$ rpki-client -vvf rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft File: 1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft (raw, json) Hash identifier: R8tbLqH23K6bhhIS7veQNuOUB5wDszbojWbM05jMw0Q= Subject key identifier: 1F:31:4B:B7:1A:9E:39:57:50:CB:34:58:2E:3B:6E:77:BE:C6:FC:62 Authority key identifier: 1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F Certificate issuer: /CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F Certificate serial: 11AEE76A0C954891FD56F09AC48B43B3B60B314C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft Manifest number: 011C Signing time: Tue 04 Nov 2025 20:06:02 +0000 Manifest this update: Tue 04 Nov 2025 20:01:02 +0000 Manifest next update: Wed 05 Nov 2025 21:12:02 +0000 Files and hashes: 1: 34352e3138322e3134382e302f32322d3234203d3e20323733343134.roa (hash: dbbmdVzbgg93YC+/yC7kPmE+pyR0GJJ9WJLl+Jcl/IY=) 2: 1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl (hash: fOFisKJeOpPtlPPDTKBvPfNz5m3z8xGSx61KHjZlJx0=) 3: 323830343a386534343a3a2f33322d3438203d3e20323733343134.roa (hash: NpcxWvXzal1YKXgip4gJbMKKp8E5cO//NlFEyag8Gr0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 21:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ae:e7:6a:0c:95:48:91:fd:56:f0:9a:c4:8b:43:b3:b6:0b:31:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F Validity Not Before: Nov 4 20:01:02 2025 GMT Not After : Nov 5 21:12:02 2025 GMT Subject: CN=1F314BB71A9E395750CB34582E3B6E77BEC6FC62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:40:58:31:06:51:b2:6e:9b:3d:22:51:c0: d8:66:07:89:b9:9a:1c:19:93:85:86:56:3b:76:29: f9:c7:95:3b:f6:bc:5c:dd:92:58:b7:8c:3c:e0:a6: 29:5d:41:6a:04:07:a9:c2:4e:f3:58:1f:7f:20:9c: 9f:d9:50:62:c3:fc:fd:8e:53:0a:19:cb:9f:65:b4: 11:92:3d:a0:55:84:71:86:17:b1:64:7e:e8:2b:f9: 37:e8:ed:b0:f7:16:13:88:49:33:f4:15:28:c7:ac: 07:e7:b1:e4:cd:82:23:7d:c1:9c:ba:0a:fe:70:4b: fd:89:52:ff:5e:01:e6:c7:b6:ad:e9:79:3e:0e:07: 66:d8:89:0a:f7:d6:ea:45:f2:e1:53:30:38:e7:85: b2:4b:18:18:50:71:23:31:3c:51:e7:49:41:fb:e9: 2c:e7:45:b6:99:4c:8d:a8:2d:c4:d7:a9:cc:1d:c9: 23:ec:31:3d:f4:04:0a:e0:f3:63:a0:a8:df:3d:b0: 78:c2:9c:63:69:62:ff:e1:cf:fd:b3:f6:00:9d:cc: f1:5d:bc:7b:fb:41:ba:2a:5b:fa:95:cc:23:d1:8e: 25:f5:30:68:94:26:a5:c7:c5:4a:73:2e:8c:48:9b: a0:af:bc:fe:05:c7:50:0d:8d:83:9f:1a:4b:2e:df: 2b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:31:4B:B7:1A:9E:39:57:50:CB:34:58:2E:3B:6E:77:BE:C6:FC:62 X509v3 Authority Key Identifier: keyid:1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:33:31:4d:2f:e3:79:30:83:5f:90:71:c5:b4:66:35:de:0d: 66:96:11:b0:2e:4f:70:1b:30:bf:ab:78:f5:dd:37:1f:97:4d: bd:8a:8f:bf:7e:c8:ec:70:88:67:26:41:43:7d:1b:a7:0e:a0: 8a:a8:c9:9b:4d:9a:5d:40:e2:48:94:9a:62:c9:7a:63:5b:c9: 67:4c:7a:83:2d:13:6f:b5:17:16:2f:3c:e6:0d:46:f9:af:52: 93:ec:ad:42:04:cb:07:2b:0d:35:f5:7a:3b:97:26:c4:f9:12: dd:1e:77:52:a5:cb:af:78:09:8e:63:68:34:92:71:bd:ce:a2: 19:e3:e5:fd:19:1e:12:b7:8c:1f:25:44:21:48:50:e0:5b:eb: 21:16:9d:d0:39:d7:40:7b:48:5c:15:74:63:cf:c6:7e:8f:67: 62:e5:26:68:2d:03:f7:f4:02:f7:46:66:d1:28:d1:3e:2f:54: d3:50:9b:5a:c2:ef:6e:93:a3:b1:0a:56:85:3e:de:33:23:4d: 2a:44:1d:17:7b:0e:28:73:f2:17:3b:dc:32:d5:1c:b9:3e:96: a6:3a:65:06:f0:fb:08:21:34:aa:15:81:c0:26:a2:69:63:c6: 1d:21:a1:d9:a3:95:42:74:3b:64:e1:ef:23:e1:5b:97:3a:d5: ef:b4:af:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEa7nagyVSJH9VvCaxItDs7YLMUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRkRDQTcwMzI5QjlEQ0QyMTc2MDlCRDlDRTU5NDJG RTFDNkEyRjAeFw0yNTExMDQyMDAxMDJaFw0yNTExMDUyMTEyMDJaMDMxMTAvBgNV BAMTKDFGMzE0QkI3MUE5RTM5NTc1MENCMzQ1ODJFM0I2RTc3QkVDNkZDNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDnEBYMQZRsm6bPSJRwNhmB4m5 mhwZk4WGVjt2KfnHlTv2vFzdkli3jDzgpildQWoEB6nCTvNYH38gnJ/ZUGLD/P2O UwoZy59ltBGSPaBVhHGGF7Fkfugr+Tfo7bD3FhOISTP0FSjHrAfnseTNgiN9wZy6 Cv5wS/2JUv9eAebHtq3peT4OB2bYiQr31upF8uFTMDjnhbJLGBhQcSMxPFHnSUH7 6SznRbaZTI2oLcTXqcwdySPsMT30BArg82OgqN89sHjCnGNpYv/hz/2z9gCdzPFd vHv7QboqW/qVzCPRjiX1MGiUJqXHxUpzLoxIm6CvvP4Fx1ANjYOfGksu3ythAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHzFLtxqeOVdQyzRYLjtud77G/GIwHwYDVR0j BBgwFoAUHO/cpwMpudzSF2Cb2c5ZQv4cai8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzVHOUhjVXpQQURjZGF4TnlDVE5KS1RhTUg2U0N4eWNpOTFQVlg1WGFt Q1gvMC8xQ0VGRENBNzAzMjlCOURDRDIxNzYwOUJEOUNFNTk0MkZFMUM2QTJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDRUZEQ0E3MDMyOUI5RENE MjE3NjA5QkQ5Q0U1OTQyRkUxQzZBMkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzVHOUhjVXpQQURjZGF4TnlDVE5KS1RhTUg2U0N4eWNpOTFQVlg1WGFtQ1gvMC8x Q0VGRENBNzAzMjlCOURDRDIxNzYwOUJEOUNFNTk0MkZFMUM2QTJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKjMxTS/jeTCDX5BxxbRmNd4NZpYRsC5PcBswv6t49d03H5dNvYqPv37I7HCI ZyZBQ30bpw6giqjJm02aXUDiSJSaYsl6Y1vJZ0x6gy0Tb7UXFi885g1G+a9Sk+yt QgTLBysNNfV6O5cmxPkS3R53UqXLr3gJjmNoNJJxvc6iGePl/RkeEreMHyVEIUhQ 4FvrIRad0DnXQHtIXBV0Y8/Gfo9nYuUmaC0D9/QC90Zm0SjRPi9U01CbWsLvbpOj sQpWhT7eMyNNKkQdF3sOKHPyFzvcMtUcuT6WpjplBvD7CCE0qhWBwCaiaWPGHSGh 2aOVQnQ7ZOHvI+FblzrV77SvEQ== -----END CERTIFICATE-----Generated at Wed Nov 5 08:49:33 2025 by rpki-client