$ rpki-client -vvf rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft File: CDB4502328A17F5E10125CA4554E967C912340D3.mft (raw, json) Hash identifier: /nlyTL59yM0+idsANPvqbVgLiX7HwOwfeQ1BOeakMvI= Subject key identifier: E5:B6:FE:21:89:E8:EA:D7:EE:DF:92:8B:86:23:6E:48:BE:9E:5D:D6 Authority key identifier: CD:B4:50:23:28:A1:7F:5E:10:12:5C:A4:55:4E:96:7C:91:23:40:D3 Certificate issuer: /CN=CDB4502328A17F5E10125CA4554E967C912340D3 Certificate serial: 64F3A9F22A62C54A6477B17C23F476604F1CF3FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB4502328A17F5E10125CA4554E967C912340D3.cer Subject info access: rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft Manifest number: 51 Signing time: Mon 03 Nov 2025 13:00:43 +0000 Manifest this update: Mon 03 Nov 2025 12:55:43 +0000 Manifest next update: Tue 04 Nov 2025 16:38:43 +0000 Files and hashes: 1: CDB4502328A17F5E10125CA4554E967C912340D3.crl (hash: FFn00obxQN66QQg8P0C6iecJqhL+hNnu1pF1x6QCUpE=) 2: 323830343a393536343a3a2f33322d313238203d3e20323734353230.roa (hash: ERlKqTm+47mLiWypT+aX8LH7xhbod7WTHoUYvN7TwbY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.crl rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB4502328A17F5E10125CA4554E967C912340D3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 16:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f3:a9:f2:2a:62:c5:4a:64:77:b1:7c:23:f4:76:60:4f:1c:f3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDB4502328A17F5E10125CA4554E967C912340D3 Validity Not Before: Nov 3 12:55:43 2025 GMT Not After : Nov 4 16:38:43 2025 GMT Subject: CN=E5B6FE2189E8EAD7EEDF928B86236E48BE9E5DD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:76:ee:b4:a3:ce:d5:7f:10:6e:05:11:84: 1e:43:79:27:45:3c:b2:cd:e5:fd:65:21:6c:63:8c: d2:3d:c2:4b:5f:ef:f7:1c:a2:ef:bc:bb:3f:f8:f7: a5:70:8a:cf:94:1b:f5:24:1e:43:5c:cf:85:80:24: fd:78:c2:96:2a:cc:1f:6d:c9:5d:75:0d:0f:e1:5b: 1c:ea:fc:16:8c:46:57:4b:1b:b6:7e:0f:54:77:85: c0:a4:34:01:3b:79:9e:f2:30:ad:e8:93:55:a0:a2: fc:31:82:e4:d6:eb:a1:b7:59:7d:a1:22:de:08:2a: e7:ba:20:aa:01:1e:2b:6f:e9:50:e3:a1:c2:68:3d: 3f:7e:4b:bd:b7:ef:29:63:14:ec:cf:e5:6f:b1:11: 00:e5:4a:66:f4:bc:9b:66:59:ae:68:41:91:0f:ca: 52:79:52:07:d9:81:41:59:7a:e8:5e:b5:21:69:6b: 43:47:ec:f7:92:16:7a:2b:ab:43:3c:75:9f:4f:ca: 97:8b:2f:b4:ae:13:bd:4d:1e:b0:08:1c:7b:79:f6: 0a:93:64:f7:0b:28:f7:01:88:08:6c:e0:65:88:64: 6d:05:4e:27:d0:dc:d7:77:fa:91:f6:c3:4e:6a:08: c4:99:56:50:d0:fb:b4:21:b6:25:8f:b7:26:b6:42: e9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B6:FE:21:89:E8:EA:D7:EE:DF:92:8B:86:23:6E:48:BE:9E:5D:D6 X509v3 Authority Key Identifier: keyid:CD:B4:50:23:28:A1:7F:5E:10:12:5C:A4:55:4E:96:7C:91:23:40:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB4502328A17F5E10125CA4554E967C912340D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:55:8d:bf:27:28:fe:0b:40:d8:a7:2e:b9:bd:d9:d4:79:64: 98:a4:e4:04:2c:0c:74:c9:2c:91:44:23:df:51:40:e1:a2:08: b7:b0:cc:c8:0f:40:e0:a3:23:c3:8d:72:ba:3a:4f:e1:46:a3: 20:83:86:8a:03:9f:87:9d:f7:12:38:97:9e:cc:26:1c:3c:4b: 67:c3:ca:36:c3:1e:5e:01:da:aa:47:ae:2c:7b:b0:99:1c:1a: 13:99:f2:7f:c9:8c:7e:b5:55:b3:75:22:f8:e1:31:c3:e3:34: 16:0a:67:d8:4a:9d:79:e9:b7:14:84:b6:5d:3a:f9:48:e6:ca: 3f:ac:a3:9e:4a:07:e3:c7:f9:a8:14:62:3a:99:bb:b1:a2:54: 2e:c9:fc:f2:c7:8f:ca:54:6c:39:8b:4a:b4:2b:68:65:af:1d: 40:b7:58:4b:2d:da:d0:fa:46:5e:a2:0d:f6:59:d2:3b:7a:7d: 9e:be:1a:43:c7:c1:72:ad:dc:10:6c:c0:db:53:ea:68:f2:1f: 48:e6:5d:27:b4:54:23:42:b7:ab:eb:2c:ed:c3:9c:a6:cd:91: 17:0c:9c:aa:ff:27:28:14:98:b7:e0:02:58:7e:b0:5e:32:43: a7:28:eb:a9:33:20:4a:e5:b7:35:2d:88:9d:6d:4d:1b:20:a9: 70:71:c0:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZPOp8ipixUpkd7F8I/R2YE8c8/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCNDUwMjMyOEExN0Y1RTEwMTI1Q0E0NTU0RTk2N0M5 MTIzNDBEMzAeFw0yNTExMDMxMjU1NDNaFw0yNTExMDQxNjM4NDNaMDMxMTAvBgNV BAMTKEU1QjZGRTIxODlFOEVBRDdFRURGOTI4Qjg2MjM2RTQ4QkU5RTVERDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB23butKPO1X8QbgURhB5DeSdF PLLN5f1lIWxjjNI9wktf7/ccou+8uz/496Vwis+UG/UkHkNcz4WAJP14wpYqzB9t yV11DQ/hWxzq/BaMRldLG7Z+D1R3hcCkNAE7eZ7yMK3ok1WgovwxguTW66G3WX2h It4IKue6IKoBHitv6VDjocJoPT9+S7237yljFOzP5W+xEQDlSmb0vJtmWa5oQZEP ylJ5UgfZgUFZeuhetSFpa0NH7PeSFnorq0M8dZ9PypeLL7SuE71NHrAIHHt59gqT ZPcLKPcBiAhs4GWIZG0FTifQ3Nd3+pH2w05qCMSZVlDQ+7QhtiWPtya2QunPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5bb+IYno6tfu35KLhiNuSL6eXdYwHwYDVR0j BBgwFoAUzbRQIyihf14QElykVU6WfJEjQNMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRndUVlRwR3plMUVvRFlSRVhTb044UVlURmdmSGtZaDRzaG9Cb1drMTJH d2YvMC9DREI0NTAyMzI4QTE3RjVFMTAxMjVDQTQ1NTRFOTY3QzkxMjM0MEQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQjQ1MDIzMjhBMTdGNUUx MDEyNUNBNDU1NEU5NjdDOTEyMzQwRDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RndUVlRwR3plMUVvRFlSRVhTb044UVlURmdmSGtZaDRzaG9Cb1drMTJHd2YvMC9D REI0NTAyMzI4QTE3RjVFMTAxMjVDQTQ1NTRFOTY3QzkxMjM0MEQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfFWNvyco/gtA2Kcuub3Z1HlkmKTkBCwMdMkskUQj31FA4aIIt7DMyA9A4KMj w41yujpP4UajIIOGigOfh533EjiXnswmHDxLZ8PKNsMeXgHaqkeuLHuwmRwaE5ny f8mMfrVVs3Ui+OExw+M0Fgpn2Eqdeem3FIS2XTr5SObKP6yjnkoH48f5qBRiOpm7 saJULsn88sePylRsOYtKtCtoZa8dQLdYSy3a0PpGXqIN9lnSO3p9nr4aQ8fBcq3c EGzA21PqaPIfSOZdJ7RUI0K3q+ss7cOcps2RFwycqv8nKBSYt+ACWH6wXjJDpyjr qTMgSuW3NS2InW1NGyCpcHHA0A== -----END CERTIFICATE-----Generated at Tue Nov 4 05:06:37 2025 by rpki-client