$ rpki-client -vvf rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/41172F08E7A69B90834CE0BA0E5F1B01C3FD543C.mft File: 41172F08E7A69B90834CE0BA0E5F1B01C3FD543C.mft (raw, json) Hash identifier: QvzwtiuydlE7iXgIjqkLXfdZN5wwHH+HA+JBvsuMO0w= Subject key identifier: 4B:C5:99:95:C7:0D:83:E0:F4:20:96:91:0A:91:92:81:52:83:03:20 Authority key identifier: 41:17:2F:08:E7:A6:9B:90:83:4C:E0:BA:0E:5F:1B:01:C3:FD:54:3C Certificate issuer: /CN=41172F08E7A69B90834CE0BA0E5F1B01C3FD543C Certificate serial: 6EA17FD849EF49E4CB1D4201F6045D2CA673E377 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41172F08E7A69B90834CE0BA0E5F1B01C3FD543C.cer Subject info access: rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/41172F08E7A69B90834CE0BA0E5F1B01C3FD543C.mft Manifest number: 0142 Signing time: Mon 03 Nov 2025 11:06:37 +0000 Manifest this update: Mon 03 Nov 2025 11:01:37 +0000 Manifest next update: Tue 04 Nov 2025 11:28:37 +0000 Files and hashes: 1: 41172F08E7A69B90834CE0BA0E5F1B01C3FD543C.crl (hash: ssmjy0tJZr7Z6yj/VaJIczrF+42X1RR0EVd3/7WAkks=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/41172F08E7A69B90834CE0BA0E5F1B01C3FD543C.crl rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/41172F08E7A69B90834CE0BA0E5F1B01C3FD543C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41172F08E7A69B90834CE0BA0E5F1B01C3FD543C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a1:7f:d8:49:ef:49:e4:cb:1d:42:01:f6:04:5d:2c:a6:73:e3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41172F08E7A69B90834CE0BA0E5F1B01C3FD543C Validity Not Before: Nov 3 11:01:37 2025 GMT Not After : Nov 4 11:28:37 2025 GMT Subject: CN=4BC59995C70D83E0F42096910A91928152830320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:87:ff:ad:0f:13:56:58:2a:1b:17:c3:c3:0d: aa:14:7c:91:c1:bd:5e:1d:3f:f4:a3:f2:a6:9e:cb: 0e:d2:f7:60:84:d6:c2:0d:a3:2e:f0:eb:9a:0f:3b: f8:77:fa:ae:90:84:cf:3a:1e:47:27:25:ee:ae:c0: 79:98:04:0b:8f:8d:6f:fa:2c:3b:df:ff:99:95:b2: 7a:d7:bd:04:9d:6e:3c:c7:3f:dd:93:0b:80:e8:2e: 84:a1:14:a0:88:5c:12:38:65:84:a1:6b:d5:88:98: 38:24:31:45:f8:97:6b:ac:0d:b4:05:51:e1:cb:0b: 40:e4:78:4c:89:c8:db:88:f2:86:e4:33:27:ec:f7: 75:2c:9a:b5:ee:96:cc:ce:85:29:54:d2:83:9c:29: 9d:8f:03:b4:5a:2f:a7:31:5c:7b:22:bf:25:7b:60: 30:57:39:86:a7:06:41:f0:9e:2b:c9:20:d6:30:c8: 3e:30:a6:b7:ee:24:00:62:f2:ab:79:b9:8f:57:d2: 96:6c:d0:f8:ce:b5:1b:7b:1c:9d:73:ed:aa:14:f1: 65:2a:c6:e3:a2:00:81:d8:bf:a3:26:10:5a:81:5e: c4:b8:e6:e8:e0:31:c6:41:60:ec:1f:2a:cf:a9:8e: 1d:e0:9d:81:59:44:72:6b:e3:51:5e:4f:04:4c:cb: db:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C5:99:95:C7:0D:83:E0:F4:20:96:91:0A:91:92:81:52:83:03:20 X509v3 Authority Key Identifier: keyid:41:17:2F:08:E7:A6:9B:90:83:4C:E0:BA:0E:5F:1B:01:C3:FD:54:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/41172F08E7A69B90834CE0BA0E5F1B01C3FD543C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41172F08E7A69B90834CE0BA0E5F1B01C3FD543C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/41172F08E7A69B90834CE0BA0E5F1B01C3FD543C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:26:a5:a6:bf:bf:04:49:a3:9f:28:e2:93:49:3d:16:ea:df: 49:91:58:bf:2a:24:dc:00:8f:53:bd:ec:09:27:36:08:08:02: c0:e3:c2:2c:5c:6d:cb:3e:92:76:9a:d9:76:0d:6c:46:4f:7b: a9:ae:06:fb:f4:ee:8a:4e:05:b6:89:2a:91:28:fd:7f:d3:24: 07:33:9f:f3:5b:1e:83:33:e8:ca:0a:eb:57:3e:84:fc:60:bf: 9b:eb:88:1c:a9:42:db:9c:15:ff:11:8f:f1:74:f1:05:fb:fd: c0:b4:6b:1d:ec:39:1c:34:52:f5:4e:4f:da:4b:e1:83:7a:dc: fe:2b:98:e0:7d:4a:f4:40:46:f3:77:98:7f:1a:63:1a:b9:43: 93:fc:3a:f9:cb:93:ed:32:0e:49:c1:4e:84:67:f7:2c:3e:a6: 15:73:74:9c:b5:7e:0d:0f:c0:89:a0:89:22:c3:f7:d1:c7:dc: 26:31:d1:00:bc:32:85:c6:e3:4b:96:30:87:f0:74:5b:f3:c1: d5:f9:92:61:30:87:71:21:0e:67:7a:a2:af:44:26:a1:82:2a: 83:df:6b:21:9a:0a:61:cf:2e:ca:ae:c4:eb:13:33:80:c0:f2: 60:c0:d0:c4:3d:03:87:3a:53:10:80:04:a6:2f:9d:8c:bc:ab: 7f:72:f7:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbqF/2EnvSeTLHUIB9gRdLKZz43cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExNzJGMDhFN0E2OUI5MDgzNENFMEJBMEU1RjFCMDFD M0ZENTQzQzAeFw0yNTExMDMxMTAxMzdaFw0yNTExMDQxMTI4MzdaMDMxMTAvBgNV BAMTKDRCQzU5OTk1QzcwRDgzRTBGNDIwOTY5MTBBOTE5MjgxNTI4MzAzMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDah/+tDxNWWCobF8PDDaoUfJHB vV4dP/Sj8qaeyw7S92CE1sINoy7w65oPO/h3+q6QhM86HkcnJe6uwHmYBAuPjW/6 LDvf/5mVsnrXvQSdbjzHP92TC4DoLoShFKCIXBI4ZYSha9WImDgkMUX4l2usDbQF UeHLC0DkeEyJyNuI8obkMyfs93UsmrXulszOhSlU0oOcKZ2PA7RaL6cxXHsivyV7 YDBXOYanBkHwnivJINYwyD4wprfuJABi8qt5uY9X0pZs0PjOtRt7HJ1z7aoU8WUq xuOiAIHYv6MmEFqBXsS45ujgMcZBYOwfKs+pjh3gnYFZRHJr41FeTwRMy9uLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUS8WZlccNg+D0IJaRCpGSgVKDAyAwHwYDVR0j BBgwFoAUQRcvCOemm5CDTOC6Dl8bAcP9VDwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzE2VUY1clFqUmh2ZDI5alBzMUh0ZEZOcndqVmRBRWRTQ1pvU0Q2Y2lp bVovMC80MTE3MkYwOEU3QTY5QjkwODM0Q0UwQkEwRTVGMUIwMUMzRkQ1NDNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxMTcyRjA4RTdBNjlCOTA4 MzRDRTBCQTBFNUYxQjAxQzNGRDU0M0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NzE2VUY1clFqUmh2ZDI5alBzMUh0ZEZOcndqVmRBRWRTQ1pvU0Q2Y2lpbVovMC80 MTE3MkYwOEU3QTY5QjkwODM0Q0UwQkEwRTVGMUIwMUMzRkQ1NDNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcialpr+/BEmjnyjik0k9FurfSZFYvyok3ACPU73sCSc2CAgCwOPCLFxtyz6S dprZdg1sRk97qa4G+/Tuik4FtokqkSj9f9MkBzOf81segzPoygrrVz6E/GC/m+uI HKlC25wV/xGP8XTxBfv9wLRrHew5HDRS9U5P2kvhg3rc/iuY4H1K9EBG83eYfxpj GrlDk/w6+cuT7TIOScFOhGf3LD6mFXN0nLV+DQ/AiaCJIsP30cfcJjHRALwyhcbj S5Ywh/B0W/PB1fmSYTCHcSEOZ3qir0QmoYIqg99rIZoKYc8uyq7E6xMzgMDyYMDQ xD0DhzpTEIAEpi+djLyrf3L3xQ== -----END CERTIFICATE-----Generated at Tue Nov 4 00:12:14 2025 by rpki-client