$ rpki-client -vvf rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/719575E8618FCC47BDBFE563F69F5D0962836551.mft File: 719575E8618FCC47BDBFE563F69F5D0962836551.mft (raw, json) Hash identifier: /MBE7C3XRLt0adur6nuuf0+/DAusREUL4+RlCImT9YQ= Subject key identifier: 7A:F7:CB:2C:F9:F4:A8:BD:2B:9A:0B:7A:83:CE:7A:8F:4A:D4:F9:24 Authority key identifier: 71:95:75:E8:61:8F:CC:47:BD:BF:E5:63:F6:9F:5D:09:62:83:65:51 Certificate issuer: /CN=719575E8618FCC47BDBFE563F69F5D0962836551 Certificate serial: 7C0DEA3FC9D871DFBC9A57F261084155F3DBAD3B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/719575E8618FCC47BDBFE563F69F5D0962836551.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/719575E8618FCC47BDBFE563F69F5D0962836551.mft Manifest number: 0138 Signing time: Sun 02 Nov 2025 21:28:19 +0000 Manifest this update: Sun 02 Nov 2025 21:23:19 +0000 Manifest next update: Tue 04 Nov 2025 00:33:19 +0000 Files and hashes: 1: 719575E8618FCC47BDBFE563F69F5D0962836551.crl (hash: kLWXhE+XXM82frEr6Eu4odzSo1EUjoJG83bABc8PyGI=) 2: 3137372e3132342e36342e302f32312d3234203d3e20323632333137.roa (hash: UT5fG5edMueNk/UdRtQKGq09mXgMcYFNYAhRHgxLSNw=) 3: 323830343a6261633a3a2f33322d3438203d3e20323632333137.roa (hash: 3qriczl1FmHSBuKhwyy62/M6KIBRC3lDHDncMztuWX4=) 4: 3137372e39312e3132302e302f32312d3234203d3e20323632333137.roa (hash: OLh4IDVljUo+Q4F/S/RpihorKxGhMZNtRm5IzMNSSQA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/719575E8618FCC47BDBFE563F69F5D0962836551.crl rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/719575E8618FCC47BDBFE563F69F5D0962836551.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/719575E8618FCC47BDBFE563F69F5D0962836551.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:0d:ea:3f:c9:d8:71:df:bc:9a:57:f2:61:08:41:55:f3:db:ad:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=719575E8618FCC47BDBFE563F69F5D0962836551 Validity Not Before: Nov 2 21:23:19 2025 GMT Not After : Nov 4 00:33:19 2025 GMT Subject: CN=7AF7CB2CF9F4A8BD2B9A0B7A83CE7A8F4AD4F924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:24:df:3f:e2:ce:b2:44:01:aa:7f:08:fb: 53:ab:85:4d:90:6d:0d:03:bd:e2:c2:9f:74:0c:9a: 29:4e:cb:78:eb:44:07:37:45:4f:c3:21:05:93:51: ec:ab:6d:49:eb:98:b7:e2:85:25:3b:24:5b:57:73: e9:4e:b7:59:8f:b4:de:7e:60:c1:f2:1e:44:12:c8: 06:9e:36:87:33:49:f9:0c:83:5b:20:7e:18:18:ef: 5a:fc:cf:4a:47:82:8a:61:8d:9f:1c:47:7b:b7:22: 2f:4a:2c:3a:33:bc:6e:55:2c:d9:56:0c:2b:54:4f: d8:ff:77:69:44:94:d8:7c:5c:66:c9:30:ec:c5:ea: 9e:de:95:0e:34:75:0f:29:e5:f2:e9:ca:fb:0c:1e: 23:b5:ba:32:60:fe:7d:f9:ac:fc:d4:4e:6f:4f:5f: 85:42:b1:8c:9f:07:2a:7f:52:71:bc:4f:8b:cb:52: 83:21:ed:63:d2:bd:dd:ab:24:d2:85:00:9d:d3:b3: 5e:4d:0f:b8:02:7f:19:32:cc:37:34:3a:8c:1c:d1: 2b:37:a0:99:af:88:e6:b9:01:be:3b:1e:c5:03:02: 69:9a:94:d5:ee:5a:ef:15:5e:ea:2f:34:5a:0b:65: 14:cb:1a:b2:26:61:cd:08:bf:89:df:77:9a:74:96: f1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F7:CB:2C:F9:F4:A8:BD:2B:9A:0B:7A:83:CE:7A:8F:4A:D4:F9:24 X509v3 Authority Key Identifier: keyid:71:95:75:E8:61:8F:CC:47:BD:BF:E5:63:F6:9F:5D:09:62:83:65:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/719575E8618FCC47BDBFE563F69F5D0962836551.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/719575E8618FCC47BDBFE563F69F5D0962836551.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/719575E8618FCC47BDBFE563F69F5D0962836551.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a1:24:6b:02:48:d4:e1:54:91:12:4e:7f:b9:da:d5:aa:bf: 6e:5e:13:d3:18:da:f6:64:03:50:55:d7:db:e2:f3:f7:5d:3d: 62:33:65:95:e0:ab:77:76:c2:6b:32:98:a8:a5:fe:b3:f1:05: c2:56:c1:9d:ba:21:b2:45:ef:ab:7c:21:19:62:40:3d:64:e4: 7d:a0:e7:7e:ac:fe:d0:0e:b4:95:e6:55:08:60:ec:6e:d7:ed: 70:4f:2f:f9:69:f3:f3:78:8f:22:5c:28:a7:9a:8f:87:82:4e: 24:00:9b:22:92:ad:ef:33:ae:14:ff:22:b1:62:eb:a9:77:50: 42:07:d5:c6:af:f0:d2:b1:c9:36:7e:ef:1c:26:69:a1:28:e5: 8c:41:22:21:93:45:6a:bc:e8:93:a9:c9:ea:c7:30:6d:e0:82: a6:0d:a1:fd:d2:66:d5:31:ed:9b:b0:40:e8:57:8e:f2:5a:11: f2:df:24:01:48:99:59:a9:99:ab:f9:05:20:97:f7:7e:80:7f: 5c:53:29:47:73:f1:67:76:0c:b0:e7:5f:cc:ca:cc:d8:9e:8b: 9c:9c:94:9e:0b:b0:1a:30:8d:9a:33:3d:4e:87:46:8d:28:1a: e9:98:11:46:f0:e9:eb:a1:9c:2f:32:ba:e2:9d:4b:7e:cd:bb: 8b:e0:bc:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfA3qP8nYcd+8mlfyYQhBVfPbrTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTc1RTg2MThGQ0M0N0JEQkZFNTYzRjY5RjVEMDk2 MjgzNjU1MTAeFw0yNTExMDIyMTIzMTlaFw0yNTExMDQwMDMzMTlaMDMxMTAvBgNV BAMTKDdBRjdDQjJDRjlGNEE4QkQyQjlBMEI3QTgzQ0U3QThGNEFENEY5MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5MSTfP+LOskQBqn8I+1OrhU2Q bQ0DveLCn3QMmilOy3jrRAc3RU/DIQWTUeyrbUnrmLfihSU7JFtXc+lOt1mPtN5+ YMHyHkQSyAaeNoczSfkMg1sgfhgY71r8z0pHgophjZ8cR3u3Ii9KLDozvG5VLNlW DCtUT9j/d2lElNh8XGbJMOzF6p7elQ40dQ8p5fLpyvsMHiO1ujJg/n35rPzUTm9P X4VCsYyfByp/UnG8T4vLUoMh7WPSvd2rJNKFAJ3Ts15ND7gCfxkyzDc0Oowc0Ss3 oJmviOa5Ab47HsUDAmmalNXuWu8VXuovNFoLZRTLGrImYc0Iv4nfd5p0lvE1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUevfLLPn0qL0rmgt6g856j0rU+SQwHwYDVR0j BBgwFoAUcZV16GGPzEe9v+Vj9p9dCWKDZVEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG5zM0VYWFl6enhvZzl3Q01NcmFGc1N4MmVDZU1KcjVWTWJyR1ZuUHlM b0IvMC83MTk1NzVFODYxOEZDQzQ3QkRCRkU1NjNGNjlGNUQwOTYyODM2NTUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxOTU3NUU4NjE4RkNDNDdC REJGRTU2M0Y2OUY1RDA5NjI4MzY1NTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG5zM0VYWFl6enhvZzl3Q01NcmFGc1N4MmVDZU1KcjVWTWJyR1ZuUHlMb0IvMC83 MTk1NzVFODYxOEZDQzQ3QkRCRkU1NjNGNjlGNUQwOTYyODM2NTUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN6EkawJI1OFUkRJOf7na1aq/bl4T0xja9mQDUFXX2+Lz9109YjNlleCrd3bC azKYqKX+s/EFwlbBnbohskXvq3whGWJAPWTkfaDnfqz+0A60leZVCGDsbtftcE8v +Wnz83iPIlwop5qPh4JOJACbIpKt7zOuFP8isWLrqXdQQgfVxq/w0rHJNn7vHCZp oSjljEEiIZNFarzok6nJ6scwbeCCpg2h/dJm1THtm7BA6FeO8loR8t8kAUiZWamZ q/kFIJf3foB/XFMpR3PxZ3YMsOdfzMrM2J6LnJyUnguwGjCNmjM9TodGjSga6ZgR RvDp66GcLzK64p1Lfs27i+C86Q== -----END CERTIFICATE-----Generated at Mon Nov 3 12:31:37 2025 by rpki-client