$ rpki-client -vvf rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft File: 1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft (raw, json) Hash identifier: HiQHUHFvHEyacKXuGk8u9nd2vswJe1NCvu7VsRgUW1E= Subject key identifier: 5C:90:CB:DB:8D:07:C5:D9:AA:15:CF:AB:5A:46:A3:E1:5A:EA:45:3A Authority key identifier: 1B:E0:04:C8:8C:DE:B7:36:10:FC:82:75:8B:90:B1:30:EB:9F:7D:38 Certificate issuer: /CN=1BE004C88CDEB73610FC82758B90B130EB9F7D38 Certificate serial: 232ED8DCB7C0EF31758E15801964657BCA5B7D60 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer Subject info access: rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft Manifest number: 02E5 Signing time: Mon 03 Nov 2025 06:39:17 +0000 Manifest this update: Mon 03 Nov 2025 06:34:17 +0000 Manifest next update: Tue 04 Nov 2025 09:55:17 +0000 Files and hashes: 1: 323830343a343463633a3a2f33322d3430203d3e20323637363534.roa (hash: 5EOPo2+Gu7jRpWQ23GA0NFFlzySjFOtoTh+IjuXIpdY=) 2: 34352e37302e3135362e302f32322d3234203d3e20323637363534.roa (hash: 0qU6G+XnOCeyrCosGPKXLhVn+QRuLcy3dI4+NhMHtKA=) 3: 1BE004C88CDEB73610FC82758B90B130EB9F7D38.crl (hash: 9qjgQjxygGg0Dgrk7yLk3XxPPUl3XZxnkIrD4NM/ioU=) 4: 3133312e3232312e3130302e302f32322d3234203d3e20323637363534.roa (hash: oF9u1/oCkGwo1UBS2Ntc4XCaeUf1mcRHEF1FbP5ncxs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.crl rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:2e:d8:dc:b7:c0:ef:31:75:8e:15:80:19:64:65:7b:ca:5b:7d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BE004C88CDEB73610FC82758B90B130EB9F7D38 Validity Not Before: Nov 3 06:34:17 2025 GMT Not After : Nov 4 09:55:17 2025 GMT Subject: CN=5C90CBDB8D07C5D9AA15CFAB5A46A3E15AEA453A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:3f:bf:f6:53:3d:31:8c:dc:be:1a:11:94: be:fe:d1:67:52:09:5d:30:68:ee:40:6e:1b:ef:f0: ca:74:9c:b6:7a:fa:9d:48:69:e3:74:55:b1:85:c6: fe:ec:7e:62:f9:5f:bf:03:6a:42:06:35:d4:1c:13: c5:ad:04:77:2c:66:86:ed:96:b3:41:37:93:ea:62: 9b:c2:e7:a9:e0:5f:f3:c4:3d:8f:6a:0f:f8:50:c8: 0b:e4:d5:c8:4f:cf:fd:af:25:f4:74:d6:ba:d2:04: d9:c9:58:14:70:e2:06:dd:c0:52:47:30:89:b4:09: 7c:20:4d:1f:76:95:b4:45:96:e9:94:7e:03:8a:fe: 15:49:cc:46:5e:fd:0b:33:e1:c6:31:4e:5c:11:d3: 55:b6:a4:62:be:38:7f:73:4d:91:c6:13:e0:0b:4c: 00:4a:60:bf:56:20:3c:47:d8:b8:fa:51:2a:c1:8e: ee:f3:ee:2f:38:db:22:92:f7:82:7f:b0:cb:89:fc: 64:34:28:78:c6:4a:3c:23:48:84:6b:f5:df:6e:1f: 9a:62:05:c0:67:0d:0e:a4:6b:87:34:12:08:b1:25: e7:66:00:01:cf:f2:a2:80:9d:9e:ef:8b:e6:42:3c: 8e:0a:e9:dc:72:40:9b:44:4c:92:3e:2a:63:28:53: 08:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:90:CB:DB:8D:07:C5:D9:AA:15:CF:AB:5A:46:A3:E1:5A:EA:45:3A X509v3 Authority Key Identifier: keyid:1B:E0:04:C8:8C:DE:B7:36:10:FC:82:75:8B:90:B1:30:EB:9F:7D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:8b:3a:a4:45:f1:96:ef:5d:c3:39:f6:54:fe:12:11:8c:71: 95:07:e0:8e:17:95:e8:57:53:45:13:8a:43:78:90:5e:2e:91: 82:9b:37:5c:dd:d9:5f:12:e4:b0:02:ac:87:7a:2b:20:5e:d1: 48:59:85:e7:ce:a4:92:a4:09:34:f6:15:a8:ee:55:fa:2e:05: fd:ee:42:18:35:65:9f:00:b6:ea:13:66:12:d4:bc:e1:2c:79: 4d:17:5a:c1:e1:e3:26:be:30:51:ea:d3:60:5c:22:0e:4a:4f: 79:4e:b4:67:b5:53:bc:f0:ed:b4:52:fa:6c:aa:6d:53:63:21: 6d:79:15:c9:e7:70:51:31:79:5a:20:6e:fc:51:aa:53:78:84: 77:1f:e4:6e:d4:5f:36:9c:b7:6e:5c:58:34:ce:0c:7d:5c:ea: aa:79:ed:b4:88:ea:96:1e:db:41:bd:a7:de:11:d4:bb:57:d2: 03:7c:ae:3d:77:dc:3b:a8:32:1a:7b:8d:4a:90:50:f9:4f:6a: ed:2d:8a:99:39:4a:67:3e:f7:bc:a4:86:d0:14:aa:a2:fa:10: 73:88:77:f5:0a:5c:48:26:f0:f9:81:b5:37:24:51:2a:82:14: fe:93:b8:79:ca:5f:47:42:f7:15:31:92:47:ee:53:4d:6b:a8: 3c:e4:71:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIy7Y3LfA7zF1jhWAGWRle8pbfWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJFMDA0Qzg4Q0RFQjczNjEwRkM4Mjc1OEI5MEIxMzBF QjlGN0QzODAeFw0yNTExMDMwNjM0MTdaFw0yNTExMDQwOTU1MTdaMDMxMTAvBgNV BAMTKDVDOTBDQkRCOEQwN0M1RDlBQTE1Q0ZBQjVBNDZBM0UxNUFFQTQ1M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCumz+/9lM9MYzcvhoRlL7+0WdS CV0waO5Abhvv8Mp0nLZ6+p1IaeN0VbGFxv7sfmL5X78DakIGNdQcE8WtBHcsZobt lrNBN5PqYpvC56ngX/PEPY9qD/hQyAvk1chPz/2vJfR01rrSBNnJWBRw4gbdwFJH MIm0CXwgTR92lbRFlumUfgOK/hVJzEZe/Qsz4cYxTlwR01W2pGK+OH9zTZHGE+AL TABKYL9WIDxH2Lj6USrBju7z7i842yKS94J/sMuJ/GQ0KHjGSjwjSIRr9d9uH5pi BcBnDQ6ka4c0EgixJedmAAHP8qKAnZ7vi+ZCPI4K6dxyQJtETJI+KmMoUwjJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXJDL240HxdmqFc+rWkaj4VrqRTowHwYDVR0j BBgwFoAUG+AEyIzetzYQ/IJ1i5CxMOuffTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHFCQjVEdndtUkRKWjZ6azhLQlA1TmZOM3R0V2lhakhoS3Q4aEpxWW1h cWUvMC8xQkUwMDRDODhDREVCNzM2MTBGQzgyNzU4QjkwQjEzMEVCOUY3RDM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCRTAwNEM4OENERUI3MzYx MEZDODI3NThCOTBCMTMwRUI5RjdEMzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHFCQjVEdndtUkRKWjZ6azhLQlA1TmZOM3R0V2lhakhoS3Q4aEpxWW1hcWUvMC8x QkUwMDRDODhDREVCNzM2MTBGQzgyNzU4QjkwQjEzMEVCOUY3RDM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZYs6pEXxlu9dwzn2VP4SEYxxlQfgjheV6FdTRROKQ3iQXi6Rgps3XN3ZXxLk sAKsh3orIF7RSFmF586kkqQJNPYVqO5V+i4F/e5CGDVlnwC26hNmEtS84Sx5TRda weHjJr4wUerTYFwiDkpPeU60Z7VTvPDttFL6bKptU2MhbXkVyedwUTF5WiBu/FGq U3iEdx/kbtRfNpy3blxYNM4MfVzqqnnttIjqlh7bQb2n3hHUu1fSA3yuPXfcO6gy GnuNSpBQ+U9q7S2KmTlKZz73vKSG0BSqovoQc4h39QpcSCbw+YG1NyRRKoIU/pO4 ecpfR0L3FTGSR+5TTWuoPORxrw== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:50 2025 by rpki-client