$ rpki-client -vvf rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft File: 4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft (raw, json) Hash identifier: nWyNXmhGAGIC1F49Lpb1C25e3BLprMw5WS/RtZuZqvo= Subject key identifier: D2:D5:71:FE:AC:CB:A8:02:46:0E:C2:D4:C7:D7:24:A5:C5:03:FF:3F Authority key identifier: 43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52 Certificate issuer: /CN=4373021A1019537C2A9D84FF03720B0ECF4EBB52 Certificate serial: 2E256E293440944F78EE65DCDBD2F93D8B31FDCD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer Subject info access: rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft Manifest number: 0304 Signing time: Mon 03 Nov 2025 14:48:43 +0000 Manifest this update: Mon 03 Nov 2025 14:43:43 +0000 Manifest next update: Tue 04 Nov 2025 18:04:43 +0000 Files and hashes: 1: 3137392e3130392e38302e302f32312d3234203d3e20323633353832.roa (hash: ++7XkHPA585M/eeSXx5BL8qVhQzFEXmWytGh5jiVfwg=) 2: 3133312e3235352e3230342e302f32322d3234203d3e20323633353832.roa (hash: hm3uGP+sqMT7YL6h5NVjn1Y25CaqenSBBJIEaErp57Q=) 3: 4373021A1019537C2A9D84FF03720B0ECF4EBB52.crl (hash: 5zZEPT500VkY2+hH92xJ78arEokP9EoVqKw8swYNY1o=) 4: 323830343a6636303a3a2f33322d3438203d3e20323633353832.roa (hash: eq30N5nx+NKrW26nq2End5vimjAprH6CikeP1aqAWN0=) 5: 3136382e3139362e38302e302f32322d3234203d3e20323633353832.roa (hash: ++6D9p5e2bAvr8bdBnmFrtwQsAnPXHS9a7ZLOY2gfic=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.crl rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 18:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:25:6e:29:34:40:94:4f:78:ee:65:dc:db:d2:f9:3d:8b:31:fd:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4373021A1019537C2A9D84FF03720B0ECF4EBB52 Validity Not Before: Nov 3 14:43:43 2025 GMT Not After : Nov 4 18:04:43 2025 GMT Subject: CN=D2D571FEACCBA802460EC2D4C7D724A5C503FF3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:b6:04:1b:f6:d7:20:e5:84:0d:be:3a:48: ef:e6:68:e0:d6:a0:73:44:65:f0:46:c0:8c:cc:5e: 79:a4:54:e5:dd:c8:72:bd:0b:ef:6f:2c:ca:29:25: 71:65:ca:b2:bb:40:f3:f0:f6:49:a4:2c:e7:dc:60: 42:73:3d:2d:60:28:b8:2e:f6:ca:94:c1:a2:42:eb: 12:25:d2:b5:c0:0b:8f:49:90:23:96:b0:cb:29:1a: 0f:58:0b:ed:84:67:a8:65:6e:2c:2b:bb:68:44:33: 02:c5:e1:ed:57:c9:cf:54:a1:86:fe:77:d9:a9:f6: 05:df:71:00:31:4f:68:dc:55:f6:ad:34:be:09:6a: a6:93:1b:33:84:16:6a:7e:7c:86:ac:7b:ea:c0:4f: 02:34:99:f9:1d:8e:1f:fb:ed:c4:a9:6b:b9:b0:34: 75:49:fb:84:26:86:e8:11:6a:56:98:44:35:59:3d: 59:69:3a:3d:7e:b7:b2:4d:dd:fa:0a:56:f5:20:1d: f0:57:e6:df:95:61:35:77:6d:09:95:ba:76:36:66: 21:f6:8c:b5:c0:11:53:c8:19:d8:69:6f:c4:92:66: b2:c8:15:63:82:49:cc:b5:07:ab:d3:b4:e8:bd:02: 31:ed:7a:53:31:05:5d:3e:63:a6:1c:41:d8:11:e4: fc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D5:71:FE:AC:CB:A8:02:46:0E:C2:D4:C7:D7:24:A5:C5:03:FF:3F X509v3 Authority Key Identifier: keyid:43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f7:57:92:d0:97:95:a1:de:17:33:b8:a5:a2:9a:e5:b5:15: ab:de:4d:2d:7f:b4:c0:ec:42:d9:ed:f3:b9:a7:db:c6:be:d1: 41:58:1e:30:ce:c3:ed:1a:ad:a6:60:d0:6d:6c:24:b4:2c:5f: 1e:6d:cd:e5:ee:b4:05:85:5e:f3:9c:bf:0d:62:23:19:21:f7: f5:b2:56:74:da:5a:a7:3a:0b:aa:c5:6d:33:35:50:d9:db:a9: 21:fd:89:de:19:44:64:d1:78:18:1c:71:91:d6:1c:82:cf:d1: c1:ae:05:3f:ae:82:73:24:53:b3:4c:5f:8b:63:82:c0:ce:e6: f9:c7:ac:1d:26:23:be:f1:48:d3:63:36:3b:f4:7e:de:25:47: 85:5c:8b:8e:4f:6b:6e:72:7e:03:55:e4:76:b9:12:0f:60:5e: 4c:86:f6:97:78:3b:b1:38:b4:f4:2e:b6:02:9a:73:f6:8a:cc: bc:34:9f:52:4d:01:0d:ef:21:1c:40:a9:93:dc:27:67:09:28: e8:cf:5d:79:14:02:bd:7c:dc:64:a8:56:36:dc:4a:26:93:24: 8e:65:74:2c:cd:a0:98:81:c7:29:a4:e8:b9:2c:55:2a:d0:5b: bb:fd:2b:ed:ff:b1:d5:49:43:82:b5:01:74:85:b3:ea:ed:d0: 4f:36:d4:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULiVuKTRAlE947mXc29L5PYsx/c0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM3MzAyMUExMDE5NTM3QzJBOUQ4NEZGMDM3MjBCMEVD RjRFQkI1MjAeFw0yNTExMDMxNDQzNDNaFw0yNTExMDQxODA0NDNaMDMxMTAvBgNV BAMTKEQyRDU3MUZFQUNDQkE4MDI0NjBFQzJENEM3RDcyNEE1QzUwM0ZGM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBErYEG/bXIOWEDb46SO/maODW oHNEZfBGwIzMXnmkVOXdyHK9C+9vLMopJXFlyrK7QPPw9kmkLOfcYEJzPS1gKLgu 9sqUwaJC6xIl0rXAC49JkCOWsMspGg9YC+2EZ6hlbiwru2hEMwLF4e1Xyc9UoYb+ d9mp9gXfcQAxT2jcVfatNL4JaqaTGzOEFmp+fIase+rATwI0mfkdjh/77cSpa7mw NHVJ+4QmhugRalaYRDVZPVlpOj1+t7JN3foKVvUgHfBX5t+VYTV3bQmVunY2ZiH2 jLXAEVPIGdhpb8SSZrLIFWOCScy1B6vTtOi9AjHtelMxBV0+Y6YcQdgR5PwVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0tVx/qzLqAJGDsLUx9ckpcUD/z8wHwYDVR0j BBgwFoAUQ3MCGhAZU3wqnYT/A3ILDs9Ou1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVNHYjlvU3h1ekVjNGNjUHVEelV0czM3QVVNb21iaHRYNTFQZTI1czk4 RmgvMS80MzczMDIxQTEwMTk1MzdDMkE5RDg0RkYwMzcyMEIwRUNGNEVCQjUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNzMwMjFBMTAxOTUzN0My QTlEODRGRjAzNzIwQjBFQ0Y0RUJCNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVNHYjlvU3h1ekVjNGNjUHVEelV0czM3QVVNb21iaHRYNTFQZTI1czk4RmgvMS80 MzczMDIxQTEwMTk1MzdDMkE5RDg0RkYwMzcyMEIwRUNGNEVCQjUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh/dXktCXlaHeFzO4paKa5bUVq95NLX+0wOxC2e3zuafbxr7RQVgeMM7D7Rqt pmDQbWwktCxfHm3N5e60BYVe85y/DWIjGSH39bJWdNpapzoLqsVtMzVQ2dupIf2J 3hlEZNF4GBxxkdYcgs/Rwa4FP66CcyRTs0xfi2OCwM7m+cesHSYjvvFI02M2O/R+ 3iVHhVyLjk9rbnJ+A1XkdrkSD2BeTIb2l3g7sTi09C62Appz9orMvDSfUk0BDe8h HECpk9wnZwko6M9deRQCvXzcZKhWNtxKJpMkjmV0LM2gmIHHKaTouSxVKtBbu/0r 7f+x1UlDgrUBdIWz6u3QTzbUiA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:25:42 2025 by rpki-client