$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft File: CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft (raw, json) Hash identifier: FazISjYKr3bp5C/5IUgocH6kHQcJtMMcQbbYhgd3sac= Subject key identifier: 35:4C:DD:9A:14:99:EF:EC:B5:BD:12:3D:A8:26:DE:9A:BF:80:B9:8F Authority key identifier: CB:ED:2E:B5:5F:BF:7D:D2:35:6D:73:47:1D:F5:93:AA:70:73:D3:FD Certificate issuer: /CN=CBED2EB55FBF7DD2356D73471DF593AA7073D3FD Certificate serial: 16CC322DE4AAEEDA1DEE6327622B363E136FFC61 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft Manifest number: 69 Signing time: Mon 03 Nov 2025 00:56:43 +0000 Manifest this update: Mon 03 Nov 2025 00:51:43 +0000 Manifest next update: Tue 04 Nov 2025 01:21:43 +0000 Files and hashes: 1: 3137372e33362e37362e302f32332d3233203d3e20323731323136.roa (hash: 3U7NF9Lz9aGI73HLXDdDGtUNdHBz7fbGjnXgXaW6L2w=) 2: 3137372e33362e37382e302f32332d3233203d3e20323731323136.roa (hash: RpLdfJT1pXXcOR4aWQ4um6Zo3Vsbi/E86oiN9R6ONyk=) 3: CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.crl (hash: GqaQDhXbKNtvPqeyNLnH/sX/lylLj8fAwzLpLHeOjaY=) 4: 323830343a373830383a3a2f33322d3332203d3e20323731323136.roa (hash: aP9w5LUb2eJVRnoNyFOvF8ygagN8phXJPyzq4MAIWds=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.crl rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 01:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:cc:32:2d:e4:aa:ee:da:1d:ee:63:27:62:2b:36:3e:13:6f:fc:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBED2EB55FBF7DD2356D73471DF593AA7073D3FD Validity Not Before: Nov 3 00:51:43 2025 GMT Not After : Nov 4 01:21:43 2025 GMT Subject: CN=354CDD9A1499EFECB5BD123DA826DE9ABF80B98F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:27:b5:e2:d2:7b:af:fd:05:7b:15:65:b6:4e: f7:9e:da:3a:b9:8b:52:de:d4:0b:e2:ee:d0:f7:86: 0a:33:c3:0a:ca:03:10:0d:cc:29:9f:79:b8:0a:75: b2:7c:ae:f8:01:2e:93:aa:33:5c:d2:a3:a0:6d:73: 72:f4:e1:79:6f:f9:45:bf:32:10:24:21:93:2b:5f: f2:13:76:8a:8c:80:98:63:e6:74:d5:b7:15:62:da: c4:e7:71:63:94:ba:26:33:59:ee:32:c8:14:62:f3: 89:78:5c:10:d3:57:78:c4:6a:56:df:72:d1:24:76: 38:5d:9e:ee:02:bb:3a:75:db:74:49:08:af:38:a1: 81:6f:df:fd:ee:0d:22:dc:d7:b2:59:57:2c:ed:d4: b0:d8:99:33:a1:db:e7:e9:57:4c:35:6f:80:32:87: c9:a2:00:3b:4b:44:53:fd:87:1b:b1:7d:7f:cd:50: 6d:c4:9d:9e:78:35:a3:b2:43:de:03:f8:af:a6:f1: cf:4d:69:82:66:66:1d:3f:09:1c:1a:33:5f:44:4b: ed:e2:62:74:c7:7c:85:fb:d3:0b:d4:54:e7:72:80: d1:ac:96:d9:35:25:11:a5:78:1f:78:ed:eb:d7:cd: 43:9a:32:86:16:1e:10:8a:f8:f1:e6:54:c3:ef:6f: 3d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4C:DD:9A:14:99:EF:EC:B5:BD:12:3D:A8:26:DE:9A:BF:80:B9:8F X509v3 Authority Key Identifier: keyid:CB:ED:2E:B5:5F:BF:7D:D2:35:6D:73:47:1D:F5:93:AA:70:73:D3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:be:7e:60:d9:03:da:16:07:e0:ab:ef:26:cc:4f:ed:4a:2f: 99:ae:0d:d0:56:24:45:05:af:52:31:d7:8a:f6:36:a9:24:f2: 9f:25:ee:ca:9f:5b:fe:b9:e7:72:85:b4:f8:d1:53:50:98:59: a8:b2:9a:ca:d2:c7:e4:59:6c:e7:4a:a0:84:f2:74:77:37:ed: a0:b1:a1:c0:c6:de:4b:20:89:5a:9e:91:03:4d:d1:92:7d:4f: d5:c9:40:79:34:fe:46:8e:c0:d5:4f:bc:2b:63:9d:a0:92:41: 93:1f:3d:fc:0a:f3:61:bb:ff:a3:7c:20:34:de:9c:69:00:b9: d3:e7:42:b5:0f:f1:39:f8:cd:44:1f:4f:97:73:4a:c4:87:eb: d3:69:5d:42:c5:03:47:e1:03:b6:d4:f4:a4:1e:fd:d7:eb:9b: 91:0e:43:2d:d9:09:f8:96:fe:e6:51:d6:4e:f7:52:72:03:9e: ab:30:b7:8f:26:2e:22:44:13:5c:ab:97:84:03:26:9d:45:9a: 7e:4b:34:25:ee:4e:87:d9:b4:b5:af:e9:01:1d:9c:eb:da:7a: 02:61:ed:ef:5d:92:8b:7b:bd:a3:1d:e4:1d:b0:60:da:83:0c: 9d:d2:ba:f0:f5:8a:8b:73:4e:e5:3b:eb:e2:0a:57:f9:82:ec: 74:5e:13:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFswyLeSq7tod7mMnYis2PhNv/GEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFRDJFQjU1RkJGN0REMjM1NkQ3MzQ3MURGNTkzQUE3 MDczRDNGRDAeFw0yNTExMDMwMDUxNDNaFw0yNTExMDQwMTIxNDNaMDMxMTAvBgNV BAMTKDM1NENERDlBMTQ5OUVGRUNCNUJEMTIzREE4MjZERTlBQkY4MEI5OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClJ7Xi0nuv/QV7FWW2Tvee2jq5 i1Le1Avi7tD3hgozwwrKAxANzCmfebgKdbJ8rvgBLpOqM1zSo6Btc3L04Xlv+UW/ MhAkIZMrX/ITdoqMgJhj5nTVtxVi2sTncWOUuiYzWe4yyBRi84l4XBDTV3jEalbf ctEkdjhdnu4Cuzp123RJCK84oYFv3/3uDSLc17JZVyzt1LDYmTOh2+fpV0w1b4Ay h8miADtLRFP9hxuxfX/NUG3EnZ54NaOyQ94D+K+m8c9NaYJmZh0/CRwaM19ES+3i YnTHfIX70wvUVOdygNGsltk1JRGleB947evXzUOaMoYWHhCK+PHmVMPvbz35AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNUzdmhSZ7+y1vRI9qCbemr+AuY8wHwYDVR0j BBgwFoAUy+0utV+/fdI1bXNHHfWTqnBz0/0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREt3aUIzTUhEVTk5MTJQeFVZdUFMZDhoR3p0ZlhpYjlXREFHQUNUNWNu S1QvMS9DQkVEMkVCNTVGQkY3REQyMzU2RDczNDcxREY1OTNBQTcwNzNEM0ZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCRUQyRUI1NUZCRjdERDIz NTZENzM0NzFERjU5M0FBNzA3M0QzRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REt3aUIzTUhEVTk5MTJQeFVZdUFMZDhoR3p0ZlhpYjlXREFHQUNUNWNuS1QvMS9D QkVEMkVCNTVGQkY3REQyMzU2RDczNDcxREY1OTNBQTcwNzNEM0ZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU75+YNkD2hYH4KvvJsxP7Uovma4N0FYkRQWvUjHXivY2qSTynyXuyp9b/rnn coW0+NFTUJhZqLKaytLH5Fls50qghPJ0dzftoLGhwMbeSyCJWp6RA03Rkn1P1clA eTT+Ro7A1U+8K2OdoJJBkx89/ArzYbv/o3wgNN6caQC50+dCtQ/xOfjNRB9Pl3NK xIfr02ldQsUDR+EDttT0pB791+ubkQ5DLdkJ+Jb+5lHWTvdScgOeqzC3jyYuIkQT XKuXhAMmnUWafks0Je5Oh9m0ta/pAR2c69p6AmHt712Si3u9ox3kHbBg2oMMndK6 8PWKi3NO5Tvr4gpX+YLsdF4TiQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:42 2025 by rpki-client