$ rpki-client -vvf rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft File: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft (raw, json) Hash identifier: 3gYHsuzpLcotf7miST7g9msAlk04kDvV0pNXsgtBomc= Subject key identifier: AC:38:57:68:A9:7E:44:D5:A0:07:A0:88:6C:67:9E:6C:DA:D1:2A:DE Authority key identifier: CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D Certificate issuer: /CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Certificate serial: 107A4C7A2DA14F40B663531B7B2836ACE823F22C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft Manifest number: 02EA Signing time: Tue 04 Nov 2025 20:05:10 +0000 Manifest this update: Tue 04 Nov 2025 20:00:10 +0000 Manifest next update: Wed 05 Nov 2025 22:02:10 +0000 Files and hashes: 1: 3137392e39372e31362e302f32312d3234203d3e203238313831.roa (hash: h2W8XM2at3NYFJYnufJYaTXSX9GJvpJOp/TMajp4JtE=) 2: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl (hash: oBhWbbgvuho+xhat2aAZPHWDOjeuhQws6e1sfvpeGWI=) 3: 323830343a6461633a3a2f33322d3438203d3e203238313831.roa (hash: JvwegUUzqtOYrCDplzNKYzOOoU16ChE9rMTQfVBPQa0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:7a:4c:7a:2d:a1:4f:40:b6:63:53:1b:7b:28:36:ac:e8:23:f2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Validity Not Before: Nov 4 20:00:10 2025 GMT Not After : Nov 5 22:02:10 2025 GMT Subject: CN=AC385768A97E44D5A007A0886C679E6CDAD12ADE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:e6:48:ac:65:46:23:b5:ff:03:cf:d9:99: 29:7c:1b:99:5b:5a:b2:1c:24:ac:85:dd:ff:04:1f: af:e7:f7:f4:26:19:00:7b:47:8d:18:d0:c1:e0:a8: 94:dd:95:6d:89:b1:a2:67:37:8e:5c:a4:6a:7d:98: 08:65:c5:01:9b:15:bf:12:3e:92:6c:d9:b0:06:e8: 0e:4e:f7:62:24:5c:d8:0a:87:4d:0c:bd:25:d6:db: 0d:6f:48:60:82:63:1a:d8:31:1b:e0:56:b9:41:9f: 9d:ee:fa:29:61:0a:af:01:9f:f2:35:b2:01:dd:97: 35:51:01:f1:81:95:90:13:34:3e:77:0c:0f:38:d1: f3:cd:ed:d0:df:2a:ce:18:8d:fd:98:b8:a8:7b:53: 0d:27:ab:32:92:30:c2:64:db:e6:9c:60:00:6d:4f: 49:94:b7:27:54:97:cc:9e:5c:de:cd:6b:c7:4e:76: ff:aa:2f:15:43:8e:23:0f:a2:98:79:f1:40:64:cb: 31:43:7a:80:a5:a6:dd:bd:08:63:21:5b:4a:9c:d7: 42:c6:7f:c7:d6:b9:b5:e5:f8:ca:45:0f:f0:7c:77: e8:a6:ca:6c:a6:22:2f:2c:2c:2f:f7:a5:69:d5:22: a1:66:d6:20:24:d1:49:a8:bb:4a:4d:4a:3a:00:8f: a6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:38:57:68:A9:7E:44:D5:A0:07:A0:88:6C:67:9E:6C:DA:D1:2A:DE X509v3 Authority Key Identifier: keyid:CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6f:d1:ac:62:c6:9b:1f:08:ac:55:43:73:bf:91:4e:07:4a: 3e:aa:6e:49:f9:73:3a:49:cf:70:35:e0:26:70:0a:fc:82:a2: 18:c6:39:05:d4:10:5b:56:b0:9d:64:23:84:6d:44:bb:ca:d8: 24:50:9c:db:2d:43:6e:40:8a:f5:5e:52:03:73:8e:42:a5:47: 1b:d2:60:bd:69:c2:bf:85:f8:08:4b:75:cb:11:5d:f0:aa:45: 05:ab:f8:68:99:a9:c1:87:b6:14:41:79:ba:60:a5:fd:2d:0b: 8b:6a:48:cf:04:ca:00:8c:2b:2b:2e:4e:62:5d:62:de:a1:7f: ab:d3:dc:cd:9a:71:df:10:2e:be:71:7b:e3:5a:db:3d:16:ec: 90:ef:aa:82:09:55:ea:6d:35:26:ac:6a:39:83:4c:1d:31:ef: a5:3d:a6:24:ac:92:b7:1d:3e:ad:e6:05:d2:14:aa:af:3b:d5: d8:4f:b2:fa:24:85:5a:84:cd:ac:12:ae:88:e3:55:bb:d9:cc: 57:1f:9c:63:42:8b:27:a9:57:e6:4a:91:75:7b:8e:9d:38:00: bc:af:f9:5e:4e:89:ac:6b:52:75:ff:07:4c:76:27:31:37:6f: 5c:92:0e:7b:d4:08:7c:b9:64:2c:aa:cc:8c:df:c1:f6:a8:2e: da:7d:d9:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEHpMei2hT0C2Y1Mbeyg2rOgj8iwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyMEVGQzBCOTlBOEE4NkI0QjRDRkExMDdCMDAxRDUw OEI3MjkwRDAeFw0yNTExMDQyMDAwMTBaFw0yNTExMDUyMjAyMTBaMDMxMTAvBgNV BAMTKEFDMzg1NzY4QTk3RTQ0RDVBMDA3QTA4ODZDNjc5RTZDREFEMTJBREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cOZIrGVGI7X/A8/ZmSl8G5lb WrIcJKyF3f8EH6/n9/QmGQB7R40Y0MHgqJTdlW2JsaJnN45cpGp9mAhlxQGbFb8S PpJs2bAG6A5O92IkXNgKh00MvSXW2w1vSGCCYxrYMRvgVrlBn53u+ilhCq8Bn/I1 sgHdlzVRAfGBlZATND53DA840fPN7dDfKs4Yjf2YuKh7Uw0nqzKSMMJk2+acYABt T0mUtydUl8yeXN7Na8dOdv+qLxVDjiMPoph58UBkyzFDeoClpt29CGMhW0qc10LG f8fWubXl+MpFD/B8d+imymymIi8sLC/3pWnVIqFm1iAk0Umou0pNSjoAj6Z1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrDhXaKl+RNWgB6CIbGeebNrRKt4wHwYDVR0j BBgwFoAUyiDvwLmaioa0tM+hB7AB1Qi3KQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9Y R0cvMC9DQTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMjBFRkMwQjk5QThBODZC NEI0Q0ZBMTA3QjAwMUQ1MDhCNzI5MEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9YR0cvMC9D QTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATW/RrGLGmx8IrFVDc7+RTgdKPqpuSflzOknPcDXgJnAK/IKiGMY5BdQQW1aw nWQjhG1Eu8rYJFCc2y1DbkCK9V5SA3OOQqVHG9JgvWnCv4X4CEt1yxFd8KpFBav4 aJmpwYe2FEF5umCl/S0Li2pIzwTKAIwrKy5OYl1i3qF/q9PczZpx3xAuvnF741rb PRbskO+qgglV6m01JqxqOYNMHTHvpT2mJKyStx0+reYF0hSqrzvV2E+y+iSFWoTN rBKuiONVu9nMVx+cY0KLJ6lX5kqRdXuOnTgAvK/5Xk6JrGtSdf8HTHYnMTdvXJIO e9QIfLlkLKrMjN/B9qgu2n3Z+Q== -----END CERTIFICATE-----Generated at Wed Nov 5 10:06:37 2025 by rpki-client