$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft File: CDB34CF4AFC01721153990AE1A10D922F7507546.mft (raw, json) Hash identifier: fDeW67/nQ5q7Gnp4oPiyD814jYMwWjNO5ZSof2ektlg= Subject key identifier: DD:92:15:97:1F:4F:57:05:65:56:38:45:A4:F4:BA:B8:84:F1:10:A4 Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 Certificate issuer: /CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Certificate serial: 0B63C4B32335661E0A2CF32F8A8585CE7256BED9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject info access: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft Manifest number: 0309 Signing time: Wed 05 Nov 2025 05:56:01 +0000 Manifest this update: Wed 05 Nov 2025 05:51:01 +0000 Manifest next update: Thu 06 Nov 2025 07:31:01 +0000 Files and hashes: 1: CDB34CF4AFC01721153990AE1A10D922F7507546.crl (hash: j83fKOF88pj++7rGNt9x4euS8WW8R8CXYua0PpCbuHs=) 2: 3137302e38302e3233362e302f32322d3332203d3e20323634393030.roa (hash: A0IVZ0fDUe0zEY9+FBEhJi/Xpb3DJbrzWBmqTSyfkPo=) 3: 323830343a326639343a3a2f33322d3438203d3e20323634393030.roa (hash: vhvxSeJd+tzRkEzkUqJfnoWG2u32D84RmUUxjVexbJA=) 4: 3136382e3232382e382e302f32322d3332203d3e20323634393030.roa (hash: iNkzV1rmrEjxTbsK7Aw/bkJX4Qyoo7gBNI4P1PI2lhY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:63:c4:b3:23:35:66:1e:0a:2c:f3:2f:8a:85:85:ce:72:56:be:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Validity Not Before: Nov 5 05:51:01 2025 GMT Not After : Nov 6 07:31:01 2025 GMT Subject: CN=DD9215971F4F570565563845A4F4BAB884F110A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:59:d0:4e:69:70:a0:e2:cb:32:73:58:37:bf: 93:a2:20:1e:40:e2:af:12:6e:a8:bd:44:c6:5b:fb: 72:c2:00:de:f4:c1:3d:70:48:4c:93:9c:1a:6e:d1: 0e:3b:c4:4d:16:45:e4:3a:dd:d7:fd:af:ed:b6:5e: 7e:17:f7:42:13:ad:29:8b:d7:5b:8d:19:5e:2c:53: 53:7e:77:5c:52:85:6d:9c:4d:71:18:4b:95:75:bd: 86:14:e6:2e:ef:6e:7e:63:17:e1:dd:13:06:20:9e: 28:88:a6:91:63:e2:d7:23:27:ff:71:52:fc:bd:c2: 3d:f6:63:d9:1c:e6:0b:53:50:4a:a5:40:ec:16:69: df:7a:fb:d7:38:e5:63:5c:bb:6d:55:58:38:63:ae: e1:fd:2d:30:91:cf:35:4e:45:38:26:62:47:c6:2a: 78:f8:73:4b:90:9c:11:9d:f2:f7:51:9e:fb:91:ed: d1:e7:ee:87:15:29:e9:65:41:20:6b:85:d8:5f:92: cf:91:02:ea:50:a8:00:f7:3c:52:f2:39:e2:15:a8: 38:e7:70:4e:a1:f9:98:9b:68:a0:37:a3:76:8b:d7: 7c:d2:2d:31:b1:bf:82:7b:96:bc:3e:07:5d:8c:f7: 38:50:eb:10:68:ce:56:3d:c0:50:b1:08:8a:5e:43: 0d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:92:15:97:1F:4F:57:05:65:56:38:45:A4:F4:BA:B8:84:F1:10:A4 X509v3 Authority Key Identifier: keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7c:1d:40:bf:7d:f5:5c:1a:8b:26:ac:fb:a6:67:38:37:f5: d7:69:ac:fc:df:7a:1d:d4:c9:19:ca:10:b2:99:24:ae:5d:eb: 2e:6f:74:80:8f:34:d8:b5:a1:80:ca:50:10:50:65:0a:bc:56: fc:17:12:2b:6f:81:90:85:d9:a6:20:01:bf:b0:59:0b:65:34: 9f:76:2b:13:6b:92:7f:a3:90:e7:59:ff:53:90:38:c6:f8:3a: 6d:2d:a0:14:87:98:5d:40:fa:e2:45:fb:43:e3:0a:16:0c:32: da:8b:2a:87:19:23:fb:cf:87:87:d3:c6:f9:90:48:7b:ae:93: 80:18:65:de:c2:4a:ff:ef:72:9e:3f:67:32:3b:1a:ba:49:92: a3:42:f5:13:fc:b7:0d:a5:a7:e6:44:51:ad:c8:94:ea:3f:e2: ec:28:34:b0:42:ad:c4:69:17:bf:4a:82:93:a0:66:79:37:51: 10:5c:3d:1c:39:af:cc:18:3c:e5:ed:f3:37:7d:7b:4c:92:17: 9e:85:83:49:5a:75:bd:90:6f:98:82:35:98:4e:7b:2e:48:cd: 84:da:96:f8:67:d9:98:f5:36:d5:41:09:9f:8e:90:4f:59:f0: 22:42:51:e4:72:29:7a:a1:6b:e7:57:fc:a7:6d:5c:ba:10:ca: 06:dc:e1:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUC2PEsyM1Zh4KLPMvioWFznJWvtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCMzRDRjRBRkMwMTcyMTE1Mzk5MEFFMUExMEQ5MjJG NzUwNzU0NjAeFw0yNTExMDUwNTUxMDFaFw0yNTExMDYwNzMxMDFaMDMxMTAvBgNV BAMTKEREOTIxNTk3MUY0RjU3MDU2NTU2Mzg0NUE0RjRCQUI4ODRGMTEwQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWdBOaXCg4ssyc1g3v5OiIB5A 4q8Sbqi9RMZb+3LCAN70wT1wSEyTnBpu0Q47xE0WReQ63df9r+22Xn4X90ITrSmL 11uNGV4sU1N+d1xShW2cTXEYS5V1vYYU5i7vbn5jF+HdEwYgniiIppFj4tcjJ/9x Uvy9wj32Y9kc5gtTUEqlQOwWad96+9c45WNcu21VWDhjruH9LTCRzzVORTgmYkfG Knj4c0uQnBGd8vdRnvuR7dHn7ocVKellQSBrhdhfks+RAupQqAD3PFLyOeIVqDjn cE6h+ZibaKA3o3aL13zSLTGxv4J7lrw+B12M9zhQ6xBozlY9wFCxCIpeQw3NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3ZIVlx9PVwVlVjhFpPS6uITxEKQwHwYDVR0j BBgwFoAUzbNM9K/AFyEVOZCuGhDZIvdQdUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhU RnEvMC9DREIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQjM0Q0Y0QUZDMDE3MjEx NTM5OTBBRTFBMTBEOTIyRjc1MDc1NDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhURnEvMC9D REIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHHwdQL999Vwaiyas+6ZnODf112ms/N96HdTJGcoQspkkrl3rLm90gI802LWh gMpQEFBlCrxW/BcSK2+BkIXZpiABv7BZC2U0n3YrE2uSf6OQ51n/U5A4xvg6bS2g FIeYXUD64kX7Q+MKFgwy2osqhxkj+8+Hh9PG+ZBIe66TgBhl3sJK/+9ynj9nMjsa ukmSo0L1E/y3DaWn5kRRrciU6j/i7Cg0sEKtxGkXv0qCk6BmeTdREFw9HDmvzBg8 5e3zN317TJIXnoWDSVp1vZBvmII1mE57LkjNhNqW+GfZmPU21UEJn46QT1nwIkJR 5HIpeqFr51f8p21cuhDKBtzh5Q== -----END CERTIFICATE-----Generated at Wed Nov 5 13:24:32 2025 by rpki-client