$ rpki-client -vvf rpki-repo.registro.br/repo/4FqJSE2RyojP3kMjFSK41MLmEfBLHPjdduj4Pyv1FEp9/0/FC4CE8902818AFE1A8B4ADE332C0FC23D3F8B36D.mft File: FC4CE8902818AFE1A8B4ADE332C0FC23D3F8B36D.mft (raw, json) Hash identifier: qNliBhgzeE+Q33yL5Gzt+ygtwk0eZn/kgLY/MDK0LNw= Subject key identifier: 3E:33:45:33:ED:96:36:67:E0:3C:F7:EF:A0:C9:33:EB:73:B4:FF:7B Authority key identifier: FC:4C:E8:90:28:18:AF:E1:A8:B4:AD:E3:32:C0:FC:23:D3:F8:B3:6D Certificate issuer: /CN=FC4CE8902818AFE1A8B4ADE332C0FC23D3F8B36D Certificate serial: 1592FFF9052AFC43DB679D8CEABB9C23700F322E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC4CE8902818AFE1A8B4ADE332C0FC23D3F8B36D.cer Subject info access: rsync://rpki-repo.registro.br/repo/4FqJSE2RyojP3kMjFSK41MLmEfBLHPjdduj4Pyv1FEp9/0/FC4CE8902818AFE1A8B4ADE332C0FC23D3F8B36D.mft Manifest number: 24 Signing time: Mon 03 Nov 2025 11:37:48 +0000 Manifest this update: Mon 03 Nov 2025 11:32:48 +0000 Manifest next update: Tue 04 Nov 2025 12:00:48 +0000 Files and hashes: 1: 323830343a386536633a3a2f33322d3438203d3e20323733343234.roa (hash: VehafSy24e2l3fs5JmfknLDTXedHy9QGZzCURJq7Cn4=) 2: FC4CE8902818AFE1A8B4ADE332C0FC23D3F8B36D.crl (hash: 1Bi8ld4CWKP+DjxA4vkqO4ABJTsC1RgNxa15OzsYNvY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4FqJSE2RyojP3kMjFSK41MLmEfBLHPjdduj4Pyv1FEp9/0/FC4CE8902818AFE1A8B4ADE332C0FC23D3F8B36D.crl rsync://rpki-repo.registro.br/repo/4FqJSE2RyojP3kMjFSK41MLmEfBLHPjdduj4Pyv1FEp9/0/FC4CE8902818AFE1A8B4ADE332C0FC23D3F8B36D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC4CE8902818AFE1A8B4ADE332C0FC23D3F8B36D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:92:ff:f9:05:2a:fc:43:db:67:9d:8c:ea:bb:9c:23:70:0f:32:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4CE8902818AFE1A8B4ADE332C0FC23D3F8B36D Validity Not Before: Nov 3 11:32:48 2025 GMT Not After : Nov 4 12:00:48 2025 GMT Subject: CN=3E334533ED963667E03CF7EFA0C933EB73B4FF7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:96:c7:46:67:ea:60:8a:a1:23:78:bd:f1:70: 26:6d:7b:ba:61:98:08:6c:07:e7:17:86:24:89:98: ef:82:ae:77:9c:f0:44:64:7a:39:ea:ea:21:a3:3d: 69:77:c4:ad:8b:e4:ad:61:d0:66:be:f8:77:7b:e8: 54:fc:d2:20:14:64:b6:aa:00:6b:f0:05:de:93:81: ea:de:77:84:76:14:83:00:1a:a8:49:80:c2:c6:10: 68:d9:65:d6:34:26:09:76:a0:42:51:4c:df:b8:3f: e6:72:23:90:6e:24:6c:30:63:64:09:73:6f:c8:9e: 25:50:d3:6c:4b:d2:7c:fe:2b:03:ce:1b:84:cc:2e: 3e:a6:ce:e8:46:c9:b1:8d:9a:68:5b:a6:40:16:3e: 54:c3:85:38:3e:a3:b8:a1:aa:38:1b:6f:d7:6a:1e: b9:b2:4d:e6:71:37:83:94:6b:07:1f:71:18:26:11: d4:4b:71:81:19:14:99:6a:2c:84:a7:7c:ae:b2:75: 2e:24:95:79:b5:cb:ed:ee:5c:e5:91:85:c5:ec:c1: 7d:5a:03:e5:60:6f:e4:e0:02:55:27:d9:52:64:eb: 28:21:f6:92:27:28:72:19:cc:87:9c:e2:22:e3:d3: 5d:ba:06:a9:01:8f:f2:27:f9:06:f6:ac:27:4e:16: 6c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:33:45:33:ED:96:36:67:E0:3C:F7:EF:A0:C9:33:EB:73:B4:FF:7B X509v3 Authority Key Identifier: keyid:FC:4C:E8:90:28:18:AF:E1:A8:B4:AD:E3:32:C0:FC:23:D3:F8:B3:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4FqJSE2RyojP3kMjFSK41MLmEfBLHPjdduj4Pyv1FEp9/0/FC4CE8902818AFE1A8B4ADE332C0FC23D3F8B36D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC4CE8902818AFE1A8B4ADE332C0FC23D3F8B36D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FqJSE2RyojP3kMjFSK41MLmEfBLHPjdduj4Pyv1FEp9/0/FC4CE8902818AFE1A8B4ADE332C0FC23D3F8B36D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:08:0a:93:f0:0f:ad:ce:90:1b:40:b6:88:b6:38:3e:2e:3b: 13:16:79:07:b9:a5:c8:19:28:d9:7a:42:5d:17:1d:32:ef:8c: 79:5b:e1:96:6e:76:3f:a5:d2:5a:01:93:12:34:6b:7b:d4:ba: 2e:f4:a7:a2:7d:16:03:74:f8:31:d6:4d:99:86:76:55:85:a2: 5f:22:d2:c1:f5:5b:8b:55:ff:0f:0a:06:69:3e:05:7a:65:7f: cf:5c:3a:e3:0d:69:15:d4:11:04:40:b5:c9:f6:ac:4c:b6:23: cf:3d:89:e5:72:b4:08:d5:3f:0c:ff:36:7e:9f:b7:39:c1:7a: b4:49:35:6c:3e:e1:8f:a4:8e:1b:3f:e3:3a:0c:bb:7c:09:9c: a6:c3:2e:66:e1:be:dc:ed:48:2c:53:b3:bf:30:e7:ed:54:83: a2:5a:fa:c3:e0:f0:f1:03:db:aa:3c:0f:6f:77:92:b1:f9:3c: 1f:73:a0:8f:89:f0:47:a7:d0:02:b6:e7:3b:49:12:7d:34:57: fb:ad:0b:a4:43:22:93:7c:f8:3f:29:22:64:56:73:1c:e5:42: cb:21:13:45:08:34:57:35:00:17:dd:63:a9:0b:a0:f2:ea:50: d8:3f:b4:6d:bd:05:f9:2e:a5:c0:db:23:b2:43:eb:33:ae:e4: cf:7a:bf:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFZL/+QUq/EPbZ52M6rucI3APMi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0Q0U4OTAyODE4QUZFMUE4QjRBREUzMzJDMEZDMjNE M0Y4QjM2RDAeFw0yNTExMDMxMTMyNDhaFw0yNTExMDQxMjAwNDhaMDMxMTAvBgNV BAMTKDNFMzM0NTMzRUQ5NjM2NjdFMDNDRjdFRkEwQzkzM0VCNzNCNEZGN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5lsdGZ+pgiqEjeL3xcCZte7ph mAhsB+cXhiSJmO+Crnec8ERkejnq6iGjPWl3xK2L5K1h0Ga++Hd76FT80iAUZLaq AGvwBd6Tgered4R2FIMAGqhJgMLGEGjZZdY0Jgl2oEJRTN+4P+ZyI5BuJGwwY2QJ c2/IniVQ02xL0nz+KwPOG4TMLj6mzuhGybGNmmhbpkAWPlTDhTg+o7ihqjgbb9dq HrmyTeZxN4OUawcfcRgmEdRLcYEZFJlqLISnfK6ydS4klXm1y+3uXOWRhcXswX1a A+Vgb+TgAlUn2VJk6ygh9pInKHIZzIec4iLj0126BqkBj/In+Qb2rCdOFmx7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPjNFM+2WNmfgPPfvoMkz63O0/3swHwYDVR0j BBgwFoAU/EzokCgYr+GotK3jMsD8I9P4s20wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEZxSlNFMlJ5b2pQM2tNakZTSzQxTUxtRWZCTEhQamRkdWo0UHl2MUZF cDkvMC9GQzRDRTg5MDI4MThBRkUxQThCNEFERTMzMkMwRkMyM0QzRjhCMzZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZDNENFODkwMjgxOEFGRTFB OEI0QURFMzMyQzBGQzIzRDNGOEIzNkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEZxSlNFMlJ5b2pQM2tNakZTSzQxTUxtRWZCTEhQamRkdWo0UHl2MUZFcDkvMC9G QzRDRTg5MDI4MThBRkUxQThCNEFERTMzMkMwRkMyM0QzRjhCMzZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfAgKk/APrc6QG0C2iLY4Pi47ExZ5B7mlyBko2XpCXRcdMu+MeVvhlm52P6XS WgGTEjRre9S6LvSnon0WA3T4MdZNmYZ2VYWiXyLSwfVbi1X/DwoGaT4FemV/z1w6 4w1pFdQRBEC1yfasTLYjzz2J5XK0CNU/DP82fp+3OcF6tEk1bD7hj6SOGz/jOgy7 fAmcpsMuZuG+3O1ILFOzvzDn7VSDolr6w+Dw8QPbqjwPb3eSsfk8H3Ogj4nwR6fQ ArbnO0kSfTRX+60LpEMik3z4PykiZFZzHOVCyyETRQg0VzUAF91jqQug8upQ2D+0 bb0F+S6lwNsjskPrM67kz3q/MQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:01:19 2025 by rpki-client