$ rpki-client -vvf rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/1/CDCF05124A1EFBE6EE0C57054010C84690BA61E6.mft File: CDCF05124A1EFBE6EE0C57054010C84690BA61E6.mft (raw, json) Hash identifier: 0Sy1Ev2Spmuo5HWTV1TezjgCp6hvgvCaPOT6ihzdP6s= Subject key identifier: 9C:41:C7:79:A5:9D:CA:DB:AF:F4:4F:E9:CB:C1:5C:14:95:E8:E8:E6 Authority key identifier: CD:CF:05:12:4A:1E:FB:E6:EE:0C:57:05:40:10:C8:46:90:BA:61:E6 Certificate issuer: /CN=CDCF05124A1EFBE6EE0C57054010C84690BA61E6 Certificate serial: 7A960FA145633F570161A1D80359CE3A177C0DA0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCF05124A1EFBE6EE0C57054010C84690BA61E6.cer Subject info access: rsync://rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/1/CDCF05124A1EFBE6EE0C57054010C84690BA61E6.mft Manifest number: 0308 Signing time: Wed 05 Nov 2025 05:10:41 +0000 Manifest this update: Wed 05 Nov 2025 05:05:41 +0000 Manifest next update: Thu 06 Nov 2025 05:14:41 +0000 Files and hashes: 1: 34352e3137332e3138382e302f32322d3332203d3e20323638383836.roa (hash: Fn9JMCvUfOmukslbyVlvdr+Z9Owa0CaMFmpi25iaFUg=) 2: 323830343a356331343a3a2f33322d313238203d3e20323638383836.roa (hash: nKQwQK6nqfru/VmfTWubUbpRfeu96htpVAgvx83TpHo=) 3: CDCF05124A1EFBE6EE0C57054010C84690BA61E6.crl (hash: 5c2u+GOwlC/fLepenlfZRFDWifh/jrdtJEzgoYfnaGo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/1/CDCF05124A1EFBE6EE0C57054010C84690BA61E6.crl rsync://rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/1/CDCF05124A1EFBE6EE0C57054010C84690BA61E6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCF05124A1EFBE6EE0C57054010C84690BA61E6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 05:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:96:0f:a1:45:63:3f:57:01:61:a1:d8:03:59:ce:3a:17:7c:0d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDCF05124A1EFBE6EE0C57054010C84690BA61E6 Validity Not Before: Nov 5 05:05:41 2025 GMT Not After : Nov 6 05:14:41 2025 GMT Subject: CN=9C41C779A59DCADBAFF44FE9CBC15C1495E8E8E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:d0:86:d3:85:09:df:d8:4e:7d:b5:bb:1c: ff:27:06:b6:d1:52:e1:c2:b1:f9:d7:9d:18:26:5b: 88:35:f5:55:c4:5b:c9:cd:f0:ca:46:ba:5d:d0:3c: 53:48:ea:81:95:0f:de:36:60:f3:24:fa:1d:15:4f: 9a:44:e4:a7:ea:9b:2e:84:7e:b7:24:5c:08:53:19: f7:15:1f:c0:49:35:34:ae:17:10:58:f2:92:26:4a: d6:f1:fd:04:b3:f9:10:8c:08:fd:de:9e:88:36:b9: 01:9e:69:86:8d:1a:c4:e7:62:82:21:b6:1b:18:a5: 7a:ab:9a:bd:3d:61:cb:28:5d:4c:5d:13:b5:4e:a6: ae:69:f5:ba:0b:54:34:06:80:b8:71:6a:e4:49:da: 9d:a6:58:2b:7d:06:c2:f1:1b:7d:dd:c3:16:59:d0: a0:77:e6:9c:a5:57:d1:db:0b:a3:9e:cf:65:ed:a4: 7f:23:32:82:76:4d:93:02:7d:2f:30:ec:8f:dd:df: 8e:99:60:c1:75:d0:1e:17:f9:80:96:8e:66:47:ad: 5c:aa:8c:5f:8e:4e:6a:aa:dc:84:ae:16:a7:b3:c5: ce:4a:a4:ca:ea:85:dc:90:0d:94:a7:40:3c:8e:af: a9:0a:14:4d:05:96:a2:4f:5b:87:ec:ac:66:1d:89: dd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:41:C7:79:A5:9D:CA:DB:AF:F4:4F:E9:CB:C1:5C:14:95:E8:E8:E6 X509v3 Authority Key Identifier: keyid:CD:CF:05:12:4A:1E:FB:E6:EE:0C:57:05:40:10:C8:46:90:BA:61:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/1/CDCF05124A1EFBE6EE0C57054010C84690BA61E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCF05124A1EFBE6EE0C57054010C84690BA61E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/1/CDCF05124A1EFBE6EE0C57054010C84690BA61E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:4c:f1:7c:f7:e6:af:84:58:0c:ce:35:30:a5:29:a7:e6:e2: 3c:fb:9d:ea:53:ab:02:2f:5d:f6:0d:fd:a2:44:4f:fa:75:2c: a9:33:e3:82:f7:01:ac:4a:8a:fe:8c:8e:6f:a0:90:30:b4:7f: ff:75:5b:71:ff:cc:80:62:53:3b:dd:28:f4:8e:27:65:4c:37: a2:ef:29:d0:a4:75:30:93:c3:01:43:df:3f:f4:b0:43:00:e7: d8:69:c8:bf:39:e0:d2:de:f8:d9:55:a8:d1:08:fc:59:ea:20: a6:b4:03:d4:90:1a:74:9c:27:22:02:86:56:c9:f3:cc:5f:c0: 19:70:03:f8:21:1a:a8:11:6c:b2:95:eb:b4:c0:2e:cd:89:a6: 63:10:eb:0a:99:74:7b:c4:ee:71:60:11:21:c2:56:86:cc:23: 20:0e:65:83:00:46:db:70:df:0e:30:10:a9:5b:75:90:7c:f1: fa:38:c3:33:4c:dd:46:2e:f4:19:4e:a0:6e:1e:3b:32:ce:e2: 93:60:b0:1f:cc:09:5d:ae:d0:22:b0:20:11:ad:7b:eb:ec:e7: b1:55:10:03:e9:36:4f:88:01:41:76:b8:2e:17:c2:8b:09:b1: 02:12:00:7b:5b:9a:2a:d9:3a:fd:bc:06:3d:0f:78:3f:1e:c6: 6a:51:24:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUepYPoUVjP1cBYaHYA1nOOhd8DaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDRjA1MTI0QTFFRkJFNkVFMEM1NzA1NDAxMEM4NDY5 MEJBNjFFNjAeFw0yNTExMDUwNTA1NDFaFw0yNTExMDYwNTE0NDFaMDMxMTAvBgNV BAMTKDlDNDFDNzc5QTU5RENBREJBRkY0NEZFOUNCQzE1QzE0OTVFOEU4RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMtCG04UJ39hOfbW7HP8nBrbR UuHCsfnXnRgmW4g19VXEW8nN8MpGul3QPFNI6oGVD942YPMk+h0VT5pE5Kfqmy6E frckXAhTGfcVH8BJNTSuFxBY8pImStbx/QSz+RCMCP3enog2uQGeaYaNGsTnYoIh thsYpXqrmr09YcsoXUxdE7VOpq5p9boLVDQGgLhxauRJ2p2mWCt9BsLxG33dwxZZ 0KB35pylV9HbC6Oez2XtpH8jMoJ2TZMCfS8w7I/d346ZYMF10B4X+YCWjmZHrVyq jF+OTmqq3ISuFqezxc5KpMrqhdyQDZSnQDyOr6kKFE0FlqJPW4fsrGYdid1nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnEHHeaWdytuv9E/py8FcFJXo6OYwHwYDVR0j BBgwFoAUzc8FEkoe++buDFcFQBDIRpC6YeYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNnJiN1RWblNtVHB0ZllmbnlmYjdkSHJjNU5QN05DdlBWc2Rob3R4emFT d3YvMS9DRENGMDUxMjRBMUVGQkU2RUUwQzU3MDU0MDEwQzg0NjkwQkE2MUU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQ0YwNTEyNEExRUZCRTZF RTBDNTcwNTQwMTBDODQ2OTBCQTYxRTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NnJiN1RWblNtVHB0ZllmbnlmYjdkSHJjNU5QN05DdlBWc2Rob3R4emFTd3YvMS9D RENGMDUxMjRBMUVGQkU2RUUwQzU3MDU0MDEwQzg0NjkwQkE2MUU2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsEzxfPfmr4RYDM41MKUpp+biPPud6lOrAi9d9g39okRP+nUsqTPjgvcBrEqK /oyOb6CQMLR//3Vbcf/MgGJTO90o9I4nZUw3ou8p0KR1MJPDAUPfP/SwQwDn2GnI vzng0t742VWo0Qj8WeogprQD1JAadJwnIgKGVsnzzF/AGXAD+CEaqBFsspXrtMAu zYmmYxDrCpl0e8TucWARIcJWhswjIA5lgwBG23DfDjAQqVt1kHzx+jjDM0zdRi70 GU6gbh47Ms7ik2CwH8wJXa7QIrAgEa176+znsVUQA+k2T4gBQXa4LhfCiwmxAhIA e1uaKtk6/bwGPQ94Px7GalEkVw== -----END CERTIFICATE-----Generated at Wed Nov 5 10:29:13 2025 by rpki-client