ab:f4:03:83:4b:de:56:5e:76:78: 24:c9:1f:59:21:b8:d9:58:37:80:27:3a:61:51:e5:ca:7c:a3: 70:8a:27:13:25:5f:54:35:2e:3d:1d:0d:2a:5c:ec:e4:3b:d3: 14:20:a1:29:6a:a7:27:c3:05:75:eb:b5:26:29:07:21:35:be: f4:8d:d0:e7:7f:ac:dd:5a:d5:77:60:77:d5:11:ea:32:11:1b: b3:ae:7f:23:8c:b3:27:d4:19:a4:69:e4:7e:ae:74:9d:5c:a5: 7d:b1:a3:80:9c:11:ba:3c:7c:ec:83:1f:93:71:64:3c:bd:93: 7f:96:54:a8:f6:a0:05:47:78:7e:b4:d3:68:1e:b1:38:fd:cf: 86:f9:9d:78:2d:ba:22:9a:a4:1d:c1:c7:2a:c3:7f:d5:e6:de: c7:44:18:5d:00:df:ae:c4:a6:44:6e:45:10:ba:27:b1:41:ff: 11:b4:bd:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXsVwnQDMFcQf+/+dRSBSsD2cGwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGODgzOTVFOTk3OUVGRkMwMzM1MTMwN0Q4Q0QwRTU0 NTU0QkJEQjAeFw0yNTExMDMwODM5MjlaFw0yNTExMDQxMjA3MjlaMDMxMTAvBgNV BAMTKEJFRDE1NkVGNjUyNDhCMkY5RTIwMjQ3OUE5M0QzOUM2NDE0OUIzNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHHwrIEYelWrTxNyjRbE2+Dcu4 6IjPb7383RNfs+r40VmFpdoWX9Ffu38muhL3ZhRFgNsDBPo53nfGlDNyjxjrBcdZ Th1y8lyG1jg+Xj5fVjqEovkrjSZAmcyuQNgBkcJDjfH2XvyO1rP9nniOrvtoYr6T v4JSG7BYrpe50OJGfpYn+bjxQDoNrzAMn/UBXMm026Ag4C5rsfGiL0jyHD4PWLsZ pk+Qy+ktVdKF35aYdnWwVGDh3bCA/c///KciTyurVrGa1VUVvp0CPsN2F55oL+o0 97r8GIlzZ9aNPnLqREweLLq5hnmS2v8w2r6paBqa1TtGWia2kHk6/6Q7/UbxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvtFW72Ukiy+eICR5qT05xkFJs2UwHwYDVR0j BBgwFoAUyviDlemXnv/AM1EwfYzQ5UVUu9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQldvUFUxSGhYdUVuUDVaNkQyS1lVMW56UG9LTmRzeVR2ZGpNY2hBNVZ0 OTgvMC9DQUY4ODM5NUU5OTc5RUZGQzAzMzUxMzA3RDhDRDBFNTQ1NTRCQkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRjg4Mzk1RTk5NzlFRkZD MDMzNTEzMDdEOENEMEU1NDU1NEJCREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QldvUFUxSGhYdUVuUDVaNkQyS1lVMW56UG9LTmRzeVR2ZGpNY2hBNVZ0OTgvMC9D QUY4ODM5NUU5OTc5RUZGQzAzMzUxMzA3RDhDRDBFNTQ1NTRCQkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuinaqNd+F3p90nNEuMsuRreoTLcBWS76ZGUqkz5g7PAalZ+YsRhCxXc+4lHE SH++j+mz3Hyt7Vgsa7pWFAo5mqg0byxlqMngaPYQnfNQcrmr9AODS95WXnZ4JMkf WSG42Vg3gCc6YVHlynyjcIonEyVfVDUuPR0NKlzs5DvTFCChKWqnJ8MFdeu1JikH ITW+9I3Q53+s3VrVd2B31RHqMhEbs65/I4yzJ9QZpGnkfq50nVylfbGjgJwRujx8 7IMfk3FkPL2Tf5ZUqPagBUd4frTTaB6xOP3PhvmdeC26IpqkHcHHKsN/1ebex0QY XQDfrsSmRG5FELonsUH/EbS9Sw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:35 2025 by rpki-client