$ rpki-client -vvf rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft File: CBED8B77145C146C6E2002637F70D52E41B65B78.mft (raw, json) Hash identifier: CPnk/sN/RWIboKZrls0XYqZpj/xfia7TApkoUBA43Ig= Subject key identifier: AB:2F:31:EA:18:C2:7C:98:D1:34:3C:74:74:70:AC:D2:79:DD:F8:05 Authority key identifier: CB:ED:8B:77:14:5C:14:6C:6E:20:02:63:7F:70:D5:2E:41:B6:5B:78 Certificate issuer: /CN=CBED8B77145C146C6E2002637F70D52E41B65B78 Certificate serial: 3DD6AA04AF9EB6BE521EF2429E13EF3BC6483391 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer Subject info access: rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft Manifest number: 0304 Signing time: Tue 04 Nov 2025 18:11:37 +0000 Manifest this update: Tue 04 Nov 2025 18:06:37 +0000 Manifest next update: Wed 05 Nov 2025 20:28:37 +0000 Files and hashes: 1: CBED8B77145C146C6E2002637F70D52E41B65B78.crl (hash: eauXzyiW9KoGtmU8yY4+SL3cAwKE4GV437VM4AOrO0o=) 2: 323830343a383632633a3a2f33322d3335203d3e20323732363236.roa (hash: u3QX0Sw01r5zWK9SI7e/zZteNQlDp6bzw/sy4KdIv84=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.crl rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d6:aa:04:af:9e:b6:be:52:1e:f2:42:9e:13:ef:3b:c6:48:33:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBED8B77145C146C6E2002637F70D52E41B65B78 Validity Not Before: Nov 4 18:06:37 2025 GMT Not After : Nov 5 20:28:37 2025 GMT Subject: CN=AB2F31EA18C27C98D1343C747470ACD279DDF805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:82:0b:d1:2d:59:82:24:25:19:13:01:5d:43: bc:f2:11:f1:af:dd:81:cd:cf:75:8e:4f:f3:82:35: f8:95:4d:41:bd:a8:f5:f8:85:a5:0e:f3:94:20:c6: e1:4e:08:22:19:49:67:69:c8:16:5f:f9:33:9f:a0: 66:ea:e6:97:80:3f:55:13:9a:61:73:49:2e:32:c9: 15:0e:aa:86:31:39:70:37:e9:d1:15:c0:ba:6b:ba: 00:60:79:45:bd:e4:33:b2:bc:a3:35:b7:9f:59:ef: ca:ba:27:c1:8e:82:2a:ee:78:4c:15:f8:d7:52:62: 60:cf:47:6b:16:ae:80:1f:10:0a:30:67:fc:41:23: 79:db:89:ac:7f:68:43:a1:b4:91:70:88:33:3e:3b: 87:0a:1c:d3:1c:99:9e:93:e0:f0:fd:28:00:22:73: e8:43:34:0e:62:8a:2e:06:25:80:db:25:86:41:bb: 3d:13:d4:cd:5a:b6:0d:a1:22:8a:e4:54:4c:80:7d: 1a:6d:80:1d:bd:0e:28:23:ca:93:02:90:91:24:c3: 7c:12:32:79:b2:08:6e:1b:c7:ff:9e:3f:8e:c3:9c: 89:47:70:60:9d:f9:51:fd:31:30:d6:dd:ac:61:e5: b0:3c:9a:72:d1:41:b1:7c:a4:0d:f1:6d:15:56:8b: 34:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2F:31:EA:18:C2:7C:98:D1:34:3C:74:74:70:AC:D2:79:DD:F8:05 X509v3 Authority Key Identifier: keyid:CB:ED:8B:77:14:5C:14:6C:6E:20:02:63:7F:70:D5:2E:41:B6:5B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:57:14:37:39:01:22:07:35:36:75:00:d4:ca:93:d2:ee:41: 96:ae:8c:91:11:09:c4:44:43:46:81:16:3e:29:d1:c3:18:61: b9:d4:3f:aa:16:ea:a9:62:a4:63:45:3b:db:7c:6c:dc:b5:a6: 8f:44:5f:4a:ef:c9:1c:5d:66:09:56:56:e3:47:9b:09:ee:e1: 74:f9:29:cd:d3:fb:d2:8e:a8:42:7b:34:19:cf:0a:28:bf:62: 5c:dc:25:52:98:6a:3b:64:2c:25:86:56:a6:13:e9:44:95:33: be:52:9f:98:fc:c3:71:96:9f:9b:48:a6:36:8f:a0:44:8b:6e: 66:52:69:59:bd:da:c5:43:f3:c5:5e:bc:0c:83:31:e2:2b:9d: e4:0f:b9:08:a7:85:d9:36:92:ea:76:81:73:18:fb:73:f0:ff: de:1a:9d:78:9d:f6:55:2e:d6:d0:f9:8a:d6:81:07:95:7f:61: 95:4d:24:2c:d1:8a:12:f6:da:bb:8d:ed:be:2e:23:2a:30:e4: d9:d0:db:5c:e5:e7:bc:8d:31:3e:12:d6:11:3c:61:78:39:b9: eb:23:2a:6c:95:95:be:7c:24:e6:4c:f5:14:b0:a7:07:5e:c3: d6:5a:6c:6c:6c:b3:aa:d8:ba:58:fc:2c:c3:58:45:56:e1:91: 00:f8:92:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPdaqBK+etr5SHvJCnhPvO8ZIM5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFRDhCNzcxNDVDMTQ2QzZFMjAwMjYzN0Y3MEQ1MkU0 MUI2NUI3ODAeFw0yNTExMDQxODA2MzdaFw0yNTExMDUyMDI4MzdaMDMxMTAvBgNV BAMTKEFCMkYzMUVBMThDMjdDOThEMTM0M0M3NDc0NzBBQ0QyNzlEREY4MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoggvRLVmCJCUZEwFdQ7zyEfGv 3YHNz3WOT/OCNfiVTUG9qPX4haUO85QgxuFOCCIZSWdpyBZf+TOfoGbq5peAP1UT mmFzSS4yyRUOqoYxOXA36dEVwLprugBgeUW95DOyvKM1t59Z78q6J8GOgirueEwV +NdSYmDPR2sWroAfEAowZ/xBI3nbiax/aEOhtJFwiDM+O4cKHNMcmZ6T4PD9KAAi c+hDNA5iii4GJYDbJYZBuz0T1M1atg2hIorkVEyAfRptgB29DigjypMCkJEkw3wS MnmyCG4bx/+eP47DnIlHcGCd+VH9MTDW3axh5bA8mnLRQbF8pA3xbRVWizR1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqy8x6hjCfJjRNDx0dHCs0nnd+AUwHwYDVR0j BBgwFoAUy+2LdxRcFGxuIAJjf3DVLkG2W3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzJFVmpBNTdRWURUaFRaTXd3R3BrbVpFeHJmdTRyVkJZd3VRYXV0allr WXIvMS9DQkVEOEI3NzE0NUMxNDZDNkUyMDAyNjM3RjcwRDUyRTQxQjY1Qjc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCRUQ4Qjc3MTQ1QzE0NkM2 RTIwMDI2MzdGNzBENTJFNDFCNjVCNzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzJFVmpBNTdRWURUaFRaTXd3R3BrbVpFeHJmdTRyVkJZd3VRYXV0allrWXIvMS9D QkVEOEI3NzE0NUMxNDZDNkUyMDAyNjM3RjcwRDUyRTQxQjY1Qjc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH1cUNzkBIgc1NnUA1MqT0u5Blq6MkREJxERDRoEWPinRwxhhudQ/qhbqqWKk Y0U723xs3LWmj0RfSu/JHF1mCVZW40ebCe7hdPkpzdP70o6oQns0Gc8KKL9iXNwl UphqO2QsJYZWphPpRJUzvlKfmPzDcZafm0imNo+gRItuZlJpWb3axUPzxV68DIMx 4iud5A+5CKeF2TaS6naBcxj7c/D/3hqdeJ32VS7W0PmK1oEHlX9hlU0kLNGKEvba u43tvi4jKjDk2dDbXOXnvI0xPhLWETxheDm56yMqbJWVvnwk5kz1FLCnB17D1lps bGyzqti6WPwsw1hFVuGRAPiSeA== -----END CERTIFICATE-----Generated at Wed Nov 5 05:17:30 2025 by rpki-client