$ rpki-client -vvf rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.mft File: 1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.mft (raw, json) Hash identifier: OtbhvgdPwGhIOLE/x+eamDr7MtskJ+z92nlwjvmYZFg= Subject key identifier: F4:C7:D3:15:A0:97:AF:43:ED:31:66:71:75:15:4B:9F:43:CD:1E:F3 Authority key identifier: 1B:10:04:FC:54:CD:C4:0D:C5:66:7B:1D:6B:18:3C:CE:A2:DA:4F:FD Certificate issuer: /CN=1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD Certificate serial: 5047A4B116C9A782FDE307867E53F7117FA4B921 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.mft Manifest number: 0303 Signing time: Mon 03 Nov 2025 21:13:39 +0000 Manifest this update: Mon 03 Nov 2025 21:08:39 +0000 Manifest next update: Wed 05 Nov 2025 00:50:39 +0000 Files and hashes: 1: 323830343a366164633a3a2f33322d313238203d3e20323730333632.roa (hash: upt5TT8FOe5QeiqNDsn3IDhYY1D4DQPiIPI86XKa+co=) 2: 3139302e38392e36302e302f32322d3332203d3e20323730333632.roa (hash: fPEm+NpCAcAsprkPLhJ4egK5AQYpLpE+TEJKErpEX0k=) 3: 1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.crl (hash: YG3ui2aiwZegWPUH25GWZFBT/LSjUEZXcaStmE5Fm40=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.crl rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 00:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:47:a4:b1:16:c9:a7:82:fd:e3:07:86:7e:53:f7:11:7f:a4:b9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD Validity Not Before: Nov 3 21:08:39 2025 GMT Not After : Nov 5 00:50:39 2025 GMT Subject: CN=F4C7D315A097AF43ED31667175154B9F43CD1EF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d7:6d:1c:68:16:85:94:c4:5c:e8:76:7f:bc: bb:57:9d:a0:ab:59:ab:5c:eb:f4:da:92:ff:34:52: 1e:88:a4:c2:04:46:5e:cd:72:c2:ba:ae:63:cb:9c: 56:7b:ec:ae:b4:7d:84:05:ce:8d:8b:50:24:49:02: 46:86:bc:ca:e0:8f:92:4a:db:35:a1:12:26:1b:92: 94:57:e8:a8:83:56:87:1e:0a:f2:6e:d8:1e:6d:e6: c8:70:91:60:fb:98:1c:ac:ca:5e:da:c4:44:d5:98: 05:ab:12:1f:48:fb:80:e4:d2:38:e8:e2:52:44:4a: d9:d9:31:bd:1e:a1:a2:ba:39:49:7a:1e:b7:4f:5f: 60:50:b9:24:bc:73:ea:9a:cb:ba:a8:87:72:44:6c: 5f:89:9b:c5:c8:72:39:5a:f2:0e:4b:c9:6e:46:75: 8e:8b:c6:6b:54:41:63:8e:99:d5:e5:11:67:58:65: fe:52:52:53:fd:ef:40:8f:37:c2:b8:f4:98:bf:ba: 1d:ac:04:ea:a7:4f:5c:46:c4:6e:37:cf:d9:2f:18: 1e:bb:0a:32:07:67:dd:19:91:bd:34:68:0d:20:67: 18:e5:85:37:79:f8:5c:6a:ce:41:d7:d9:60:e4:5c: d9:83:f2:fe:15:6b:95:b6:c5:65:3d:0f:87:df:16: 4e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C7:D3:15:A0:97:AF:43:ED:31:66:71:75:15:4B:9F:43:CD:1E:F3 X509v3 Authority Key Identifier: keyid:1B:10:04:FC:54:CD:C4:0D:C5:66:7B:1D:6B:18:3C:CE:A2:DA:4F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4e:4d:83:f4:20:78:05:a7:d1:71:9f:ef:95:8f:c5:91:3d: e2:b3:09:4d:3c:a5:c9:4b:de:76:f3:19:ee:e3:de:2e:0d:e5: e3:85:94:d6:00:cd:b3:ac:08:d3:22:5e:60:c6:5a:e0:11:f2: f1:82:50:63:79:5c:f9:de:28:60:d8:95:c7:b4:be:1c:bc:ba: 5e:c3:f7:5b:9d:be:59:78:8e:8f:45:35:20:d6:6e:52:c8:d7: 11:d2:c7:c6:3a:da:2b:0d:09:85:32:a6:4e:21:a3:42:5e:5f: 48:58:e4:c6:3f:84:70:64:1a:29:f1:a5:17:1b:57:d8:c4:cd: 8e:e6:a3:4b:8b:5f:e9:03:3a:b2:6e:e5:1a:ef:be:d8:11:81: 86:4d:61:67:e1:49:27:34:78:58:55:4a:4d:c5:11:b6:86:b1: 9a:b7:6f:07:a9:24:25:71:cb:44:1c:6d:d0:62:eb:40:4b:82: a5:29:ef:e2:a2:0d:96:68:7e:9b:30:fa:f8:04:e0:d7:f3:57: 96:5c:23:41:a9:79:1e:42:ed:ca:f9:73:c0:9d:e6:54:af:c0: 83:80:ad:20:b3:fa:a1:63:0c:f0:6c:6f:27:06:da:5f:55:d2: 38:a0:82:2e:b3:36:ac:f8:b0:07:ce:42:53:3b:59:13:8a:6a: ad:a9:a4:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUEeksRbJp4L94weGflP3EX+kuSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIxMDA0RkM1NENEQzQwREM1NjY3QjFENkIxODNDQ0VB MkRBNEZGRDAeFw0yNTExMDMyMTA4MzlaFw0yNTExMDUwMDUwMzlaMDMxMTAvBgNV BAMTKEY0QzdEMzE1QTA5N0FGNDNFRDMxNjY3MTc1MTU0QjlGNDNDRDFFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv120caBaFlMRc6HZ/vLtXnaCr Watc6/Takv80Uh6IpMIERl7NcsK6rmPLnFZ77K60fYQFzo2LUCRJAkaGvMrgj5JK 2zWhEiYbkpRX6KiDVoceCvJu2B5t5shwkWD7mBysyl7axETVmAWrEh9I+4Dk0jjo 4lJEStnZMb0eoaK6OUl6HrdPX2BQuSS8c+qay7qoh3JEbF+Jm8XIcjla8g5LyW5G dY6LxmtUQWOOmdXlEWdYZf5SUlP970CPN8K49Ji/uh2sBOqnT1xGxG43z9kvGB67 CjIHZ90Zkb00aA0gZxjlhTd5+FxqzkHX2WDkXNmD8v4Va5W2xWU9D4ffFk5zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9MfTFaCXr0PtMWZxdRVLn0PNHvMwHwYDVR0j BBgwFoAUGxAE/FTNxA3FZnsdaxg8zqLaT/0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHY5bzR2REtGaHk0UHgzaHczUENGaVN6c250cGUybldzR3A3MjVFbkJ2 ZzUvMi8xQjEwMDRGQzU0Q0RDNDBEQzU2NjdCMUQ2QjE4M0NDRUEyREE0RkZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCMTAwNEZDNTRDREM0MERD NTY2N0IxRDZCMTgzQ0NFQTJEQTRGRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHY5bzR2REtGaHk0UHgzaHczUENGaVN6c250cGUybldzR3A3MjVFbkJ2ZzUvMi8x QjEwMDRGQzU0Q0RDNDBEQzU2NjdCMUQ2QjE4M0NDRUEyREE0RkZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfE5Ng/QgeAWn0XGf75WPxZE94rMJTTylyUvedvMZ7uPeLg3l44WU1gDNs6wI 0yJeYMZa4BHy8YJQY3lc+d4oYNiVx7S+HLy6XsP3W52+WXiOj0U1INZuUsjXEdLH xjraKw0JhTKmTiGjQl5fSFjkxj+EcGQaKfGlFxtX2MTNjuajS4tf6QM6sm7lGu++ 2BGBhk1hZ+FJJzR4WFVKTcURtoaxmrdvB6kkJXHLRBxt0GLrQEuCpSnv4qINlmh+ mzD6+ATg1/NXllwjQal5HkLtyvlzwJ3mVK/Ag4CtILP6oWMM8GxvJwbaX1XSOKCC LrM2rPiwB85CUztZE4pqramksw== -----END CERTIFICATE-----Generated at Tue Nov 4 00:11:38 2025 by rpki-client