$ rpki-client -vvf rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft File: CA9298E26EC7D83F990DD29EFD395097A928590F.mft (raw, json) Hash identifier: qWRBAdiBKuFlhDZawSzFChevK2hgHThDLk52VMIC0Xc= Subject key identifier: D3:0E:6D:8D:0C:C9:19:73:AB:FF:70:1F:A4:86:AE:52:1F:8F:F7:C6 Authority key identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F Certificate issuer: /CN=CA9298E26EC7D83F990DD29EFD395097A928590F Certificate serial: 150C5A6E63EA7C0C34344396C032771D2178FAB5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject info access: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft Manifest number: 022C Signing time: Mon 03 Nov 2025 23:39:15 +0000 Manifest this update: Mon 03 Nov 2025 23:34:15 +0000 Manifest next update: Wed 05 Nov 2025 01:28:15 +0000 Files and hashes: 1: 3136382e3232372e38302e302f32322d3234203d3e203631363938.roa (hash: S1X3FDjegEq67IqZtyansbQSwefFYc5W5CadNAvGNo4=) 2: CA9298E26EC7D83F990DD29EFD395097A928590F.crl (hash: cR9y8kH41H292bjTTZcwnQ/uHL6e4A+lQjUzgqAAIoA=) 3: 323830343a316165633a3a2f33322d3438203d3e203631363938.roa (hash: IFrUYpuj0d1bgr14YmgI4By335jGYf5cwE1I2H0w90A=) 4: 3133312e302e3136342e302f32322d3234203d3e203631363938.roa (hash: wtyTmXZbRgRsfoJNHLj8NWX0CbM90+xKZ4dA+uKkbSs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 01:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:0c:5a:6e:63:ea:7c:0c:34:34:43:96:c0:32:77:1d:21:78:fa:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA9298E26EC7D83F990DD29EFD395097A928590F Validity Not Before: Nov 3 23:34:15 2025 GMT Not After : Nov 5 01:28:15 2025 GMT Subject: CN=D30E6D8D0CC91973ABFF701FA486AE521F8FF7C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:97:4e:30:c4:82:97:bc:59:e5:91:3b:05:27: 19:b5:5e:9f:ee:48:40:ae:6b:7f:26:cc:ee:39:14: 3a:98:c5:df:94:be:52:72:8a:37:d6:41:29:18:86: a9:c9:ea:19:d0:ce:fb:b8:5d:69:1c:82:db:8a:98: 4c:12:cc:0d:e6:bf:ca:3d:23:2a:11:9e:a7:07:dc: 92:02:c9:fc:cc:94:22:92:d0:81:32:d3:44:c0:94: 2f:8a:0f:c1:7a:0e:82:22:a0:c4:d8:b6:00:70:d1: 8c:5b:f5:b0:56:06:04:aa:7d:38:4a:f8:83:4b:95: a3:09:81:a0:78:06:44:a3:88:83:6c:a9:6c:39:6c: d2:7e:1f:14:da:9e:f3:6a:d3:7e:67:f0:d8:28:7d: 79:1e:63:e7:9c:d6:4e:b8:d8:e4:77:e1:f3:f0:a5: e0:57:82:4f:a8:10:05:a2:7f:ef:4c:43:4f:9c:6c: 56:e3:53:87:28:70:3d:22:f2:a5:ca:6e:18:87:73: 02:bb:fb:f3:4e:44:3b:18:90:37:b9:26:85:43:04: a4:c6:87:b3:23:20:4d:13:7a:dd:38:e3:5a:df:3e: b0:a2:7f:44:ad:f1:41:a5:3f:74:ea:ba:0a:44:e1: 06:45:1c:97:74:dd:96:60:f0:aa:8a:b5:d4:8e:a6: 62:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0E:6D:8D:0C:C9:19:73:AB:FF:70:1F:A4:86:AE:52:1F:8F:F7:C6 X509v3 Authority Key Identifier: keyid:CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:a5:00:72:ee:8a:f2:15:23:3a:0c:b9:c8:cc:81:19:d3:df: 41:7c:36:c5:3c:85:bc:ac:ca:9f:4e:94:4c:d5:96:77:de:16: 4e:73:e9:ae:6c:6b:50:ed:9e:89:f0:8a:62:19:c9:f1:0d:0d: 4a:d9:a5:04:79:85:d1:24:7c:b6:a1:13:0b:98:26:da:c0:29: fc:4f:e0:ea:03:cb:26:fc:a7:59:ef:1b:ff:81:02:14:75:47: a5:9e:fc:cf:f3:1b:86:92:3d:99:da:ed:cc:5b:a3:2f:14:14: 84:d8:df:f1:cf:5c:41:5c:64:9c:22:a2:fc:6f:b3:46:0b:cc: 1b:36:f5:ff:03:1b:e0:9c:84:d8:34:fa:c9:87:b0:40:f7:e9: db:0f:57:24:02:bd:cd:ab:59:1a:86:5a:92:33:71:5f:d4:d7: e1:48:bc:e6:33:1b:8e:cc:7d:90:15:5d:47:9f:b8:c1:12:e6: a7:5a:ac:0d:29:da:44:27:9c:5c:a6:61:3d:9a:77:b9:97:29: 84:22:77:e8:b2:fb:95:76:53:fd:c5:fe:36:8d:db:41:23:3e: 2a:2c:02:ae:50:29:b7:79:8b:4a:0c:68:ff:14:9c:65:bd:11: 91:ed:a5:a4:e1:69:61:b8:22:ce:3e:e4:26:46:d1:7d:4c:60: 80:ce:c0:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFQxabmPqfAw0NEOWwDJ3HSF4+rUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5Mjk4RTI2RUM3RDgzRjk5MEREMjlFRkQzOTUwOTdB OTI4NTkwRjAeFw0yNTExMDMyMzM0MTVaFw0yNTExMDUwMTI4MTVaMDMxMTAvBgNV BAMTKEQzMEU2RDhEMENDOTE5NzNBQkZGNzAxRkE0ODZBRTUyMUY4RkY3QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6l04wxIKXvFnlkTsFJxm1Xp/u SECua38mzO45FDqYxd+UvlJyijfWQSkYhqnJ6hnQzvu4XWkcgtuKmEwSzA3mv8o9 IyoRnqcH3JICyfzMlCKS0IEy00TAlC+KD8F6DoIioMTYtgBw0Yxb9bBWBgSqfThK +INLlaMJgaB4BkSjiINsqWw5bNJ+HxTanvNq035n8NgofXkeY+ec1k642OR34fPw peBXgk+oEAWif+9MQ0+cbFbjU4cocD0i8qXKbhiHcwK7+/NORDsYkDe5JoVDBKTG h7MjIE0Tet0441rfPrCif0St8UGlP3TqugpE4QZFHJd03ZZg8KqKtdSOpmIzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0w5tjQzJGXOr/3AfpIauUh+P98YwHwYDVR0j BBgwFoAUypKY4m7H2D+ZDdKe/TlQl6koWQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZm emovMC9DQTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBOTI5OEUyNkVDN0Q4M0Y5 OTBERDI5RUZEMzk1MDk3QTkyODU5MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZmemovMC9D QTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANqUAcu6K8hUjOgy5yMyBGdPfQXw2xTyFvKzKn06UTNWWd94WTnPprmxrUO2e ifCKYhnJ8Q0NStmlBHmF0SR8tqETC5gm2sAp/E/g6gPLJvynWe8b/4ECFHVHpZ78 z/MbhpI9mdrtzFujLxQUhNjf8c9cQVxknCKi/G+zRgvMGzb1/wMb4JyE2DT6yYew QPfp2w9XJAK9zatZGoZakjNxX9TX4Ui85jMbjsx9kBVdR5+4wRLmp1qsDSnaRCec XKZhPZp3uZcphCJ36LL7lXZT/cX+No3bQSM+KiwCrlApt3mLSgxo/xScZb0Rke2l pOFpYbgizj7kJkbRfUxggM7ANg== -----END CERTIFICATE-----Generated at Tue Nov 4 05:05:51 2025 by rpki-client