$ rpki-client -vvf rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.mft File: B937F473A95655C5D7B945095573D217C3A1DC11.mft (raw, json) Hash identifier: wvR2y+pZ9d+sHSJVm6GFxNx6kJ624YlyBRwEVGkH/dk= Subject key identifier: 9D:08:27:97:7A:5F:73:F7:7E:7B:C4:A4:90:E8:4D:D3:D6:64:8D:12 Authority key identifier: B9:37:F4:73:A9:56:55:C5:D7:B9:45:09:55:73:D2:17:C3:A1:DC:11 Certificate issuer: /CN=B937F473A95655C5D7B945095573D217C3A1DC11 Certificate serial: 514AFC3865824AF61BE0F3ACF41B2A4976DF2FD1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B937F473A95655C5D7B945095573D217C3A1DC11.cer Subject info access: rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.mft Manifest number: 1C Signing time: Sun 02 Nov 2025 22:19:36 +0000 Manifest this update: Sun 02 Nov 2025 22:14:36 +0000 Manifest next update: Tue 04 Nov 2025 01:04:36 +0000 Files and hashes: 1: 323830343a386135303a383030303a3a2f33332d3333203d3e20323733363631.roa (hash: np0pht6I6awyJtH3iD71bahJNTBootED1EaKcxVVUr0=) 2: B937F473A95655C5D7B945095573D217C3A1DC11.crl (hash: SlCW44pPb1yrVGn2HGGxaSn1OeSMiBA81PEo2Vz7bBI=) 3: 323830343a386135303a3a2f33332d3333203d3e20323733363631.roa (hash: qrca0D1TlUJdIVAjeSy6LF0A6MRtQNdKCGanqjUJNXM=) 4: 323830343a386135303a3a2f33322d3332203d3e20323733363631.roa (hash: BWs9FP6BDbDsmDYZV2W+M4MdNXrw7Vl+hgPyWv3lw5U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.crl rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B937F473A95655C5D7B945095573D217C3A1DC11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 01:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:4a:fc:38:65:82:4a:f6:1b:e0:f3:ac:f4:1b:2a:49:76:df:2f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B937F473A95655C5D7B945095573D217C3A1DC11 Validity Not Before: Nov 2 22:14:36 2025 GMT Not After : Nov 4 01:04:36 2025 GMT Subject: CN=9D0827977A5F73F77E7BC4A490E84DD3D6648D12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:70:5d:70:6a:6a:8e:35:df:c2:bb:ab:5b:d2: 3c:61:ce:8a:0b:ea:cb:76:7b:f0:7d:80:4a:71:ef: b5:a8:58:1a:b5:44:99:b5:0f:11:ed:fc:e5:8d:ac: d7:cd:10:eb:b3:d9:4b:8e:be:5e:3d:4f:c4:dc:88: 35:1e:34:53:98:47:a6:78:02:0a:b4:2b:12:0a:07: 5c:c6:4c:d0:47:ce:ee:7c:ef:89:ff:3e:20:54:8d: a7:f6:24:7d:e7:70:92:29:18:04:3e:e3:fc:ed:68: 0a:12:ae:c6:2d:fc:91:82:6b:c9:c1:84:ce:58:37: 7e:f2:7f:83:1f:d2:9e:61:23:c0:95:9d:fc:66:b5: 23:44:6f:cd:18:37:39:08:14:45:ac:f7:b8:41:8c: fd:14:02:79:fa:9f:c3:86:9b:de:89:60:00:72:54: 1b:0c:14:1a:6c:e8:9d:69:cc:50:01:96:9b:96:d3: a1:bd:da:5b:30:07:f8:d2:bf:83:8e:09:5d:57:7c: 85:88:68:16:47:2c:36:06:b7:41:68:70:89:f9:e1: de:77:90:54:e9:5f:b9:71:80:a9:1a:c8:85:31:5b: 80:d3:6f:36:e7:9f:a2:dd:3d:cb:d3:d3:6d:79:a0: d5:53:68:7f:93:f3:dd:b0:97:04:0c:a0:66:cf:b1: c8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:08:27:97:7A:5F:73:F7:7E:7B:C4:A4:90:E8:4D:D3:D6:64:8D:12 X509v3 Authority Key Identifier: keyid:B9:37:F4:73:A9:56:55:C5:D7:B9:45:09:55:73:D2:17:C3:A1:DC:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B937F473A95655C5D7B945095573D217C3A1DC11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:2d:30:a4:37:27:00:c5:b4:8a:ad:e9:1f:66:e2:28:d3:ad: b3:06:ec:1c:2a:ef:86:8e:45:a8:6c:08:1a:51:e8:d6:90:9d: 4a:7e:c6:dc:3f:3d:c7:0b:1a:b7:28:06:2b:69:f5:51:1a:f9: 48:1a:d9:c4:35:23:06:c9:e4:c7:36:6f:ae:47:ef:1a:85:57: 41:83:e1:e8:13:9d:4d:b4:3d:af:3f:f5:a1:a6:e0:01:03:b6: 7f:87:be:d0:56:01:36:01:41:ea:8a:ca:76:e4:70:f1:8d:68: 67:68:9b:62:f4:0b:78:27:11:a7:77:f4:ca:72:7a:30:a5:13: aa:39:08:e2:78:9b:4c:d6:50:fe:a0:51:46:fd:52:f3:9b:24: 92:51:8e:5e:ab:2d:f9:32:81:ca:1e:6a:f2:92:12:a9:fd:56: 0c:84:49:02:65:bc:d6:7b:19:79:c4:92:b6:89:54:0c:1a:df: 59:25:39:1b:ca:e4:44:15:b8:4f:07:31:a9:52:d5:3e:49:b8: 41:e5:65:32:f2:08:3f:f8:69:eb:1e:98:24:7f:cc:85:c6:31: 4b:00:82:05:b4:5a:fa:c6:e9:f3:7b:34:b4:11:a7:21:32:df: 67:15:f6:ee:18:02:8e:da:98:32:89:18:79:b2:19:e5:da:54: 55:0a:e2:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUUr8OGWCSvYb4POs9BsqSXbfL9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkzN0Y0NzNBOTU2NTVDNUQ3Qjk0NTA5NTU3M0QyMTdD M0ExREMxMTAeFw0yNTExMDIyMjE0MzZaFw0yNTExMDQwMTA0MzZaMDMxMTAvBgNV BAMTKDlEMDgyNzk3N0E1RjczRjc3RTdCQzRBNDkwRTg0REQzRDY2NDhEMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUcF1wamqONd/Cu6tb0jxhzooL 6st2e/B9gEpx77WoWBq1RJm1DxHt/OWNrNfNEOuz2UuOvl49T8TciDUeNFOYR6Z4 Agq0KxIKB1zGTNBHzu5874n/PiBUjaf2JH3ncJIpGAQ+4/ztaAoSrsYt/JGCa8nB hM5YN37yf4Mf0p5hI8CVnfxmtSNEb80YNzkIFEWs97hBjP0UAnn6n8OGm96JYABy VBsMFBps6J1pzFABlpuW06G92lswB/jSv4OOCV1XfIWIaBZHLDYGt0FocIn54d53 kFTpX7lxgKkayIUxW4DTbzbnn6LdPcvT0215oNVTaH+T892wlwQMoGbPscizAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnQgnl3pfc/d+e8SkkOhN09ZkjRIwHwYDVR0j BBgwFoAUuTf0c6lWVcXXuUUJVXPSF8Oh3BEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHZSNjVpRThzZmp3N3RVYmZnUlh3eUJkTFB4TTdydGFGNDRla2R3U3Rz MzMvMC9COTM3RjQ3M0E5NTY1NUM1RDdCOTQ1MDk1NTczRDIxN0MzQTFEQzExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5MzdGNDczQTk1NjU1QzVE N0I5NDUwOTU1NzNEMjE3QzNBMURDMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHZSNjVpRThzZmp3N3RVYmZnUlh3eUJkTFB4TTdydGFGNDRla2R3U3RzMzMvMC9C OTM3RjQ3M0E5NTY1NUM1RDdCOTQ1MDk1NTczRDIxN0MzQTFEQzExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0i0wpDcnAMW0iq3pH2biKNOtswbsHCrvho5FqGwIGlHo1pCdSn7G3D89xwsa tygGK2n1URr5SBrZxDUjBsnkxzZvrkfvGoVXQYPh6BOdTbQ9rz/1oabgAQO2f4e+ 0FYBNgFB6orKduRw8Y1oZ2ibYvQLeCcRp3f0ynJ6MKUTqjkI4nibTNZQ/qBRRv1S 85skklGOXqst+TKByh5q8pISqf1WDIRJAmW81nsZecSStolUDBrfWSU5G8rkRBW4 TwcxqVLVPkm4QeVlMvIIP/hp6x6YJH/MhcYxSwCCBbRa+sbp83s0tBGnITLfZxX2 7hgCjtqYMokYebIZ5dpUVQriZA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:15:39 2025 by rpki-client