$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft File: 4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft (raw, json) Hash identifier: KKVscw0lytNjARWflbovCupuy/s+QwLaETkSSFXEAeQ= Subject key identifier: 3E:D4:64:8D:A2:F1:51:FD:FA:30:18:AF:68:E3:AD:CD:DC:50:0D:68 Authority key identifier: 4C:4D:6A:A5:7B:D3:A2:4F:77:06:C7:B6:5C:7C:8C:D5:9E:F5:CB:65 Certificate issuer: /CN=4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65 Certificate serial: 0CFF7B14C56835A52332CFD8FA20F11025665DEE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer Subject info access: rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft Manifest number: 02DD Signing time: Mon 03 Nov 2025 07:31:34 +0000 Manifest this update: Mon 03 Nov 2025 07:26:34 +0000 Manifest next update: Tue 04 Nov 2025 09:44:34 +0000 Files and hashes: 1: 4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl (hash: 5yzsCxS4Y8TXDgi187bk7n2+JMZfQBmNX8P2K/HAMaA=) 2: 323830343a353865303a3a2f33322d313238203d3e20323638313535.roa (hash: 3rn+DqXg6/wb20jVwMYcaH/vDfegviUIMLGDPuYvWsk=) 3: 34352e3137302e3135322e302f32322d3332203d3e20323638313535.roa (hash: +dlelXLTSXqNQoNW4JGA1Yjrci2+66mbhcxy+r/G87I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ff:7b:14:c5:68:35:a5:23:32:cf:d8:fa:20:f1:10:25:66:5d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65 Validity Not Before: Nov 3 07:26:34 2025 GMT Not After : Nov 4 09:44:34 2025 GMT Subject: CN=3ED4648DA2F151FDFA3018AF68E3ADCDDC500D68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c3:d4:7d:cf:88:18:9f:57:f2:56:12:ce:20: cd:ce:47:a2:2b:de:12:78:98:5d:a8:63:cb:b2:84: f3:db:a1:84:6e:ac:86:fa:fb:0a:d7:38:77:92:be: a0:2f:18:03:cd:0f:c7:23:b3:08:f6:46:73:c0:a9: 67:9a:d1:21:a6:8e:21:a4:69:f8:7a:28:0f:6b:0e: e3:0d:f5:25:43:28:93:e8:08:79:8e:33:c0:25:c2: b4:cc:92:cf:ed:ed:a4:ae:13:f6:94:19:3a:8b:c5: 6a:2a:87:8a:f9:78:c5:9e:4f:ed:c3:3c:00:2d:0f: d5:39:15:82:cf:3e:0b:7b:27:b8:22:3a:6f:b5:6b: 5f:42:ab:51:20:f3:59:91:fc:f0:bb:97:02:4c:00: 2c:a5:ce:5f:b1:60:95:9b:86:43:b3:a3:11:d3:e4: 3a:df:11:b4:24:ed:65:2e:53:0a:77:95:55:68:5f: a5:f8:66:ea:8d:34:05:90:99:8a:9c:07:40:28:b5: 97:9f:9b:34:3d:a2:40:15:74:f0:e1:f4:08:d1:24: dc:42:3e:52:c0:b9:65:3f:3d:be:b0:ad:40:00:09: af:e0:08:47:a2:a8:56:28:73:92:2c:23:94:e8:28: 6a:e5:17:0f:93:c1:98:56:3a:bd:bc:01:25:70:e0: 66:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D4:64:8D:A2:F1:51:FD:FA:30:18:AF:68:E3:AD:CD:DC:50:0D:68 X509v3 Authority Key Identifier: keyid:4C:4D:6A:A5:7B:D3:A2:4F:77:06:C7:B6:5C:7C:8C:D5:9E:F5:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:04:50:50:35:aa:c8:15:66:fa:02:10:d9:03:b6:36:8b:9b: 8c:a5:55:81:d4:1f:70:84:8d:91:53:73:53:13:40:8c:ae:11: 02:22:33:00:77:d9:ba:7f:d2:31:ac:05:6a:f3:0a:2e:02:f8: 30:45:65:da:ec:6c:1f:01:45:c1:99:ce:e0:20:e4:88:9e:14: 56:a5:08:42:6c:db:15:8a:49:a4:4c:b1:ac:4b:5d:c1:a4:a3: 7d:60:29:7c:17:4f:a1:e9:20:a8:71:8f:d8:8e:e8:48:fd:27: 22:0a:e0:fd:a3:ea:e7:74:f9:57:9e:6b:5c:f5:71:e9:0b:34: 52:cf:b7:35:d5:2e:90:b8:c7:d9:71:5c:4a:96:1a:0e:7c:25: 97:b2:eb:80:0d:85:cf:eb:80:ae:1b:38:1a:39:19:65:a2:7c: 02:bf:6e:2b:d8:e2:6e:94:83:79:87:d2:3a:88:9b:e9:ae:27: b5:48:fb:49:2d:4f:b0:91:3d:1b:89:3c:98:02:a1:d4:61:42: 3b:d9:b5:e9:3c:2f:cd:85:46:b0:1d:5b:78:0f:c7:8f:92:e3: 40:12:78:d2:79:5f:3f:98:aa:5e:b6:1c:43:fd:0b:1b:a1:38: e1:cb:4e:da:bb:2b:ec:20:32:b6:a2:36:89:82:5d:ac:b3:9c: 44:41:d5:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDP97FMVoNaUjMs/Y+iDxECVmXe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM0RDZBQTU3QkQzQTI0Rjc3MDZDN0I2NUM3QzhDRDU5 RUY1Q0I2NTAeFw0yNTExMDMwNzI2MzRaFw0yNTExMDQwOTQ0MzRaMDMxMTAvBgNV BAMTKDNFRDQ2NDhEQTJGMTUxRkRGQTMwMThBRjY4RTNBRENEREM1MDBENjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiw9R9z4gYn1fyVhLOIM3OR6Ir 3hJ4mF2oY8uyhPPboYRurIb6+wrXOHeSvqAvGAPND8cjswj2RnPAqWea0SGmjiGk afh6KA9rDuMN9SVDKJPoCHmOM8AlwrTMks/t7aSuE/aUGTqLxWoqh4r5eMWeT+3D PAAtD9U5FYLPPgt7J7giOm+1a19Cq1Eg81mR/PC7lwJMACylzl+xYJWbhkOzoxHT 5DrfEbQk7WUuUwp3lVVoX6X4ZuqNNAWQmYqcB0AotZefmzQ9okAVdPDh9AjRJNxC PlLAuWU/Pb6wrUAACa/gCEeiqFYoc5IsI5ToKGrlFw+TwZhWOr28ASVw4GY3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPtRkjaLxUf36MBivaOOtzdxQDWgwHwYDVR0j BBgwFoAUTE1qpXvTok93Bse2XHyM1Z71y2UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHVSV1RTVnJ0OXc1VUNZSlRWdktNWmM5RkVWVHEzdEhaWnlqNkRNblgz cnAvMC80QzRENkFBNTdCRDNBMjRGNzcwNkM3QjY1QzdDOENENTlFRjVDQjY1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDNEQ2QUE1N0JEM0EyNEY3 NzA2QzdCNjVDN0M4Q0Q1OUVGNUNCNjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHVSV1RTVnJ0OXc1VUNZSlRWdktNWmM5RkVWVHEzdEhaWnlqNkRNblgzcnAvMC80 QzRENkFBNTdCRDNBMjRGNzcwNkM3QjY1QzdDOENENTlFRjVDQjY1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVwRQUDWqyBVm+gIQ2QO2NoubjKVVgdQfcISNkVNzUxNAjK4RAiIzAHfZun/S MawFavMKLgL4MEVl2uxsHwFFwZnO4CDkiJ4UVqUIQmzbFYpJpEyxrEtdwaSjfWAp fBdPoekgqHGP2I7oSP0nIgrg/aPq53T5V55rXPVx6Qs0Us+3NdUukLjH2XFcSpYa Dnwll7LrgA2Fz+uArhs4GjkZZaJ8Ar9uK9jibpSDeYfSOoib6a4ntUj7SS1PsJE9 G4k8mAKh1GFCO9m16TwvzYVGsB1beA/Hj5LjQBJ40nlfP5iqXrYcQ/0LG6E44ctO 2rsr7CAytqI2iYJdrLOcREHVGw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:18:48 2025 by rpki-client