$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft File: CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft (raw, json) Hash identifier: SBtcQ/Q4u2dtsHnFcYItb3N9KKe4roULrYyfaDeibUs= Subject key identifier: 97:5A:07:32:EF:5E:B6:2C:14:F3:12:24:03:9B:E6:D3:C5:D3:A8:B1 Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6 Certificate issuer: /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6 Certificate serial: 44DDA2A0DA9769F36FD02E42A23F74D18E787375 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer Subject info access: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft Manifest number: 031A Signing time: Tue 04 Nov 2025 20:40:59 +0000 Manifest this update: Tue 04 Nov 2025 20:35:59 +0000 Manifest next update: Wed 05 Nov 2025 20:45:59 +0000 Files and hashes: 1: 3139312e33372e342e302f32332d3332203d3e20323633333436.roa (hash: JBgbUMOSfuDRal8tFPKZ1hnVKHMRHXaPlhWoUlyXRt0=) 2: CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl (hash: jP8g92dnxdmHUhSpbcPDLn4Ut23pahZpRIsTJBUGS/8=) 3: 3139312e33372e302e302f32332d3332203d3e20323633333436.roa (hash: dk4B0gt3xtrzpqeQPsPPmX3X8Bi3YSdbr9PQbjrctok=) 4: 323830343a313462383a3a2f33322d3438203d3e20323633333436.roa (hash: 2zUdDQoZI7lf2QCIRFGO2DVEseSLfvIofWeRJppw+oo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:dd:a2:a0:da:97:69:f3:6f:d0:2e:42:a2:3f:74:d1:8e:78:73:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6 Validity Not Before: Nov 4 20:35:59 2025 GMT Not After : Nov 5 20:45:59 2025 GMT Subject: CN=975A0732EF5EB62C14F31224039BE6D3C5D3A8B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:69:92:0a:ec:86:d6:8c:25:40:d5:e6:20: c4:e0:32:bc:e1:79:49:0b:8b:1a:9b:0e:8f:1b:1e: 58:51:ee:ea:26:b7:40:ca:40:2d:98:a0:17:86:af: 85:6e:2c:36:7b:61:7d:eb:c5:b5:dc:e4:cc:26:23: be:89:16:dc:91:04:7b:2f:ff:21:58:44:85:24:52: ef:b2:cf:85:d4:98:31:ad:16:cb:a7:54:e2:5c:ae: 03:a4:4f:f9:63:0e:e3:63:fa:02:1a:81:36:ce:b9: 16:c8:c0:6f:f5:46:8e:05:76:65:00:e9:ff:ec:e9: d6:ea:6c:a4:e7:59:ec:0f:0a:26:d1:a1:31:d9:7d: 65:56:04:ef:1b:97:00:ae:81:74:49:02:66:d8:e1: 32:97:89:6b:fc:19:9b:b4:22:84:10:92:6c:8e:44: e1:d1:ac:b7:bc:b5:60:61:b4:0c:a7:bd:c0:09:ed: 98:f7:7c:f9:c9:03:e5:8c:1b:0d:97:ff:f3:63:5b: a0:3b:3b:43:e2:4c:26:9b:86:43:bc:c1:16:68:c3: 62:cd:f4:d2:63:fa:04:8f:bd:8b:92:22:01:16:e4: a7:34:6a:17:5e:23:f4:02:12:cd:bb:59:38:af:7c: 61:ab:38:a5:ed:c0:b9:75:63:de:d6:3b:40:20:aa: f7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5A:07:32:EF:5E:B6:2C:14:F3:12:24:03:9B:E6:D3:C5:D3:A8:B1 X509v3 Authority Key Identifier: keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:26:03:8a:ae:32:07:aa:bb:76:0f:d5:4d:cf:50:5c:36:dd: 4b:34:88:b8:b8:44:93:78:f0:a5:0c:5b:4c:55:48:3c:6c:7c: 66:e5:c9:06:c6:56:30:03:4c:88:36:69:ca:3a:ce:61:4e:b3: 7b:e5:01:90:8d:1a:a2:a1:03:0a:ee:d6:1a:f4:dc:47:40:f1: 9e:6d:b0:d9:e6:8b:03:06:b1:11:e6:95:4e:12:a1:b0:8e:c3: 1b:cf:eb:be:a8:96:b5:c4:2e:0c:70:18:d5:8d:ad:c2:21:57: 71:61:b3:cb:82:9b:54:e4:be:16:ad:ab:3c:a4:bb:23:41:50: 89:ef:c4:79:15:85:13:d6:d9:fc:56:e3:da:76:14:3b:bc:77: 78:ed:97:55:ce:2f:06:26:6b:f0:b1:93:c5:0e:c5:76:50:d4: 24:4c:68:19:8f:d4:9d:66:cc:50:82:9b:33:9b:7c:ec:08:b6: c0:9a:e2:6a:94:50:4e:81:49:67:39:8b:39:83:5d:ed:63:dd: f6:d2:8f:7a:c5:46:29:ff:81:80:09:10:a4:0a:c2:18:b3:de: db:fc:ae:8f:9d:38:64:09:5e:ab:2f:37:04:72:82:98:3e:7f: 8c:f7:c1:43:3e:1a:5d:e6:db:89:7b:ff:55:0a:1a:e3:ac:78: cd:25:64:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURN2ioNqXafNv0C5Coj900Y54c3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E4NTc5MUE5MjY1RTg4MzUyRTM4MjM2MTFFNkQ4NEQ2 QkJCRENDNjAeFw0yNTExMDQyMDM1NTlaFw0yNTExMDUyMDQ1NTlaMDMxMTAvBgNV BAMTKDk3NUEwNzMyRUY1RUI2MkMxNEYzMTIyNDAzOUJFNkQzQzVEM0E4QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6O2mSCuyG1owlQNXmIMTgMrzh eUkLixqbDo8bHlhR7uomt0DKQC2YoBeGr4VuLDZ7YX3rxbXc5MwmI76JFtyRBHsv /yFYRIUkUu+yz4XUmDGtFsunVOJcrgOkT/ljDuNj+gIagTbOuRbIwG/1Ro4FdmUA 6f/s6dbqbKTnWewPCibRoTHZfWVWBO8blwCugXRJAmbY4TKXiWv8GZu0IoQQkmyO ROHRrLe8tWBhtAynvcAJ7Zj3fPnJA+WMGw2X//NjW6A7O0PiTCabhkO8wRZow2LN 9NJj+gSPvYuSIgEW5Kc0ahdeI/QCEs27WTivfGGrOKXtwLl1Y97WO0AgqvclAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUl1oHMu9etiwU8xIkA5vm08XTqLEwHwYDVR0j BBgwFoAUyoV5GpJl6INS44I2EebYTWu73MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkx a0ovMC9DQTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBODU3OTFBOTI2NUU4ODM1 MkUzODIzNjExRTZEODRENkJCQkRDQzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkxa0ovMC9D QTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAACYDiq4yB6q7dg/VTc9QXDbdSzSIuLhEk3jwpQxbTFVIPGx8ZuXJBsZWMANM iDZpyjrOYU6ze+UBkI0aoqEDCu7WGvTcR0Dxnm2w2eaLAwaxEeaVThKhsI7DG8/r vqiWtcQuDHAY1Y2twiFXcWGzy4KbVOS+Fq2rPKS7I0FQie/EeRWFE9bZ/Fbj2nYU O7x3eO2XVc4vBiZr8LGTxQ7FdlDUJExoGY/UnWbMUIKbM5t87Ai2wJriapRQToFJ ZzmLOYNd7WPd9tKPesVGKf+BgAkQpArCGLPe2/yuj504ZAleqy83BHKCmD5/jPfB Qz4aXebbiXv/VQoa46x4zSVkqQ== -----END CERTIFICATE-----Generated at Wed Nov 5 07:15:05 2025 by rpki-client