$ rpki-client -vvf rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/4530D40A16BC19C8930B27067C400F5328018441.mft File: 4530D40A16BC19C8930B27067C400F5328018441.mft (raw, json) Hash identifier: KIaICnSoyjV9w21jrHoI40lBauy5iZz2OSuNbPWnuYU= Subject key identifier: 41:FF:4E:39:78:81:F6:93:AD:C0:BD:D5:54:51:67:59:37:49:B4:79 Authority key identifier: 45:30:D4:0A:16:BC:19:C8:93:0B:27:06:7C:40:0F:53:28:01:84:41 Certificate issuer: /CN=4530D40A16BC19C8930B27067C400F5328018441 Certificate serial: 5272189203FEF2E5CF4BF435EA03170AE2D2C9FA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4530D40A16BC19C8930B27067C400F5328018441.cer Subject info access: rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/4530D40A16BC19C8930B27067C400F5328018441.mft Manifest number: 52 Signing time: Mon 03 Nov 2025 10:00:00 +0000 Manifest this update: Mon 03 Nov 2025 09:55:00 +0000 Manifest next update: Tue 04 Nov 2025 13:54:00 +0000 Files and hashes: 1: 323830343a393335633a3a2f33322d3336203d3e20323734373732.roa (hash: Ea8qGBPuP3Cd2o7wJzdnX6tVHHRMfnctp4KmiW2QKOY=) 2: 4530D40A16BC19C8930B27067C400F5328018441.crl (hash: O6RznMigVY6PbHOVgRFBZ147L0O/o48gxl9k3Ao7PIs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/4530D40A16BC19C8930B27067C400F5328018441.crl rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/4530D40A16BC19C8930B27067C400F5328018441.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4530D40A16BC19C8930B27067C400F5328018441.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:72:18:92:03:fe:f2:e5:cf:4b:f4:35:ea:03:17:0a:e2:d2:c9:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4530D40A16BC19C8930B27067C400F5328018441 Validity Not Before: Nov 3 09:55:00 2025 GMT Not After : Nov 4 13:54:00 2025 GMT Subject: CN=41FF4E397881F693ADC0BDD5545167593749B479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:67:e7:b4:36:b5:16:91:87:02:a5:96:bc:28: 44:0a:e5:ec:a2:d3:bb:96:4b:f7:2e:45:c3:54:31: 71:fa:72:a9:ed:6f:9c:d7:8f:b2:4a:d0:39:52:59: 05:a3:45:aa:cf:6d:55:62:ce:29:ae:e1:ac:cb:f3: da:fb:05:a4:81:84:33:75:ea:ac:f1:8a:33:7d:d5: c5:89:c0:c8:63:ba:49:cc:f0:73:c7:b9:d1:40:01: a2:b9:34:8c:9a:a5:b7:21:d5:6c:12:c1:b9:0d:fa: bb:44:34:7b:74:fc:74:2a:38:d3:69:33:c3:73:6f: 82:66:c3:70:99:1f:fe:41:b3:8f:b8:a4:76:eb:5d: fa:99:90:92:7b:ed:bd:10:a3:14:d3:98:79:8c:68: 0f:3f:80:d3:12:b1:49:23:36:b6:df:19:22:61:6f: 45:90:eb:5a:12:9e:49:44:e0:e3:9c:52:7f:cf:d2: 4b:5e:6e:34:f3:a8:ee:93:5d:c9:76:60:39:ce:f3: be:c9:48:ed:78:8f:b4:e0:4e:c4:90:56:a2:cb:4e: fe:2c:0e:a3:52:38:f2:3a:57:a6:cd:41:35:0c:42: bc:b4:28:a9:0d:55:2f:68:e9:c9:a6:3f:35:1d:c3: 4d:4a:57:ed:d6:0b:7d:d6:ce:69:57:45:7d:c2:36: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FF:4E:39:78:81:F6:93:AD:C0:BD:D5:54:51:67:59:37:49:B4:79 X509v3 Authority Key Identifier: keyid:45:30:D4:0A:16:BC:19:C8:93:0B:27:06:7C:40:0F:53:28:01:84:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/4530D40A16BC19C8930B27067C400F5328018441.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4530D40A16BC19C8930B27067C400F5328018441.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/4530D40A16BC19C8930B27067C400F5328018441.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:3f:18:60:8e:52:2c:a6:b2:83:50:70:82:9f:bc:8b:c7:03: a0:d7:9e:7c:a3:03:de:a5:be:b6:99:c5:5a:24:cf:1e:31:22: a8:a1:d3:fa:51:3d:d5:15:02:69:3d:e0:35:fe:d5:f4:fe:d1: 2c:a4:38:4d:9d:ad:b0:60:48:34:79:bd:90:8e:2f:a5:7a:0e: ac:a5:23:7f:60:d4:04:22:4c:6f:13:74:1f:d7:af:16:5a:03: d5:db:f4:ae:ea:e8:b9:11:38:6f:0f:a3:ca:0e:63:d6:3c:7a: c4:77:ad:f7:26:20:09:f2:f4:01:9a:ec:18:7e:1d:6d:78:69: 78:df:72:76:76:c8:f0:55:b2:a1:3b:91:0d:54:52:b0:8a:0d: f9:66:f3:13:fc:31:42:d2:fc:56:25:e7:4b:55:22:c0:f7:69: fc:d9:4a:1c:a5:70:5f:6b:cc:e7:30:2a:d8:d0:07:22:3c:46: d6:f6:96:30:bb:73:86:d5:0d:6a:85:11:ab:14:c8:ed:94:b2: 60:be:dd:5f:4d:3c:be:0b:58:53:a9:9f:f2:ac:4b:4f:cd:39: 48:21:90:bb:e8:00:99:b6:a1:2f:21:40:e3:e6:05:7a:01:dc: 58:fe:dd:d5:ba:21:0f:a6:f0:ba:ff:9b:ee:39:76:12:cd:9c: 0e:7c:ff:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUnIYkgP+8uXPS/Q16gMXCuLSyfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzMEQ0MEExNkJDMTlDODkzMEIyNzA2N0M0MDBGNTMy ODAxODQ0MTAeFw0yNTExMDMwOTU1MDBaFw0yNTExMDQxMzU0MDBaMDMxMTAvBgNV BAMTKDQxRkY0RTM5Nzg4MUY2OTNBREMwQkRENTU0NTE2NzU5Mzc0OUI0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7Z+e0NrUWkYcCpZa8KEQK5eyi 07uWS/cuRcNUMXH6cqntb5zXj7JK0DlSWQWjRarPbVVizimu4azL89r7BaSBhDN1 6qzxijN91cWJwMhjuknM8HPHudFAAaK5NIyapbch1WwSwbkN+rtENHt0/HQqONNp M8Nzb4Jmw3CZH/5Bs4+4pHbrXfqZkJJ77b0QoxTTmHmMaA8/gNMSsUkjNrbfGSJh b0WQ61oSnklE4OOcUn/P0ktebjTzqO6TXcl2YDnO877JSO14j7TgTsSQVqLLTv4s DqNSOPI6V6bNQTUMQry0KKkNVS9o6cmmPzUdw01KV+3WC33WzmlXRX3CNtr1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQf9OOXiB9pOtwL3VVFFnWTdJtHkwHwYDVR0j BBgwFoAURTDUCha8GciTCycGfEAPUygBhEEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNU1KZ0JNSEFvVWN0bzJOY2ttVk1YWFNBS3d5a1N6TFMxdTU2dlhWRzJV MngvMC80NTMwRDQwQTE2QkMxOUM4OTMwQjI3MDY3QzQwMEY1MzI4MDE4NDQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1MzBENDBBMTZCQzE5Qzg5 MzBCMjcwNjdDNDAwRjUzMjgwMTg0NDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NU1KZ0JNSEFvVWN0bzJOY2ttVk1YWFNBS3d5a1N6TFMxdTU2dlhWRzJVMngvMC80 NTMwRDQwQTE2QkMxOUM4OTMwQjI3MDY3QzQwMEY1MzI4MDE4NDQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQD8YYI5SLKayg1Bwgp+8i8cDoNeefKMD3qW+tpnFWiTPHjEiqKHT+lE91RUC aT3gNf7V9P7RLKQ4TZ2tsGBINHm9kI4vpXoOrKUjf2DUBCJMbxN0H9evFloD1dv0 rurouRE4bw+jyg5j1jx6xHet9yYgCfL0AZrsGH4dbXhpeN9ydnbI8FWyoTuRDVRS sIoN+WbzE/wxQtL8ViXnS1UiwPdp/NlKHKVwX2vM5zAq2NAHIjxG1vaWMLtzhtUN aoURqxTI7ZSyYL7dX008vgtYU6mf8qxLT805SCGQu+gAmbahLyFA4+YFegHcWP7d 1bohD6bwuv+b7jl2Es2cDnz/oQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:35:57 2025 by rpki-client