$ rpki-client -vvf rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft File: 4856F1A3B30D5C7881DA87018005E5D420414FCA.mft (raw, json) Hash identifier: MMvNJkYQgYyZPcgGtwxtuWx3L54AGEqOjqQpyhcX7rg= Subject key identifier: 19:A3:47:33:85:36:B5:8E:F5:1B:1F:6C:24:DA:3B:F2:3E:A3:00:1D Authority key identifier: 48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA Certificate issuer: /CN=4856F1A3B30D5C7881DA87018005E5D420414FCA Certificate serial: 5C9DFC23B14E80F6F9D6A8159CD0F2A42059ECD1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer Subject info access: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft Manifest number: 012A Signing time: Mon 03 Nov 2025 11:28:09 +0000 Manifest this update: Mon 03 Nov 2025 11:23:09 +0000 Manifest next update: Tue 04 Nov 2025 14:45:09 +0000 Files and hashes: 1: 3137372e32312e38302e302f32302d3332203d3e203533303838.roa (hash: wXf/RK8DqR/CjpwFvOAppiNi0Tr5aa7oPUSPTknLvSQ=) 2: 4856F1A3B30D5C7881DA87018005E5D420414FCA.crl (hash: CQeFh6n43UtJaOEacfp0l/unWXsxTByy/QRekgeRENE=) 3: 3138372e33332e3230382e302f32302d3332203d3e203533303838.roa (hash: NBzUedd6ZxjbCTpvddwCofjpV/PLJrC91qO5bna3/S4=) 4: 323830343a3336303a3a2f33322d313238203d3e203533303838.roa (hash: VzHvYSqj1UpdHPrHiFGlX041xdryfjksMALlGnDnEN4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 14:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:9d:fc:23:b1:4e:80:f6:f9:d6:a8:15:9c:d0:f2:a4:20:59:ec:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4856F1A3B30D5C7881DA87018005E5D420414FCA Validity Not Before: Nov 3 11:23:09 2025 GMT Not After : Nov 4 14:45:09 2025 GMT Subject: CN=19A347338536B58EF51B1F6C24DA3BF23EA3001D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:31:fc:f9:b5:a9:fb:b7:f5:db:e5:9f:ce:25: 4e:71:26:5b:f6:e8:c2:b4:c5:3d:11:dd:ea:e8:64: b6:9d:74:f4:77:b9:f5:f0:17:4c:a0:7c:fe:77:ad: 9d:41:41:11:cd:a9:ae:f4:77:7c:a8:3d:82:83:2e: 73:85:7a:09:0d:9f:f8:36:fb:11:76:51:f1:9f:9b: 60:52:fc:a8:3c:c9:92:ff:58:6d:79:f6:cc:09:b6: 6e:40:cc:ab:8d:5f:91:be:28:b7:3d:9e:f7:a3:fc: ce:d6:32:49:30:be:e9:4e:1e:49:15:14:09:23:48: a3:62:02:25:46:97:47:13:dd:c3:e2:78:20:23:c2: 31:e4:67:ac:a6:88:13:02:a3:9c:ff:45:39:b2:d3: cd:95:29:9e:60:c3:fb:f8:5c:3f:18:8d:d4:8e:36: 57:3a:82:79:3a:f4:75:16:79:49:05:46:8a:91:0b: 30:9f:e5:ab:67:a4:21:5c:9d:38:a9:14:c4:c9:5e: aa:b6:8e:9d:77:fb:8e:d2:41:ea:fa:e1:f6:4a:7e: 3c:0d:61:35:ed:82:4f:7a:67:66:a5:71:ab:f4:b1: 27:73:de:fc:a4:31:fb:32:3a:0b:5d:e7:04:92:95: 89:55:b3:27:67:11:1e:58:a4:87:4d:69:62:01:a6: 36:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A3:47:33:85:36:B5:8E:F5:1B:1F:6C:24:DA:3B:F2:3E:A3:00:1D X509v3 Authority Key Identifier: keyid:48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c0:8d:75:89:62:7a:3b:2f:ac:f2:61:7c:64:e5:5a:a4:85: 3e:fc:6d:c5:86:99:4b:7b:c3:c3:48:b0:53:d0:66:28:95:ab: 22:58:c7:d4:cf:48:87:db:47:2c:57:b8:c9:8d:dd:8e:8e:14: 9c:e3:b9:40:5b:c9:06:39:65:b0:e6:17:5a:7b:54:64:c8:ff: 3c:ab:c1:08:29:56:e8:22:66:7e:25:3e:c3:62:1f:a0:b3:39: 68:5a:5b:cd:6a:77:8e:47:1f:f7:88:31:18:d7:57:06:84:a8: 59:97:47:a5:13:e3:34:a9:07:07:e7:f1:bf:5f:1c:7d:f0:94: da:58:9a:3e:a0:eb:51:5a:16:b6:19:76:b3:36:ab:0d:14:60: 75:c2:2d:15:7d:6a:c2:4b:73:63:39:81:85:78:9b:10:c5:e0: aa:3c:02:04:25:95:a9:a7:4c:ff:55:98:65:52:3a:72:38:5c: f2:c4:72:82:33:bb:d4:c3:6c:48:35:60:ae:3e:40:b7:84:ad: 2f:80:f5:7f:4d:7d:2a:f4:92:56:3a:db:52:98:77:0c:bc:2b: 13:77:c7:66:5f:9d:fc:5d:7a:7a:89:de:63:85:3c:7c:09:2c: a4:cc:49:d9:6b:25:ff:b3:9e:db:f0:05:d3:85:28:b9:42:44: ba:08:38:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXJ38I7FOgPb51qgVnNDypCBZ7NEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NkYxQTNCMzBENUM3ODgxREE4NzAxODAwNUU1RDQy MDQxNEZDQTAeFw0yNTExMDMxMTIzMDlaFw0yNTExMDQxNDQ1MDlaMDMxMTAvBgNV BAMTKDE5QTM0NzMzODUzNkI1OEVGNTFCMUY2QzI0REEzQkYyM0VBMzAwMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZMfz5tan7t/Xb5Z/OJU5xJlv2 6MK0xT0R3eroZLaddPR3ufXwF0ygfP53rZ1BQRHNqa70d3yoPYKDLnOFegkNn/g2 +xF2UfGfm2BS/Kg8yZL/WG159swJtm5AzKuNX5G+KLc9nvej/M7WMkkwvulOHkkV FAkjSKNiAiVGl0cT3cPieCAjwjHkZ6ymiBMCo5z/RTmy082VKZ5gw/v4XD8YjdSO Nlc6gnk69HUWeUkFRoqRCzCf5atnpCFcnTipFMTJXqq2jp13+47SQer64fZKfjwN YTXtgk96Z2alcav0sSdz3vykMfsyOgtd5wSSlYlVsydnER5YpIdNaWIBpjZLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGaNHM4U2tY71Gx9sJNo78j6jAB0wHwYDVR0j BBgwFoAUSFbxo7MNXHiB2ocBgAXl1CBBT8owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWNoZXl4VG5HRG52dXd6eE0zOEY0dG9ZQzczVUhaNlU2aXpVeW9Sckdz Z3QvMC80ODU2RjFBM0IzMEQ1Qzc4ODFEQTg3MDE4MDA1RTVENDIwNDE0RkNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4NTZGMUEzQjMwRDVDNzg4 MURBODcwMTgwMDVFNUQ0MjA0MTRGQ0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWNoZXl4VG5HRG52dXd6eE0zOEY0dG9ZQzczVUhaNlU2aXpVeW9SckdzZ3QvMC80 ODU2RjFBM0IzMEQ1Qzc4ODFEQTg3MDE4MDA1RTVENDIwNDE0RkNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApsCNdYliejsvrPJhfGTlWqSFPvxtxYaZS3vDw0iwU9BmKJWrIljH1M9Ih9tH LFe4yY3djo4UnOO5QFvJBjllsOYXWntUZMj/PKvBCClW6CJmfiU+w2IfoLM5aFpb zWp3jkcf94gxGNdXBoSoWZdHpRPjNKkHB+fxv18cffCU2liaPqDrUVoWthl2szar DRRgdcItFX1qwktzYzmBhXibEMXgqjwCBCWVqadM/1WYZVI6cjhc8sRygjO71MNs SDVgrj5At4StL4D1f019KvSSVjrbUph3DLwrE3fHZl+d/F16eoneY4U8fAkspMxJ 2Wsl/7Oe2/AF04UouUJEugg4PQ== -----END CERTIFICATE-----Generated at Tue Nov 4 00:29:32 2025 by rpki-client