$ rpki-client -vvf rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft File: A653D5055FC338B089E2C732382682788F082F11.mft (raw, json) Hash identifier: TC05nRJwpbU6N5xjAHzjAAFR89PZtcKfsCcEyX2kcXU= Subject key identifier: 28:14:0E:BD:13:02:2A:8C:93:40:C9:20:AD:69:57:25:5D:82:B8:BE Authority key identifier: A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11 Certificate issuer: /CN=A653D5055FC338B089E2C732382682788F082F11 Certificate serial: 3EB6B07B31BED8FD864F4B1A9164122FD3BBB9A2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer Subject info access: rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft Manifest number: 0303 Signing time: Wed 05 Nov 2025 02:10:13 +0000 Manifest this update: Wed 05 Nov 2025 02:05:13 +0000 Manifest next update: Thu 06 Nov 2025 04:05:13 +0000 Files and hashes: 1: A653D5055FC338B089E2C732382682788F082F11.crl (hash: HiQDMXApQScIYbQUHxLEl8QO8xfcDHP15YsxRIVI3XA=) 2: 34352e3232342e3132382e302f32322d3234203d3e20323636343030.roa (hash: uvd4+Ma33hGXSlt80NtGV3afPFZnfl9FFnr+LvjlmzM=) 3: 3137302e38312e34302e302f32322d3234203d3e20323636343030.roa (hash: fnk6G+39Qn8k6OBmu2nwg3cM52nnrkQXQ11Kyh5Qn1o=) 4: 323830343a333734343a3a2f33322d313238203d3e20323636343030.roa (hash: 40WaVP8Svoxs+qZKP+igdLA9rTsAwD+SLbjFEI4LGxs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b6:b0:7b:31:be:d8:fd:86:4f:4b:1a:91:64:12:2f:d3:bb:b9:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A653D5055FC338B089E2C732382682788F082F11 Validity Not Before: Nov 5 02:05:13 2025 GMT Not After : Nov 6 04:05:13 2025 GMT Subject: CN=28140EBD13022A8C9340C920AD6957255D82B8BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d8:e3:72:eb:6a:68:bc:af:90:9d:51:c0:06: 86:26:01:76:aa:47:57:85:09:ba:eb:00:15:b1:78: 8c:9f:78:26:5d:60:fe:e0:74:d6:2f:aa:d3:b0:d4: d7:65:42:5e:15:ff:e7:72:0c:8e:7d:51:6e:90:9d: 6f:07:fc:01:c9:9b:66:22:f5:4c:75:a5:6e:8b:6e: 7e:56:57:41:ad:03:1f:4f:6d:97:20:26:2e:27:76: 0d:c5:08:a6:99:f8:76:ed:9c:11:61:89:4a:56:cc: ab:d2:86:db:a1:c0:5f:bb:b4:18:05:48:07:3b:d4: 4a:23:d2:50:90:78:f8:41:d2:14:e2:1a:99:90:59: 82:5b:66:c0:47:e1:cb:cd:62:e8:a0:a2:f2:2e:b6: 23:13:d3:00:55:9a:ae:2a:1b:7a:df:b4:92:81:da: 15:77:6d:92:24:a1:d0:86:64:47:ab:af:72:6b:9a: e2:b7:fa:18:db:34:48:fb:93:29:e5:c3:5d:c2:ae: 46:35:bf:0a:bc:92:b4:2d:7c:59:ad:3a:84:65:98: 85:92:54:b5:dc:83:53:17:03:e4:79:a9:a4:22:e4: 58:1e:d7:bd:60:0c:95:13:d1:1f:26:ce:d1:4b:43: 3e:aa:c1:3f:23:97:b4:15:fa:1e:a7:60:46:93:da: fb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:14:0E:BD:13:02:2A:8C:93:40:C9:20:AD:69:57:25:5D:82:B8:BE X509v3 Authority Key Identifier: keyid:A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:30:29:73:7f:9e:64:8e:72:3b:06:43:c7:b7:81:7a:69:2d: 70:9e:8c:6d:3e:fa:cb:64:53:ba:18:79:0f:b1:25:60:37:93: 5c:e2:03:30:81:4b:99:78:c0:de:a4:cc:1a:cc:ed:2d:79:10: 76:15:ee:7a:5c:41:2b:47:4a:ea:95:a2:e8:c6:4e:52:97:13: 75:4c:1e:1b:96:76:70:0f:42:60:cc:c1:e1:90:6f:81:5a:be: 27:2b:f0:c7:32:cf:28:b9:5b:ef:08:f2:70:ee:74:48:f4:a6: d9:95:4e:1f:d0:63:da:0a:94:ce:2b:34:fb:3e:6f:99:79:e0: 94:60:66:9a:16:2e:3d:35:86:af:69:6b:7d:42:44:d1:fb:a1: 18:2b:ce:7a:08:f9:51:b2:fa:2f:ef:b2:88:5d:fa:fa:93:16: 20:32:89:03:9e:f4:a6:26:2f:2f:f2:28:e5:79:9e:f6:92:b1: 97:af:9b:4d:7c:02:82:d9:82:ad:98:e0:ae:7a:8a:e8:e7:1c: 66:57:eb:cc:0d:d1:2c:74:3e:b0:9f:95:38:e2:23:23:b0:62: 28:01:1e:46:8b:a5:e3:05:f2:6c:b5:33:e4:b0:2a:18:36:d0: f6:f6:ee:54:4e:6e:4b:4e:b0:03:55:0d:fa:b2:21:52:2b:36: c5:b8:2f:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPrawezG+2P2GT0sakWQSL9O7uaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1M0Q1MDU1RkMzMzhCMDg5RTJDNzMyMzgyNjgyNzg4 RjA4MkYxMTAeFw0yNTExMDUwMjA1MTNaFw0yNTExMDYwNDA1MTNaMDMxMTAvBgNV BAMTKDI4MTQwRUJEMTMwMjJBOEM5MzQwQzkyMEFENjk1NzI1NUQ4MkI4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX2ONy62povK+QnVHABoYmAXaq R1eFCbrrABWxeIyfeCZdYP7gdNYvqtOw1NdlQl4V/+dyDI59UW6QnW8H/AHJm2Yi 9Ux1pW6Lbn5WV0GtAx9PbZcgJi4ndg3FCKaZ+HbtnBFhiUpWzKvShtuhwF+7tBgF SAc71Eoj0lCQePhB0hTiGpmQWYJbZsBH4cvNYuigovIutiMT0wBVmq4qG3rftJKB 2hV3bZIkodCGZEerr3JrmuK3+hjbNEj7kynlw13CrkY1vwq8krQtfFmtOoRlmIWS VLXcg1MXA+R5qaQi5Fge171gDJUT0R8mztFLQz6qwT8jl7QV+h6nYEaT2vujAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKBQOvRMCKoyTQMkgrWlXJV2CuL4wHwYDVR0j BBgwFoAUplPVBV/DOLCJ4scyOCaCeI8ILxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0J2QmNLODNqZkttdGVVWmhKS3FnN1B0a2R4N1h0TnFGZ0RqNGI0cmdv aXgvMS9BNjUzRDUwNTVGQzMzOEIwODlFMkM3MzIzODI2ODI3ODhGMDgyRjExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2NTNENTA1NUZDMzM4QjA4 OUUyQzczMjM4MjY4Mjc4OEYwODJGMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0J2QmNLODNqZkttdGVVWmhKS3FnN1B0a2R4N1h0TnFGZ0RqNGI0cmdvaXgvMS9B NjUzRDUwNTVGQzMzOEIwODlFMkM3MzIzODI2ODI3ODhGMDgyRjExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhDApc3+eZI5yOwZDx7eBemktcJ6MbT76y2RTuhh5D7ElYDeTXOIDMIFLmXjA 3qTMGsztLXkQdhXuelxBK0dK6pWi6MZOUpcTdUweG5Z2cA9CYMzB4ZBvgVq+Jyvw xzLPKLlb7wjycO50SPSm2ZVOH9Bj2gqUzis0+z5vmXnglGBmmhYuPTWGr2lrfUJE 0fuhGCvOegj5UbL6L++yiF36+pMWIDKJA570piYvL/Io5Xme9pKxl6+bTXwCgtmC rZjgrnqK6OccZlfrzA3RLHQ+sJ+VOOIjI7BiKAEeRoul4wXybLUz5LAqGDbQ9vbu VE5uS06wA1UN+rIhUis2xbgvMA== -----END CERTIFICATE-----Generated at Wed Nov 5 10:09:01 2025 by rpki-client