$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft File: 041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft (raw, json) Hash identifier: tmFLzvTmrhYBKBsqw25LsMNCgvc8m1ghWv9vVKhz8f8= Subject key identifier: 74:23:AA:97:DA:96:A9:EC:B2:BE:FD:1B:16:D3:CF:52:67:B0:4E:24 Authority key identifier: 04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01 Certificate issuer: /CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401 Certificate serial: 085E4186823857A42A87E36F147569D8E0E5568E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer Subject info access: rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft Manifest number: 0114 Signing time: Mon 03 Nov 2025 08:43:01 +0000 Manifest this update: Mon 03 Nov 2025 08:38:01 +0000 Manifest next update: Tue 04 Nov 2025 09:51:01 +0000 Files and hashes: 1: 3138362e322e3235312e302f32342d3234203d3e20323636313633.roa (hash: T942+I22olKUoF8g7UuB2ov3yuULn7rkquCI51mc40w=) 2: 041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl (hash: EER+6xAolV+wM39QxPzKzViGdMGMh1me/dUbu1IrQdU=) 3: 323830343a336261383a3a2f33322d3438203d3e20323636313633.roa (hash: ZUYmh0T71CzQM4yz2odlnvMCE7L2ORZB0YBQinBzj1Q=) 4: 3138362e322e3234382e302f32332d3234203d3e20323636313633.roa (hash: /fbOsOYs6AxQese14fmYriT6Fyl3hntENuETfI0hxzo=) 5: 3138362e322e3235302e302f32342d3234203d3e20323636313633.roa (hash: Kpf2RKCB6lOVWwZlKUC3hbK07a2qb/p0d32tUukbR/c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:5e:41:86:82:38:57:a4:2a:87:e3:6f:14:75:69:d8:e0:e5:56:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401 Validity Not Before: Nov 3 08:38:01 2025 GMT Not After : Nov 4 09:51:01 2025 GMT Subject: CN=7423AA97DA96A9ECB2BEFD1B16D3CF5267B04E24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:76:44:b1:63:d7:d9:92:a7:ae:c0:d7:05:63: a7:2c:23:33:e1:0d:95:34:70:45:f7:d7:36:12:15: 0d:97:0f:62:90:81:da:e1:92:60:98:5c:5d:06:92: cf:02:e3:fa:6a:8f:8f:08:20:92:6f:83:fd:20:26: 76:6a:c0:16:82:76:0c:ca:95:22:f2:bd:cc:a7:00: 99:2b:a6:16:41:7b:ea:50:25:c2:46:eb:1d:c3:d9: 4e:73:c7:5c:4e:4b:85:7e:3d:f7:f9:8c:8a:ab:c0: 52:88:d0:27:2e:0a:58:7f:a1:f0:7f:5e:ad:e7:da: c8:9b:8f:46:0a:77:f2:0c:34:be:8d:4e:c3:be:24: df:d5:c0:11:39:09:b5:7a:ca:4e:f9:fc:a3:b7:78: 16:e6:c2:d2:5c:1c:cf:9b:a3:6a:a7:65:08:47:70: 69:07:c5:47:13:06:85:b7:3a:2f:f7:02:85:b3:2f: 64:da:5d:0a:c5:62:d8:5a:49:72:7c:a0:43:a9:96: 04:42:38:86:bf:3e:09:f2:8b:75:f3:9f:06:74:8a: 1e:ce:92:70:00:b6:3d:7f:da:8e:cf:a3:00:63:0b: cf:c3:3a:23:1c:d5:e5:85:9c:72:8a:dd:2d:c5:70: e9:c8:55:d4:34:54:2a:1a:47:d2:34:95:0f:a9:cd: 83:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:23:AA:97:DA:96:A9:EC:B2:BE:FD:1B:16:D3:CF:52:67:B0:4E:24 X509v3 Authority Key Identifier: keyid:04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:72:75:df:d2:fb:8d:98:33:23:7c:d9:16:23:8c:d3:51:92: 3d:b6:74:91:0f:c4:db:f1:76:e2:64:f9:96:9b:66:17:c0:9b: 27:c5:08:df:4c:e3:53:8e:b8:c4:f8:9c:87:7b:7c:be:61:16: 79:05:08:4d:dd:9a:3d:41:48:22:4b:b8:f0:22:ea:29:16:9e: 3e:19:e4:e4:e0:d4:39:ae:d0:71:98:3d:ad:5e:26:eb:64:5e: fb:bc:96:4f:ad:80:fd:94:12:97:56:8c:df:18:d5:ee:43:cb: 77:13:b9:1d:3c:01:09:b0:49:5b:9d:07:f1:7a:17:18:01:8e: ca:a9:44:b4:67:71:2a:64:56:00:42:8f:c5:fd:cd:a4:20:c9: fe:c0:8e:99:23:5c:c7:b3:90:35:99:4f:01:17:86:00:f0:ea: bc:33:fb:85:39:c0:ba:9d:7b:a0:b2:ad:95:0e:58:0f:8e:10: d2:f6:bd:af:7a:bd:23:ba:2b:b2:a5:93:b1:b9:b7:23:a5:94: e1:ae:6e:81:64:83:08:42:ed:f8:3b:d0:19:c6:10:3c:ef:f1: 6d:f6:23:88:60:ea:7d:af:96:ea:ca:0b:03:1e:0e:ed:aa:af: f3:9b:55:a9:af:f3:4b:54:42:f2:77:d2:55:da:ac:9f:ca:56: 27:5a:30:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCF5BhoI4V6Qqh+NvFHVp2ODlVo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQxQjQ0QTlGOTZBMkU4MEVBMTkyODE5QkU5NTMzRkY3 Q0UxRjQwMTAeFw0yNTExMDMwODM4MDFaFw0yNTExMDQwOTUxMDFaMDMxMTAvBgNV BAMTKDc0MjNBQTk3REE5NkE5RUNCMkJFRkQxQjE2RDNDRjUyNjdCMDRFMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQdkSxY9fZkqeuwNcFY6csIzPh DZU0cEX31zYSFQ2XD2KQgdrhkmCYXF0Gks8C4/pqj48IIJJvg/0gJnZqwBaCdgzK lSLyvcynAJkrphZBe+pQJcJG6x3D2U5zx1xOS4V+Pff5jIqrwFKI0CcuClh/ofB/ Xq3n2sibj0YKd/IMNL6NTsO+JN/VwBE5CbV6yk75/KO3eBbmwtJcHM+bo2qnZQhH cGkHxUcTBoW3Oi/3AoWzL2TaXQrFYthaSXJ8oEOplgRCOIa/Pgnyi3XznwZ0ih7O knAAtj1/2o7PowBjC8/DOiMc1eWFnHKK3S3FcOnIVdQ0VCoaR9I0lQ+pzYMNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdCOql9qWqeyyvv0bFtPPUmewTiQwHwYDVR0j BBgwFoAUBBtEqflqLoDqGSgZvpUz/3zh9AEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUpLUHNUYzV2V2JDMmtoRmpFeWsyQnU1QkJtM3p0cjVzMXRuZ0R3VHR1 a2IvMC8wNDFCNDRBOUY5NkEyRTgwRUExOTI4MTlCRTk1MzNGRjdDRTFGNDAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0MUI0NEE5Rjk2QTJFODBF QTE5MjgxOUJFOTUzM0ZGN0NFMUY0MDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUpLUHNUYzV2V2JDMmtoRmpFeWsyQnU1QkJtM3p0cjVzMXRuZ0R3VHR1a2IvMC8w NDFCNDRBOUY5NkEyRTgwRUExOTI4MTlCRTk1MzNGRjdDRTFGNDAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOXJ139L7jZgzI3zZFiOM01GSPbZ0kQ/E2/F24mT5lptmF8CbJ8UI30zjU464 xPich3t8vmEWeQUITd2aPUFIIku48CLqKRaePhnk5ODUOa7QcZg9rV4m62Re+7yW T62A/ZQSl1aM3xjV7kPLdxO5HTwBCbBJW50H8XoXGAGOyqlEtGdxKmRWAEKPxf3N pCDJ/sCOmSNcx7OQNZlPAReGAPDqvDP7hTnAup17oLKtlQ5YD44Q0va9r3q9I7or sqWTsbm3I6WU4a5ugWSDCELt+DvQGcYQPO/xbfYjiGDqfa+W6soLAx4O7aqv85tV qa/zS1RC8nfSVdqsn8pWJ1owHA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:32:06 2025 by rpki-client