$ rpki-client -vvf rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft File: C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft (raw, json) Hash identifier: ITUOW7IOapRVTSjSdJa8+lvjddb73F5UaL0yu28oSDQ= Subject key identifier: D6:05:DB:86:24:13:D6:8C:C0:8D:7A:8F:E5:71:41:FC:90:67:E1:7A Authority key identifier: C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C Certificate issuer: /CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C Certificate serial: 5050F47608864F826119F0D4835D7EC10F4E2638 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer Subject info access: rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft Manifest number: 0275 Signing time: Mon 03 Nov 2025 05:38:09 +0000 Manifest this update: Mon 03 Nov 2025 05:33:09 +0000 Manifest next update: Tue 04 Nov 2025 07:34:09 +0000 Files and hashes: 1: C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl (hash: M+JOcV5vdOnfAlkBWHD0Ahj98/B8YG11dZfNQ0QS1s8=) 2: 323830343a313234303a3a2f33322d313238203d3e20323633343635.roa (hash: VmhohPCz9KS+aX0cz1omXVFO2DRFWZR9rKAG0HIoc2o=) 3: 3137372e3139302e3232342e302f32302d3332203d3e20323633343635.roa (hash: wKAb1UDvZiPDekR65fEEYenq6zheNgIFDzzMrJdoquA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 07:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:50:f4:76:08:86:4f:82:61:19:f0:d4:83:5d:7e:c1:0f:4e:26:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C Validity Not Before: Nov 3 05:33:09 2025 GMT Not After : Nov 4 07:34:09 2025 GMT Subject: CN=D605DB862413D68CC08D7A8FE57141FC9067E17A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:1d:70:34:c5:09:46:a0:5b:d3:80:cc:7f: 3d:92:17:07:04:64:1d:ad:3f:35:fe:47:bb:4c:78: 56:7d:0f:6d:03:48:90:3a:84:eb:73:b6:95:9f:65: 08:99:f8:97:ba:93:c0:69:bd:4a:90:18:4d:53:31: ec:dd:86:59:7a:82:8b:55:c6:75:08:0d:ad:6f:76: b9:f6:9d:29:05:26:8b:e8:f4:b1:99:86:a6:b9:af: 30:32:28:30:1c:d5:fd:af:e3:4e:b3:1b:49:b6:8f: 19:e5:0f:3d:57:79:73:10:d2:84:f7:a0:7e:c3:1d: bc:af:ab:b7:06:2b:24:b8:47:ba:62:53:20:35:80: 48:70:70:d1:84:1c:ab:84:1f:af:ca:e2:f9:14:80: 18:50:f5:3b:c7:21:d5:c2:9a:c1:90:e4:7a:e4:3a: 27:8a:48:0e:32:1d:6c:8e:11:8a:1b:a7:8f:c8:46: 49:69:13:66:06:61:07:44:df:1e:82:7e:c8:be:38: c1:ae:64:85:e0:37:e6:6a:b3:83:70:36:35:66:07: ee:5e:57:38:81:5f:29:55:1c:f3:7b:55:07:8d:db: 34:61:1e:8e:f8:0a:9f:0a:0b:b1:11:bd:3c:9a:ba: 22:e4:eb:3d:39:5c:cf:19:0d:df:00:16:5b:67:39: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:05:DB:86:24:13:D6:8C:C0:8D:7A:8F:E5:71:41:FC:90:67:E1:7A X509v3 Authority Key Identifier: keyid:C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ac:bf:77:ee:12:d1:2f:22:b2:0f:4f:42:25:9e:8b:87:88: 78:db:a7:fd:c8:68:6b:eb:86:e8:de:c1:c7:2d:0b:a4:68:e8: 2c:f1:ec:1b:2d:4e:76:f1:c7:47:21:8e:e3:25:4b:84:16:0c: 63:c5:9d:ee:86:23:c8:68:75:17:49:23:70:e2:b3:6b:8e:80: 8b:a6:54:55:67:8c:d8:f5:1a:7c:61:22:2e:21:ad:01:09:6f: d9:a1:22:d1:95:65:0e:7b:57:7b:68:97:2f:8a:3c:a7:98:c6: 58:98:40:e8:6e:a2:73:fc:e9:4a:c4:c1:91:46:67:92:07:6c: 5b:5b:56:86:dc:12:cc:a0:50:eb:a5:26:14:99:41:5a:4b:7e: 1b:dd:28:cb:0d:dc:dd:68:da:db:41:d7:b4:68:df:76:65:e6: 86:35:36:9c:da:dc:a4:c2:6d:d2:09:c5:22:1b:99:0b:6b:c2: c3:60:07:ed:25:ea:c3:d7:96:7c:c9:95:05:cc:0f:48:85:a2: c7:9d:8a:33:1d:66:33:ed:0e:7b:6d:39:bd:fb:7b:a7:95:c1: fd:98:f1:94:2e:48:13:2e:2f:e6:f9:73:c1:82:36:4f:3c:c4: 9f:c6:cd:94:89:d9:89:e7:a4:7a:20:7b:1c:b5:ec:1f:54:b6: 2f:c3:4b:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUFD0dgiGT4JhGfDUg11+wQ9OJjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzExRjdDMjBCMjQ1NkJBMzZFQkNDODkyNzBBQ0U5NzZE QUNGQzM1QzAeFw0yNTExMDMwNTMzMDlaFw0yNTExMDQwNzM0MDlaMDMxMTAvBgNV BAMTKEQ2MDVEQjg2MjQxM0Q2OENDMDhEN0E4RkU1NzE0MUZDOTA2N0UxN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3zR1wNMUJRqBb04DMfz2SFwcE ZB2tPzX+R7tMeFZ9D20DSJA6hOtztpWfZQiZ+Je6k8BpvUqQGE1TMezdhll6gotV xnUIDa1vdrn2nSkFJovo9LGZhqa5rzAyKDAc1f2v406zG0m2jxnlDz1XeXMQ0oT3 oH7DHbyvq7cGKyS4R7piUyA1gEhwcNGEHKuEH6/K4vkUgBhQ9TvHIdXCmsGQ5Hrk OieKSA4yHWyOEYobp4/IRklpE2YGYQdE3x6Cfsi+OMGuZIXgN+Zqs4NwNjVmB+5e VziBXylVHPN7VQeN2zRhHo74Cp8KC7ERvTyauiLk6z05XM8ZDd8AFltnOYh7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1gXbhiQT1ozAjXqP5XFB/JBn4XowHwYDVR0j BBgwFoAUwR98ILJFa6NuvMiScKzpdtrPw1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjJqRVNGbTN5QzFYdU4yZnhZNlBQZkJNUUhzcFJEa2dNS3djd1R5aldV MksvMC9DMTFGN0MyMEIyNDU2QkEzNkVCQ0M4OTI3MEFDRTk3NkRBQ0ZDMzVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMUY3QzIwQjI0NTZCQTM2 RUJDQzg5MjcwQUNFOTc2REFDRkMzNUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RjJqRVNGbTN5QzFYdU4yZnhZNlBQZkJNUUhzcFJEa2dNS3djd1R5aldVMksvMC9D MTFGN0MyMEIyNDU2QkEzNkVCQ0M4OTI3MEFDRTk3NkRBQ0ZDMzVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjay/d+4S0S8isg9PQiWei4eIeNun/choa+uG6N7Bxy0LpGjoLPHsGy1OdvHH RyGO4yVLhBYMY8Wd7oYjyGh1F0kjcOKza46Ai6ZUVWeM2PUafGEiLiGtAQlv2aEi 0ZVlDntXe2iXL4o8p5jGWJhA6G6ic/zpSsTBkUZnkgdsW1tWhtwSzKBQ66UmFJlB Wkt+G90oyw3c3Wja20HXtGjfdmXmhjU2nNrcpMJt0gnFIhuZC2vCw2AH7SXqw9eW fMmVBcwPSIWix52KMx1mM+0Oe205vft7p5XB/ZjxlC5IEy4v5vlzwYI2TzzEn8bN lInZieekeiB7HLXsH1S2L8NLHw== -----END CERTIFICATE-----Generated at Tue Nov 4 00:25:55 2025 by rpki-client