$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft File: 4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft (raw, json) Hash identifier: YGwoHi+1pnRh/GO5nqRiz1QxoiKESsxHHcTXLN+U+HY= Subject key identifier: 20:FE:C3:98:32:BE:13:42:87:BD:D5:11:AE:B2:B2:31:AD:7C:01:94 Authority key identifier: 4C:4D:6A:A5:7B:D3:A2:4F:77:06:C7:B6:5C:7C:8C:D5:9E:F5:CB:65 Certificate issuer: /CN=4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65 Certificate serial: 7068476906B10A84B87C08A022D8B0722FCF049C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer Subject info access: rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft Manifest number: 02A1 Signing time: Thu 18 Sep 2025 19:24:42 +0000 Manifest this update: Thu 18 Sep 2025 19:19:42 +0000 Manifest next update: Fri 19 Sep 2025 22:06:42 +0000 Files and hashes: 1: 323830343a353865303a3a2f33322d313238203d3e20323638313535.roa (hash: 3rn+DqXg6/wb20jVwMYcaH/vDfegviUIMLGDPuYvWsk=) 2: 34352e3137302e3135322e302f32322d3332203d3e20323638313535.roa (hash: +dlelXLTSXqNQoNW4JGA1Yjrci2+66mbhcxy+r/G87I=) 3: 4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl (hash: qqGd8d3cYk87B1xpyKCkxA+RnNCnxpaNpkTWZgeNMns=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 22:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:68:47:69:06:b1:0a:84:b8:7c:08:a0:22:d8:b0:72:2f:cf:04:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65 Validity Not Before: Sep 18 19:19:42 2025 GMT Not After : Sep 19 22:06:42 2025 GMT Subject: CN=20FEC39832BE134287BDD511AEB2B231AD7C0194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:84:b6:f8:46:d1:7e:de:66:9c:00:0e:25:5c: 82:e7:c0:11:0b:d9:47:f9:e9:7f:46:1a:49:87:52: 6d:11:11:5a:33:c0:fd:f2:5b:21:90:72:ee:4b:39: 4e:8e:f6:49:0d:13:74:5b:fb:87:a4:35:59:12:aa: 0f:9a:ac:fd:1d:e9:e6:09:4a:59:41:d6:f9:62:e6: 77:6f:ba:59:43:13:34:ed:3a:41:ae:4e:3a:af:79: 28:03:11:e2:43:c7:53:77:85:9d:ea:7c:32:17:e0: d6:d9:9c:3d:25:fe:fe:b8:76:a3:7f:13:fa:06:29: e0:23:0d:82:41:46:7c:79:48:b6:9b:92:75:0a:14: 09:8e:40:23:a8:66:7f:24:f7:c4:58:e5:18:64:dd: 26:15:bd:10:d2:8f:14:2f:6f:95:50:09:3b:61:24: cd:82:b4:e0:ad:7b:9b:e2:08:b4:41:2e:24:aa:6f: f2:cc:74:3c:95:51:b4:80:cf:f8:67:ac:26:15:3b: bc:8a:6a:73:45:fc:cb:8b:7a:78:d0:82:b4:f7:06: 1c:bf:9c:76:1d:97:16:0a:04:19:a5:d6:a4:ea:49: c0:20:99:a6:b5:c6:32:db:4b:8f:ff:3a:4c:f1:30: 9f:cc:c4:1d:37:68:b2:3e:2e:0b:6a:78:10:bf:e1: fe:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FE:C3:98:32:BE:13:42:87:BD:D5:11:AE:B2:B2:31:AD:7C:01:94 X509v3 Authority Key Identifier: keyid:4C:4D:6A:A5:7B:D3:A2:4F:77:06:C7:B6:5C:7C:8C:D5:9E:F5:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:65:48:a5:94:06:64:fa:8f:6f:b1:4b:f0:00:a7:1c:d4:63: cb:4c:6e:d8:8d:c9:e9:25:28:86:71:d4:e1:19:f2:c4:a8:e6: de:ef:28:82:4b:85:08:99:ac:6b:dc:0e:1a:6b:0d:e3:1a:00: 48:c8:35:dd:c2:6e:7a:08:50:16:eb:1e:12:d8:68:60:12:8b: 49:36:d4:19:6e:a4:12:87:bd:71:48:f9:4f:4f:21:02:4a:78: 29:f5:75:18:13:87:e2:b9:d4:4f:d2:51:7f:0c:7c:6a:5e:f7: e2:49:88:54:fa:19:e5:37:cc:1a:88:3a:d1:9b:41:f3:3d:35: 3a:3d:d4:4e:58:3d:df:e0:7c:17:8f:15:63:f1:c2:0b:51:e8: bf:7f:6c:1b:a3:a9:d8:fa:24:d5:9c:fb:38:c1:c8:64:96:8e: 45:c2:50:09:86:c4:4d:0b:4c:f8:f1:56:1b:c4:5d:83:c9:98: b0:3e:b6:34:2f:9c:84:1b:1b:6e:52:96:b6:3d:46:3c:7d:03: 6e:39:ae:19:e9:79:3a:ea:75:78:60:b2:c5:02:a0:1d:95:a1: e2:ee:19:c2:f0:4e:3d:95:8a:29:9a:1c:6d:64:3e:75:f5:fd: 5d:53:5e:18:84:bd:8d:90:3b:c9:75:11:5d:01:37:76:03:3d: 39:88:88:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcGhHaQaxCoS4fAigItiwci/PBJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM0RDZBQTU3QkQzQTI0Rjc3MDZDN0I2NUM3QzhDRDU5 RUY1Q0I2NTAeFw0yNTA5MTgxOTE5NDJaFw0yNTA5MTkyMjA2NDJaMDMxMTAvBgNV BAMTKDIwRkVDMzk4MzJCRTEzNDI4N0JERDUxMUFFQjJCMjMxQUQ3QzAxOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHhLb4RtF+3macAA4lXILnwBEL 2Uf56X9GGkmHUm0REVozwP3yWyGQcu5LOU6O9kkNE3Rb+4ekNVkSqg+arP0d6eYJ SllB1vli5ndvullDEzTtOkGuTjqveSgDEeJDx1N3hZ3qfDIX4NbZnD0l/v64dqN/ E/oGKeAjDYJBRnx5SLabknUKFAmOQCOoZn8k98RY5Rhk3SYVvRDSjxQvb5VQCTth JM2CtOCte5viCLRBLiSqb/LMdDyVUbSAz/hnrCYVO7yKanNF/MuLenjQgrT3Bhy/ nHYdlxYKBBml1qTqScAgmaa1xjLbS4//OkzxMJ/MxB03aLI+LgtqeBC/4f4tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIP7DmDK+E0KHvdURrrKyMa18AZQwHwYDVR0j BBgwFoAUTE1qpXvTok93Bse2XHyM1Z71y2UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHVSV1RTVnJ0OXc1VUNZSlRWdktNWmM5RkVWVHEzdEhaWnlqNkRNblgz cnAvMC80QzRENkFBNTdCRDNBMjRGNzcwNkM3QjY1QzdDOENENTlFRjVDQjY1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDNEQ2QUE1N0JEM0EyNEY3 NzA2QzdCNjVDN0M4Q0Q1OUVGNUNCNjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHVSV1RTVnJ0OXc1VUNZSlRWdktNWmM5RkVWVHEzdEhaWnlqNkRNblgzcnAvMC80 QzRENkFBNTdCRDNBMjRGNzcwNkM3QjY1QzdDOENENTlFRjVDQjY1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoWVIpZQGZPqPb7FL8ACnHNRjy0xu2I3J6SUohnHU4RnyxKjm3u8ogkuFCJms a9wOGmsN4xoASMg13cJueghQFuseEthoYBKLSTbUGW6kEoe9cUj5T08hAkp4KfV1 GBOH4rnUT9JRfwx8al734kmIVPoZ5TfMGog60ZtB8z01Oj3UTlg93+B8F48VY/HC C1Hov39sG6Op2Pok1Zz7OMHIZJaORcJQCYbETQtM+PFWG8Rdg8mYsD62NC+chBsb blKWtj1GPH0DbjmuGel5Oup1eGCyxQKgHZWh4u4ZwvBOPZWKKZocbWQ+dfX9XVNe GIS9jZA7yXURXQE3dgM9OYiIvQ== -----END CERTIFICATE-----Generated at Thu Sep 18 23:48:43 2025 by rpki-client