$ rpki-client -vvf rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft File: CDB4502328A17F5E10125CA4554E967C912340D3.mft (raw, json) Hash identifier: KtGUwdd4hgb32xCP2FgzMljw2gBnaTnzOozDQya/604= Subject key identifier: 88:53:D2:C7:BB:41:F1:7F:82:4A:DB:9F:C2:25:BD:28:B5:96:98:D3 Authority key identifier: CD:B4:50:23:28:A1:7F:5E:10:12:5C:A4:55:4E:96:7C:91:23:40:D3 Certificate issuer: /CN=CDB4502328A17F5E10125CA4554E967C912340D3 Certificate serial: 4BBB1A210991CD9A3CE6B99698AA2ED161ED112D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB4502328A17F5E10125CA4554E967C912340D3.cer Subject info access: rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft Manifest number: 53 Signing time: Wed 05 Nov 2025 00:56:01 +0000 Manifest this update: Wed 05 Nov 2025 00:51:01 +0000 Manifest next update: Thu 06 Nov 2025 03:03:01 +0000 Files and hashes: 1: 323830343a393536343a3a2f33322d313238203d3e20323734353230.roa (hash: ERlKqTm+47mLiWypT+aX8LH7xhbod7WTHoUYvN7TwbY=) 2: CDB4502328A17F5E10125CA4554E967C912340D3.crl (hash: 7kEkL4ETGeMsMPizfMjf4hYu5Jz+nbsynoT77HJeOCU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.crl rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB4502328A17F5E10125CA4554E967C912340D3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:bb:1a:21:09:91:cd:9a:3c:e6:b9:96:98:aa:2e:d1:61:ed:11:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDB4502328A17F5E10125CA4554E967C912340D3 Validity Not Before: Nov 5 00:51:01 2025 GMT Not After : Nov 6 03:03:01 2025 GMT Subject: CN=8853D2C7BB41F17F824ADB9FC225BD28B59698D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:77:e9:8e:18:dc:76:67:d3:4b:3f:8b:24:17: a9:54:27:c0:47:9b:d2:f6:84:a7:91:11:8a:3d:e7: 51:43:09:a7:ff:66:a7:a6:84:93:8e:a8:d2:f8:10: 26:19:4c:88:bc:46:82:2d:9d:3a:1a:51:dd:be:12: 76:dd:9e:2d:a9:e4:d2:48:c4:9b:36:63:7f:44:57: 5f:0a:2f:6a:ea:17:bb:a5:50:09:fb:cf:08:a4:84: 65:ad:ab:c7:19:6d:f4:8a:65:3d:b0:da:e0:b6:36: 36:e7:3a:3f:64:e9:43:60:9d:5d:8b:db:b0:7d:d8: 12:b8:4a:0b:a6:9c:a2:b7:9c:40:82:ae:04:63:59: f8:da:51:75:67:c9:e0:65:af:d5:70:9c:d0:57:d5: 41:3e:37:3b:37:b4:fb:a6:d0:83:c9:51:ec:c9:59: 7e:2b:49:df:db:48:4a:f8:01:7f:96:47:51:d9:17: 63:e9:d4:37:95:69:c5:4f:45:b5:e5:fc:2e:56:bd: 05:ee:f9:92:29:8a:08:23:ac:7a:10:38:1b:76:f7: 31:15:bb:86:79:a3:15:e9:c1:68:00:f5:6e:f9:84: 54:15:59:8a:64:a8:f0:14:53:c2:7b:31:05:f4:ed: d5:ec:4c:e1:1f:8a:f8:11:ba:b2:1e:d8:20:28:c3: 01:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:53:D2:C7:BB:41:F1:7F:82:4A:DB:9F:C2:25:BD:28:B5:96:98:D3 X509v3 Authority Key Identifier: keyid:CD:B4:50:23:28:A1:7F:5E:10:12:5C:A4:55:4E:96:7C:91:23:40:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB4502328A17F5E10125CA4554E967C912340D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:25:ab:67:86:31:b9:d7:70:18:76:c7:f2:6a:1b:8b:38:8e: 93:b0:aa:e1:c6:94:ba:40:54:b5:c8:f6:62:57:01:85:7a:35: f9:4b:dd:f1:c1:e0:12:7e:9e:2f:c1:a2:c5:bb:46:c9:81:fb: 13:76:79:79:9c:c3:c4:3c:50:f3:56:68:4b:b7:08:19:c7:4c: e4:85:07:40:2b:79:4f:77:6f:28:81:54:19:c6:1d:70:fe:aa: 1c:9c:c9:fd:7e:64:30:40:6f:1d:25:e6:59:67:b0:00:af:01: a8:f8:5a:a9:07:eb:d4:4d:5b:27:a1:d0:29:98:14:b7:88:6a: d1:6b:9c:e9:07:f6:86:eb:a3:85:19:71:12:e8:74:b6:5a:b4: fd:dd:79:a8:17:44:e5:06:2f:31:8b:b9:c2:fb:6b:a6:b6:d4: a5:ae:c5:18:70:ad:83:91:2a:2f:7d:31:fe:27:da:a6:03:63: 82:81:08:30:ba:96:89:aa:26:a7:94:88:84:58:e6:c9:c3:34: 11:42:82:76:7f:98:5d:25:f4:a8:51:4e:85:3d:be:f2:d0:c3: 9e:c9:8b:67:0b:cc:7e:29:37:0f:46:03:4a:73:94:ef:98:ea: 90:74:9b:f7:30:f8:52:39:2b:c7:22:bd:e7:a7:eb:c9:4f:eb: 68:52:06:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS7saIQmRzZo85rmWmKou0WHtES0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCNDUwMjMyOEExN0Y1RTEwMTI1Q0E0NTU0RTk2N0M5 MTIzNDBEMzAeFw0yNTExMDUwMDUxMDFaFw0yNTExMDYwMzAzMDFaMDMxMTAvBgNV BAMTKDg4NTNEMkM3QkI0MUYxN0Y4MjRBREI5RkMyMjVCRDI4QjU5Njk4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYd+mOGNx2Z9NLP4skF6lUJ8BH m9L2hKeREYo951FDCaf/ZqemhJOOqNL4ECYZTIi8RoItnToaUd2+Enbdni2p5NJI xJs2Y39EV18KL2rqF7ulUAn7zwikhGWtq8cZbfSKZT2w2uC2NjbnOj9k6UNgnV2L 27B92BK4SgumnKK3nECCrgRjWfjaUXVnyeBlr9VwnNBX1UE+Nzs3tPum0IPJUezJ WX4rSd/bSEr4AX+WR1HZF2Pp1DeVacVPRbXl/C5WvQXu+ZIpiggjrHoQOBt29zEV u4Z5oxXpwWgA9W75hFQVWYpkqPAUU8J7MQX07dXsTOEfivgRurIe2CAowwElAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiFPSx7tB8X+CStufwiW9KLWWmNMwHwYDVR0j BBgwFoAUzbRQIyihf14QElykVU6WfJEjQNMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRndUVlRwR3plMUVvRFlSRVhTb044UVlURmdmSGtZaDRzaG9Cb1drMTJH d2YvMC9DREI0NTAyMzI4QTE3RjVFMTAxMjVDQTQ1NTRFOTY3QzkxMjM0MEQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQjQ1MDIzMjhBMTdGNUUx MDEyNUNBNDU1NEU5NjdDOTEyMzQwRDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RndUVlRwR3plMUVvRFlSRVhTb044UVlURmdmSGtZaDRzaG9Cb1drMTJHd2YvMC9D REI0NTAyMzI4QTE3RjVFMTAxMjVDQTQ1NTRFOTY3QzkxMjM0MEQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhSWrZ4YxuddwGHbH8mobiziOk7Cq4caUukBUtcj2YlcBhXo1+Uvd8cHgEn6e L8GixbtGyYH7E3Z5eZzDxDxQ81ZoS7cIGcdM5IUHQCt5T3dvKIFUGcYdcP6qHJzJ /X5kMEBvHSXmWWewAK8BqPhaqQfr1E1bJ6HQKZgUt4hq0Wuc6Qf2huujhRlxEuh0 tlq0/d15qBdE5QYvMYu5wvtrprbUpa7FGHCtg5EqL30x/ifapgNjgoEIMLqWiaom p5SIhFjmycM0EUKCdn+YXSX0qFFOhT2+8tDDnsmLZwvMfik3D0YDSnOU75jqkHSb 9zD4UjkrxyK956fryU/raFIGMQ== -----END CERTIFICATE-----Generated at Wed Nov 5 04:23:34 2025 by rpki-client