$ rpki-client -vvf rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft File: 966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft (raw, json) Hash identifier: 8fxLEKDMpgD1gObleo1rctue+xK7g51hD730fKcyt0c= Subject key identifier: 2E:E1:86:60:C3:02:C3:51:DB:43:0C:01:6C:75:EE:24:B5:6A:39:1E Authority key identifier: 96:6D:D7:97:B8:4E:59:CA:E6:22:7E:D4:FB:1D:4D:52:01:1E:BA:29 Certificate issuer: /CN=966DD797B84E59CAE6227ED4FB1D4D52011EBA29 Certificate serial: 041C66FA70B32345080463A91481CFA5E1DD255E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer Subject info access: rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft Manifest number: 38 Signing time: Sun 02 Nov 2025 19:57:06 +0000 Manifest this update: Sun 02 Nov 2025 19:52:06 +0000 Manifest next update: Mon 03 Nov 2025 23:13:06 +0000 Files and hashes: 1: 3136382e3230352e3132382e302f32322d3332203d3e20323635333635.roa (hash: UTHo9EEFQO4ipEo8t4TSyRqw0gIG4N/wl0NEzcGwaTQ=) 2: 323830343a326563343a3a2f33322d313238203d3e20323635333635.roa (hash: H63jKCVxvmkQQ3aMkx/LepjKsbCBpKcsiVsNBAOyuH0=) 3: 966DD797B84E59CAE6227ED4FB1D4D52011EBA29.crl (hash: VKXa3zsbpSK6QBzFlEb0SV50U8NbCAvG8S8+X5WB6JU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.crl rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 23:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1c:66:fa:70:b3:23:45:08:04:63:a9:14:81:cf:a5:e1:dd:25:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966DD797B84E59CAE6227ED4FB1D4D52011EBA29 Validity Not Before: Nov 2 19:52:06 2025 GMT Not After : Nov 3 23:13:06 2025 GMT Subject: CN=2EE18660C302C351DB430C016C75EE24B56A391E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:df:6c:5a:3a:7e:af:da:ed:e3:b9:f1:dc:67: 84:7e:95:e4:89:f6:40:49:99:c6:ec:da:7c:21:bf: e0:13:8f:9c:cd:72:e5:44:b2:73:50:25:17:5a:92: ba:0d:a0:20:52:38:ed:a5:7c:03:df:d0:ce:f8:35: 5e:33:6d:11:9c:3b:86:1c:54:17:a3:db:d0:7d:dd: c0:d5:f4:f2:1d:be:1e:a8:ef:47:d4:94:70:f6:ff: 28:cf:c2:ef:af:08:87:6e:46:5b:a3:54:5f:cc:3f: 46:a8:bd:64:58:29:fc:13:7b:31:8d:78:8b:63:c8: 70:c1:0e:61:2b:66:a7:f9:6f:8a:29:48:36:5d:9e: fb:8f:73:62:8a:7c:59:1b:fa:b6:7f:85:59:75:3f: f1:27:a5:40:17:61:ba:9d:6d:f0:62:4c:9a:b5:6f: 7b:3e:ee:fa:6e:e4:5b:04:75:3a:63:34:04:50:a4: ae:1b:ee:b8:a5:df:cc:e3:5f:3c:d2:e6:55:19:31: 4e:00:22:77:7e:31:7c:55:de:68:d9:48:d3:27:2e: 99:dc:f6:f6:c4:a4:dd:7e:c9:a7:3d:f1:03:4f:0f: ff:f0:7b:7f:fa:ca:ff:34:eb:3b:ea:44:05:fe:6b: 20:a9:d9:93:67:9e:8e:1c:0f:a4:b7:e6:83:ac:fd: c2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E1:86:60:C3:02:C3:51:DB:43:0C:01:6C:75:EE:24:B5:6A:39:1E X509v3 Authority Key Identifier: keyid:96:6D:D7:97:B8:4E:59:CA:E6:22:7E:D4:FB:1D:4D:52:01:1E:BA:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:30:69:79:ac:bb:37:a9:87:94:fb:2f:d2:c2:52:e3:df:3b: 4a:98:92:cd:79:25:66:29:7f:54:24:41:c7:75:22:fb:d6:f7: 61:1e:28:5c:a5:23:00:8d:bc:97:16:2b:fc:9a:0d:1e:b6:94: 87:94:12:60:77:4f:35:53:4f:04:5a:f2:4b:fa:c9:42:e6:f8: 8a:2c:b0:ed:8b:4a:a6:04:0e:75:6f:86:9c:db:7f:f1:f3:a0: 80:b9:fc:21:fc:1c:c5:1a:1e:c1:49:e6:fb:32:f1:b1:56:4f: 40:12:30:0b:fc:88:d0:17:10:84:88:42:21:1f:65:e8:02:75: 7a:28:c7:7a:90:4a:36:a1:43:58:c9:ba:a2:f5:f8:95:b0:4a: 36:e7:d7:af:5f:8c:6c:be:9a:7c:01:55:d9:9c:2d:46:47:cb: 28:e6:f1:c5:17:71:2d:a3:53:ba:e5:46:fa:9b:83:17:70:38: 5f:e3:a5:a0:6d:09:41:b0:a5:dd:fa:9e:f4:cb:2d:73:ff:6e: b4:00:29:2d:03:f5:20:d8:c5:7c:b9:b0:52:c0:d7:34:1f:80: bf:e0:e8:6a:06:bf:d6:e4:61:68:02:05:fc:00:e6:08:82:10: cc:97:66:3c:33:ea:a5:ec:35:a1:ca:f4:b3:5b:5c:07:54:7c: fc:3e:bf:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBBxm+nCzI0UIBGOpFIHPpeHdJV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY2REQ3OTdCODRFNTlDQUU2MjI3RUQ0RkIxRDRENTIw MTFFQkEyOTAeFw0yNTExMDIxOTUyMDZaFw0yNTExMDMyMzEzMDZaMDMxMTAvBgNV BAMTKDJFRTE4NjYwQzMwMkMzNTFEQjQzMEMwMTZDNzVFRTI0QjU2QTM5MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn32xaOn6v2u3jufHcZ4R+leSJ 9kBJmcbs2nwhv+ATj5zNcuVEsnNQJRdakroNoCBSOO2lfAPf0M74NV4zbRGcO4Yc VBej29B93cDV9PIdvh6o70fUlHD2/yjPwu+vCIduRlujVF/MP0aovWRYKfwTezGN eItjyHDBDmErZqf5b4opSDZdnvuPc2KKfFkb+rZ/hVl1P/EnpUAXYbqdbfBiTJq1 b3s+7vpu5FsEdTpjNARQpK4b7ril38zjXzzS5lUZMU4AInd+MXxV3mjZSNMnLpnc 9vbEpN1+yac98QNPD//we3/6yv806zvqRAX+ayCp2ZNnno4cD6S35oOs/cJVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULuGGYMMCw1HbQwwBbHXuJLVqOR4wHwYDVR0j BBgwFoAUlm3Xl7hOWcrmIn7U+x1NUgEeuikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2JWQ2RkRWdYVnE5cGhmc2JQRTlhalE5cVJ1d0pCc2Y5S1dWVGNuZjZW QVMvMC85NjZERDc5N0I4NEU1OUNBRTYyMjdFRDRGQjFENEQ1MjAxMUVCQTI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2NkRENzk3Qjg0RTU5Q0FF NjIyN0VENEZCMUQ0RDUyMDExRUJBMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2JWQ2RkRWdYVnE5cGhmc2JQRTlhalE5cVJ1d0pCc2Y5S1dWVGNuZjZWQVMvMC85 NjZERDc5N0I4NEU1OUNBRTYyMjdFRDRGQjFENEQ1MjAxMUVCQTI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALjBpeay7N6mHlPsv0sJS4987SpiSzXklZil/VCRBx3Ui+9b3YR4oXKUjAI28 lxYr/JoNHraUh5QSYHdPNVNPBFryS/rJQub4iiyw7YtKpgQOdW+GnNt/8fOggLn8 IfwcxRoewUnm+zLxsVZPQBIwC/yI0BcQhIhCIR9l6AJ1eijHepBKNqFDWMm6ovX4 lbBKNufXr1+MbL6afAFV2ZwtRkfLKObxxRdxLaNTuuVG+puDF3A4X+OloG0JQbCl 3fqe9Mstc/9utAApLQP1INjFfLmwUsDXNB+Av+Doaga/1uRhaAIF/ADmCIIQzJdm PDPqpew1ocr0s1tcB1R8/D6/8w== -----END CERTIFICATE-----Generated at Mon Nov 3 12:09:38 2025 by rpki-client