$ rpki-client -vvf rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft File: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft (raw, json) Hash identifier: 9DRo5XCiRbkRP7H4MpdFf1ST+pWjOhmNWmRiBE/TEDs= Subject key identifier: DB:8A:64:16:25:0D:76:46:56:E0:A3:4C:52:4D:48:8E:6D:94:84:2D Authority key identifier: CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7 Certificate issuer: /CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7 Certificate serial: 592A8159272D10440E752FF9405296D2607F2C6B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer Subject info access: rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft Manifest number: 0301 Signing time: Tue 04 Nov 2025 09:34:30 +0000 Manifest this update: Tue 04 Nov 2025 09:29:30 +0000 Manifest next update: Wed 05 Nov 2025 12:29:30 +0000 Files and hashes: 1: 3137302e38302e38302e302f32322d3332203d3e20323636343130.roa (hash: mc7zyxlcDWTpf8MHBgckQ6SrkcbI0QSEbJyTbgaFwFE=) 2: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl (hash: wMe7j7zGtYRXHnTWpO8/uOzbaFUtv2g45GkkgnaLUhc=) 3: 323830343a333736383a3a2f33322d313238203d3e20323636343130.roa (hash: VBCnHU5TBlO8GQbvm38yaXyrz4vjADhjKHV3unpcPFM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 12:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:2a:81:59:27:2d:10:44:0e:75:2f:f9:40:52:96:d2:60:7f:2c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7 Validity Not Before: Nov 4 09:29:30 2025 GMT Not After : Nov 5 12:29:30 2025 GMT Subject: CN=DB8A6416250D764656E0A34C524D488E6D94842D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:ce:d7:5b:17:23:2a:f1:39:4a:8f:a0:13: 13:f6:d5:6b:67:41:e2:0e:98:ed:33:25:18:9d:10: 10:0f:34:7b:e2:0d:55:db:a4:b9:6c:a4:42:97:5f: 81:e7:d9:6d:6f:35:f3:70:99:63:56:ed:68:7e:ed: ea:9d:a7:9a:e5:a9:9a:f8:ca:ad:a1:d7:b8:d0:35: 2a:46:66:b3:2f:01:b4:18:5c:e0:cc:74:ed:36:fe: 7a:c0:6c:9d:6b:75:54:cd:3a:1e:cf:f6:a6:46:92: ef:28:cd:3b:42:d3:41:b7:73:e9:49:34:87:bf:5e: 3e:f1:c5:b8:5a:73:fe:2e:0d:af:51:00:32:e2:24: 66:e7:39:b7:28:fe:07:dd:f9:26:ed:7a:50:bd:d1: 7b:25:89:4c:3a:60:34:43:44:6c:3e:b8:94:b4:da: 7c:ca:8b:c5:6d:60:b1:c9:66:f1:08:20:c3:a2:2c: a3:8b:ae:9d:08:76:bb:ae:ff:40:2d:92:20:d5:a4: a1:d7:99:08:da:68:fc:d9:be:cb:17:d4:75:5b:7c: 66:d9:f7:01:b0:03:64:0b:bf:ff:57:fa:dd:cb:7c: 9b:b5:02:ce:0b:6c:a5:43:25:04:60:68:04:ab:87: 09:a7:77:c0:bc:0c:70:7a:c2:a3:e8:0f:08:06:b7: bd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8A:64:16:25:0D:76:46:56:E0:A3:4C:52:4D:48:8E:6D:94:84:2D X509v3 Authority Key Identifier: keyid:CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:30:9e:fd:de:ae:98:09:e3:89:16:f1:fc:e5:54:19:a2:e6: 33:d3:3f:fa:40:85:2a:28:18:69:b2:47:69:a8:b1:4a:e7:ba: e0:5b:7d:b0:a2:b0:dd:2b:f8:c2:a1:58:7f:b1:47:b9:70:0b: 93:aa:46:04:a0:10:fb:72:31:74:31:92:b3:40:33:75:65:e2: ea:4a:a0:bb:b9:2e:8d:18:00:04:34:db:86:6e:db:25:a2:32: e4:24:28:24:e0:e7:96:de:30:95:53:c3:1e:76:20:d9:c8:53: ab:a0:d0:02:f1:94:98:dd:d6:31:b8:3a:1e:c2:46:ba:41:95: b9:b0:7e:f0:76:5c:15:a9:7b:f7:44:6d:84:57:46:84:a1:64: 17:f1:0d:17:a1:0e:3f:55:c4:f2:04:94:b3:f3:a4:9e:1d:c3: ee:b6:c3:2b:08:67:20:5a:ec:c7:77:e0:43:d5:3b:57:15:89: a2:35:a0:8f:0a:38:f9:b3:02:88:a7:5e:18:b6:e8:3a:0f:cb: bb:c6:89:78:af:cf:50:8a:92:e2:f6:a1:b8:7b:c1:e8:76:c7: 8a:d4:2b:87:69:ab:43:60:a3:c9:7e:d4:55:73:b9:fb:39:9a: c8:b9:22:1f:c7:3f:10:38:bd:22:2b:e6:bf:29:4d:89:9a:51: 8a:69:ef:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWSqBWSctEEQOdS/5QFKW0mB/LGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JGRTkzNzY5RERCRkNBNzA0RjgzNjA0MDdGNTVCMEQ4 RkE4NkNDNzAeFw0yNTExMDQwOTI5MzBaFw0yNTExMDUxMjI5MzBaMDMxMTAvBgNV BAMTKERCOEE2NDE2MjUwRDc2NDY1NkUwQTM0QzUyNEQ0ODhFNkQ5NDg0MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCp87XWxcjKvE5So+gExP21Wtn QeIOmO0zJRidEBAPNHviDVXbpLlspEKXX4Hn2W1vNfNwmWNW7Wh+7eqdp5rlqZr4 yq2h17jQNSpGZrMvAbQYXODMdO02/nrAbJ1rdVTNOh7P9qZGku8ozTtC00G3c+lJ NIe/Xj7xxbhac/4uDa9RADLiJGbnObco/gfd+SbtelC90XsliUw6YDRDRGw+uJS0 2nzKi8VtYLHJZvEIIMOiLKOLrp0Idruu/0AtkiDVpKHXmQjaaPzZvssX1HVbfGbZ 9wGwA2QLv/9X+t3LfJu1As4LbKVDJQRgaASrhwmnd8C8DHB6wqPoDwgGt73nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU24pkFiUNdkZW4KNMUk1Ijm2UhC0wHwYDVR0j BBgwFoAUy/6Tdp3b/KcE+DYEB/VbDY+obMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzNSc0JOc2NLNVZqNkVHMmlueDRqTGl2a1FHcDg3ZVFoM0s5dEhlZ3pW bmUvMS9DQkZFOTM3NjlEREJGQ0E3MDRGODM2MDQwN0Y1NUIwRDhGQTg2Q0M3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCRkU5Mzc2OUREQkZDQTcw NEY4MzYwNDA3RjU1QjBEOEZBODZDQzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzNSc0JOc2NLNVZqNkVHMmlueDRqTGl2a1FHcDg3ZVFoM0s5dEhlZ3pWbmUvMS9D QkZFOTM3NjlEREJGQ0E3MDRGODM2MDQwN0Y1NUIwRDhGQTg2Q0M3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABzCe/d6umAnjiRbx/OVUGaLmM9M/+kCFKigYabJHaaixSue64Ft9sKKw3Sv4 wqFYf7FHuXALk6pGBKAQ+3IxdDGSs0AzdWXi6kqgu7kujRgABDTbhm7bJaIy5CQo JODnlt4wlVPDHnYg2chTq6DQAvGUmN3WMbg6HsJGukGVubB+8HZcFal790RthFdG hKFkF/ENF6EOP1XE8gSUs/Oknh3D7rbDKwhnIFrsx3fgQ9U7VxWJojWgjwo4+bMC iKdeGLboOg/Lu8aJeK/PUIqS4vahuHvB6HbHitQrh2mrQ2CjyX7UVXO5+zmayLki H8c/EDi9IivmvylNiZpRimnv+g== -----END CERTIFICATE-----Generated at Wed Nov 5 05:12:03 2025 by rpki-client