$ rpki-client -vvf rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft File: D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft (raw, json) Hash identifier: iV1e2EGOwTEOpDymvqsFb13EdVbcTihG7jqQs08wXyQ= Subject key identifier: 42:CB:75:6C:4E:FE:1D:00:A0:6E:A6:CA:AA:C1:AF:C1:A1:5C:C8:F2 Authority key identifier: D4:A1:B9:1A:99:31:97:A3:CE:71:A9:BE:B7:08:52:A5:C2:F3:03:7A Certificate issuer: /CN=D4A1B91A993197A3CE71A9BEB70852A5C2F3037A Certificate serial: 106C4C700E95AF152244611AA1E0984C41C0E780 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.cer Subject info access: rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft Manifest number: 0A Signing time: Mon 03 Nov 2025 08:45:37 +0000 Manifest this update: Mon 03 Nov 2025 08:40:37 +0000 Manifest next update: Tue 04 Nov 2025 11:32:37 +0000 Files and hashes: 1: D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.crl (hash: fEtWX2bHt4J4fDuSeGiSuI4EqYj9ZAky/NN+Xg4AOg8=) 2: 323830343a393236383a3a2f33322d313238203d3e20323734373039.roa (hash: rEuc4lsgPPD3i+4ht/oVW+K1az6MnIpffkS/CwB3gJg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.crl rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:6c:4c:70:0e:95:af:15:22:44:61:1a:a1:e0:98:4c:41:c0:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4A1B91A993197A3CE71A9BEB70852A5C2F3037A Validity Not Before: Nov 3 08:40:37 2025 GMT Not After : Nov 4 11:32:37 2025 GMT Subject: CN=42CB756C4EFE1D00A06EA6CAAAC1AFC1A15CC8F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0e:47:01:ec:fa:06:eb:2c:18:cc:3c:19:e7: d7:40:11:75:97:2b:8f:43:12:7a:e6:a6:92:74:cf: 27:4e:6f:bb:ca:42:02:71:97:5a:60:72:a3:e5:1d: 4f:93:56:7b:12:f0:23:d4:25:1e:b2:98:7b:17:c8: c3:32:a7:b0:f1:9b:db:02:82:7a:4f:21:d6:da:d1: 65:48:df:ea:a3:42:d4:82:6a:28:90:fb:83:fd:e2: ea:d7:4d:62:17:4c:d3:a4:08:76:92:c0:e1:a0:f8: 5c:6b:98:db:97:bd:28:3b:60:49:fe:f1:b8:6b:27: 66:df:53:9a:bf:00:53:3a:62:ac:7a:d7:fb:43:2a: fe:00:98:07:ec:87:97:9b:6e:11:1d:78:0d:6c:8b: 35:0d:0d:45:8c:cf:9f:fb:d2:c3:d8:55:73:89:69: 91:14:9a:8d:32:8d:50:df:73:80:fe:5f:07:7b:fe: 9b:7b:ac:38:2a:83:2e:2f:43:0c:29:80:50:ea:d6: 69:d0:20:fb:cb:27:31:2f:d2:fb:c8:a9:80:e6:10: 29:91:77:31:20:8f:04:3d:a7:87:66:e1:66:cc:51: 98:e4:1a:ac:ff:18:02:be:76:5f:ce:e0:e3:a8:41: 56:92:14:a2:3c:bc:61:a0:f3:87:15:ec:87:22:70: 25:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CB:75:6C:4E:FE:1D:00:A0:6E:A6:CA:AA:C1:AF:C1:A1:5C:C8:F2 X509v3 Authority Key Identifier: keyid:D4:A1:B9:1A:99:31:97:A3:CE:71:A9:BE:B7:08:52:A5:C2:F3:03:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:85:d9:d0:18:11:80:39:50:1e:e8:65:c9:66:f1:da:7d:be: 90:68:eb:79:54:22:e9:bb:35:4e:d8:77:cc:39:9f:ad:22:df: 7c:9e:0d:0f:4f:1f:10:b9:17:f2:7a:46:87:21:73:cb:4e:95: e6:da:b9:b2:8b:12:78:2e:be:54:9f:77:08:e9:47:6c:c1:e7: cf:5d:e8:c7:81:09:f9:c0:e7:3a:f6:10:02:d1:f2:6a:c5:82: a9:7c:4f:04:6c:4c:dc:8d:2e:65:a0:76:f9:b0:2a:78:a8:c8: 52:aa:51:9f:c8:1f:9e:e0:e7:7a:bb:1f:1c:8c:25:aa:9a:0a: 65:26:29:a1:ca:8d:18:08:0c:97:f7:c1:91:6c:1d:8b:fd:e6: c2:f9:6a:68:89:3e:1b:be:8f:a4:ff:b5:74:78:77:4b:53:65: ea:be:0b:73:06:f3:f0:8f:f5:c1:18:41:5c:f5:18:e5:fb:bc: 50:2c:71:ff:96:5a:8c:27:d0:75:7f:cb:7f:4d:7f:1c:fc:af: b5:36:0f:9a:15:a1:8f:18:a8:37:83:29:2e:34:7a:41:47:cb: 9d:82:f3:5e:63:6f:0e:e6:d1:dd:58:97:6a:9c:aa:5c:83:0c: f2:26:d9:02:fd:43:f6:19:a1:80:73:e6:dd:30:ea:6e:ef:8c: 1b:a0:d0:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEGxMcA6VrxUiRGEaoeCYTEHA54AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRBMUI5MUE5OTMxOTdBM0NFNzFBOUJFQjcwODUyQTVD MkYzMDM3QTAeFw0yNTExMDMwODQwMzdaFw0yNTExMDQxMTMyMzdaMDMxMTAvBgNV BAMTKDQyQ0I3NTZDNEVGRTFEMDBBMDZFQTZDQUFBQzFBRkMxQTE1Q0M4RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbDkcB7PoG6ywYzDwZ59dAEXWX K49DEnrmppJ0zydOb7vKQgJxl1pgcqPlHU+TVnsS8CPUJR6ymHsXyMMyp7Dxm9sC gnpPIdba0WVI3+qjQtSCaiiQ+4P94urXTWIXTNOkCHaSwOGg+FxrmNuXvSg7YEn+ 8bhrJ2bfU5q/AFM6Yqx61/tDKv4AmAfsh5ebbhEdeA1sizUNDUWMz5/70sPYVXOJ aZEUmo0yjVDfc4D+Xwd7/pt7rDgqgy4vQwwpgFDq1mnQIPvLJzEv0vvIqYDmECmR dzEgjwQ9p4dm4WbMUZjkGqz/GAK+dl/O4OOoQVaSFKI8vGGg84cV7IcicCUhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQst1bE7+HQCgbqbKqsGvwaFcyPIwHwYDVR0j BBgwFoAU1KG5Gpkxl6POcam+twhSpcLzA3owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGdiTG1pNnRSd1Mxa29TNnNhODI1QkFCQWZlbmlTdGZySjY4cHJyZ1Ro OWQvMC9ENEExQjkxQTk5MzE5N0EzQ0U3MUE5QkVCNzA4NTJBNUMyRjMwMzdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0QTFCOTFBOTkzMTk3QTND RTcxQTlCRUI3MDg1MkE1QzJGMzAzN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGdiTG1pNnRSd1Mxa29TNnNhODI1QkFCQWZlbmlTdGZySjY4cHJyZ1RoOWQvMC9E NEExQjkxQTk5MzE5N0EzQ0U3MUE5QkVCNzA4NTJBNUMyRjMwMzdBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsoXZ0BgRgDlQHuhlyWbx2n2+kGjreVQi6bs1Tth3zDmfrSLffJ4ND08fELkX 8npGhyFzy06V5tq5sosSeC6+VJ93COlHbMHnz13ox4EJ+cDnOvYQAtHyasWCqXxP BGxM3I0uZaB2+bAqeKjIUqpRn8gfnuDnersfHIwlqpoKZSYpocqNGAgMl/fBkWwd i/3mwvlqaIk+G76PpP+1dHh3S1Nl6r4Lcwbz8I/1wRhBXPUY5fu8UCxx/5ZajCfQ dX/Lf01/HPyvtTYPmhWhjxioN4MpLjR6QUfLnYLzXmNvDubR3ViXapyqXIMM8ibZ Av1D9hmhgHPm3TDqbu+MG6DQeQ== -----END CERTIFICATE-----Generated at Tue Nov 4 00:17:21 2025 by rpki-client