$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft File: 11CAB655737FE08C031052B869B67F7F82CCE9CC.mft (raw, json) Hash identifier: OPxr4HJ0kpHDq86rWvsHpqk6hivU6clVfMLdggM/3PM= Subject key identifier: 4A:EA:CB:7B:B7:EB:8D:21:EC:E2:E1:97:AA:3B:67:D4:36:CA:09:06 Authority key identifier: 11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC Certificate issuer: /CN=11CAB655737FE08C031052B869B67F7F82CCE9CC Certificate serial: 27DA8C99F908F6E79CB6114002C99CADF229B468 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft Manifest number: 0181 Signing time: Wed 05 Nov 2025 09:03:38 +0000 Manifest this update: Wed 05 Nov 2025 08:58:38 +0000 Manifest next update: Thu 06 Nov 2025 12:19:38 +0000 Files and hashes: 1: 323830343a343031343a3a2f33322d313238203d3e20323635393333.roa (hash: s5G6Z9jrVoevflU84bZ+yzQEF2Gyexpuwo5a+N4Yd7w=) 2: 34352e342e38302e302f32322d3332203d3e20323635393333.roa (hash: Hjx5RjpzokA4knJgq0k249DxnjzKzpITikPCcGMUtr8=) 3: 11CAB655737FE08C031052B869B67F7F82CCE9CC.crl (hash: peh1G9925++REZMxMtJchn2ugG5qKl5JpnYVvKgal8w=) 4: 3136342e3136332e302e302f32322d3332203d3e20323635393333.roa (hash: GHvq9r74x2Xc9pO/newiw9yIkLQrbVGTcJbcBnLLpsk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.crl rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 12:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:da:8c:99:f9:08:f6:e7:9c:b6:11:40:02:c9:9c:ad:f2:29:b4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11CAB655737FE08C031052B869B67F7F82CCE9CC Validity Not Before: Nov 5 08:58:38 2025 GMT Not After : Nov 6 12:19:38 2025 GMT Subject: CN=4AEACB7BB7EB8D21ECE2E197AA3B67D436CA0906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6b:8e:1c:4d:4e:e2:a7:de:82:1a:b5:e9:11: 08:4a:d5:86:74:89:79:5d:27:dc:fb:58:8e:14:b0: f4:b5:0a:3f:2c:ca:60:ac:53:37:1d:3f:8d:8b:6f: 7b:a2:90:b1:dc:97:da:d0:eb:9e:72:20:c5:bf:e9: 69:89:50:b0:41:7a:fb:89:8e:21:04:e1:05:cd:08: 64:c4:58:98:6a:2c:67:9d:f4:c3:b1:f2:27:b2:04: 33:60:77:9e:7e:51:72:39:59:78:c8:af:fa:a2:a1: 47:e5:fa:33:b8:0d:59:bc:5a:e5:22:bc:8f:a8:ad: 2a:44:96:df:10:b1:7a:2e:00:15:4b:5a:03:42:5d: 36:14:53:2f:8f:eb:7d:ae:25:46:93:c3:50:d6:67: a7:fc:a8:51:b8:b9:10:ab:3b:02:42:a6:e8:23:29: 0b:6c:2f:ea:d3:c9:ef:ee:c5:a3:1b:92:7e:c0:76: 7c:da:be:2c:17:56:77:61:28:c3:29:16:2d:1d:d0: 64:8c:a8:c3:0d:b2:cc:ec:79:0e:ce:61:d6:e2:f0: 99:75:16:72:57:e5:b1:ee:3a:9f:d3:13:dc:12:c5: 30:2f:9a:40:db:8f:f9:69:3b:68:b7:b3:6d:da:98: c9:88:5e:43:d1:c4:62:6d:ec:87:98:c4:49:20:a1: 63:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EA:CB:7B:B7:EB:8D:21:EC:E2:E1:97:AA:3B:67:D4:36:CA:09:06 X509v3 Authority Key Identifier: keyid:11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:c3:27:c6:7b:8e:2f:27:66:77:b8:2c:65:78:e6:6a:0c:74: c6:63:a8:ec:4c:0f:43:a7:88:92:45:fe:ef:a7:c2:ab:2e:57: 21:4d:40:36:74:e1:c4:11:48:e0:74:43:75:ee:49:ef:31:87: 66:91:be:1f:eb:65:c6:99:60:b8:53:8e:f7:3b:b6:8a:5c:33: 1d:a5:16:7f:af:ac:86:8e:71:77:e9:2d:c0:4d:85:41:9b:1a: 35:d7:9e:e8:49:c5:c4:bc:65:11:4b:a9:9b:44:68:41:db:f6: f0:cb:26:b5:a6:c9:dd:1a:47:ce:3a:d5:6a:00:0e:15:5b:58: 7c:d9:b4:46:c9:3b:9e:ef:8e:8a:cf:37:b9:85:36:ab:80:44: fe:80:83:36:cc:38:17:90:cd:46:1d:40:90:33:df:ed:d3:68: 8f:3f:fd:98:6e:98:70:b1:29:51:c3:67:4e:37:66:c0:82:dd: 0f:3d:da:b7:ac:da:fb:b0:33:a2:6b:29:f6:6e:50:d8:bb:74: ea:ac:3c:9a:65:19:bc:a3:8d:0f:0e:d0:83:5c:87:16:1b:ef: c9:fd:27:56:af:04:a4:18:fa:90:db:8b:6d:66:8b:05:ab:d3: 98:d1:84:59:1f:d8:46:13:0a:a8:5f:54:cf:11:6e:28:8d:2d: 15:cc:f5:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ9qMmfkI9uecthFAAsmcrfIptGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDQUI2NTU3MzdGRTA4QzAzMTA1MkI4NjlCNjdGN0Y4 MkNDRTlDQzAeFw0yNTExMDUwODU4MzhaFw0yNTExMDYxMjE5MzhaMDMxMTAvBgNV BAMTKDRBRUFDQjdCQjdFQjhEMjFFQ0UyRTE5N0FBM0I2N0Q0MzZDQTA5MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCda44cTU7ip96CGrXpEQhK1YZ0 iXldJ9z7WI4UsPS1Cj8symCsUzcdP42Lb3uikLHcl9rQ655yIMW/6WmJULBBevuJ jiEE4QXNCGTEWJhqLGed9MOx8ieyBDNgd55+UXI5WXjIr/qioUfl+jO4DVm8WuUi vI+orSpElt8QsXouABVLWgNCXTYUUy+P632uJUaTw1DWZ6f8qFG4uRCrOwJCpugj KQtsL+rTye/uxaMbkn7AdnzaviwXVndhKMMpFi0d0GSMqMMNsszseQ7OYdbi8Jl1 FnJX5bHuOp/TE9wSxTAvmkDbj/lpO2i3s23amMmIXkPRxGJt7IeYxEkgoWNnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSurLe7frjSHs4uGXqjtn1DbKCQYwHwYDVR0j BBgwFoAUEcq2VXN/4IwDEFK4abZ/f4LM6cwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFlOblF1QTVNR1lqMUpXcEVQeFVUS0hZOWZHaWl2ZHQ3WWJDeWFCaW50 RHEvMC8xMUNBQjY1NTczN0ZFMDhDMDMxMDUyQjg2OUI2N0Y3RjgyQ0NFOUNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQ0FCNjU1NzM3RkUwOEMw MzEwNTJCODY5QjY3RjdGODJDQ0U5Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFlOblF1QTVNR1lqMUpXcEVQeFVUS0hZOWZHaWl2ZHQ3WWJDeWFCaW50RHEvMC8x MUNBQjY1NTczN0ZFMDhDMDMxMDUyQjg2OUI2N0Y3RjgyQ0NFOUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkMMnxnuOLydmd7gsZXjmagx0xmOo7EwPQ6eIkkX+76fCqy5XIU1ANnThxBFI 4HRDde5J7zGHZpG+H+tlxplguFOO9zu2ilwzHaUWf6+sho5xd+ktwE2FQZsaNdee 6EnFxLxlEUupm0RoQdv28MsmtabJ3RpHzjrVagAOFVtYfNm0Rsk7nu+Ois83uYU2 q4BE/oCDNsw4F5DNRh1AkDPf7dNojz/9mG6YcLEpUcNnTjdmwILdDz3at6za+7Az omsp9m5Q2Lt06qw8mmUZvKONDw7Qg1yHFhvvyf0nVq8EpBj6kNuLbWaLBavTmNGE WR/YRhMKqF9UzxFuKI0tFcz1tA== -----END CERTIFICATE-----Generated at Wed Nov 5 14:44:51 2025 by rpki-client