$ rpki-client -vvf rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft File: 0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft (raw, json) Hash identifier: lHA8vmKESLPGm+OoJr5GQIg5EfKsYDUXz59ADGl4OHk= Subject key identifier: 5D:7A:80:82:39:F4:C0:E0:D4:58:CD:BF:E4:03:9C:70:35:7E:FA:9D Authority key identifier: 0B:F2:84:1F:A2:33:6A:7C:8B:D1:92:BC:93:5F:8F:3A:53:F7:F0:F9 Certificate issuer: /CN=0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9 Certificate serial: 14E9E5CDED6910DFF27998DC734A1FDF89360B1E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer Subject info access: rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft Manifest number: 34 Signing time: Tue 04 Nov 2025 23:58:54 +0000 Manifest this update: Tue 04 Nov 2025 23:53:54 +0000 Manifest next update: Thu 06 Nov 2025 02:01:54 +0000 Files and hashes: 1: 0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl (hash: k+Y0LnyUYfU8Yl2eEthPhnzYulD8tz1Vs8l1lo/GIHY=) 2: 323830343a383266633a3a2f33322d313238203d3e20323732313639.roa (hash: I6emds5ngPltq+zX/8WmZ4R9w3ZwGbEw6yUNHUh4RpU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 02:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e9:e5:cd:ed:69:10:df:f2:79:98:dc:73:4a:1f:df:89:36:0b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9 Validity Not Before: Nov 4 23:53:54 2025 GMT Not After : Nov 6 02:01:54 2025 GMT Subject: CN=5D7A808239F4C0E0D458CDBFE4039C70357EFA9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:54:3d:2d:fc:2d:c5:3b:99:7c:ee:dc:e9: 99:84:90:3a:a9:d0:17:1c:c4:83:04:94:f5:54:d5: 87:cb:82:f6:cf:13:d6:dd:6b:6e:64:03:cb:02:82: 07:43:6e:c0:36:3f:97:28:39:81:89:4a:a1:b3:5b: 1d:62:6b:e3:28:90:71:d5:de:40:ec:86:9c:02:cb: 62:00:3f:da:e5:74:4e:47:f3:c5:23:81:67:83:b9: a7:58:a2:fa:54:9c:a3:c3:70:ff:9b:b1:6d:1b:42: 93:ef:8e:d8:3f:c2:17:b1:55:b7:00:fe:91:97:56: b4:4b:f3:ad:df:12:68:ca:2d:8f:46:c5:e5:d2:46: c0:f2:3d:61:b3:f1:03:99:70:ae:f5:ce:21:a0:70: 87:64:75:42:95:22:e5:eb:3f:a2:5b:94:2e:e7:9d: cf:f9:2c:d6:72:6f:6a:02:1a:0b:42:85:2d:5a:34: 99:4d:f6:6d:6b:69:de:49:ce:b2:04:e4:7a:48:d2: e9:86:a7:a9:bf:65:7f:44:0a:d0:b6:28:20:e7:5c: 80:36:31:b2:88:aa:4a:f6:48:9b:40:f4:06:70:53: 83:15:6b:e0:50:97:e8:14:9a:62:de:78:5d:8a:cc: b4:66:99:42:78:f0:7f:52:b6:e3:7a:f4:da:3b:4a: 26:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7A:80:82:39:F4:C0:E0:D4:58:CD:BF:E4:03:9C:70:35:7E:FA:9D X509v3 Authority Key Identifier: keyid:0B:F2:84:1F:A2:33:6A:7C:8B:D1:92:BC:93:5F:8F:3A:53:F7:F0:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:52:11:94:c7:6b:54:6b:54:3e:5d:b9:80:af:69:89:cd:3b: 97:0d:72:14:8f:f3:1e:98:43:77:2e:70:09:5c:c7:f6:44:ad: fb:7b:dd:f6:3c:05:d8:32:40:85:7f:ab:fb:6d:97:c7:10:70: 41:b1:96:6b:3a:80:c4:fa:3b:56:0b:08:93:bd:e3:8c:32:d7: 51:1c:90:24:4a:44:e4:c7:75:42:13:e6:d0:1e:54:ff:c9:ab: 23:71:d5:ab:1e:94:88:67:70:45:3d:b5:4e:3e:6a:a7:3e:69: 34:43:e1:ec:3b:8c:e9:c2:48:b3:70:88:7b:95:3d:48:30:7a: 10:5e:7a:b4:7a:a8:63:cd:3f:47:1b:81:0b:44:98:03:38:38: c4:ce:7a:c5:b4:47:c0:03:90:61:29:fc:3a:d9:43:ee:1e:46: 50:c2:c3:07:28:24:56:e8:d3:c0:ed:03:59:14:00:bc:3e:3f: c6:0b:37:2a:71:b5:df:61:a1:69:99:90:58:dd:f6:b9:fa:db: 5c:91:dc:82:06:ef:50:fa:59:b4:f0:b4:21:5d:8a:e6:c9:4e: 71:dd:7a:1a:4e:84:89:d4:3e:ef:b9:c3:1c:52:76:c9:56:4e: c5:c1:9e:34:6c:70:a5:05:0c:73:17:ca:2b:a9:b9:b0:f4:20: 5b:fb:91:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFOnlze1pEN/yeZjcc0of34k2Cx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJGMjg0MUZBMjMzNkE3QzhCRDE5MkJDOTM1RjhGM0E1 M0Y3RjBGOTAeFw0yNTExMDQyMzUzNTRaFw0yNTExMDYwMjAxNTRaMDMxMTAvBgNV BAMTKDVEN0E4MDgyMzlGNEMwRTBENDU4Q0RCRkU0MDM5QzcwMzU3RUZBOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDALVQ9LfwtxTuZfO7c6ZmEkDqp 0BccxIMElPVU1YfLgvbPE9bda25kA8sCggdDbsA2P5coOYGJSqGzWx1ia+MokHHV 3kDshpwCy2IAP9rldE5H88UjgWeDuadYovpUnKPDcP+bsW0bQpPvjtg/whexVbcA /pGXVrRL863fEmjKLY9GxeXSRsDyPWGz8QOZcK71ziGgcIdkdUKVIuXrP6JblC7n nc/5LNZyb2oCGgtChS1aNJlN9m1rad5JzrIE5HpI0umGp6m/ZX9ECtC2KCDnXIA2 MbKIqkr2SJtA9AZwU4MVa+BQl+gUmmLeeF2KzLRmmUJ48H9StuN69No7SiZxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXXqAgjn0wODUWM2/5AOccDV++p0wHwYDVR0j BBgwFoAUC/KEH6IzanyL0ZK8k1+POlP38PkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ25TRWE0SGhDWlFiTHM4c2d5YWF4clkyaGZFVTdQVGdkbnNlNExxblJN dVgvMC8wQkYyODQxRkEyMzM2QTdDOEJEMTkyQkM5MzVGOEYzQTUzRjdGMEY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCRjI4NDFGQTIzMzZBN0M4 QkQxOTJCQzkzNUY4RjNBNTNGN0YwRjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q25TRWE0SGhDWlFiTHM4c2d5YWF4clkyaGZFVTdQVGdkbnNlNExxblJNdVgvMC8w QkYyODQxRkEyMzM2QTdDOEJEMTkyQkM5MzVGOEYzQTUzRjdGMEY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAFIRlMdrVGtUPl25gK9pic07lw1yFI/zHphDdy5wCVzH9kSt+3vd9jwF2DJA hX+r+22XxxBwQbGWazqAxPo7VgsIk73jjDLXURyQJEpE5Md1QhPm0B5U/8mrI3HV qx6UiGdwRT21Tj5qpz5pNEPh7DuM6cJIs3CIe5U9SDB6EF56tHqoY80/RxuBC0SY Azg4xM56xbRHwAOQYSn8OtlD7h5GUMLDBygkVujTwO0DWRQAvD4/xgs3KnG132Gh aZmQWN32ufrbXJHcggbvUPpZtPC0IV2K5slOcd16Gk6EidQ+77nDHFJ2yVZOxcGe NGxwpQUMcxfKK6m5sPQgW/uRGw== -----END CERTIFICATE-----Generated at Wed Nov 5 15:32:29 2025 by rpki-client