$ rpki-client -vvf rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.mft File: 4BFCE5FC9A3645DB029C80D748212328591F7EC7.mft (raw, json) Hash identifier: ntw3wo5WZsqvJOIMkW9LpinulQX7rpl5Raj9I078VOg= Subject key identifier: 41:11:55:A9:52:AC:8D:3D:51:31:DF:7C:84:CB:7C:A4:1B:C3:EE:61 Authority key identifier: 4B:FC:E5:FC:9A:36:45:DB:02:9C:80:D7:48:21:23:28:59:1F:7E:C7 Certificate issuer: /CN=4BFCE5FC9A3645DB029C80D748212328591F7EC7 Certificate serial: 579E418A5AA59844B236A47F8CF1EDF5E52AEAE4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCE5FC9A3645DB029C80D748212328591F7EC7.cer Subject info access: rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.mft Manifest number: 2A Signing time: Mon 03 Nov 2025 08:11:30 +0000 Manifest this update: Mon 03 Nov 2025 08:06:30 +0000 Manifest next update: Tue 04 Nov 2025 11:41:30 +0000 Files and hashes: 1: 4BFCE5FC9A3645DB029C80D748212328591F7EC7.crl (hash: IDfpEIeNpMnugOjukCm+utYIay3jvMyHKIxCzbxiDtc=) 2: 323830343a383337633a3a2f33322d3332203d3e20323732323031.roa (hash: Q3YEtRo3xkXexNJe8+W+KK+do/HA/hyNxTXledKmbKg=) 3: 3137392e34382e3133392e302f32342d3234203d3e20323732323031.roa (hash: SeV8cj8cukqegcvLW5DdE77K1OGxpztmdS5rTw/whwI=) 4: 323830343a383337633a383030303a3a2f33332d3333203d3e20323732323031.roa (hash: 9XDoAfm7De4sDyoh39gcI5DxhojffFWqbroXJEpqWvU=) 5: 323830343a383337633a3a2f33332d3333203d3e20323732323031.roa (hash: ++2LIdnH40IAkrTxkDaokLEKVnE5dtYjBRStGMrWkZo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.crl rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCE5FC9A3645DB029C80D748212328591F7EC7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:9e:41:8a:5a:a5:98:44:b2:36:a4:7f:8c:f1:ed:f5:e5:2a:ea:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BFCE5FC9A3645DB029C80D748212328591F7EC7 Validity Not Before: Nov 3 08:06:30 2025 GMT Not After : Nov 4 11:41:30 2025 GMT Subject: CN=411155A952AC8D3D5131DF7C84CB7CA41BC3EE61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:17:ee:05:80:56:13:ec:1c:6e:98:43:3a: bf:84:4d:03:2d:7b:80:3d:82:56:ee:58:09:b5:c4: 44:e6:39:0d:ed:0b:27:d5:44:2a:af:49:5a:d1:60: 7e:50:ac:60:92:51:c1:2d:7c:70:90:00:86:0c:68: b5:3b:f9:30:4f:32:df:e0:c5:ce:69:dc:e8:19:c8: 06:43:0b:23:09:66:6f:e6:06:a3:c8:90:e2:2f:82: a8:06:a1:7e:32:56:55:8e:3d:46:c8:89:c0:b7:71: bc:a3:d9:fa:7d:5f:ab:b3:b1:29:2a:6a:be:31:13: c6:50:f6:05:a3:5a:3e:74:32:ac:69:be:dc:02:8b: 5e:4c:bf:bf:62:ea:43:e5:33:8a:57:59:e0:6b:2e: 63:28:fa:d8:b3:69:8d:9d:11:c4:44:6f:6b:0b:a4: 8b:62:57:85:10:df:b0:40:e7:cd:1e:70:16:d1:86: 90:db:85:98:f8:42:8d:ad:e8:9a:15:b2:1c:82:a3: 63:31:81:66:91:d9:e3:11:32:e0:4a:bb:9d:47:ef: 46:ea:c7:95:44:7f:20:6b:7c:b9:34:94:12:60:66: d0:a6:1e:de:91:9b:d2:ce:be:2a:16:fc:e5:18:46: d3:82:af:f7:f3:d0:b1:29:14:6d:fc:6c:dd:ed:a3: ef:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:11:55:A9:52:AC:8D:3D:51:31:DF:7C:84:CB:7C:A4:1B:C3:EE:61 X509v3 Authority Key Identifier: keyid:4B:FC:E5:FC:9A:36:45:DB:02:9C:80:D7:48:21:23:28:59:1F:7E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCE5FC9A3645DB029C80D748212328591F7EC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:0c:65:6e:a2:56:63:80:a7:b6:0e:55:4e:c0:11:a7:37:c5: c6:f9:77:85:be:33:b2:2e:88:b2:08:96:b7:14:c0:ed:3d:76: 1d:5e:0b:8e:a7:99:68:64:0c:87:3c:a2:e5:9d:ef:d7:d7:52: ae:24:ff:ed:ff:e2:1b:98:95:8b:1c:60:e5:8a:28:7d:c9:71: 40:b9:f3:ce:eb:47:d7:d6:ae:7c:30:39:59:d5:11:88:f0:ea: a3:a0:1a:91:7f:e4:9b:dc:5c:14:b5:b4:aa:85:f7:91:2d:e5: 94:a3:25:a2:be:59:f6:83:99:3a:ef:e2:3b:70:c4:78:3a:71: 5b:d7:e9:01:d7:c9:d9:99:da:aa:72:f7:f6:6b:c9:43:1d:e8: 79:bd:7f:5b:38:b9:f2:2e:77:81:c6:b2:04:25:7d:d4:00:d9: 6a:fe:a3:cd:9b:df:92:0c:00:f9:ec:5e:37:30:85:84:3a:c1: 2e:5a:90:26:0e:13:80:db:c9:b8:c2:44:a0:10:d4:06:d7:ad: 0c:e7:e5:03:6e:99:2c:cd:37:ed:e0:ba:d7:c5:d4:4c:f5:0a: 07:70:b9:4e:88:98:22:d0:b2:86:03:ac:3e:d3:2b:2a:90:c4: 37:bc:3b:69:f3:a1:d4:f5:7d:f8:4c:d8:72:b9:23:61:bd:74: 65:b6:c7:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUV55BilqlmESyNqR/jPHt9eUq6uQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGQ0U1RkM5QTM2NDVEQjAyOUM4MEQ3NDgyMTIzMjg1 OTFGN0VDNzAeFw0yNTExMDMwODA2MzBaFw0yNTExMDQxMTQxMzBaMDMxMTAvBgNV BAMTKDQxMTE1NUE5NTJBQzhEM0Q1MTMxREY3Qzg0Q0I3Q0E0MUJDM0VFNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGSBfuBYBWE+wcbphDOr+ETQMt e4A9glbuWAm1xETmOQ3tCyfVRCqvSVrRYH5QrGCSUcEtfHCQAIYMaLU7+TBPMt/g xc5p3OgZyAZDCyMJZm/mBqPIkOIvgqgGoX4yVlWOPUbIicC3cbyj2fp9X6uzsSkq ar4xE8ZQ9gWjWj50MqxpvtwCi15Mv79i6kPlM4pXWeBrLmMo+tizaY2dEcREb2sL pItiV4UQ37BA580ecBbRhpDbhZj4Qo2t6JoVshyCo2MxgWaR2eMRMuBKu51H70bq x5VEfyBrfLk0lBJgZtCmHt6Rm9LOvioW/OUYRtOCr/fz0LEpFG38bN3to+/PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQRFVqVKsjT1RMd98hMt8pBvD7mEwHwYDVR0j BBgwFoAUS/zl/Jo2RdsCnIDXSCEjKFkffscwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2VzWFJIa2d5R3BmaHdjd2hxYU1WdUJLaDhSTjlMVEhxaGkxVkZCdTVR NlEvMC80QkZDRTVGQzlBMzY0NURCMDI5QzgwRDc0ODIxMjMyODU5MUY3RUM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCRkNFNUZDOUEzNjQ1REIw MjlDODBENzQ4MjEyMzI4NTkxRjdFQzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2VzWFJIa2d5R3BmaHdjd2hxYU1WdUJLaDhSTjlMVEhxaGkxVkZCdTVRNlEvMC80 QkZDRTVGQzlBMzY0NURCMDI5QzgwRDc0ODIxMjMyODU5MUY3RUM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqQxlbqJWY4Cntg5VTsARpzfFxvl3hb4zsi6IsgiWtxTA7T12HV4LjqeZaGQM hzyi5Z3v19dSriT/7f/iG5iVixxg5YoofclxQLnzzutH19aufDA5WdURiPDqo6Aa kX/km9xcFLW0qoX3kS3llKMlor5Z9oOZOu/iO3DEeDpxW9fpAdfJ2ZnaqnL39mvJ Qx3oeb1/Wzi58i53gcayBCV91ADZav6jzZvfkgwA+exeNzCFhDrBLlqQJg4TgNvJ uMJEoBDUBtetDOflA26ZLM037eC618XUTPUKB3C5ToiYItCyhgOsPtMrKpDEN7w7 afOh1PV9+EzYcrkjYb10ZbbH2w== -----END CERTIFICATE-----Generated at Mon Nov 3 12:11:50 2025 by rpki-client