$ rpki-client -vvf rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft File: CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft (raw, json) Hash identifier: 3fSt0K4Tlq7XxcjiPvPrcsD5NgdUNIGQEjt2s2888RU= Subject key identifier: D3:1E:EA:47:DD:F4:32:E7:43:5B:76:E1:2B:76:D9:FD:75:B7:84:76 Authority key identifier: CE:47:DB:DD:28:40:AA:7B:CB:7E:5B:EF:8D:2B:B7:AD:F7:98:56:08 Certificate issuer: /CN=CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608 Certificate serial: 25CB1BE477AFB77DBAA93106184B095E93C8358A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer Subject info access: rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft Manifest number: FF Signing time: Tue 04 Nov 2025 18:14:42 +0000 Manifest this update: Tue 04 Nov 2025 18:09:42 +0000 Manifest next update: Wed 05 Nov 2025 18:48:42 +0000 Files and hashes: 1: CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.crl (hash: p7edtzgialEQhqHX6ZXFsr9x5EUsP/clIXF32wBxyEk=) 2: 323830343a376234633a3a2f33322d313238203d3e20323731343233.roa (hash: D6UugD7LMSE82MNKuHZ6AsbY2I0FQkZFbm92FJ5UaBg=) 3: 3230302e33362e3139362e302f32322d3332203d3e20323731343233.roa (hash: BN0yNSQYHzO/8PLxpClNHqjhVJbCaoMDHFJ1JsHe/LA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.crl rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 18:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:cb:1b:e4:77:af:b7:7d:ba:a9:31:06:18:4b:09:5e:93:c8:35:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608 Validity Not Before: Nov 4 18:09:42 2025 GMT Not After : Nov 5 18:48:42 2025 GMT Subject: CN=D31EEA47DDF432E7435B76E12B76D9FD75B78476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7e:66:77:1a:66:5f:db:de:c5:50:59:1c:0a: 1c:3e:30:3d:77:f3:98:8f:74:db:d0:75:0b:73:87: e2:7f:e6:f6:02:48:de:75:d2:b2:67:dd:1c:52:e8: ed:26:f8:98:0f:cd:4f:19:0f:78:fb:90:bc:ff:55: 63:04:ea:80:c5:4e:28:bb:d0:ee:44:f8:ab:6e:97: 01:f8:94:ba:0a:e0:71:b6:80:fd:91:25:86:c1:0d: 49:72:69:02:b4:16:f9:e3:83:d6:c5:54:95:0e:ad: 3b:83:47:c5:4a:40:e4:74:6f:2e:23:ed:e0:27:33: 33:9a:78:5d:1d:06:bf:4d:05:eb:b0:0a:80:46:59: 49:37:58:0e:a2:6b:54:38:63:4f:1b:98:ff:3d:9e: 3c:eb:ed:a1:d4:96:15:d1:f1:db:cc:a9:d2:7c:c0: f2:68:45:01:a0:fd:5d:31:e4:e1:90:a6:51:4b:76: 32:e5:ab:97:11:97:cc:fd:80:44:51:4f:2b:80:49: f6:f3:f2:9e:15:de:5c:7b:16:b6:d9:66:91:71:e8: 5a:6e:a7:0b:08:d2:04:40:dc:52:84:d9:46:56:10: cf:1d:a6:90:5c:6b:bd:57:08:ca:2e:e5:89:fb:93: 75:30:72:2f:d2:f0:7f:99:d9:6e:20:ec:a7:b5:31: e2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1E:EA:47:DD:F4:32:E7:43:5B:76:E1:2B:76:D9:FD:75:B7:84:76 X509v3 Authority Key Identifier: keyid:CE:47:DB:DD:28:40:AA:7B:CB:7E:5B:EF:8D:2B:B7:AD:F7:98:56:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:d8:23:82:30:41:c8:60:f7:9b:e2:e2:f6:68:85:ee:ea:22: 93:d4:02:82:9d:fe:11:a0:e8:6b:84:e1:66:6e:2a:d0:20:e1: 36:6c:8b:35:5a:42:3f:fd:09:a2:51:c8:70:d7:98:6c:2e:f3: 55:d3:2c:db:1a:55:a0:ae:9b:b2:87:39:cb:12:d1:aa:0d:0f: a6:69:52:85:9d:73:2c:a6:2d:a2:db:d5:09:e2:d8:50:9c:25: 9c:18:ab:c4:fe:26:fa:45:9b:a8:53:0d:66:94:82:4d:f0:cf: e1:fd:a5:ef:47:05:97:09:77:92:b7:84:fb:bd:42:51:d4:fc: a3:00:e0:16:2b:65:8c:51:61:5e:05:16:83:25:b1:52:bb:d9: 9d:0b:53:97:b4:ed:5d:52:c0:70:5f:3c:24:f4:0c:52:b5:2e: db:d8:55:47:58:65:d5:f1:9a:3b:0c:b7:b2:5a:21:c6:ce:90: 98:f4:89:7e:e0:2c:51:10:14:1a:87:cb:d6:ca:90:c8:91:ad: 64:15:ae:2e:aa:a1:73:fe:75:d6:d5:cb:f0:37:5a:e7:f8:eb: 3f:34:2e:e7:76:c3:52:0a:14:01:35:92:6e:9b:ac:e3:67:a0: a8:fb:98:42:66:ab:43:b9:87:a1:0f:62:bc:83:3f:95:ad:31: f5:4a:0f:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJcsb5Hevt326qTEGGEsJXpPINYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0N0RCREQyODQwQUE3QkNCN0U1QkVGOEQyQkI3QURG Nzk4NTYwODAeFw0yNTExMDQxODA5NDJaFw0yNTExMDUxODQ4NDJaMDMxMTAvBgNV BAMTKEQzMUVFQTQ3RERGNDMyRTc0MzVCNzZFMTJCNzZEOUZENzVCNzg0NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLfmZ3GmZf297FUFkcChw+MD13 85iPdNvQdQtzh+J/5vYCSN510rJn3RxS6O0m+JgPzU8ZD3j7kLz/VWME6oDFTii7 0O5E+KtulwH4lLoK4HG2gP2RJYbBDUlyaQK0Fvnjg9bFVJUOrTuDR8VKQOR0by4j 7eAnMzOaeF0dBr9NBeuwCoBGWUk3WA6ia1Q4Y08bmP89njzr7aHUlhXR8dvMqdJ8 wPJoRQGg/V0x5OGQplFLdjLlq5cRl8z9gERRTyuASfbz8p4V3lx7FrbZZpFx6Fpu pwsI0gRA3FKE2UZWEM8dppBca71XCMou5Yn7k3Uwci/S8H+Z2W4g7Ke1MeL3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0x7qR930MudDW3bhK3bZ/XW3hHYwHwYDVR0j BBgwFoAUzkfb3ShAqnvLflvvjSu3rfeYVggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWh2Yjk0QnRQM0M4YjRHVmd5R3RmWUFBS1M4a3ZqSHR4MzZtZFoyOWUy czYvMC9DRTQ3REJERDI4NDBBQTdCQ0I3RTVCRUY4RDJCQjdBREY3OTg1NjA4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNDdEQkREMjg0MEFBN0JD QjdFNUJFRjhEMkJCN0FERjc5ODU2MDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWh2Yjk0QnRQM0M4YjRHVmd5R3RmWUFBS1M4a3ZqSHR4MzZtZFoyOWUyczYvMC9D RTQ3REJERDI4NDBBQTdCQ0I3RTVCRUY4RDJCQjdBREY3OTg1NjA4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAINgjgjBByGD3m+Li9miF7uoik9QCgp3+EaDoa4ThZm4q0CDhNmyLNVpCP/0J olHIcNeYbC7zVdMs2xpVoK6bsoc5yxLRqg0PpmlShZ1zLKYtotvVCeLYUJwlnBir xP4m+kWbqFMNZpSCTfDP4f2l70cFlwl3kreE+71CUdT8owDgFitljFFhXgUWgyWx UrvZnQtTl7TtXVLAcF88JPQMUrUu29hVR1hl1fGaOwy3slohxs6QmPSJfuAsURAU GofL1sqQyJGtZBWuLqqhc/511tXL8Dda5/jrPzQu53bDUgoUATWSbpus42egqPuY QmarQ7mHoQ9ivIM/la0x9UoPcA== -----END CERTIFICATE-----Generated at Wed Nov 5 04:13:11 2025 by rpki-client