$ rpki-client -vvf rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft File: 484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft (raw, json) Hash identifier: kysIcJ610aqZvbl/sna1sYBItbqSiiCXZ9ZqbxutJOw= Subject key identifier: EC:93:2E:07:CB:98:78:FE:3D:D7:49:60:38:34:DA:40:1C:2C:7E:EF Authority key identifier: 48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3 Certificate issuer: /CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3 Certificate serial: 364C5D2A879D5A8F765AC6745AEB94532822CF80 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer Subject info access: rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft Manifest number: 02FE Signing time: Mon 03 Nov 2025 05:56:37 +0000 Manifest this update: Mon 03 Nov 2025 05:51:37 +0000 Manifest next update: Tue 04 Nov 2025 05:58:37 +0000 Files and hashes: 1: 323830343a383034303a3a2f33322d3332203d3e20323731373339.roa (hash: k8/Tw+SgoiL84ZsrYLWHWBEWIwVDj1v9BVLZaSH4bik=) 2: 484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl (hash: zuXuldABAOBuRaICIq31F1/q1Lb54oeQKajO7uJxcOM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:4c:5d:2a:87:9d:5a:8f:76:5a:c6:74:5a:eb:94:53:28:22:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3 Validity Not Before: Nov 3 05:51:37 2025 GMT Not After : Nov 4 05:58:37 2025 GMT Subject: CN=EC932E07CB9878FE3DD749603834DA401C2C7EEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:06:0c:fe:0b:79:bb:d2:0e:d0:08:06:38:60: d7:bf:ef:67:fd:e0:c4:85:87:dc:cf:b7:72:1d:9e: cd:aa:a6:bb:69:c5:42:53:0d:2a:88:89:eb:96:4b: 47:9e:6c:be:48:23:70:b8:ed:11:bb:e2:5f:2c:16: 93:18:9a:1b:08:50:f9:f0:b3:aa:05:e0:d7:f0:83: 73:e1:58:3e:62:73:91:bb:f9:3b:a7:7d:13:b4:a6: d7:d8:a0:5a:71:49:0e:fd:5a:83:f7:8c:01:39:23: 2a:08:25:60:16:06:f3:f9:bd:d7:c1:56:40:03:e8: 72:4b:4a:1b:0f:c8:15:ea:f8:a7:94:03:40:95:a7: 7a:a3:f4:ac:45:b4:91:af:1f:16:08:4e:5c:7c:f3: 45:d8:ea:59:17:de:cd:20:31:01:19:f9:24:2a:dd: ff:c2:09:0a:db:0b:61:87:a2:75:2a:18:f3:b7:ee: 6e:dc:79:d0:61:2b:ce:4b:79:a7:06:21:01:f8:48: e0:ff:7f:a6:29:5d:51:29:6a:ae:5d:eb:ef:a6:da: 5b:17:7d:0d:ec:a8:cb:82:bd:dc:33:14:4a:13:ee: c1:ab:86:4c:55:5b:1f:c8:b0:69:ca:17:51:28:c5: eb:21:8f:5c:34:9d:6b:61:54:55:6e:74:e6:1f:d4: 90:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:93:2E:07:CB:98:78:FE:3D:D7:49:60:38:34:DA:40:1C:2C:7E:EF X509v3 Authority Key Identifier: keyid:48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ea:13:a8:aa:5c:9c:41:91:fe:0d:79:a5:87:98:0d:15:30: 4f:79:9b:9b:af:72:d1:5f:96:f9:26:a2:41:be:c5:98:3a:14: ed:7b:40:c1:44:49:2c:eb:9a:c2:77:54:9b:28:66:08:b2:2a: 90:7f:74:87:d9:a3:91:16:06:26:44:c0:3d:9b:f8:f2:0b:4e: 67:2c:17:bb:07:9c:29:96:f4:67:7b:70:7c:22:51:cd:2c:1d: 18:f7:98:2d:25:b3:c0:48:0e:97:e6:7d:a7:b2:f2:14:65:d5: b8:7d:3b:0a:68:6e:e1:30:50:33:a5:55:6c:6c:35:a1:1c:e4: 74:49:0c:3e:ec:02:cd:b7:31:f0:d5:63:68:78:87:a0:14:75: d6:ac:d1:0d:3b:c1:16:b8:bd:a4:0d:65:bc:49:15:42:dd:5a: 18:6b:ef:72:79:39:d5:9f:6c:fb:0c:9e:a6:82:4a:31:de:d8: be:26:28:d3:ba:e2:22:31:1c:bf:76:c9:74:75:5d:4b:71:2e: a2:7f:d3:99:f4:07:94:94:d0:84:b4:83:ca:74:03:9d:d0:57: 20:c7:c6:ae:32:74:90:be:b3:bf:fc:82:e2:e8:94:02:2d:c3: 69:83:75:5e:86:08:e0:1d:c0:da:66:4c:c4:90:2f:a6:f4:67: 00:ad:9d:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNkxdKoedWo92WsZ0WuuUUygiz4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg0Q0FGRUQxN0QwMkM0NTU1RTVENDU4NjlGMzBFQ0FB N0UxRTVFMzAeFw0yNTExMDMwNTUxMzdaFw0yNTExMDQwNTU4MzdaMDMxMTAvBgNV BAMTKEVDOTMyRTA3Q0I5ODc4RkUzREQ3NDk2MDM4MzREQTQwMUMyQzdFRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYBgz+C3m70g7QCAY4YNe/72f9 4MSFh9zPt3Idns2qprtpxUJTDSqIieuWS0eebL5II3C47RG74l8sFpMYmhsIUPnw s6oF4Nfwg3PhWD5ic5G7+TunfRO0ptfYoFpxSQ79WoP3jAE5IyoIJWAWBvP5vdfB VkAD6HJLShsPyBXq+KeUA0CVp3qj9KxFtJGvHxYITlx880XY6lkX3s0gMQEZ+SQq 3f/CCQrbC2GHonUqGPO37m7cedBhK85LeacGIQH4SOD/f6YpXVEpaq5d6++m2lsX fQ3sqMuCvdwzFEoT7sGrhkxVWx/IsGnKF1Eoxeshj1w0nWthVFVudOYf1JCPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7JMuB8uYeP4910lgODTaQBwsfu8wHwYDVR0j BBgwFoAUSEyv7RfQLEVV5dRYafMOyqfh5eMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGhUeVptaE1CcEN2TUJ1REhOVmZzSldvUnR5dE5aUjhQWUNQUU52Zktv S0cvMS80ODRDQUZFRDE3RDAyQzQ1NTVFNUQ0NTg2OUYzMEVDQUE3RTFFNUUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4NENBRkVEMTdEMDJDNDU1 NUU1RDQ1ODY5RjMwRUNBQTdFMUU1RTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGhUeVptaE1CcEN2TUJ1REhOVmZzSldvUnR5dE5aUjhQWUNQUU52ZktvS0cvMS80 ODRDQUZFRDE3RDAyQzQ1NTVFNUQ0NTg2OUYzMEVDQUE3RTFFNUUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHuoTqKpcnEGR/g15pYeYDRUwT3mbm69y0V+W+SaiQb7FmDoU7XtAwURJLOua wndUmyhmCLIqkH90h9mjkRYGJkTAPZv48gtOZywXuwecKZb0Z3twfCJRzSwdGPeY LSWzwEgOl+Z9p7LyFGXVuH07Cmhu4TBQM6VVbGw1oRzkdEkMPuwCzbcx8NVjaHiH oBR11qzRDTvBFri9pA1lvEkVQt1aGGvvcnk51Z9s+wyepoJKMd7YviYo07riIjEc v3bJdHVdS3Euon/TmfQHlJTQhLSDynQDndBXIMfGrjJ0kL6zv/yC4uiUAi3DaYN1 XoYI4B3A2mZMxJAvpvRnAK2dCA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:08:48 2025 by rpki-client