$ rpki-client -vvf rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft File: CDCD83F4405AFD2B52943F9838374A340858512F.mft (raw, json) Hash identifier: ckhrkFURakVxjQBzlAfW/DN+4S3+2fBWWdDImTJ34Us= Subject key identifier: 4B:3B:37:99:BF:04:E9:BC:E2:D7:95:A3:14:46:2B:11:71:1D:2E:1D Authority key identifier: CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F Certificate issuer: /CN=CDCD83F4405AFD2B52943F9838374A340858512F Certificate serial: 524BCEF474DEC0C1B58D7D7EC2CD89B27A42568D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer Subject info access: rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft Manifest number: 030A Signing time: Tue 04 Nov 2025 21:11:36 +0000 Manifest this update: Tue 04 Nov 2025 21:06:36 +0000 Manifest next update: Wed 05 Nov 2025 23:35:36 +0000 Files and hashes: 1: 323830343a356534343a3a2f33322d3430203d3e20323639303232.roa (hash: o1wONqPOD2DiPspwJs9O0pk4Qff+Oqik6HEtMjHrJk0=) 2: 34352e3137382e3134342e302f32322d3234203d3e20323639303232.roa (hash: aJllC4bfN18sF7GVNwni9H6S3Ips8TngUuVzjDQk1mw=) 3: CDCD83F4405AFD2B52943F9838374A340858512F.crl (hash: 6Z3xSq+NFfkbMNSVQy0Ew5ScUVuD1b7Or4QKC3jHhvw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 23:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:4b:ce:f4:74:de:c0:c1:b5:8d:7d:7e:c2:cd:89:b2:7a:42:56:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDCD83F4405AFD2B52943F9838374A340858512F Validity Not Before: Nov 4 21:06:36 2025 GMT Not After : Nov 5 23:35:36 2025 GMT Subject: CN=4B3B3799BF04E9BCE2D795A314462B11711D2E1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bc:3b:e5:be:30:65:92:63:b4:af:e0:66:4a: ce:1a:1e:76:f1:a6:59:35:20:5e:23:28:8c:60:f4: e6:8f:22:fe:61:61:9a:06:ad:95:e7:a1:b2:a2:b2: 0d:13:6d:e7:a3:51:96:81:1f:bb:d6:57:e2:43:fd: 80:dc:ca:03:f9:87:af:35:92:d1:b6:94:79:2d:8f: 2e:14:3c:e4:09:f4:b8:ec:ef:18:c3:c9:37:81:30: 23:43:79:9e:07:16:46:ca:40:08:c4:d5:5e:ad:57: e1:2c:4d:29:3e:0b:aa:05:2f:8f:68:63:fa:e3:b3: 06:a9:80:c1:22:14:dd:69:60:9d:26:c5:28:60:71: d2:e9:84:91:9a:9e:7e:aa:c8:3c:1f:2c:9b:1c:b2: a3:19:c9:0d:ee:f9:c5:e6:d7:56:19:75:24:a5:8c: 09:cc:27:ca:16:fc:6c:13:3e:de:0d:38:f2:4f:7f: cb:f7:da:96:60:cc:df:8c:51:5a:b8:c0:9f:b5:24: 8c:da:bd:a5:45:00:4d:44:95:03:52:10:ea:d9:79: 41:05:32:37:d4:d7:85:9b:5a:a6:53:01:9a:cf:36: 9a:fe:b9:f4:ed:6b:26:f0:a6:10:85:59:74:4d:4a: 5b:80:2a:5e:af:40:e0:d2:fa:41:5c:30:62:0b:38: 47:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3B:37:99:BF:04:E9:BC:E2:D7:95:A3:14:46:2B:11:71:1D:2E:1D X509v3 Authority Key Identifier: keyid:CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:86:85:a5:55:ca:77:46:fe:66:d4:27:12:f5:54:14:c5:29: 5e:a8:a1:1b:30:c8:7c:e4:8e:6f:e7:cc:1a:f8:1f:1a:90:b5: 0e:f2:70:99:4f:e3:0b:77:c1:ea:6b:9b:7c:4d:51:4c:ce:93: 8b:01:f2:27:a9:14:c3:c0:5e:8d:80:f4:3f:86:6c:d4:31:f4: 68:97:bb:95:fe:52:64:15:40:58:d5:06:83:21:7c:3e:cf:40: c0:7c:03:ce:f4:ea:90:8d:66:5b:f5:3e:0b:d3:6b:8e:ad:99: d9:c7:79:07:b3:14:29:8b:0a:0c:f6:15:32:87:85:87:eb:8b: cf:73:45:e3:b9:63:84:3b:47:97:b1:b6:3b:4d:91:d5:c4:44: 6e:92:8e:2e:e1:16:ee:ce:3c:d7:85:3c:18:12:ad:6c:02:4f: d8:ac:ad:0d:cd:36:0f:67:ec:b0:52:48:c6:ae:6b:04:32:71: 32:6c:f2:6e:20:ce:9a:44:7f:d8:5c:65:73:79:9f:f9:85:2a: ee:a0:6f:1c:19:ff:57:b7:4e:ce:a6:41:17:1d:7e:ea:4d:d9: 08:7a:06:87:8b:8f:3a:fd:9c:2d:5e:f6:1e:ea:55:55:39:dd: 5d:73:fb:5b:9b:e2:5c:5a:14:a9:79:18:5d:b6:51:1f:2a:af: c0:3d:95:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUkvO9HTewMG1jX1+ws2JsnpCVo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDRDgzRjQ0MDVBRkQyQjUyOTQzRjk4MzgzNzRBMzQw ODU4NTEyRjAeFw0yNTExMDQyMTA2MzZaFw0yNTExMDUyMzM1MzZaMDMxMTAvBgNV BAMTKDRCM0IzNzk5QkYwNEU5QkNFMkQ3OTVBMzE0NDYyQjExNzExRDJFMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDovDvlvjBlkmO0r+BmSs4aHnbx plk1IF4jKIxg9OaPIv5hYZoGrZXnobKisg0TbeejUZaBH7vWV+JD/YDcygP5h681 ktG2lHktjy4UPOQJ9Ljs7xjDyTeBMCNDeZ4HFkbKQAjE1V6tV+EsTSk+C6oFL49o Y/rjswapgMEiFN1pYJ0mxShgcdLphJGann6qyDwfLJscsqMZyQ3u+cXm11YZdSSl jAnMJ8oW/GwTPt4NOPJPf8v32pZgzN+MUVq4wJ+1JIzavaVFAE1ElQNSEOrZeUEF MjfU14WbWqZTAZrPNpr+ufTtaybwphCFWXRNSluAKl6vQODS+kFcMGILOEcpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSzs3mb8E6bzi15WjFEYrEXEdLh0wHwYDVR0j BBgwFoAUzc2D9EBa/StSlD+YODdKNAhYUS8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHdWRUdIcFBzQnVHZndZMUQ5eFZCTkRDUjZ3UjZ3NmVpaHRhWjZORDND eDgvMi9DRENEODNGNDQwNUFGRDJCNTI5NDNGOTgzODM3NEEzNDA4NTg1MTJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQ0Q4M0Y0NDA1QUZEMkI1 Mjk0M0Y5ODM4Mzc0QTM0MDg1ODUxMkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHdWRUdIcFBzQnVHZndZMUQ5eFZCTkRDUjZ3UjZ3NmVpaHRhWjZORDNDeDgvMi9D RENEODNGNDQwNUFGRDJCNTI5NDNGOTgzODM3NEEzNDA4NTg1MTJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUYaFpVXKd0b+ZtQnEvVUFMUpXqihGzDIfOSOb+fMGvgfGpC1DvJwmU/jC3fB 6mubfE1RTM6TiwHyJ6kUw8BejYD0P4Zs1DH0aJe7lf5SZBVAWNUGgyF8Ps9AwHwD zvTqkI1mW/U+C9Nrjq2Z2cd5B7MUKYsKDPYVMoeFh+uLz3NF47ljhDtHl7G2O02R 1cREbpKOLuEW7s4814U8GBKtbAJP2KytDc02D2fssFJIxq5rBDJxMmzybiDOmkR/ 2Fxlc3mf+YUq7qBvHBn/V7dOzqZBFx1+6k3ZCHoGh4uPOv2cLV72HupVVTndXXP7 W5viXFoUqXkYXbZRHyqvwD2VZg== -----END CERTIFICATE-----Generated at Wed Nov 5 13:45:16 2025 by rpki-client