$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft File: CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft (raw, json) Hash identifier: 6COHJVMlEU8tWv6kQucZoasC7N51brTSUuV0LbpcNgA= Subject key identifier: B8:4B:91:FA:D7:EC:E6:59:18:7F:18:7E:E3:4F:59:02:85:69:0D:08 Authority key identifier: CB:ED:2E:B5:5F:BF:7D:D2:35:6D:73:47:1D:F5:93:AA:70:73:D3:FD Certificate issuer: /CN=CBED2EB55FBF7DD2356D73471DF593AA7073D3FD Certificate serial: 4CC5114F37AB208B2780FF3F2BF5830616B0B7CC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft Manifest number: 6C Signing time: Wed 05 Nov 2025 08:29:44 +0000 Manifest this update: Wed 05 Nov 2025 08:24:44 +0000 Manifest next update: Thu 06 Nov 2025 12:24:44 +0000 Files and hashes: 1: 3137372e33362e37362e302f32332d3233203d3e20323731323136.roa (hash: 3U7NF9Lz9aGI73HLXDdDGtUNdHBz7fbGjnXgXaW6L2w=) 2: 3137372e33362e37382e302f32332d3233203d3e20323731323136.roa (hash: RpLdfJT1pXXcOR4aWQ4um6Zo3Vsbi/E86oiN9R6ONyk=) 3: 323830343a373830383a3a2f33322d3332203d3e20323731323136.roa (hash: aP9w5LUb2eJVRnoNyFOvF8ygagN8phXJPyzq4MAIWds=) 4: CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.crl (hash: Sw20r9QdhKBhFLgxCNDgH3pmZWvQNB+rGo8Ceq+V0CU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.crl rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 12:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c5:11:4f:37:ab:20:8b:27:80:ff:3f:2b:f5:83:06:16:b0:b7:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBED2EB55FBF7DD2356D73471DF593AA7073D3FD Validity Not Before: Nov 5 08:24:44 2025 GMT Not After : Nov 6 12:24:44 2025 GMT Subject: CN=B84B91FAD7ECE659187F187EE34F590285690D08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:62:96:ed:fe:40:f0:e1:c5:74:3b:a1:95:2f: 44:c2:a5:63:1f:a8:ef:67:2e:3c:31:fd:13:a7:ba: 47:dd:64:8e:d5:66:80:e5:3f:e4:36:40:ba:3f:28: e4:3a:15:ed:a8:33:7a:1b:c3:3e:3e:5a:7d:a9:49: 75:81:be:24:bf:02:32:f6:a8:9b:56:81:bd:2f:20: 61:4d:1e:ef:fc:37:c6:0d:4b:85:07:e8:14:1b:39: 79:6f:ea:5f:24:fc:27:ac:7f:05:cc:ca:fa:8d:25: 5b:f7:7d:5c:80:a9:bc:b7:60:0e:8d:4d:f4:2a:ef: e7:89:07:05:c2:b1:e1:50:f8:f7:b7:49:f3:18:6b: ed:5c:aa:c9:2e:70:ff:9e:da:3c:c1:5b:37:5d:a8: de:6d:97:6b:f1:06:3b:9a:04:38:b9:81:dc:fc:b8: d1:00:d9:e1:86:ec:50:09:75:1d:44:02:49:f8:e1: d4:3c:7b:8e:2e:6b:68:e2:7e:82:9e:5b:fd:ab:bf: 1c:09:0b:c2:3c:71:86:af:e5:b5:21:e6:2d:10:f9: d2:37:fd:bc:40:33:75:49:87:9b:aa:d0:cd:d7:51: 6b:fd:b7:b6:62:d2:ec:72:85:ac:62:1c:02:60:8e: 2d:2e:b8:de:55:e3:01:f9:b2:c5:2f:4b:78:a1:3d: e1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4B:91:FA:D7:EC:E6:59:18:7F:18:7E:E3:4F:59:02:85:69:0D:08 X509v3 Authority Key Identifier: keyid:CB:ED:2E:B5:5F:BF:7D:D2:35:6D:73:47:1D:F5:93:AA:70:73:D3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:41:45:be:a2:c3:fe:4b:0c:8a:50:38:00:98:81:af:35:44: 2f:a1:16:fe:43:ee:b2:77:54:b3:9b:23:b7:33:1f:77:d8:a6: c6:76:a8:d6:79:24:99:ee:83:31:66:d2:12:1c:e8:1d:f8:c8: 63:b5:8c:e6:a3:9c:33:06:22:e7:93:58:fb:60:a5:4a:ef:1c: 27:f7:2a:92:f9:a5:c8:9e:5b:cb:48:7a:4b:03:07:13:82:24: 95:bb:35:54:df:b6:8a:a0:d3:e3:fb:f1:2c:c1:86:77:c7:ef: 00:e8:a2:74:23:15:52:16:2e:23:0a:db:78:5c:07:33:6f:48: 24:ac:8f:83:cc:3e:f3:71:2e:e8:44:f1:4a:33:04:85:13:a0: a3:14:26:9a:9c:12:05:30:0d:2c:f4:5f:00:8f:db:f1:a6:58: 4e:26:5c:2f:b8:d9:b3:b3:35:f1:65:44:52:ad:e5:cc:ea:b5: ac:88:06:e4:5f:0a:e6:5a:d1:9d:57:41:d3:a7:c5:9b:a2:58: 68:3e:31:27:1f:99:f9:14:dc:ec:37:73:06:81:1e:cc:13:ad: 2a:5c:b6:6c:cd:67:ae:a5:c7:94:97:45:94:10:d3:8a:c8:b8: 3e:87:f9:c8:38:67:9f:73:79:8b:39:9a:19:43:6d:88:ff:81: e9:83:b5:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTMURTzerIIsngP8/K/WDBhawt8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFRDJFQjU1RkJGN0REMjM1NkQ3MzQ3MURGNTkzQUE3 MDczRDNGRDAeFw0yNTExMDUwODI0NDRaFw0yNTExMDYxMjI0NDRaMDMxMTAvBgNV BAMTKEI4NEI5MUZBRDdFQ0U2NTkxODdGMTg3RUUzNEY1OTAyODU2OTBEMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqYpbt/kDw4cV0O6GVL0TCpWMf qO9nLjwx/ROnukfdZI7VZoDlP+Q2QLo/KOQ6Fe2oM3obwz4+Wn2pSXWBviS/AjL2 qJtWgb0vIGFNHu/8N8YNS4UH6BQbOXlv6l8k/CesfwXMyvqNJVv3fVyAqby3YA6N TfQq7+eJBwXCseFQ+Pe3SfMYa+1cqskucP+e2jzBWzddqN5tl2vxBjuaBDi5gdz8 uNEA2eGG7FAJdR1EAkn44dQ8e44ua2jifoKeW/2rvxwJC8I8cYav5bUh5i0Q+dI3 /bxAM3VJh5uq0M3XUWv9t7Zi0uxyhaxiHAJgji0uuN5V4wH5ssUvS3ihPeEpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuEuR+tfs5lkYfxh+409ZAoVpDQgwHwYDVR0j BBgwFoAUy+0utV+/fdI1bXNHHfWTqnBz0/0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREt3aUIzTUhEVTk5MTJQeFVZdUFMZDhoR3p0ZlhpYjlXREFHQUNUNWNu S1QvMS9DQkVEMkVCNTVGQkY3REQyMzU2RDczNDcxREY1OTNBQTcwNzNEM0ZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCRUQyRUI1NUZCRjdERDIz NTZENzM0NzFERjU5M0FBNzA3M0QzRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REt3aUIzTUhEVTk5MTJQeFVZdUFMZDhoR3p0ZlhpYjlXREFHQUNUNWNuS1QvMS9D QkVEMkVCNTVGQkY3REQyMzU2RDczNDcxREY1OTNBQTcwNzNEM0ZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAakFFvqLD/ksMilA4AJiBrzVEL6EW/kPusndUs5sjtzMfd9imxnao1nkkme6D MWbSEhzoHfjIY7WM5qOcMwYi55NY+2ClSu8cJ/cqkvmlyJ5by0h6SwMHE4Iklbs1 VN+2iqDT4/vxLMGGd8fvAOiidCMVUhYuIwrbeFwHM29IJKyPg8w+83Eu6ETxSjME hROgoxQmmpwSBTANLPRfAI/b8aZYTiZcL7jZs7M18WVEUq3lzOq1rIgG5F8K5lrR nVdB06fFm6JYaD4xJx+Z+RTc7DdzBoEezBOtKly2bM1nrqXHlJdFlBDTisi4Pof5 yDhnn3N5izmaGUNtiP+B6YO10Q== -----END CERTIFICATE-----Generated at Wed Nov 5 16:01:44 2025 by rpki-client