$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft File: CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft (raw, json) Hash identifier: 881voC1izrq1wr9rUJaJNxD+0kHLC7BqfCd6Gn/sDa4= Subject key identifier: 48:C0:EA:BE:E4:D5:6C:35:03:27:BA:4B:D3:E6:52:3B:65:B6:6A:A1 Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D Certificate issuer: /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D Certificate serial: 216FED1E867DFE686DEA64494A01319EE5246772 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft Manifest number: 026F Signing time: Tue 04 Nov 2025 13:12:00 +0000 Manifest this update: Tue 04 Nov 2025 13:07:00 +0000 Manifest next update: Wed 05 Nov 2025 14:09:00 +0000 Files and hashes: 1: 323830343a326634383a343030303a3a2f33352d3335203d3e203533303532.roa (hash: bJTlkydbXUGBFokn1m1/Z4uHnSRjk6Hkb7sXiET52kk=) 2: 3138372e38342e33322e302f32322d3232203d3e203533303532.roa (hash: vOhIqgDTIadDaon1gt7fCVy/mpXJQkIz6qG3ekLd3T0=) 3: 3138372e38342e34342e302f32332d3233203d3e203533303532.roa (hash: xD4wdwwwR+oV8RsTzFOurC+sut3yZ7juddhGug2RQrw=) 4: 3138372e38342e33332e302f32342d3234203d3e203533303532.roa (hash: btC3yb2gw201qNYvn2GqTUoBvBbe/gJJzsej3Db9zs4=) 5: 3138372e38342e33322e302f32332d3233203d3e203533303532.roa (hash: EjrCf60Rtu0VafIasVQW6Z1H0RWmHru/DLLXdifrZ5U=) 6: 3138372e38342e34342e302f32342d3234203d3e203533303532.roa (hash: 9Uw/JLq355+siGWWAMU/CgDbUsZIqm/MEzVaCAYKBtk=) 7: 323830343a326634383a343030303a3a2f33362d3336203d3e203533303532.roa (hash: i+HC1DDB2921eTVEjjqDNcq5RxoE+kOgojnIe172JKk=) 8: 3138372e38342e34352e302f32342d3234203d3e203533303532.roa (hash: 900GwKoLxuywtHi2SqZ8G9+u+NIBylaMovKRM4pBjzA=) 9: 323830343a326634383a3a2f33352d3335203d3e203533303532.roa (hash: 6PLeUvtT+KVe+DrjTNHr6wre2GRXcTCr12nAkWKXpjw=) 10: CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl (hash: 1ekvzhN6N+8fP8C6aKF8a2z89fNF2zX0SszSvXYarW4=) 11: 3138372e38342e33352e302f32342d3234203d3e203533303532.roa (hash: bZVmKTe4oncs3dZRChOZ0UYNu+g+uqMW4C2vDaiETUQ=) 12: 3138372e38342e34372e302f32342d3234203d3e203533303532.roa (hash: ptMqnRj8LqtTtDG+YnpbMJF32fawipWNhijOzS4MOEU=) 13: 323830343a326634383a323030303a3a2f33352d3335203d3e203533303532.roa (hash: Z8VMqKtS6c8oQSl/sZyuGYDCXY6Slrmo17tssEBJDrI=) 14: 3138372e38342e33342e302f32342d3234203d3e203533303532.roa (hash: lmgeY7fAaR10ssIywHoCCyP8LGBH5UNBrGPC7eZ4zQc=) 15: 323830343a326634383a343030313a3a2f34382d3438203d3e203533303532.roa (hash: p8Q9xfZr584df8txYSR0rLNpxjNicadK5aC0oskhtTk=) 16: 3138372e38342e34342e302f32322d3232203d3e203533303532.roa (hash: 9TZ27uObGwwd8p5TrpjhMQuSRIxIL+nppt+AbR+BmNI=) 17: 3138372e38342e33322e302f32342d3234203d3e203533303532.roa (hash: g5ktHwBrPb8+EV88G9qM6/0Gv9hItwrPCf8Q+6f8vzk=) 18: 3138372e38342e34332e302f32342d3234203d3e203533303532.roa (hash: 9wBAR6EySCOoaeFgP1A76cbE58LPawf6gcKLInE4pnU=) 19: 3138372e38342e34362e302f32342d3234203d3e203533303532.roa (hash: nXz/KIfSPddgcWo+NtatqCl+xZjVvZgyj/lvyTHw/C4=) 20: 3138372e38342e33342e302f32332d3233203d3e203533303532.roa (hash: u32/uZ4yBcFZXvw1hLPy5wYAoSgbMpUkCDwo8kvjvVg=) 21: 3138372e38342e34362e302f32332d3233203d3e203533303532.roa (hash: UClQSg5d2LzxtVMA205cUo5yxx7LvOnaqlInimQg1EE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 14:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6f:ed:1e:86:7d:fe:68:6d:ea:64:49:4a:01:31:9e:e5:24:67:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D Validity Not Before: Nov 4 13:07:00 2025 GMT Not After : Nov 5 14:09:00 2025 GMT Subject: CN=48C0EABEE4D56C350327BA4BD3E6523B65B66AA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e2:57:1c:bb:e9:53:db:aa:73:d0:56:d2:c4: 77:0d:2b:2c:14:66:0f:20:74:f2:af:0b:f7:be:8f: bd:8b:f1:6e:89:08:6b:31:c4:d0:fc:11:67:03:7e: f0:81:60:06:20:cb:c0:ba:47:8e:37:ee:3d:c6:f9: 98:e3:c4:38:97:53:dc:93:61:7d:54:08:f0:67:3f: 58:f1:a4:30:19:87:3c:02:0d:e6:c1:e1:5b:ce:6a: d6:0d:1b:66:f4:b4:bc:6d:d9:4a:69:68:49:92:be: 56:64:d1:3d:1d:11:2f:49:89:f6:ee:73:e8:4c:1e: 42:b1:ea:4b:f7:d2:f2:3d:7e:47:fe:82:80:de:ba: 36:1a:81:b0:a1:80:01:a4:74:47:b3:3e:3e:48:f0: 0a:20:57:51:fc:5c:2c:98:93:33:32:1f:2d:c5:9f: 8d:05:31:1e:f6:d8:25:f2:a9:c2:bd:b7:b7:cb:f9: 8a:96:f4:0a:90:96:8c:d0:2a:71:9d:db:61:d6:c7: ed:01:33:51:c2:ed:be:4e:96:02:5f:eb:68:87:42: 32:2b:c9:d3:61:4a:41:6c:3e:31:80:f1:9f:dd:d7: 8d:81:d4:51:4e:a3:9f:33:99:d9:74:af:f1:ab:c7: 10:0f:f8:1e:b2:ac:42:7c:23:fc:d7:a3:0a:68:89: c0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C0:EA:BE:E4:D5:6C:35:03:27:BA:4B:D3:E6:52:3B:65:B6:6A:A1 X509v3 Authority Key Identifier: keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:de:ae:5f:56:82:6e:69:e9:b7:9d:0e:88:4c:0d:87:46:11: 3d:02:71:13:71:9a:4c:88:65:f6:b3:bf:86:bc:33:d3:26:ca: 2f:b2:46:c2:24:66:17:c7:d8:57:48:e5:d8:3b:d2:c3:c5:e7: 3c:65:02:e6:17:bb:5e:ec:1d:36:79:48:8e:33:bf:8b:c9:f3: 85:ec:9a:90:fc:d7:ed:8c:0b:12:4d:df:e1:3e:b1:c1:46:95: f9:a2:80:58:f4:47:65:e6:68:d6:0f:9e:73:7d:4e:c0:b8:48: e0:3a:f5:c4:e4:6e:f1:c1:30:ec:88:ab:53:37:0e:14:f2:ce: 02:55:24:bf:cd:52:46:77:53:58:e9:87:3a:da:23:e2:5c:70: c3:ef:65:eb:c3:d2:0d:6b:6d:b7:0b:1b:a1:cd:3d:2f:a6:f8: ed:26:02:19:8c:f3:b0:50:02:1a:fb:7b:4c:66:b6:4a:db:c0: 16:dd:c6:85:99:b7:b9:01:c2:88:3c:94:27:90:f5:1a:35:d5: cf:8a:d0:8b:14:96:c7:4d:3f:8c:16:5a:c9:5e:f2:41:c3:51: c6:70:9a:ab:01:bd:93:4b:f9:75:2e:a1:0e:30:0e:2a:bc:5c: a4:8a:f0:e7:52:67:8b:ee:8a:46:34:fe:a8:e3:5e:d6:dd:d0: 71:3a:df:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIW/tHoZ9/mht6mRJSgExnuUkZ3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBNjUxNEQyREQxQUY0NkU3OTdEOTFDMzM0Qzc4QTQ0 OUI3NDAzRDAeFw0yNTExMDQxMzA3MDBaFw0yNTExMDUxNDA5MDBaMDMxMTAvBgNV BAMTKDQ4QzBFQUJFRTRENTZDMzUwMzI3QkE0QkQzRTY1MjNCNjVCNjZBQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw4lccu+lT26pz0FbSxHcNKywU Zg8gdPKvC/e+j72L8W6JCGsxxND8EWcDfvCBYAYgy8C6R4437j3G+ZjjxDiXU9yT YX1UCPBnP1jxpDAZhzwCDebB4VvOatYNG2b0tLxt2UppaEmSvlZk0T0dES9Jifbu c+hMHkKx6kv30vI9fkf+goDeujYagbChgAGkdEezPj5I8AogV1H8XCyYkzMyHy3F n40FMR722CXyqcK9t7fL+YqW9AqQlozQKnGd22HWx+0BM1HC7b5OlgJf62iHQjIr ydNhSkFsPjGA8Z/d142B1FFOo58zmdl0r/GrxxAP+B6yrEJ8I/zXowpoicDlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSMDqvuTVbDUDJ7pL0+ZSO2W2aqEwHwYDVR0j BBgwFoAUyqZRTS3Rr0bnl9kcM0x4pEm3QD0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVlVM3VMUWdVWHU1RWJSazd1V01hWmRmTENLQmdqUW1YOUZnMnRDdzVM RFUvMC9DQUE2NTE0RDJERDFBRjQ2RTc5N0Q5MUMzMzRDNzhBNDQ5Qjc0MDNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBQTY1MTREMkREMUFGNDZF Nzk3RDkxQzMzNEM3OEE0NDlCNzQwM0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVlVM3VMUWdVWHU1RWJSazd1V01hWmRmTENLQmdqUW1YOUZnMnRDdzVMRFUvMC9D QUE2NTE0RDJERDFBRjQ2RTc5N0Q5MUMzMzRDNzhBNDQ5Qjc0MDNELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWN6uX1aCbmnpt50OiEwNh0YRPQJxE3GaTIhl9rO/hrwz0ybKL7JGwiRmF8fY V0jl2DvSw8XnPGUC5he7XuwdNnlIjjO/i8nzheyakPzX7YwLEk3f4T6xwUaV+aKA WPRHZeZo1g+ec31OwLhI4Dr1xORu8cEw7IirUzcOFPLOAlUkv81SRndTWOmHOtoj 4lxww+9l68PSDWtttwsboc09L6b47SYCGYzzsFACGvt7TGa2StvAFt3GhZm3uQHC iDyUJ5D1GjXVz4rQixSWx00/jBZayV7yQcNRxnCaqwG9k0v5dS6hDjAOKrxcpIrw 51Jni+6KRjT+qONe1t3QcTrfnw== -----END CERTIFICATE-----Generated at Wed Nov 5 02:44:16 2025 by rpki-client