$ rpki-client -vvf rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft File: 1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft (raw, json) Hash identifier: FCo5MZ+l42U0hLTnLamLJY/G9cNHyTw2PMWY7X0uN3E= Subject key identifier: 64:A3:33:B7:36:8C:D2:21:EB:C6:27:93:D3:FD:24:D8:0C:9B:F2:12 Authority key identifier: 1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD Certificate issuer: /CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD Certificate serial: 7D154992B05FF6207361DB8EEB62847C54A7D1AC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer Subject info access: rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft Manifest number: 0266 Signing time: Tue 04 Nov 2025 11:24:37 +0000 Manifest this update: Tue 04 Nov 2025 11:19:37 +0000 Manifest next update: Wed 05 Nov 2025 12:02:37 +0000 Files and hashes: 1: 3137372e37342e3136342e302f32322d3234203d3e20323731303533.roa (hash: PMpXdMUlCp4Q+HwwLd4ysJ8VQ/NQRUOFxlCc29bb4nI=) 2: 1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl (hash: mAeuYdUM7/nArB2yZIW1Cngpl/oNBTTHo+hrAPOomL4=) 3: 323830343a373538383a3a2f33322d3334203d3e20323731303533.roa (hash: nnZxddMxtPYXvLGrokRo727KDyxmpu+gR99v39ppU0Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 12:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:15:49:92:b0:5f:f6:20:73:61:db:8e:eb:62:84:7c:54:a7:d1:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD Validity Not Before: Nov 4 11:19:37 2025 GMT Not After : Nov 5 12:02:37 2025 GMT Subject: CN=64A333B7368CD221EBC62793D3FD24D80C9BF212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1a:d9:50:d9:29:dc:84:a4:f3:d3:92:5b:b1: 89:e7:f2:87:a0:2a:80:63:b6:e3:98:6e:32:63:2f: b3:99:48:17:a1:f1:a3:79:66:63:cc:84:af:c1:a9: dd:dc:30:94:de:af:fb:af:50:1b:65:5a:37:95:85: ab:bd:8d:c6:50:7c:93:96:ee:7b:0b:c5:28:df:9f: 47:23:0e:25:3d:54:6e:e4:48:b3:0a:35:40:56:8c: 48:d3:12:08:54:c6:a7:10:f8:95:b3:8a:c9:7b:82: f4:81:c9:3a:e2:aa:5f:96:11:73:4c:49:5a:5b:2a: 36:4a:b5:8b:89:6e:57:8e:14:63:2a:38:48:43:46: f8:05:83:71:ec:9d:59:e5:e5:c1:a0:7a:b9:c0:e3: d2:37:24:52:15:94:8b:cf:8e:07:55:dd:84:ef:f5: 1f:f6:3b:20:6d:71:05:95:7b:8d:c9:6e:d3:32:c2: 84:f6:60:99:4c:4f:46:6a:ea:ed:f8:39:3d:0c:f9: b6:ff:6f:db:bf:68:98:dd:39:db:bd:08:79:63:a6: cc:74:fd:75:28:0c:06:9d:cb:16:9c:b8:92:9f:51: 8d:46:ec:01:8d:90:89:9b:2a:b7:3e:89:fc:d7:8c: 22:14:46:6f:f7:37:98:f5:9f:01:73:cc:ee:93:ae: 6d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A3:33:B7:36:8C:D2:21:EB:C6:27:93:D3:FD:24:D8:0C:9B:F2:12 X509v3 Authority Key Identifier: keyid:1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:19:e4:99:e1:8f:6d:05:61:7f:03:9a:10:e6:e4:16:f6:35: b7:67:95:df:e4:ce:7b:06:74:9b:c7:cd:eb:d7:e0:15:66:55: 62:d6:e2:76:85:5e:c4:7b:89:ba:9a:fe:43:86:1f:51:45:dc: df:4a:e1:32:71:bf:bc:25:77:8b:96:46:54:0c:f2:71:c5:8e: 3a:5a:b8:b7:20:9f:07:65:9a:05:e7:b5:cd:81:ac:3f:e5:d6: 63:bf:eb:50:89:6e:f4:48:1b:f6:70:e7:d6:10:69:f7:09:05: 17:8a:f7:b1:aa:d0:fc:6d:bc:30:27:b5:c4:3f:3b:b0:bd:0e: ab:7a:5e:d3:d4:6c:fe:f3:fb:a1:b4:4c:e7:48:44:44:68:82: 5f:46:ff:5f:73:75:d6:ad:5c:1e:00:88:5e:9d:83:f0:31:4f: 12:b1:68:60:54:1f:bc:79:e7:ee:81:23:1a:ea:9c:ef:97:e6: d7:6a:17:fb:5c:d5:00:e9:3a:51:1a:c0:58:39:fc:fb:4b:1d: 79:94:8b:16:ce:2d:a6:e8:98:a4:7f:3f:25:a6:41:46:9b:36: ab:79:3a:44:d1:e6:82:3f:27:91:d6:3a:9e:53:1a:cc:d1:33: 16:f2:85:e7:4b:19:b2:e9:c9:e5:1b:aa:df:2d:1b:ec:ad:86: 55:b3:ff:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfRVJkrBf9iBzYduO62KEfFSn0awwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGQTUzRkQ3OTI4QzE3NUM3NDMyRTczREQxNDcyOTU1 RTVBMzVGRDAeFw0yNTExMDQxMTE5MzdaFw0yNTExMDUxMjAyMzdaMDMxMTAvBgNV BAMTKDY0QTMzM0I3MzY4Q0QyMjFFQkM2Mjc5M0QzRkQyNEQ4MEM5QkYyMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSGtlQ2SnchKTz05JbsYnn8oeg KoBjtuOYbjJjL7OZSBeh8aN5ZmPMhK/Bqd3cMJTer/uvUBtlWjeVhau9jcZQfJOW 7nsLxSjfn0cjDiU9VG7kSLMKNUBWjEjTEghUxqcQ+JWzisl7gvSByTriql+WEXNM SVpbKjZKtYuJbleOFGMqOEhDRvgFg3HsnVnl5cGgernA49I3JFIVlIvPjgdV3YTv 9R/2OyBtcQWVe43JbtMywoT2YJlMT0Zq6u34OT0M+bb/b9u/aJjdOdu9CHljpsx0 /XUoDAadyxacuJKfUY1G7AGNkImbKrc+ifzXjCIURm/3N5j1nwFzzO6Trm1jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZKMztzaM0iHrxieT0/0k2Ayb8hIwHwYDVR0j BBgwFoAUHPpT/XkowXXHQy5z3RRylV5aNf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmhnU2pLelRQUDN6eW16WWpEZzc0QXR0M2sxUzZpTUpia25zZHdDTnAx bVEvMC8xQ0ZBNTNGRDc5MjhDMTc1Qzc0MzJFNzNERDE0NzI5NTVFNUEzNUZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDRkE1M0ZENzkyOEMxNzVD NzQzMkU3M0REMTQ3Mjk1NUU1QTM1RkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RmhnU2pLelRQUDN6eW16WWpEZzc0QXR0M2sxUzZpTUpia25zZHdDTnAxbVEvMC8x Q0ZBNTNGRDc5MjhDMTc1Qzc0MzJFNzNERDE0NzI5NTVFNUEzNUZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaRnkmeGPbQVhfwOaEObkFvY1t2eV3+TOewZ0m8fN69fgFWZVYtbidoVexHuJ upr+Q4YfUUXc30rhMnG/vCV3i5ZGVAzyccWOOlq4tyCfB2WaBee1zYGsP+XWY7/r UIlu9Egb9nDn1hBp9wkFF4r3sarQ/G28MCe1xD87sL0Oq3pe09Rs/vP7obRM50hE RGiCX0b/X3N11q1cHgCIXp2D8DFPErFoYFQfvHnn7oEjGuqc75fm12oX+1zVAOk6 URrAWDn8+0sdeZSLFs4tpuiYpH8/JaZBRps2q3k6RNHmgj8nkdY6nlMazNEzFvKF 50sZsunJ5Ruq3y0b7K2GVbP/cg== -----END CERTIFICATE-----Generated at Wed Nov 5 03:59:50 2025 by rpki-client