$ rpki-client -vvf rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft File: CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft (raw, json) Hash identifier: tfIoidWrPMGXemMrwt2MD3tCwmg8ISVWmFv4Kb3uDAo= Subject key identifier: 4F:B8:C9:25:08:EB:EF:FB:5A:08:C4:5E:23:C6:0D:31:A4:22:AB:27 Authority key identifier: CE:69:E0:90:A3:A3:C4:5C:3E:E3:F4:A2:A4:06:8B:58:94:8D:C9:94 Certificate issuer: /CN=CE69E090A3A3C45C3EE3F4A2A4068B58948DC994 Certificate serial: 0E0BB054AD917E50C9448C2235E829FDBFD510B1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer Subject info access: rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft Manifest number: 027C Signing time: Tue 04 Nov 2025 22:54:11 +0000 Manifest this update: Tue 04 Nov 2025 22:49:11 +0000 Manifest next update: Thu 06 Nov 2025 01:48:11 +0000 Files and hashes: 1: CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.crl (hash: NvDToOt7bNI5R/V/6JMOucXB4hio/HcML9eE/Em6pzQ=) 2: 3139302e3130372e3136302e302f32322d3234203d3e20323730343135.roa (hash: A8kWvaltxYyvbnah0osFRp6KjhjI7+SK/5dGPfcjeoE=) 3: 323830343a366261383a3a2f33322d3438203d3e20323730343135.roa (hash: Gemcb4V5qPaojkbRamJOllDbJN0znPPuJTFFrmwzhmY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.crl rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:0b:b0:54:ad:91:7e:50:c9:44:8c:22:35:e8:29:fd:bf:d5:10:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE69E090A3A3C45C3EE3F4A2A4068B58948DC994 Validity Not Before: Nov 4 22:49:11 2025 GMT Not After : Nov 6 01:48:11 2025 GMT Subject: CN=4FB8C92508EBEFFB5A08C45E23C60D31A422AB27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:af:ea:0d:af:a2:81:de:ef:96:a5:13:64:f5: 44:0b:27:b3:13:12:9f:45:18:a9:24:3a:ce:51:dd: 3b:22:67:b2:dd:21:64:31:f0:59:0e:99:2c:31:bb: c9:c1:8e:33:e4:18:ba:c6:49:86:aa:c6:7f:20:e8: ad:1c:a6:be:fb:05:80:e5:4e:46:17:19:18:be:8e: 0a:bd:51:05:56:d1:ba:3f:e9:7c:7c:5b:94:d0:53: d7:23:8a:47:ec:93:a8:87:88:48:e0:c8:cc:1a:9f: 99:b9:ff:77:81:aa:54:72:c6:2a:b8:3c:bb:9d:1d: 33:44:15:99:e6:74:ea:1b:c7:44:dc:25:2d:24:73: 92:84:2c:19:5d:a3:f5:10:6d:e3:a1:9d:aa:d4:75: 3a:ab:41:2a:ef:53:15:a0:30:11:91:e5:93:f4:f3: f0:ed:19:2a:0c:3a:b6:d9:98:dc:0e:a3:9b:ed:24: 89:66:8c:ed:df:00:06:29:fe:52:06:67:cc:52:bf: 31:93:88:db:71:83:8b:a6:dc:ed:f6:93:33:d8:23: 33:8b:7d:ee:4d:b6:10:b2:af:62:e6:3a:22:b4:05: 19:92:37:ff:1c:ac:d3:cb:21:96:e0:0f:58:d3:31: fc:ae:1b:1e:c7:89:72:da:b6:bf:d2:3c:70:3a:07: c1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B8:C9:25:08:EB:EF:FB:5A:08:C4:5E:23:C6:0D:31:A4:22:AB:27 X509v3 Authority Key Identifier: keyid:CE:69:E0:90:A3:A3:C4:5C:3E:E3:F4:A2:A4:06:8B:58:94:8D:C9:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:a6:c8:48:a7:d3:27:75:5d:fd:01:05:c5:ee:f2:ff:01:6b: 7f:21:80:d4:69:a0:dd:68:84:7b:7e:b8:a7:87:6e:6c:32:10: 08:b8:b1:da:34:50:7f:10:7e:47:22:13:be:f3:cf:e0:d6:52: 25:98:73:03:39:e9:48:ae:6c:2a:48:b8:37:cc:19:b4:bb:c8: 90:72:6c:4e:04:e8:e3:ec:64:9b:ce:c1:56:9f:44:4d:63:9c: ea:69:0f:4a:57:19:83:77:64:d5:4f:5f:b6:d7:48:1d:70:0b: 1c:08:0d:9b:85:5b:19:6c:04:71:d1:77:2e:eb:0e:1d:c5:6b: 60:72:c0:17:b4:f8:85:e5:57:76:4c:47:a2:58:81:02:a1:25: 7d:34:f0:a5:eb:ca:64:bb:27:b1:1e:59:d0:c3:78:97:6a:f3: b9:59:af:55:e3:d8:16:21:b2:56:a1:3a:55:29:a4:8c:0f:9e: d4:bb:a1:db:78:f9:9e:d2:a3:29:a4:33:79:a1:95:b5:4b:60: d9:7f:fe:07:fc:0d:54:8a:26:5a:47:4d:90:26:ef:f9:18:96: 92:70:4f:c4:23:26:cf:ac:7f:6c:71:d8:99:8c:0d:6c:dc:1e: 4e:00:da:b0:5b:c4:4a:c1:93:b7:7b:13:c8:38:4f:bb:12:00: 65:bc:d3:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDguwVK2RflDJRIwiNegp/b/VELEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U2OUUwOTBBM0EzQzQ1QzNFRTNGNEEyQTQwNjhCNTg5 NDhEQzk5NDAeFw0yNTExMDQyMjQ5MTFaFw0yNTExMDYwMTQ4MTFaMDMxMTAvBgNV BAMTKDRGQjhDOTI1MDhFQkVGRkI1QTA4QzQ1RTIzQzYwRDMxQTQyMkFCMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCur+oNr6KB3u+WpRNk9UQLJ7MT Ep9FGKkkOs5R3TsiZ7LdIWQx8FkOmSwxu8nBjjPkGLrGSYaqxn8g6K0cpr77BYDl TkYXGRi+jgq9UQVW0bo/6Xx8W5TQU9cjikfsk6iHiEjgyMwan5m5/3eBqlRyxiq4 PLudHTNEFZnmdOobx0TcJS0kc5KELBldo/UQbeOhnarUdTqrQSrvUxWgMBGR5ZP0 8/DtGSoMOrbZmNwOo5vtJIlmjO3fAAYp/lIGZ8xSvzGTiNtxg4um3O32kzPYIzOL fe5NthCyr2LmOiK0BRmSN/8crNPLIZbgD1jTMfyuGx7HiXLatr/SPHA6B8HPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUT7jJJQjr7/taCMReI8YNMaQiqycwHwYDVR0j BBgwFoAUzmngkKOjxFw+4/SipAaLWJSNyZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1hoeWFDdXFHVjJHZHZYOGZZeUI2dTFDSFR2Um1NYTlnVmZuS0JVZXBp S2ovMC9DRTY5RTA5MEEzQTNDNDVDM0VFM0Y0QTJBNDA2OEI1ODk0OERDOTk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNjlFMDkwQTNBM0M0NUMz RUUzRjRBMkE0MDY4QjU4OTQ4REM5OTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1hoeWFDdXFHVjJHZHZYOGZZeUI2dTFDSFR2Um1NYTlnVmZuS0JVZXBpS2ovMC9D RTY5RTA5MEEzQTNDNDVDM0VFM0Y0QTJBNDA2OEI1ODk0OERDOTk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoabISKfTJ3Vd/QEFxe7y/wFrfyGA1Gmg3WiEe364p4dubDIQCLix2jRQfxB+ RyITvvPP4NZSJZhzAznpSK5sKki4N8wZtLvIkHJsTgTo4+xkm87BVp9ETWOc6mkP SlcZg3dk1U9fttdIHXALHAgNm4VbGWwEcdF3LusOHcVrYHLAF7T4heVXdkxHoliB AqElfTTwpevKZLsnsR5Z0MN4l2rzuVmvVePYFiGyVqE6VSmkjA+e1Luh23j5ntKj KaQzeaGVtUtg2X/+B/wNVIomWkdNkCbv+RiWknBPxCMmz6x/bHHYmYwNbNweTgDa sFvESsGTt3sTyDhPuxIAZbzThA== -----END CERTIFICATE-----Generated at Wed Nov 5 07:51:41 2025 by rpki-client