$ rpki-client -vvf rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft File: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft (raw, json) Hash identifier: 5TsJqwoCDfPaqlo+VU46drX9owa2StyZzfSB/WwIAc4= Subject key identifier: 48:6B:F6:88:34:1C:67:67:F4:64:20:1B:2B:7D:FB:A8:36:AB:31:46 Authority key identifier: 40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE Certificate issuer: /CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Certificate serial: 6C89D4E6974E92552BEA46B5DC915ED10819C515 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft Manifest number: 0103 Signing time: Mon 03 Nov 2025 15:19:19 +0000 Manifest this update: Mon 03 Nov 2025 15:14:19 +0000 Manifest next update: Tue 04 Nov 2025 16:29:19 +0000 Files and hashes: 1: 34352e3138392e33332e302f32342d3234203d3e20323734373633.roa (hash: 94RYiufY7USp0r1Hhmx7uAPsAj5eXGZhHiDHteIZcag=) 2: 34352e3138392e33322e302f32342d3234203d3e20323734373633.roa (hash: f9h0xJPe6EC4HPN8Q4Vq2DpTHhojeqACv3nqBQ14BsY=) 3: 34352e3138392e33352e302f32342d3234203d3e20323734373633.roa (hash: 1p2OZ2GU51vARCDd2EzB05jBSXBxDQiaqictJ71WwZg=) 4: 323830343a393333343a666630303a3a2f34302d3430203d3e20323734373633.roa (hash: Y/91UtAKoquFsWubq6LOKvQldnEvym4LP9Ysec9nxMw=) 5: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl (hash: fcbBIF5g6ht0D6ic/oEpgnlixotN64mMlIXuyn56KcA=) 6: 34352e3138392e33342e302f32342d3234203d3e20323734373633.roa (hash: +8SomA8CorpblFccJ5hAIRLE8zYsycHTpbXTAfqfp8w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 16:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:89:d4:e6:97:4e:92:55:2b:ea:46:b5:dc:91:5e:d1:08:19:c5:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Validity Not Before: Nov 3 15:14:19 2025 GMT Not After : Nov 4 16:29:19 2025 GMT Subject: CN=486BF688341C6767F464201B2B7DFBA836AB3146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a2:3f:29:9f:b7:fa:5b:ac:ab:79:fd:30:a3: 6c:3b:34:59:f7:85:67:cb:ad:c5:29:2c:fa:62:cc: a2:98:41:d1:d5:a3:15:13:f3:01:ce:4a:83:94:4f: 20:e6:72:09:7b:77:ec:56:2e:5f:f3:20:96:cc:1d: 66:33:a1:d7:ee:cb:95:51:67:c0:44:33:13:ff:25: 97:e2:d3:d3:37:77:e5:a5:65:42:74:2d:04:7b:19: 11:aa:0c:c4:ba:c4:7b:24:44:90:0a:ad:66:37:06: c7:8e:02:15:25:2e:53:20:13:da:1e:d4:a0:f0:df: 5b:de:8a:9e:8a:d5:84:09:64:e3:ed:1a:26:e3:d9: b1:00:cc:c7:7b:aa:30:65:93:a2:98:66:7c:ea:70: bb:22:60:4c:00:20:63:88:e4:9f:a6:19:0c:99:ab: 71:ee:19:78:6b:9e:d8:d5:2e:77:bf:22:dc:01:5f: a2:de:d2:45:e9:83:e5:76:da:67:bf:0d:53:89:aa: 0e:3a:0f:42:a7:37:8a:21:56:74:90:a0:f1:cd:ed: 61:0c:3c:bd:cc:a2:cd:22:c1:ee:71:18:a0:d2:87: c7:13:3e:db:75:fe:fb:a6:cc:91:d6:73:e1:49:90: 49:ae:72:12:b2:7e:a5:c2:13:4a:de:0f:d1:9a:e1: e5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6B:F6:88:34:1C:67:67:F4:64:20:1B:2B:7D:FB:A8:36:AB:31:46 X509v3 Authority Key Identifier: keyid:40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:dd:ad:89:b5:c0:96:8a:6c:7b:d6:dc:6f:38:62:2f:50:90: 98:27:bf:be:07:76:a5:0b:76:40:c7:2c:cc:6c:a2:5a:f7:cc: 74:5f:5e:c9:70:79:fa:f4:8c:cd:a8:6d:e6:5d:1d:53:61:2e: f5:cc:f5:87:c6:cc:08:8e:52:a5:01:f3:ee:51:69:fa:de:51: 8a:98:72:74:b4:3e:44:27:97:b0:7f:c9:de:bc:6f:35:71:36: 67:b8:45:6c:e3:7a:51:b5:09:bf:bd:7e:d0:bd:26:1f:e7:95: 2f:1d:c1:c5:a5:4a:42:8e:c1:cc:cb:c3:76:2a:48:75:e6:6d: 22:5c:e9:fb:01:68:4a:9d:c5:29:46:9b:66:17:12:26:b6:75: 01:71:f7:1c:61:ee:0b:2c:fd:fc:fe:50:96:be:b7:4b:f0:14: 52:e2:85:17:65:70:09:3d:87:4b:cc:b5:12:36:c7:2e:0a:e3: c3:64:83:86:74:bd:88:7d:d3:da:db:33:31:09:b6:c3:00:3f: b9:4f:3c:3f:36:bc:73:7f:43:78:b5:4e:e0:49:0c:44:63:9d: 8c:74:36:e0:cd:cd:fd:d6:5a:4c:72:e6:26:a6:81:c0:2d:ac: 8d:a6:1a:9c:f1:5b:d1:e3:f5:d5:f8:ec:22:38:79:88:b7:67: e2:38:4e:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbInU5pdOklUr6ka13JFe0QgZxRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCQjE0QTJGRDhCODExMDMwNDJCRjMyRkFDOUIyRDkw QUNGOEFGRTAeFw0yNTExMDMxNTE0MTlaFw0yNTExMDQxNjI5MTlaMDMxMTAvBgNV BAMTKDQ4NkJGNjg4MzQxQzY3NjdGNDY0MjAxQjJCN0RGQkE4MzZBQjMxNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+oj8pn7f6W6yref0wo2w7NFn3 hWfLrcUpLPpizKKYQdHVoxUT8wHOSoOUTyDmcgl7d+xWLl/zIJbMHWYzodfuy5VR Z8BEMxP/JZfi09M3d+WlZUJ0LQR7GRGqDMS6xHskRJAKrWY3BseOAhUlLlMgE9oe 1KDw31veip6K1YQJZOPtGibj2bEAzMd7qjBlk6KYZnzqcLsiYEwAIGOI5J+mGQyZ q3HuGXhrntjVLne/ItwBX6Le0kXpg+V22me/DVOJqg46D0KnN4ohVnSQoPHN7WEM PL3Mos0iwe5xGKDSh8cTPtt1/vumzJHWc+FJkEmuchKyfqXCE0reD9Ga4eXVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSGv2iDQcZ2f0ZCAbK337qDarMUYwHwYDVR0j BBgwFoAUQLsUov2LgRAwQr8y+smy2QrPiv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2 NjIvMC80MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQkIxNEEyRkQ4QjgxMTAz MDQyQkYzMkZBQzlCMkQ5MEFDRjhBRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2NjIvMC80 MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo92tibXAlopse9bcbzhiL1CQmCe/vgd2pQt2QMcszGyiWvfMdF9eyXB5+vSM zaht5l0dU2Eu9cz1h8bMCI5SpQHz7lFp+t5RiphydLQ+RCeXsH/J3rxvNXE2Z7hF bON6UbUJv71+0L0mH+eVLx3BxaVKQo7BzMvDdipIdeZtIlzp+wFoSp3FKUabZhcS JrZ1AXH3HGHuCyz9/P5Qlr63S/AUUuKFF2VwCT2HS8y1EjbHLgrjw2SDhnS9iH3T 2tszMQm2wwA/uU88Pza8c39DeLVO4EkMRGOdjHQ24M3N/dZaTHLmJqaBwC2sjaYa nPFb0eP11fjsIjh5iLdn4jhOyA== -----END CERTIFICATE-----Generated at Tue Nov 4 00:11:32 2025 by rpki-client