$ rpki-client -vvf rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft File: 4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft (raw, json) Hash identifier: R8baJjkCCzLaXazGtWfWnJNpJ8i07ygPdxEXVr8JSjE= Subject key identifier: 1B:87:3A:EB:47:21:8E:B9:53:B8:AD:C9:45:D8:57:A7:46:1D:1E:20 Authority key identifier: 4F:3B:34:40:57:7D:0E:47:4F:F1:5D:DF:4D:E7:A4:78:CF:07:F3:FB Certificate issuer: /CN=4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB Certificate serial: 2A4761509A183285233857635D06623B7C0E6080 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft Manifest number: 52 Signing time: Thu 18 Sep 2025 03:30:22 +0000 Manifest this update: Thu 18 Sep 2025 03:25:22 +0000 Manifest next update: Fri 19 Sep 2025 06:27:22 +0000 Files and hashes: 1: 323830343a393239303a3a2f33322d3438203d3e20323734373139.roa (hash: RA5I+vzoQlcGK0NMw5Qd6CqIjhtm9+nKDVEJJYgQHJ8=) 2: 4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.crl (hash: 4akrYBFfIC4LUi0r3kIx8qeFHNiJ1KEGoFIAoZEv49Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.crl rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 06:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:47:61:50:9a:18:32:85:23:38:57:63:5d:06:62:3b:7c:0e:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB Validity Not Before: Sep 18 03:25:22 2025 GMT Not After : Sep 19 06:27:22 2025 GMT Subject: CN=1B873AEB47218EB953B8ADC945D857A7461D1E20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:25:7d:51:1f:48:7a:6d:6a:13:f5:66:d3:d1: 94:da:c4:da:68:1b:50:e2:5e:74:cb:2a:e6:b1:e0: 8f:df:70:4d:c6:d6:15:ef:55:03:84:b4:14:2d:23: 1f:8f:92:e4:a7:7d:4d:8f:f4:53:60:59:54:87:a6: 3c:22:13:e7:05:28:84:8e:90:11:15:4f:32:79:eb: ad:d5:3c:74:c6:07:82:db:df:69:33:04:36:d8:7d: fc:2a:0b:70:3f:43:8a:7d:63:30:e7:8a:c3:4a:cd: f8:f2:d1:31:62:3f:e7:6d:cb:59:14:da:3b:5d:f5: 4d:62:9d:2e:94:68:78:16:f9:c2:97:e2:ff:02:90: b5:90:6c:26:de:e7:c8:d3:9c:3d:08:9c:7c:87:7c: 53:42:32:95:fd:46:bc:f1:dc:78:d9:cd:ee:0f:d2: 07:36:c6:c3:6f:82:b6:83:8b:60:af:f0:70:53:40: c7:f9:1b:69:a0:52:ad:ae:58:d5:03:75:d5:bb:cf: 78:eb:a2:e4:d3:3d:9a:80:10:a7:bc:74:c0:57:28: 9b:fd:29:35:b0:39:84:fd:5e:2a:82:b3:bd:61:09: 9f:f8:f4:b2:5e:53:11:5e:a1:39:b1:b5:ce:9b:be: 74:cc:28:21:b2:2e:a7:79:58:96:18:5f:09:1a:78: 12:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:87:3A:EB:47:21:8E:B9:53:B8:AD:C9:45:D8:57:A7:46:1D:1E:20 X509v3 Authority Key Identifier: keyid:4F:3B:34:40:57:7D:0E:47:4F:F1:5D:DF:4D:E7:A4:78:CF:07:F3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:e6:ed:5e:f1:bb:78:9f:99:ac:f1:ce:c1:b2:79:b1:57:06: bf:e2:3f:ba:bd:bc:50:10:33:c4:22:9b:50:85:19:52:df:ed: d5:ff:90:76:d1:a3:a6:63:cb:68:1c:3a:c9:bf:04:f4:d7:5a: 70:ed:0b:6b:35:74:a7:59:51:43:73:c5:77:fe:28:f7:64:6e: be:06:2c:d3:74:64:c2:5f:f2:8f:97:34:1a:73:b5:d8:c7:c3: 9f:65:b2:ee:64:16:b2:e8:0a:17:1d:cf:c7:56:9e:45:8c:71: 70:26:80:3c:04:bf:d1:d5:8a:ea:b9:a1:b6:96:08:3c:c9:6c: 27:93:7d:fd:d3:12:31:67:b4:63:70:d2:bc:52:0d:81:dc:ca: 9d:bf:76:1f:e8:b3:6c:89:07:2a:86:14:6f:5e:7b:dc:8b:ed: 13:06:6c:f6:f6:32:d0:ce:fb:b3:65:59:89:f3:0e:b4:b1:81: 4e:df:a6:61:e3:48:ef:17:06:bb:de:ac:cd:da:5d:9e:9e:3d: 37:d7:51:f2:13:aa:25:52:00:9a:8f:04:f1:9a:3a:cd:35:22: cb:c5:53:27:7b:25:c6:8f:ea:9d:13:0a:5e:79:9c:a3:04:d5: dd:c4:52:44:d7:8c:c7:3a:95:59:2a:21:d4:b8:57:07:99:b1: c3:9f:44:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKkdhUJoYMoUjOFdjXQZiO3wOYIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYzQjM0NDA1NzdEMEU0NzRGRjE1RERGNERFN0E0NzhD RjA3RjNGQjAeFw0yNTA5MTgwMzI1MjJaFw0yNTA5MTkwNjI3MjJaMDMxMTAvBgNV BAMTKDFCODczQUVCNDcyMThFQjk1M0I4QURDOTQ1RDg1N0E3NDYxRDFFMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmJX1RH0h6bWoT9WbT0ZTaxNpo G1DiXnTLKuax4I/fcE3G1hXvVQOEtBQtIx+PkuSnfU2P9FNgWVSHpjwiE+cFKISO kBEVTzJ5663VPHTGB4Lb32kzBDbYffwqC3A/Q4p9YzDnisNKzfjy0TFiP+dty1kU 2jtd9U1inS6UaHgW+cKX4v8CkLWQbCbe58jTnD0InHyHfFNCMpX9Rrzx3HjZze4P 0gc2xsNvgraDi2Cv8HBTQMf5G2mgUq2uWNUDddW7z3jrouTTPZqAEKe8dMBXKJv9 KTWwOYT9XiqCs71hCZ/49LJeUxFeoTmxtc6bvnTMKCGyLqd5WJYYXwkaeBJVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUG4c660chjrlTuK3JRdhXp0YdHiAwHwYDVR0j BBgwFoAUTzs0QFd9DkdP8V3fTeekeM8H8/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmlrUGtRbU1FYlczdUtLbzdEMmlkMjhMVlY5NHRFQ3MxbUREeDhURnFo NWkvMC80RjNCMzQ0MDU3N0QwRTQ3NEZGMTVEREY0REU3QTQ3OENGMDdGM0ZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGM0IzNDQwNTc3RDBFNDc0 RkYxNURERjRERTdBNDc4Q0YwN0YzRkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmlrUGtRbU1FYlczdUtLbzdEMmlkMjhMVlY5NHRFQ3MxbUREeDhURnFoNWkvMC80 RjNCMzQ0MDU3N0QwRTQ3NEZGMTVEREY0REU3QTQ3OENGMDdGM0ZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABubtXvG7eJ+ZrPHOwbJ5sVcGv+I/ur28UBAzxCKbUIUZUt/t1f+QdtGjpmPL aBw6yb8E9NdacO0LazV0p1lRQ3PFd/4o92RuvgYs03Rkwl/yj5c0GnO12MfDn2Wy 7mQWsugKFx3Px1aeRYxxcCaAPAS/0dWK6rmhtpYIPMlsJ5N9/dMSMWe0Y3DSvFIN gdzKnb92H+izbIkHKoYUb1573IvtEwZs9vYy0M77s2VZifMOtLGBTt+mYeNI7xcG u96szdpdnp49N9dR8hOqJVIAmo8E8Zo6zTUiy8VTJ3slxo/qnRMKXnmcowTV3cRS RNeMxzqVWSoh1LhXB5mxw59EqA== -----END CERTIFICATE-----Generated at Thu Sep 18 13:41:36 2025 by rpki-client