$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.mft File: 4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.mft (raw, json) Hash identifier: r2ZfO+rPxUycG7IpbhJ/f7F6R2kARqRGqggMzXHTjKE= Subject key identifier: 5D:A0:27:D9:4A:C8:F6:82:00:3A:F9:94:98:B0:53:5E:22:EB:72:86 Authority key identifier: 4B:A0:BB:3B:0B:41:C1:99:EC:E0:C0:52:5E:C5:45:C2:9A:7E:72:5D Certificate issuer: /CN=4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D Certificate serial: 0ACCD65CC636386F78E45C181C2D122E90E5CED2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.mft Manifest number: 04 Signing time: Wed 05 Nov 2025 23:34:02 +0000 Manifest this update: Wed 05 Nov 2025 23:29:02 +0000 Manifest next update: Fri 07 Nov 2025 00:02:02 +0000 Files and hashes: 1: 323830343a323839633a3a2f33322d3332203d3e20323633393730.roa (hash: hanX1n7pZBfYj0MtzUDESDsAiHLpUk0WL8EIKdSOJRg=) 2: 4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.crl (hash: vhzFquy+wTBI9Op70tsNFC7laPRtB7IuQJsKyzq8bIg=) 3: 3133382e3235352e36342e302f32342d3234203d3e20323633393730.roa (hash: HyIF1owTWhNZKbdL4j/tFy1XH29oqm2BMRIZjyYDS4c=) 4: 3133382e3235352e36372e302f32342d3234203d3e20323633393730.roa (hash: jJ7fDKdTUjf6ULIYlTuCQZNNpz+0h5bEVFWszk21/Kk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.crl rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 07 Nov 2025 00:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:cc:d6:5c:c6:36:38:6f:78:e4:5c:18:1c:2d:12:2e:90:e5:ce:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D Validity Not Before: Nov 5 23:29:02 2025 GMT Not After : Nov 7 00:02:02 2025 GMT Subject: CN=5DA027D94AC8F682003AF99498B0535E22EB7286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f3:4a:1d:12:b6:40:d1:bd:9b:e5:d1:c1:0a: 42:ce:af:89:eb:5d:ba:f7:3f:29:d2:3e:44:78:c7: b8:bc:de:e0:0f:24:59:07:fa:97:59:70:30:d4:0b: d3:00:30:68:4b:d4:47:3b:0a:36:1b:be:a7:e9:72: 88:03:36:35:52:f1:90:56:a6:b9:d8:c6:10:a4:4b: b6:e3:05:28:e2:45:da:81:02:b5:72:c8:82:17:29: 76:a8:82:e0:1f:76:0c:2a:6d:8f:c3:32:8a:85:cc: 6a:ea:12:87:b1:89:e3:c4:18:8f:aa:bc:82:8d:90: e7:7c:9f:b2:7a:85:c2:0d:e0:a3:c1:67:18:7f:2f: d5:0e:02:47:c9:fc:93:38:84:a2:64:a9:df:0a:65: 87:86:fa:b5:f1:c9:dc:ff:5a:30:24:8f:2e:96:63: b5:9d:c1:73:48:ec:6b:ed:37:06:78:23:66:c0:e7: eb:72:1b:31:a8:6b:9d:4b:1b:97:34:ca:5a:03:a0: 12:af:32:5a:61:4e:12:6d:5c:16:7f:39:ed:c0:a7: 3f:6e:84:cd:ae:45:de:77:31:2a:48:48:d9:ba:ac: 12:fb:46:91:c9:c3:f0:a4:d2:b7:a3:c1:fb:2a:a4: a9:b7:f6:a8:cc:5d:dd:26:31:87:9d:fc:78:d1:fd: cd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A0:27:D9:4A:C8:F6:82:00:3A:F9:94:98:B0:53:5E:22:EB:72:86 X509v3 Authority Key Identifier: keyid:4B:A0:BB:3B:0B:41:C1:99:EC:E0:C0:52:5E:C5:45:C2:9A:7E:72:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:05:2b:30:01:17:20:12:c1:e4:8d:ec:6b:f4:fd:4c:56:4f: c5:b9:f9:14:03:f7:b6:0d:76:b3:6d:84:45:46:10:b8:b4:ab: a8:e7:ee:9f:c9:51:73:fb:c3:88:80:5b:b4:35:7c:dc:c2:21: 96:3e:fd:97:17:c5:cd:2b:df:8b:17:2a:81:a7:61:d7:fb:d2: f2:87:4e:e6:2c:09:6a:42:56:43:83:2f:1d:fb:34:17:6c:8b: 7a:77:10:8e:a4:67:81:6c:c7:53:73:22:b4:1c:07:ba:ef:78: 74:2c:cc:37:a2:28:04:33:2e:9d:87:99:01:5b:43:e8:3f:aa: 9b:c2:c9:90:06:7d:00:a5:eb:a5:5c:0c:d1:b1:02:54:a4:6a: 59:d0:95:12:1f:31:4c:fd:00:10:97:e4:13:29:2e:93:0d:02: ea:49:4c:2b:fd:87:d2:66:58:23:82:2f:ac:86:f5:7f:d0:04: 12:00:f1:7b:76:c3:77:fc:2f:0c:f9:2d:50:13:03:84:ac:9f: 71:82:14:51:a1:8d:38:c6:b0:e5:8a:53:58:8d:81:df:59:ff: 42:78:22:e8:25:d4:df:07:a0:e9:23:a9:80:e2:d4:63:fd:a4: 97:c7:79:98:60:74:ca:29:6c:4c:83:dd:2f:f9:f4:6c:bb:e4: a5:15:91:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCszWXMY2OG945FwYHC0SLpDlztIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBMEJCM0IwQjQxQzE5OUVDRTBDMDUyNUVDNTQ1QzI5 QTdFNzI1RDAeFw0yNTExMDUyMzI5MDJaFw0yNTExMDcwMDAyMDJaMDMxMTAvBgNV BAMTKDVEQTAyN0Q5NEFDOEY2ODIwMDNBRjk5NDk4QjA1MzVFMjJFQjcyODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX80odErZA0b2b5dHBCkLOr4nr Xbr3PynSPkR4x7i83uAPJFkH+pdZcDDUC9MAMGhL1Ec7CjYbvqfpcogDNjVS8ZBW prnYxhCkS7bjBSjiRdqBArVyyIIXKXaoguAfdgwqbY/DMoqFzGrqEoexiePEGI+q vIKNkOd8n7J6hcIN4KPBZxh/L9UOAkfJ/JM4hKJkqd8KZYeG+rXxydz/WjAkjy6W Y7WdwXNI7GvtNwZ4I2bA5+tyGzGoa51LG5c0yloDoBKvMlphThJtXBZ/Oe3Apz9u hM2uRd53MSpISNm6rBL7RpHJw/Ck0rejwfsqpKm39qjMXd0mMYed/HjR/c3fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXaAn2UrI9oIAOvmUmLBTXiLrcoYwHwYDVR0j BBgwFoAUS6C7OwtBwZns4MBSXsVFwpp+cl0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNn bWUvMC80QkEwQkIzQjBCNDFDMTk5RUNFMEMwNTI1RUM1NDVDMjlBN0U3MjVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCQTBCQjNCMEI0MUMxOTlF Q0UwQzA1MjVFQzU0NUMyOUE3RTcyNUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNnbWUvMC80 QkEwQkIzQjBCNDFDMTk5RUNFMEMwNTI1RUM1NDVDMjlBN0U3MjVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWAUrMAEXIBLB5I3sa/T9TFZPxbn5FAP3tg12s22ERUYQuLSrqOfun8lRc/vD iIBbtDV83MIhlj79lxfFzSvfixcqgadh1/vS8odO5iwJakJWQ4MvHfs0F2yLencQ jqRngWzHU3MitBwHuu94dCzMN6IoBDMunYeZAVtD6D+qm8LJkAZ9AKXrpVwM0bEC VKRqWdCVEh8xTP0AEJfkEykukw0C6klMK/2H0mZYI4IvrIb1f9AEEgDxe3bDd/wv DPktUBMDhKyfcYIUUaGNOMaw5YpTWI2B31n/Qngi6CXU3weg6SOpgOLUY/2kl8d5 mGB0yilsTIPdL/n0bLvkpRWR6g== -----END CERTIFICATE-----Generated at Thu Nov 6 04:41:06 2025 by rpki-client