$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft File: CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft (raw, json) Hash identifier: Y6viAGeMjg134+MBTHxQq+grDmW4FDe9e+MrwsyNmmU= Subject key identifier: 5B:03:7D:1E:B5:D4:EA:73:06:E0:34:3A:56:98:74:85:E3:26:98:CF Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6 Certificate issuer: /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6 Certificate serial: 61146606340BE5B1AA9F87A1808D5DB4C61E09B5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer Subject info access: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft Manifest number: 0318 Signing time: Mon 03 Nov 2025 08:05:43 +0000 Manifest this update: Mon 03 Nov 2025 08:00:43 +0000 Manifest next update: Tue 04 Nov 2025 10:41:43 +0000 Files and hashes: 1: 323830343a313462383a3a2f33322d3438203d3e20323633333436.roa (hash: 2zUdDQoZI7lf2QCIRFGO2DVEseSLfvIofWeRJppw+oo=) 2: 3139312e33372e302e302f32332d3332203d3e20323633333436.roa (hash: dk4B0gt3xtrzpqeQPsPPmX3X8Bi3YSdbr9PQbjrctok=) 3: 3139312e33372e342e302f32332d3332203d3e20323633333436.roa (hash: JBgbUMOSfuDRal8tFPKZ1hnVKHMRHXaPlhWoUlyXRt0=) 4: CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl (hash: Pb15P0tPuaJuVBEAEzk+gRmrFW/SE9zvBqiosmsbU+Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:14:66:06:34:0b:e5:b1:aa:9f:87:a1:80:8d:5d:b4:c6:1e:09:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6 Validity Not Before: Nov 3 08:00:43 2025 GMT Not After : Nov 4 10:41:43 2025 GMT Subject: CN=5B037D1EB5D4EA7306E0343A56987485E32698CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:86:28:2e:b2:ec:3e:29:6e:3e:8c:94:b9:9f: 2c:03:c6:1f:71:53:54:ba:d9:41:cc:56:45:39:e9: 23:98:31:aa:73:a0:a3:cb:3b:70:d4:bf:fe:b1:a1: f3:27:e0:5f:91:b7:79:9c:5d:29:5c:2a:57:d2:28: 9e:63:5c:f7:d4:21:c2:f6:e8:32:81:cc:98:14:0c: 90:bd:58:c4:ad:f3:0c:5a:bc:d0:27:32:47:9b:83: 4f:bd:e2:64:68:06:05:28:51:14:1f:b5:f7:64:cf: 8d:27:14:ba:f7:52:cc:c5:ce:55:b4:72:51:2f:62: 96:29:6b:5a:d6:97:ee:ba:81:f6:97:e3:55:42:1b: d4:ee:88:27:48:3b:1b:e5:0b:61:7e:f7:7c:f0:ad: 09:7a:4d:7a:f7:47:16:d9:d7:7b:1a:5f:a8:b5:40: 57:32:92:08:25:e3:b3:20:da:4d:0c:69:0b:d4:1a: 7c:1c:1f:86:51:74:8c:ff:6b:92:d4:8e:6a:a8:58: 74:f7:d4:eb:69:1e:62:82:da:70:b1:3c:13:c3:b8: 70:ea:e7:14:ec:34:40:e9:56:4a:b8:bb:aa:b8:66: 7d:eb:90:52:81:d7:40:00:40:cc:f4:d7:93:18:aa: be:53:03:20:64:85:86:b5:f1:7c:16:41:59:6f:b9: be:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:03:7D:1E:B5:D4:EA:73:06:E0:34:3A:56:98:74:85:E3:26:98:CF X509v3 Authority Key Identifier: keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:2e:2a:43:14:37:ab:56:58:0b:0e:fe:81:30:46:54:35:9c: 57:3c:78:fd:23:3f:f4:73:2e:9d:d6:00:1e:67:1c:ae:80:0d: e7:e3:5d:62:9e:68:23:aa:fb:15:4d:32:9a:23:18:c1:ea:17: a6:90:7c:cd:b8:34:ff:de:c9:df:0a:fb:fb:ac:c4:fa:5d:59: 12:b5:69:39:0d:8e:f2:af:21:af:c4:8f:38:13:3d:db:97:48: 6e:fc:59:ff:e7:50:48:40:42:9e:48:70:be:15:f7:71:b8:ac: 7e:1f:65:4c:5c:5b:29:24:fd:68:95:e2:70:1a:30:6b:12:5e: c8:1e:b9:7f:9b:14:da:67:92:1a:76:3e:02:71:9f:e6:0d:2e: 8e:31:54:c9:71:2b:78:05:4f:76:af:64:56:7b:cc:ca:3a:55: 16:54:9c:51:7e:2c:b4:21:27:b2:fb:1a:bb:cd:f5:e9:50:c7: 7e:5e:8e:f5:c8:c1:c4:5f:20:e4:32:aa:b0:b7:fb:16:7e:3a: 92:6c:3e:11:d7:08:a6:25:46:83:c9:b4:e2:08:a7:d5:e1:70: 44:6d:63:cf:58:64:48:02:41:bf:ee:8d:d0:0f:1a:5a:5c:ef: 1c:3d:9c:14:b3:cf:eb:5a:1b:ad:35:2a:a6:2e:0e:8a:b6:ab: 18:79:1c:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYRRmBjQL5bGqn4ehgI1dtMYeCbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E4NTc5MUE5MjY1RTg4MzUyRTM4MjM2MTFFNkQ4NEQ2 QkJCRENDNjAeFw0yNTExMDMwODAwNDNaFw0yNTExMDQxMDQxNDNaMDMxMTAvBgNV BAMTKDVCMDM3RDFFQjVENEVBNzMwNkUwMzQzQTU2OTg3NDg1RTMyNjk4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7higusuw+KW4+jJS5nywDxh9x U1S62UHMVkU56SOYMapzoKPLO3DUv/6xofMn4F+Rt3mcXSlcKlfSKJ5jXPfUIcL2 6DKBzJgUDJC9WMSt8wxavNAnMkebg0+94mRoBgUoURQftfdkz40nFLr3UszFzlW0 clEvYpYpa1rWl+66gfaX41VCG9TuiCdIOxvlC2F+93zwrQl6TXr3RxbZ13saX6i1 QFcykggl47Mg2k0MaQvUGnwcH4ZRdIz/a5LUjmqoWHT31OtpHmKC2nCxPBPDuHDq 5xTsNEDpVkq4u6q4Zn3rkFKB10AAQMz015MYqr5TAyBkhYa18XwWQVlvub4bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWwN9HrXU6nMG4DQ6Vph0heMmmM8wHwYDVR0j BBgwFoAUyoV5GpJl6INS44I2EebYTWu73MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkx a0ovMC9DQTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBODU3OTFBOTI2NUU4ODM1 MkUzODIzNjExRTZEODRENkJCQkRDQzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkxa0ovMC9D QTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAS4qQxQ3q1ZYCw7+gTBGVDWcVzx4/SM/9HMundYAHmccroAN5+NdYp5oI6r7 FU0ymiMYweoXppB8zbg0/97J3wr7+6zE+l1ZErVpOQ2O8q8hr8SPOBM925dIbvxZ /+dQSEBCnkhwvhX3cbisfh9lTFxbKST9aJXicBowaxJeyB65f5sU2meSGnY+AnGf 5g0ujjFUyXEreAVPdq9kVnvMyjpVFlScUX4stCEnsvsau8316VDHfl6O9cjBxF8g 5DKqsLf7Fn46kmw+EdcIpiVGg8m04gin1eFwRG1jz1hkSAJBv+6N0A8aWlzvHD2c FLPP61obrTUqpi4OirarGHkcHg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:19 2025 by rpki-client