$ rpki-client -vvf rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft File: CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft (raw, json) Hash identifier: EQWCR+VJkiCa2jpV5TByZKjA91Tu1p3ONLLoqJ6oH9E= Subject key identifier: 51:56:34:C2:F2:C4:BA:7D:84:67:85:68:CF:CF:E4:E9:96:C7:5A:46 Authority key identifier: CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE Certificate issuer: /CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE Certificate serial: 168AAF11676C91CD69737402A101E0D07057AE4F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer Subject info access: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft Manifest number: 0308 Signing time: Tue 04 Nov 2025 13:33:24 +0000 Manifest this update: Tue 04 Nov 2025 13:28:24 +0000 Manifest next update: Wed 05 Nov 2025 13:40:24 +0000 Files and hashes: 1: 3137372e3133302e31362e302f32302d3234203d3e203532373432.roa (hash: 9l8kTSfO14FYIp88kOmGp0EuZJyDmBsCUWflQkx6Kmo=) 2: 323830343a6362303a3a2f33322d3438203d3e203532373432.roa (hash: mRxu11XcEscOClSKiTBJjxbSJvEsYBDMWoxEVFfNJj8=) 3: CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl (hash: nz3WB07Ww3mvAkZlxtiUoSbpNhfKJjx6ot/+MvI4+x8=) 4: 3133382e3131382e3235322e302f32322d3234203d3e203532373432.roa (hash: VlQMtP6NQInhiwVIoJiXBUj4Ie/wB4WGdHL21LfKPc8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 13:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:8a:af:11:67:6c:91:cd:69:73:74:02:a1:01:e0:d0:70:57:ae:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE Validity Not Before: Nov 4 13:28:24 2025 GMT Not After : Nov 5 13:40:24 2025 GMT Subject: CN=515634C2F2C4BA7D84678568CFCFE4E996C75A46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a1:1f:d8:95:67:61:a0:76:a1:a7:cc:f2:c8: 4b:e5:2a:52:33:75:e2:6b:d0:12:df:8a:97:6e:74: af:22:ef:63:4f:b3:c6:08:7b:30:12:6e:24:bc:20: 55:0d:00:9a:52:ea:83:1f:cc:0d:c3:52:cb:b6:dd: 54:92:d2:63:ff:95:c9:5d:68:5b:55:7d:1c:6b:4f: c9:e7:bd:22:72:3d:d7:d7:a5:7b:16:1b:a8:a7:82: cf:52:3a:25:7d:37:63:76:8d:f1:99:d4:e6:9f:ca: ca:7e:96:f4:22:0e:8f:fd:dd:27:4c:e6:ac:32:fa: b8:8e:ff:3b:e2:c2:0a:c0:9e:42:9b:cd:5b:13:3e: 66:28:ef:ab:50:8d:85:a7:86:6a:cf:37:69:06:b5: 84:35:45:8d:70:84:90:11:d0:72:74:22:3a:28:97: b4:b3:b7:b1:83:f0:6d:23:90:53:72:d1:ad:4a:e3: 2e:5d:09:e1:2a:d8:1d:fe:12:86:19:6e:93:36:91: 31:31:04:7b:60:ec:2f:86:9c:59:2e:79:d0:d4:a5: 17:6a:ba:56:04:06:19:d6:8f:28:07:68:d0:19:5e: ed:33:3b:c7:f4:99:4f:9d:ab:2c:dc:56:21:79:42: b9:bf:8c:a1:37:6a:57:93:37:20:9e:6a:86:6b:5a: da:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:56:34:C2:F2:C4:BA:7D:84:67:85:68:CF:CF:E4:E9:96:C7:5A:46 X509v3 Authority Key Identifier: keyid:CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:ba:58:86:5d:d0:93:ed:65:38:d9:46:cb:ad:50:5a:cd:19: 6f:dc:79:1c:45:6c:c6:8e:26:6b:eb:4d:5f:5a:bc:08:a1:45: 94:79:3f:81:d8:a9:3e:8b:15:99:8e:c0:7c:25:9f:70:2d:65: a1:bd:f1:cc:aa:f3:79:d1:6e:4c:ba:92:30:53:5c:54:0d:66: be:97:fb:53:46:80:c9:05:f8:12:e0:3f:3b:c1:e4:36:24:60: b4:be:22:89:c2:a1:b1:bf:d6:02:d2:16:66:c3:21:df:55:39: 1b:c0:9a:11:cf:08:90:14:16:b3:2e:78:5a:71:41:9c:25:6f: 5e:9a:65:9a:42:01:d3:9e:5c:79:05:d3:5a:83:d2:27:dd:a6: ce:40:53:b1:7a:d8:29:ea:1a:7c:ba:8f:6a:da:af:a2:b8:ca: 65:0a:ff:1a:72:8b:0d:ed:d8:51:25:ad:db:a3:55:4b:5e:cc: 27:6e:f2:cf:8e:71:53:1e:57:10:b4:40:e2:a5:f7:d6:7d:53: 46:01:0b:78:d6:68:dc:e8:73:a1:15:f3:bc:ec:6f:58:8b:c8: 68:1b:e2:68:48:fd:9f:32:e4:2f:94:14:ee:64:32:24:66:51: 31:39:7a:4e:d3:b0:54:a5:4c:3b:f7:d3:f7:f9:9a:56:6f:cc: 00:c5:09:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFoqvEWdskc1pc3QCoQHg0HBXrk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCNzU4MkYyODY5OUYzNTEwNjlDOEM3NkNDOTcxNjdC RjdCQjJFRTAeFw0yNTExMDQxMzI4MjRaFw0yNTExMDUxMzQwMjRaMDMxMTAvBgNV BAMTKDUxNTYzNEMyRjJDNEJBN0Q4NDY3ODU2OENGQ0ZFNEU5OTZDNzVBNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEoR/YlWdhoHahp8zyyEvlKlIz deJr0BLfipdudK8i72NPs8YIezASbiS8IFUNAJpS6oMfzA3DUsu23VSS0mP/lcld aFtVfRxrT8nnvSJyPdfXpXsWG6ings9SOiV9N2N2jfGZ1Oafysp+lvQiDo/93SdM 5qwy+riO/zviwgrAnkKbzVsTPmYo76tQjYWnhmrPN2kGtYQ1RY1whJAR0HJ0Ijoo l7Szt7GD8G0jkFNy0a1K4y5dCeEq2B3+EoYZbpM2kTExBHtg7C+GnFkuedDUpRdq ulYEBhnWjygHaNAZXu0zO8f0mU+dqyzcViF5Qrm/jKE3aleTNyCeaoZrWtrbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUVY0wvLEun2EZ4Voz8/k6ZbHWkYwHwYDVR0j BBgwFoAUz7dYLyhpnzUQacjHbMlxZ797su4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkNuZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVy VDcvMS9DRkI3NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGQjc1ODJGMjg2OTlGMzUx MDY5QzhDNzZDQzk3MTY3QkY3QkIyRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkNuZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVyVDcvMS9D RkI3NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaLpYhl3Qk+1lONlGy61QWs0Zb9x5HEVsxo4ma+tNX1q8CKFFlHk/gdipPosV mY7AfCWfcC1lob3xzKrzedFuTLqSMFNcVA1mvpf7U0aAyQX4EuA/O8HkNiRgtL4i icKhsb/WAtIWZsMh31U5G8CaEc8IkBQWsy54WnFBnCVvXpplmkIB055ceQXTWoPS J92mzkBTsXrYKeoafLqPatqvorjKZQr/GnKLDe3YUSWt26NVS17MJ27yz45xUx5X ELRA4qX31n1TRgELeNZo3OhzoRXzvOxvWIvIaBviaEj9nzLkL5QU7mQyJGZRMTl6 TtOwVKVMO/fT9/maVm/MAMUJcQ== -----END CERTIFICATE-----Generated at Wed Nov 5 03:20:21 2025 by rpki-client