$ rpki-client -vvf rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft File: 6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft (raw, json) Hash identifier: 5tvGHTs7Yww0BaRyTOgQyFu4CtdGSlOCwz4CQnbFKbE= Subject key identifier: 13:3B:7F:F1:B5:53:14:29:51:CF:F5:AA:C7:F5:C3:AE:E6:68:A1:3E Authority key identifier: 6C:CF:86:5A:C9:07:51:CC:EF:5E:F2:9C:83:DA:40:0E:CD:C0:03:53 Certificate issuer: /CN=6CCF865AC90751CCEF5EF29C83DA400ECDC00353 Certificate serial: 1BC57410C3A84792D0FD4747007AC986AE9D4FA2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer Subject info access: rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft Manifest number: 0131 Signing time: Tue 04 Nov 2025 18:44:58 +0000 Manifest this update: Tue 04 Nov 2025 18:39:58 +0000 Manifest next update: Wed 05 Nov 2025 20:10:58 +0000 Files and hashes: 1: 6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl (hash: kiymNdsbqst6cCzZyuaVz3iD5qYXQnadwEYYLlqmeS4=) 2: 323830343a333334343a3a2f33322d313238203d3e20323635333835.roa (hash: /Q/JaZ+icLikHWHv6dzvxz7VzZzgz++sE7gytxv6cx0=) 3: 3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa (hash: hBgzZnxmEBmYRTuvlGTuu4nN28d1lzU1d0fXQNp/cp8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c5:74:10:c3:a8:47:92:d0:fd:47:47:00:7a:c9:86:ae:9d:4f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CCF865AC90751CCEF5EF29C83DA400ECDC00353 Validity Not Before: Nov 4 18:39:58 2025 GMT Not After : Nov 5 20:10:58 2025 GMT Subject: CN=133B7FF1B553142951CFF5AAC7F5C3AEE668A13E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:19:9d:63:3f:a5:07:ab:de:43:5c:bd:9a:db: 61:9f:ab:1d:c8:d9:ae:aa:31:fc:98:70:2b:5f:65: e3:ec:15:0e:57:1e:41:1e:e3:87:c6:ab:9f:96:67: e0:01:34:eb:11:47:34:26:6c:65:31:63:fd:df:99: e4:2e:3d:13:18:05:a7:d9:34:96:6a:32:22:b3:f5: 56:f6:73:97:03:af:c8:9b:39:f3:41:ef:1f:6a:49: da:71:0f:cc:fd:29:3b:58:a0:df:99:2c:e2:f0:7c: 73:40:d7:58:8d:19:7a:7a:e7:5f:b5:16:01:8e:0e: 3a:8d:6a:ab:4e:3f:4c:80:b5:4f:30:70:02:61:d3: b5:1b:50:d8:f6:2a:8c:04:7d:9c:0c:9e:4a:f7:5e: 26:7b:6f:7a:bf:94:f2:f8:b0:53:d6:9e:34:0d:a1: 36:28:86:7d:e6:8b:84:5b:07:7a:3e:90:55:ab:ae: 41:44:fa:9b:e8:4d:a7:6e:b8:ef:dc:6b:06:e4:70: 92:06:df:33:ee:79:cd:a4:5c:41:54:02:da:db:8c: ba:4d:04:18:45:3f:33:73:65:17:5d:ad:c7:52:56: b8:42:01:e3:b8:95:11:ff:c3:98:b6:4a:2d:aa:5a: c2:04:6c:5c:39:a3:16:69:64:58:f8:3f:4f:75:97: fa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3B:7F:F1:B5:53:14:29:51:CF:F5:AA:C7:F5:C3:AE:E6:68:A1:3E X509v3 Authority Key Identifier: keyid:6C:CF:86:5A:C9:07:51:CC:EF:5E:F2:9C:83:DA:40:0E:CD:C0:03:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b7:a0:c0:4e:ff:5b:29:65:aa:cd:c2:40:9d:af:c0:24:48: 83:0f:62:4e:ed:02:f3:cd:b6:5e:1f:b3:c6:75:91:01:98:69: 2f:49:bd:9a:02:5a:3a:47:37:8d:aa:00:b1:d2:6d:20:97:eb: be:85:39:c1:0f:91:f1:2f:ef:8d:ec:47:47:87:2f:a8:24:25: 0f:3c:4f:45:ca:9d:1a:56:61:2a:db:11:5f:c5:75:76:d0:8a: 20:7a:36:af:0e:e6:57:c3:c9:a2:4a:06:8d:a6:f7:e9:fe:15: 8c:ef:e2:95:ac:c9:a6:31:84:b7:32:40:6f:cf:f6:6d:fe:e9: 7c:ce:fe:ad:7f:63:22:a6:97:79:fc:87:96:97:8e:23:24:ff: 35:b4:3c:3a:9e:9d:c5:96:65:f4:f6:39:1b:f6:dd:c1:53:98: 32:50:4e:ab:04:6c:29:8f:87:1d:39:13:2a:a7:89:ba:01:12: 96:3b:26:d5:14:16:dd:32:66:6a:28:66:25:5e:b6:17:bc:84: f4:37:d3:4b:64:4e:e1:40:05:df:db:2a:12:3c:a5:34:ab:8a: 40:1a:36:ce:32:8e:5e:29:9c:56:4f:17:87:12:9d:3f:09:3c: 0c:ce:f7:65:88:0f:d6:28:86:91:d1:f7:f7:de:4a:0d:34:bd: 52:aa:d5:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUG8V0EMOoR5LQ/UdHAHrJhq6dT6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNDRjg2NUFDOTA3NTFDQ0VGNUVGMjlDODNEQTQwMEVD REMwMDM1MzAeFw0yNTExMDQxODM5NThaFw0yNTExMDUyMDEwNThaMDMxMTAvBgNV BAMTKDEzM0I3RkYxQjU1MzE0Mjk1MUNGRjVBQUM3RjVDM0FFRTY2OEExM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnGZ1jP6UHq95DXL2a22Gfqx3I 2a6qMfyYcCtfZePsFQ5XHkEe44fGq5+WZ+ABNOsRRzQmbGUxY/3fmeQuPRMYBafZ NJZqMiKz9Vb2c5cDr8ibOfNB7x9qSdpxD8z9KTtYoN+ZLOLwfHNA11iNGXp651+1 FgGODjqNaqtOP0yAtU8wcAJh07UbUNj2KowEfZwMnkr3XiZ7b3q/lPL4sFPWnjQN oTYohn3mi4RbB3o+kFWrrkFE+pvoTaduuO/cawbkcJIG3zPuec2kXEFUAtrbjLpN BBhFPzNzZRddrcdSVrhCAeO4lRH/w5i2Si2qWsIEbFw5oxZpZFj4P091l/qfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEzt/8bVTFClRz/Wqx/XDruZooT4wHwYDVR0j BBgwFoAUbM+GWskHUczvXvKcg9pADs3AA1MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmNpNWlZeHdpQThteEtFRXpuNVNtSnFDbzdQTEJ5UmNLNFY5d2ZqN2hN SlgvMC82Q0NGODY1QUM5MDc1MUNDRUY1RUYyOUM4M0RBNDAwRUNEQzAwMzUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDQ0Y4NjVBQzkwNzUxQ0NF RjVFRjI5QzgzREE0MDBFQ0RDMDAzNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmNpNWlZeHdpQThteEtFRXpuNVNtSnFDbzdQTEJ5UmNLNFY5d2ZqN2hNSlgvMC82 Q0NGODY1QUM5MDc1MUNDRUY1RUYyOUM4M0RBNDAwRUNEQzAwMzUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD7egwE7/Wyllqs3CQJ2vwCRIgw9iTu0C8822Xh+zxnWRAZhpL0m9mgJaOkc3 jaoAsdJtIJfrvoU5wQ+R8S/vjexHR4cvqCQlDzxPRcqdGlZhKtsRX8V1dtCKIHo2 rw7mV8PJokoGjab36f4VjO/ilazJpjGEtzJAb8/2bf7pfM7+rX9jIqaXefyHlpeO IyT/NbQ8Op6dxZZl9PY5G/bdwVOYMlBOqwRsKY+HHTkTKqeJugESljsm1RQW3TJm aihmJV62F7yE9DfTS2RO4UAF39sqEjylNKuKQBo2zjKOXimcVk8XhxKdPwk8DM73 ZYgP1iiGkdH3995KDTS9UqrVJQ== -----END CERTIFICATE-----Generated at Wed Nov 5 05:11:36 2025 by rpki-client