$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft File: CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft (raw, json) Hash identifier: lPOaNAj9cmbWqYtkmG86r+R2noL4uAsczHhk9P/r6pU= Subject key identifier: 0B:AF:15:73:2F:09:6F:55:E1:C0:85:B1:4B:2D:1F:E9:4E:EB:A6:E3 Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6 Certificate issuer: /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6 Certificate serial: 5576C96C520B44A11EF64B6E2A2C3A11E2C1DC0E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer Subject info access: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft Manifest number: 02DB Signing time: Thu 18 Sep 2025 16:29:15 +0000 Manifest this update: Thu 18 Sep 2025 16:24:15 +0000 Manifest next update: Fri 19 Sep 2025 18:15:15 +0000 Files and hashes: 1: 323830343a313462383a3a2f33322d3438203d3e20323633333436.roa (hash: 2zUdDQoZI7lf2QCIRFGO2DVEseSLfvIofWeRJppw+oo=) 2: 3139312e33372e342e302f32332d3332203d3e20323633333436.roa (hash: JBgbUMOSfuDRal8tFPKZ1hnVKHMRHXaPlhWoUlyXRt0=) 3: 3139312e33372e302e302f32332d3332203d3e20323633333436.roa (hash: dk4B0gt3xtrzpqeQPsPPmX3X8Bi3YSdbr9PQbjrctok=) 4: CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl (hash: N7WmlcNaG1QNvY0n6l9JG9r5BtKBscVYz1uwg4F33k4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 18:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:76:c9:6c:52:0b:44:a1:1e:f6:4b:6e:2a:2c:3a:11:e2:c1:dc:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6 Validity Not Before: Sep 18 16:24:15 2025 GMT Not After : Sep 19 18:15:15 2025 GMT Subject: CN=0BAF15732F096F55E1C085B14B2D1FE94EEBA6E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6a:89:8d:21:2a:41:43:fd:5c:63:df:c6:ed: 51:c7:16:e3:23:bd:c5:47:06:f1:8a:b8:d7:08:7e: 8a:59:86:0e:7e:96:da:e5:ea:93:38:0e:ba:4a:90: 17:3f:6f:8c:4f:c0:93:c2:58:25:d3:b2:6b:2e:77: 6b:a4:b1:55:69:cf:7d:60:b6:cf:a7:0f:22:a6:a1: 99:92:d6:fb:3d:96:d5:c7:8b:0f:8a:20:bd:2d:81: 44:df:a0:72:7e:4b:78:27:ac:56:44:d3:57:83:33: 31:b1:c5:e4:ec:ec:46:03:1a:7a:2d:47:02:ca:7d: 3d:31:f8:1a:0a:e2:4e:12:04:53:e9:57:8c:a4:62: fa:48:97:b8:76:de:10:7b:09:f2:3d:6b:ec:bc:d0: 41:11:d2:9a:04:45:42:89:c8:f1:80:40:41:18:23: 11:30:ef:97:52:6d:70:29:c4:ed:96:19:8f:24:0a: e3:83:f0:5d:fa:89:b2:3a:2b:3b:84:81:d8:dd:33: 58:6b:a4:b2:98:a3:32:36:ff:19:c3:2c:b6:15:ba: df:52:ba:bd:35:8f:08:eb:5d:d3:ad:60:bd:02:81: 4b:c9:45:d2:27:b3:e3:76:b2:8a:31:c8:45:0b:ad: 42:b0:27:57:c0:7b:9b:54:fa:5c:92:3f:01:a7:18: 58:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AF:15:73:2F:09:6F:55:E1:C0:85:B1:4B:2D:1F:E9:4E:EB:A6:E3 X509v3 Authority Key Identifier: keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:c0:0e:16:b0:af:75:fc:01:33:43:52:5f:fa:d7:88:f7:50: f1:28:d5:69:31:da:5e:b3:21:88:20:13:37:6c:cc:fc:77:31: 59:7b:97:33:c8:9b:cd:13:f6:f6:15:3d:e3:fc:88:9d:52:4d: e3:65:ee:1b:b5:5f:42:6b:b0:db:8c:1b:94:62:91:35:5a:4e: 9e:c6:27:cc:59:b7:cb:bd:c0:d0:21:12:d3:98:5a:8d:9c:3d: c5:f4:67:e4:f3:61:0f:08:b7:dd:86:52:c8:19:20:54:c0:3d: 60:67:1a:1c:3d:f4:9a:e1:3d:5c:07:81:94:5a:6c:96:11:01: bc:d9:7e:5b:e1:68:e9:12:55:23:d3:8c:da:53:f8:60:c5:4c: ad:2d:98:bc:d5:94:97:ad:91:da:e2:01:d5:78:37:35:35:b8: 07:9e:1c:6c:a6:67:54:f4:a9:56:1f:35:4b:69:1b:c7:fa:79: 62:b2:f8:d9:17:4c:8f:2a:3a:da:cd:f2:5b:13:e1:5d:ff:6c: 82:a1:69:dd:59:61:5e:a1:1e:47:71:7a:b3:4f:67:23:37:7c: 90:ee:4a:9e:81:34:8a:27:d7:8b:41:6c:c6:78:61:d3:02:99: c5:54:80:a6:a2:34:cc:c0:2f:aa:05:19:49:1c:8a:d7:fa:67: b5:e5:fc:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVXbJbFILRKEe9ktuKiw6EeLB3A4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E4NTc5MUE5MjY1RTg4MzUyRTM4MjM2MTFFNkQ4NEQ2 QkJCRENDNjAeFw0yNTA5MTgxNjI0MTVaFw0yNTA5MTkxODE1MTVaMDMxMTAvBgNV BAMTKDBCQUYxNTczMkYwOTZGNTVFMUMwODVCMTRCMkQxRkU5NEVFQkE2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoaomNISpBQ/1cY9/G7VHHFuMj vcVHBvGKuNcIfopZhg5+ltrl6pM4DrpKkBc/b4xPwJPCWCXTsmsud2uksVVpz31g ts+nDyKmoZmS1vs9ltXHiw+KIL0tgUTfoHJ+S3gnrFZE01eDMzGxxeTs7EYDGnot RwLKfT0x+BoK4k4SBFPpV4ykYvpIl7h23hB7CfI9a+y80EER0poERUKJyPGAQEEY IxEw75dSbXApxO2WGY8kCuOD8F36ibI6KzuEgdjdM1hrpLKYozI2/xnDLLYVut9S ur01jwjrXdOtYL0CgUvJRdIns+N2sooxyEULrUKwJ1fAe5tU+lySPwGnGFidAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUC68Vcy8Jb1XhwIWxSy0f6U7rpuMwHwYDVR0j BBgwFoAUyoV5GpJl6INS44I2EebYTWu73MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkx a0ovMC9DQTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBODU3OTFBOTI2NUU4ODM1 MkUzODIzNjExRTZEODRENkJCQkRDQzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkxa0ovMC9D QTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARsAOFrCvdfwBM0NSX/rXiPdQ8SjVaTHaXrMhiCATN2zM/HcxWXuXM8ibzRP2 9hU94/yInVJN42XuG7VfQmuw24wblGKRNVpOnsYnzFm3y73A0CES05hajZw9xfRn 5PNhDwi33YZSyBkgVMA9YGcaHD30muE9XAeBlFpslhEBvNl+W+Fo6RJVI9OM2lP4 YMVMrS2YvNWUl62R2uIB1Xg3NTW4B54cbKZnVPSpVh81S2kbx/p5YrL42RdMjyo6 2s3yWxPhXf9sgqFp3VlhXqEeR3F6s09nIzd8kO5KnoE0iifXi0Fsxnhh0wKZxVSA pqI0zMAvqgUZSRyK1/pnteX8fA== -----END CERTIFICATE-----Generated at Fri Sep 19 10:15:02 2025 by rpki-client