$ rpki-client -vvf rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft File: 4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft (raw, json) Hash identifier: I0zX3LygjISunTCZJfr/Hs/xc5MAKMUHtwxDp6hHfUI= Subject key identifier: 19:3A:E8:EA:29:DE:7F:B8:50:9E:73:8D:88:BE:B0:D4:E1:9D:2A:F3 Authority key identifier: 4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2 Certificate issuer: /CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2 Certificate serial: 33A185B12D4E5EA817EF5F43A9CE105A0CE84A7A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft Manifest number: 0219 Signing time: Mon 03 Nov 2025 08:09:36 +0000 Manifest this update: Mon 03 Nov 2025 08:04:36 +0000 Manifest next update: Tue 04 Nov 2025 23:06:36 +0000 Files and hashes: 1: 323830343a386635383a3a2f33322d3334203d3e20323733343835.roa (hash: sWCWC2blugwDA5GjLHplzoTjJrDf4ml2mn5K8bTAaT8=) 2: 4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl (hash: AJBiBOX7dce8kwBsEQqa9yFk1AEexAeJAH9qLPXOW8s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a1:85:b1:2d:4e:5e:a8:17:ef:5f:43:a9:ce:10:5a:0c:e8:4a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2 Validity Not Before: Nov 3 08:04:36 2025 GMT Not After : Nov 4 23:06:36 2025 GMT Subject: CN=193AE8EA29DE7FB8509E738D88BEB0D4E19D2AF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b1:55:ca:96:0a:18:91:9c:25:a2:fe:c8:8f: e1:a3:14:4b:70:41:55:54:16:9b:ea:c1:af:1e:a3: 90:7b:e4:93:75:9d:db:86:c4:e2:19:04:6b:6c:eb: 61:76:aa:4e:71:b4:ec:23:8b:b0:9b:25:32:8a:cf: 1c:8c:dc:4c:eb:68:fe:f8:91:61:f0:54:38:81:e7: ca:45:65:a9:20:8e:29:c9:3d:2e:84:55:2a:5f:a9: 61:2c:a6:ec:44:6c:3a:ff:c9:bb:d0:6d:4b:c7:33: 5c:8a:ba:bf:6f:1f:00:ba:75:3c:a5:fc:c7:0a:bb: 4c:d9:14:e0:e4:40:35:b9:3e:4c:de:df:f5:54:6c: e6:c3:23:bf:69:47:51:f9:01:14:0e:20:d6:c5:b2: 89:03:84:83:b6:68:5c:ca:03:99:96:9b:ae:31:db: 38:a2:80:a1:28:ae:79:4b:d3:89:71:58:16:fb:d6: 6c:1f:fa:62:9a:0c:e1:09:26:b9:07:78:bb:6c:0b: 03:b6:74:14:eb:f9:73:43:0d:05:dd:97:67:17:f2: 7e:17:52:79:0a:f7:2d:e5:3f:c5:71:78:11:c3:c3: 21:06:6d:8c:ab:30:97:96:ee:96:ee:2b:11:39:d2: b4:fd:a3:fc:25:8e:0a:19:3e:fc:06:b6:ca:5b:ae: 36:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3A:E8:EA:29:DE:7F:B8:50:9E:73:8D:88:BE:B0:D4:E1:9D:2A:F3 X509v3 Authority Key Identifier: keyid:4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f6:e4:20:9a:13:d0:92:4d:e4:8c:3b:b3:06:3d:05:99:cb: 28:c8:c8:33:c5:82:10:e3:4b:12:ca:98:0a:9c:0e:f8:3c:f5: 04:7c:70:54:77:c9:7b:a2:97:e6:db:97:ba:d0:c4:c1:40:89: 14:82:c9:6b:43:22:0e:dc:49:01:34:61:39:2c:7f:b2:cf:65: 8c:7a:1a:df:87:f2:a1:02:40:8a:83:7d:a4:6d:6f:1a:a8:2d: 62:67:6f:33:2e:b6:16:07:29:f0:9c:06:ca:cb:09:d1:27:45: c1:bb:a5:73:7f:a2:1c:b1:98:5a:1d:a6:cb:f9:a9:4d:66:52: e1:0d:58:fe:00:c3:0c:f8:21:f7:a7:bc:f6:36:12:77:c6:d6: 7c:79:2e:d2:6c:bd:2a:a7:a7:7a:f3:4c:62:1d:9f:fc:93:d6: dc:dc:8d:a1:e4:cb:2a:6e:75:bd:5e:07:e1:cf:f3:31:76:57: 41:e5:2f:06:0a:31:f0:0e:9e:87:f5:20:0e:18:d4:46:0a:e1: 5f:ec:26:45:34:af:27:9f:e2:34:b3:52:a0:05:11:7c:6c:ac: a9:ff:a5:4a:4b:28:92:15:b2:eb:19:86:8f:9b:fa:58:aa:f2: 89:7a:61:04:5f:ed:df:b5:34:19:9f:c7:c7:f4:ca:db:92:2c: 1e:19:dd:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM6GFsS1OXqgX719Dqc4QWgzoSnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDQjVBQkM2MkZCQkM4OTBGREFGMDVFMEQ4NkQ3OTk5 QTZFQURCMjAeFw0yNTExMDMwODA0MzZaFw0yNTExMDQyMzA2MzZaMDMxMTAvBgNV BAMTKDE5M0FFOEVBMjlERTdGQjg1MDlFNzM4RDg4QkVCMEQ0RTE5RDJBRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0sVXKlgoYkZwlov7Ij+GjFEtw QVVUFpvqwa8eo5B75JN1nduGxOIZBGts62F2qk5xtOwji7CbJTKKzxyM3EzraP74 kWHwVDiB58pFZakgjinJPS6EVSpfqWEspuxEbDr/ybvQbUvHM1yKur9vHwC6dTyl /McKu0zZFODkQDW5Pkze3/VUbObDI79pR1H5ARQOINbFsokDhIO2aFzKA5mWm64x 2ziigKEornlL04lxWBb71mwf+mKaDOEJJrkHeLtsCwO2dBTr+XNDDQXdl2cX8n4X UnkK9y3lP8VxeBHDwyEGbYyrMJeW7pbuKxE50rT9o/wljgoZPvwGtspbrjafAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGTro6inef7hQnnONiL6w1OGdKvMwHwYDVR0j BBgwFoAUTctavGL7vIkP2vBeDYbXmZpurbIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXVlZjhnb1ltMWhMQkJlN05qMkpGd0I2MjFkckdOMmpjQkNhNHdadmkx UTgvMC80RENCNUFCQzYyRkJCQzg5MEZEQUYwNUUwRDg2RDc5OTlBNkVBREIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzREQ0I1QUJDNjJGQkJDODkw RkRBRjA1RTBEODZENzk5OUE2RUFEQjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXVlZjhnb1ltMWhMQkJlN05qMkpGd0I2MjFkckdOMmpjQkNhNHdadmkxUTgvMC80 RENCNUFCQzYyRkJCQzg5MEZEQUYwNUUwRDg2RDc5OTlBNkVBREIyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKvbkIJoT0JJN5Iw7swY9BZnLKMjIM8WCEONLEsqYCpwO+Dz1BHxwVHfJe6KX 5tuXutDEwUCJFILJa0MiDtxJATRhOSx/ss9ljHoa34fyoQJAioN9pG1vGqgtYmdv My62Fgcp8JwGyssJ0SdFwbulc3+iHLGYWh2my/mpTWZS4Q1Y/gDDDPgh96e89jYS d8bWfHku0my9KqenevNMYh2f/JPW3NyNoeTLKm51vV4H4c/zMXZXQeUvBgox8A6e h/UgDhjURgrhX+wmRTSvJ5/iNLNSoAURfGysqf+lSksokhWy6xmGj5v6WKryiXph BF/t37U0GZ/Hx/TK25IsHhndgQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:27:58 2025 by rpki-client