$ rpki-client -vvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft File: CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft (raw, json) Hash identifier: L+TtJG/fPccGwguqVG4isBARM7sIjoxEwdDD/fHwd+E= Subject key identifier: 7A:0E:48:1F:84:A7:61:84:88:44:6D:B4:40:35:5F:3D:01:1A:87:E1 Authority key identifier: CB:CD:6C:54:C2:AC:7A:F2:B0:CE:1B:67:2F:5C:D2:74:C0:17:95:1D Certificate issuer: /CN=CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D Certificate serial: 485802ACD7F9AB4BDAC55068301DDF3D698D729D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer Subject info access: rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft Manifest number: E3 Signing time: Sun 02 Nov 2025 20:10:20 +0000 Manifest this update: Sun 02 Nov 2025 20:05:20 +0000 Manifest next update: Mon 03 Nov 2025 20:44:20 +0000 Files and hashes: 1: CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.crl (hash: RpCwoXb9o+SdWvpGfhBQbYO3C6/WKTs2NfBMoZ4gItQ=) 2: 34352e3138302e31362e302f32322d3234203d3e20323731323533.roa (hash: Nf+xU4blwD0X0As5SResq4LdKOlUrjeZB1DEmIYQBKE=) 3: 34352e3137322e39362e302f32322d3234203d3e20323731323533.roa (hash: rTC/gTT60746fE/p9fdkgPaXlGesIZj5KkmlOE1e4Fo=) 4: 3136342e3136332e3139322e302f32322d3234203d3e20323731323533.roa (hash: Ql0iF5+L4dTD64DGYvCGzGkD3jGu1jUv08rhoiafxWk=) 5: 323830343a373839383a3a2f33322d3438203d3e20323731323533.roa (hash: xW+fvQFNMFekLO82/E1nb9mF3MD5AQJ7vbCnI5uk25M=) 6: 3133312e3235352e35362e302f32322d3234203d3e20323731323533.roa (hash: uU+/csjT2NVQbIjnMFhPC8+dLWEEVAp/0FwA71AGAfg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.crl rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 20:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:58:02:ac:d7:f9:ab:4b:da:c5:50:68:30:1d:df:3d:69:8d:72:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D Validity Not Before: Nov 2 20:05:20 2025 GMT Not After : Nov 3 20:44:20 2025 GMT Subject: CN=7A0E481F84A7618488446DB440355F3D011A87E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d9:3b:8c:76:d0:ea:a1:aa:70:77:ad:37:dc: 20:ac:53:c9:e7:30:c6:b6:ee:88:a4:a6:cf:11:cc: 77:65:0d:7d:f0:c5:43:09:13:c4:22:fc:6f:44:1c: b4:5b:ce:f9:70:1c:50:9f:85:18:72:88:d5:c2:a5: 84:61:26:34:e3:ce:30:ec:ab:0b:2f:c3:87:e3:55: 35:2b:e4:e5:d1:b8:17:f6:c6:2d:b4:e3:58:cb:f4: 54:85:7c:e7:d8:2e:47:1a:ea:5b:16:74:ee:8b:f8: 1b:0d:cc:c8:4a:b6:8c:04:85:42:18:d3:ed:8d:72: c4:e4:5a:ce:ab:7a:eb:64:4f:e8:d0:f3:d3:62:c1: d0:18:ca:7f:4a:45:1b:2b:d2:31:18:ed:76:df:5d: 2a:dd:50:a9:78:6d:94:0c:cf:1e:9f:ac:f1:a3:72: e4:64:74:9c:90:d3:36:03:e8:07:7b:09:1a:40:71: d6:46:ab:a3:04:c4:d6:21:eb:56:d8:30:9c:84:60: 71:2f:99:8b:43:0e:a9:b4:8e:3b:0d:79:67:86:a7: 90:8d:41:bc:45:90:49:dd:17:1e:58:72:22:c6:09: c5:35:dd:88:66:f3:9c:9c:be:0b:aa:9d:27:bf:7b: e2:37:f5:55:98:f7:fd:05:15:3d:3d:d5:f6:0a:6a: ea:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0E:48:1F:84:A7:61:84:88:44:6D:B4:40:35:5F:3D:01:1A:87:E1 X509v3 Authority Key Identifier: keyid:CB:CD:6C:54:C2:AC:7A:F2:B0:CE:1B:67:2F:5C:D2:74:C0:17:95:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a0:a0:04:5c:46:4b:9e:5f:6c:01:ab:b6:b0:c0:53:18:2d: 05:68:c0:94:24:92:e6:d6:ce:95:a0:b4:6c:74:ec:27:c1:ca: d8:30:0e:10:1d:ba:be:7e:65:45:10:f7:71:6a:60:c7:28:e1: 89:80:47:8d:fb:e9:8a:da:64:99:bd:a0:4f:e3:d4:cb:75:58: 5c:55:25:72:5f:0e:1b:a4:30:5e:c9:8c:ce:df:f6:e1:22:a0: fb:99:c3:27:a9:36:c0:64:2b:6b:89:78:12:6b:2f:ab:82:75: aa:f8:8a:81:6c:20:60:b6:4f:c0:6b:c0:99:9e:95:63:b7:dc: 21:42:e8:1c:31:88:ab:31:80:ec:23:c0:a3:a9:e2:e9:99:ba: d9:81:90:47:1e:c5:3d:03:f2:34:79:ab:83:96:c5:f8:d4:63: ee:69:3f:b0:fa:86:f7:c1:a7:bf:1c:4f:a2:8a:64:22:32:57: 39:04:f0:ff:c9:ec:10:e5:36:e1:3c:bf:6b:9b:60:77:ca:e3: 77:7b:21:13:55:70:69:d4:4f:5e:e4:e6:65:1c:00:38:ae:b4: d1:3b:f3:59:bb:49:60:9e:fd:bb:b9:75:ff:94:f4:28:17:f4: df:27:62:75:a4:5f:81:b3:5e:0e:f5:89:f4:10:3d:52:a8:69: 24:01:5f:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSFgCrNf5q0vaxVBoMB3fPWmNcp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JDRDZDNTRDMkFDN0FGMkIwQ0UxQjY3MkY1Q0QyNzRD MDE3OTUxRDAeFw0yNTExMDIyMDA1MjBaFw0yNTExMDMyMDQ0MjBaMDMxMTAvBgNV BAMTKDdBMEU0ODFGODRBNzYxODQ4ODQ0NkRCNDQwMzU1RjNEMDExQTg3RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL2TuMdtDqoapwd6033CCsU8nn MMa27oikps8RzHdlDX3wxUMJE8Qi/G9EHLRbzvlwHFCfhRhyiNXCpYRhJjTjzjDs qwsvw4fjVTUr5OXRuBf2xi2041jL9FSFfOfYLkca6lsWdO6L+BsNzMhKtowEhUIY 0+2NcsTkWs6reutkT+jQ89NiwdAYyn9KRRsr0jEY7XbfXSrdUKl4bZQMzx6frPGj cuRkdJyQ0zYD6Ad7CRpAcdZGq6MExNYh61bYMJyEYHEvmYtDDqm0jjsNeWeGp5CN QbxFkEndFx5YciLGCcU13Yhm85ycvguqnSe/e+I39VWY9/0FFT091fYKauqDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUeg5IH4SnYYSIRG20QDVfPQEah+EwHwYDVR0j BBgwFoAUy81sVMKsevKwzhtnL1zSdMAXlR0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWVoc0NtQU1EZ3c2MzdLeWZBTGttc1JvZVF4Q1NHVVFCWTQ4aExxRGho UE0vMC9DQkNENkM1NEMyQUM3QUYyQjBDRTFCNjcyRjVDRDI3NEMwMTc5NTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCQ0Q2QzU0QzJBQzdBRjJC MENFMUI2NzJGNUNEMjc0QzAxNzk1MUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWVoc0NtQU1EZ3c2MzdLeWZBTGttc1JvZVF4Q1NHVVFCWTQ4aExxRGhoUE0vMC9D QkNENkM1NEMyQUM3QUYyQjBDRTFCNjcyRjVDRDI3NEMwMTc5NTFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT6CgBFxGS55fbAGrtrDAUxgtBWjAlCSS5tbOlaC0bHTsJ8HK2DAOEB26vn5l RRD3cWpgxyjhiYBHjfvpitpkmb2gT+PUy3VYXFUlcl8OG6QwXsmMzt/24SKg+5nD J6k2wGQra4l4Emsvq4J1qviKgWwgYLZPwGvAmZ6VY7fcIULoHDGIqzGA7CPAo6ni 6Zm62YGQRx7FPQPyNHmrg5bF+NRj7mk/sPqG98GnvxxPoopkIjJXOQTw/8nsEOU2 4Ty/a5tgd8rjd3shE1VwadRPXuTmZRwAOK600TvzWbtJYJ79u7l1/5T0KBf03ydi daRfgbNeDvWJ9BA9UqhpJAFfcg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:13:24 2025 by rpki-client