$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft File: A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft (raw, json) Hash identifier: qdrfJ5lh0+f5V6WfPYCJDsKwexrnU2UEIjglPiZofMo= Subject key identifier: 1D:86:17:F1:57:F7:23:93:0E:C8:08:75:59:12:8E:EF:C4:38:91:58 Authority key identifier: A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3 Certificate issuer: /CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3 Certificate serial: 0D9E2474ADBD534DFAA67CB0449789C885A54845 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft Manifest number: 025F Signing time: Mon 03 Nov 2025 17:44:15 +0000 Manifest this update: Mon 03 Nov 2025 17:39:15 +0000 Manifest next update: Tue 04 Nov 2025 21:38:15 +0000 Files and hashes: 1: 3137302e38332e3136302e302f32322d3234203d3e20323634313132.roa (hash: kjRXgE0/0tSktAP46xSsYXcpBUoV/kAEz7+o0rfOYak=) 2: 323830343a323261303a3a2f33322d3438203d3e20323634313132.roa (hash: XUkg/RMARH1Dfo0HXIe/VkwDxry1vLL6HTSa7WxxHKM=) 3: A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl (hash: kdW0AvAkCBtnfNGfmRxb0FVugSeFdFyM2iqi47O1rjI=) 4: 3133382e39372e32302e302f32322d3234203d3e20323634313132.roa (hash: vaPBjNRU5cLfNq4Ajf17RP29ZF8znjhebKhB7JEHAqE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:9e:24:74:ad:bd:53:4d:fa:a6:7c:b0:44:97:89:c8:85:a5:48:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3 Validity Not Before: Nov 3 17:39:15 2025 GMT Not After : Nov 4 21:38:15 2025 GMT Subject: CN=1D8617F157F723930EC8087559128EEFC4389158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:46:c2:cf:88:1c:6d:1e:d7:f4:c8:05:60:bb: be:24:e6:fc:a3:04:9d:bc:53:51:51:c1:8b:a6:61: 47:a9:b0:a7:26:1d:0e:38:a8:33:75:1a:d3:17:cc: e2:d9:01:28:ac:e3:11:92:9b:38:e3:42:43:2e:72: 5c:b9:d5:81:aa:d6:5e:98:d6:96:7d:8d:49:93:22: 94:c8:30:bf:e1:62:79:07:9e:c9:9b:d2:bc:54:8e: 23:fa:39:08:8c:69:41:03:b5:28:fe:1b:28:44:46: 91:23:03:cb:f2:11:fd:5c:78:ab:e5:79:fd:ac:c7: ec:16:c1:9a:ec:bb:eb:5b:52:64:29:68:0c:07:35: 0b:e6:a9:18:ee:56:ab:2e:ec:3f:7b:5a:43:13:22: c2:fd:a1:c7:68:39:f1:1e:51:17:d4:5b:11:69:ea: 97:58:9e:fe:6c:bb:c0:0e:45:85:e8:82:64:b5:6a: 7a:11:51:02:81:4e:de:b6:39:8e:d2:b1:c6:c7:e3: 43:4f:da:07:4f:f2:30:ac:a1:71:96:51:b5:4c:de: 96:70:a0:ba:df:0c:b8:cd:f9:fd:b5:7b:2c:d1:c6: 04:44:2b:05:6c:9a:c3:59:a7:16:e5:70:41:01:e9: 46:2e:96:35:dd:58:21:a0:49:60:0b:2d:3e:2b:99: 6b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:86:17:F1:57:F7:23:93:0E:C8:08:75:59:12:8E:EF:C4:38:91:58 X509v3 Authority Key Identifier: keyid:A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:bb:f3:27:e4:64:17:8c:22:bd:b3:b9:94:ee:61:50:c2:30: 62:22:5d:c1:bf:72:64:c6:3e:ae:92:c2:1b:a9:e6:67:81:be: f1:72:d0:06:64:bb:a6:fc:01:2e:0b:a1:5e:31:45:7b:15:6e: c3:9f:ec:34:d5:80:f9:72:7a:a2:65:a7:3f:47:59:69:a6:2d: 26:ec:fe:45:98:be:71:22:30:19:89:b5:23:75:ac:a1:ca:87: 30:a8:e3:b1:53:9a:7f:f1:10:1f:6b:2a:93:70:31:71:b9:e9: 57:c6:67:bb:eb:62:ce:ea:26:7f:75:03:7f:69:99:14:93:db: 29:f4:2d:ce:30:ae:94:eb:c4:20:3d:a3:a4:8e:f2:d8:ef:10: ba:98:f7:d4:01:4b:10:5f:c5:c2:4f:34:73:c0:1c:c4:b8:45: b7:39:d9:48:0a:19:5c:11:72:f7:b8:05:ec:3c:08:5f:27:a9: 35:bf:aa:64:c3:41:03:db:6b:21:d2:ca:42:2e:4e:68:e0:cd: c0:2e:3b:b6:cd:cb:38:1e:d1:b1:4e:ad:8d:23:8f:68:83:9c: 9e:0f:db:5a:1b:a1:06:47:de:77:30:d4:52:a4:cb:fa:82:56: 37:cb:cd:02:1d:89:26:70:f8:ae:9c:0f:9f:61:f5:8f:60:d8: 94:d8:99:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDZ4kdK29U036pnywRJeJyIWlSEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA5RkZCMEZEQzM0REQwNzk2MUZFREJCNzlEODU5M0ZD MjgxMTJGMzAeFw0yNTExMDMxNzM5MTVaFw0yNTExMDQyMTM4MTVaMDMxMTAvBgNV BAMTKDFEODYxN0YxNTdGNzIzOTMwRUM4MDg3NTU5MTI4RUVGQzQzODkxNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCRsLPiBxtHtf0yAVgu74k5vyj BJ28U1FRwYumYUepsKcmHQ44qDN1GtMXzOLZASis4xGSmzjjQkMucly51YGq1l6Y 1pZ9jUmTIpTIML/hYnkHnsmb0rxUjiP6OQiMaUEDtSj+GyhERpEjA8vyEf1ceKvl ef2sx+wWwZrsu+tbUmQpaAwHNQvmqRjuVqsu7D97WkMTIsL9ocdoOfEeURfUWxFp 6pdYnv5su8AORYXogmS1anoRUQKBTt62OY7SscbH40NP2gdP8jCsoXGWUbVM3pZw oLrfDLjN+f21eyzRxgREKwVsmsNZpxblcEEB6UYuljXdWCGgSWALLT4rmWtVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHYYX8Vf3I5MOyAh1WRKO78Q4kVgwHwYDVR0j BBgwFoAUoJ/7D9w03QeWH+27edhZP8KBEvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE1zTkRwZUFodnY4d2RqV0hnajR5SHR0VkRjVk04UFh5eWR0ellUOWly VVAvMC9BMDlGRkIwRkRDMzRERDA3OTYxRkVEQkI3OUQ4NTkzRkMyODExMkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwOUZGQjBGREMzNEREMDc5 NjFGRURCQjc5RDg1OTNGQzI4MTEyRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE1zTkRwZUFodnY4d2RqV0hnajR5SHR0VkRjVk04UFh5eWR0ellUOWlyVVAvMC9B MDlGRkIwRkRDMzRERDA3OTYxRkVEQkI3OUQ4NTkzRkMyODExMkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEbvzJ+RkF4wivbO5lO5hUMIwYiJdwb9yZMY+rpLCG6nmZ4G+8XLQBmS7pvwB LguhXjFFexVuw5/sNNWA+XJ6omWnP0dZaaYtJuz+RZi+cSIwGYm1I3WsocqHMKjj sVOaf/EQH2sqk3AxcbnpV8Znu+tizuomf3UDf2mZFJPbKfQtzjCulOvEID2jpI7y 2O8Qupj31AFLEF/Fwk80c8AcxLhFtznZSAoZXBFy97gF7DwIXyepNb+qZMNBA9tr IdLKQi5OaODNwC47ts3LOB7RsU6tjSOPaIOcng/bWhuhBkfedzDUUqTL+oJWN8vN Ah2JJnD4rpwPn2H1j2DYlNiZNA== -----END CERTIFICATE-----Generated at Tue Nov 4 06:47:40 2025 by rpki-client