$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft File: 4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft (raw, json) Hash identifier: 554bQbbjpk+WCtWvpLKzC3UwE5HDl5K8tBTcQPQ1Jm8= Subject key identifier: 16:A3:E7:DC:EA:C7:1C:1A:45:6C:8A:01:B2:E0:F9:4B:05:A3:A1:56 Authority key identifier: 4E:8B:36:1B:95:AC:54:F0:1D:2E:E4:C1:60:49:02:6E:50:FE:80:7A Certificate issuer: /CN=4E8B361B95AC54F01D2EE4C16049026E50FE807A Certificate serial: 2F3DE6DDA02387A16DF02787E4DF2889CA05FA2D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E8B361B95AC54F01D2EE4C16049026E50FE807A.cer Subject info access: rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft Manifest number: 0134 Signing time: Sun 02 Nov 2025 12:49:43 +0000 Manifest this update: Sun 02 Nov 2025 12:44:43 +0000 Manifest next update: Mon 03 Nov 2025 13:39:43 +0000 Files and hashes: 1: 34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa (hash: 6mJx3EaI4/kttTI8C0WH5cCMzbqxSNFG1eJeT7sazOM=) 2: 323830343a363832343a3a2f33322d313238203d3e20323639363731.roa (hash: 1czHTBydR1SpVEjHKNZV5kiq0fVW2I30z+urcSyjKbY=) 3: 4E8B361B95AC54F01D2EE4C16049026E50FE807A.crl (hash: 0WeQ6NperMy6bXTzjC+Z9NVx0RWn273wsXHrIb1aFxY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.crl rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E8B361B95AC54F01D2EE4C16049026E50FE807A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 13:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3d:e6:dd:a0:23:87:a1:6d:f0:27:87:e4:df:28:89:ca:05:fa:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E8B361B95AC54F01D2EE4C16049026E50FE807A Validity Not Before: Nov 2 12:44:43 2025 GMT Not After : Nov 3 13:39:43 2025 GMT Subject: CN=16A3E7DCEAC71C1A456C8A01B2E0F94B05A3A156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1c:fc:63:61:00:34:13:25:25:11:8e:96:e3: 7c:ed:cb:51:86:55:b4:5c:26:4f:d9:54:94:96:73: 56:0d:ca:1d:ea:84:5e:7c:98:71:23:c8:84:fc:fb: af:29:95:e1:cb:23:1f:c2:b3:50:3e:40:d5:63:7f: 09:7e:ee:5f:c4:4d:dd:2f:7e:b3:34:48:6d:70:0b: ad:9c:36:e1:cb:79:db:27:60:34:01:8e:5c:6a:41: 8a:f7:7f:ed:01:a3:e1:42:93:9a:23:52:14:b2:c6: dd:50:9b:f2:52:7a:19:e3:bd:b1:d9:5d:4a:97:68: c2:c2:d5:20:c8:e4:6d:04:71:e2:eb:0c:99:ef:3d: fe:25:d9:d4:0c:d0:8f:ba:74:57:ee:39:52:52:4e: a6:b7:53:d3:41:b6:78:36:bf:c0:cb:24:df:bd:9e: 63:36:85:fc:38:67:d6:90:1b:4f:ae:5d:6c:98:e2: 68:0c:48:6e:f6:d5:47:c5:22:0d:65:c4:3c:55:c6: 23:3f:0a:6c:1e:5d:d1:e3:2e:30:a7:3d:3d:8e:ec: 8b:5d:00:33:7b:55:f7:75:0d:87:d0:13:68:78:27: 86:5d:8e:67:9c:04:7a:2a:65:ba:d1:af:ea:19:ad: 05:a0:ef:25:8d:20:6c:4e:5f:b4:4b:db:ee:95:c5: 40:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A3:E7:DC:EA:C7:1C:1A:45:6C:8A:01:B2:E0:F9:4B:05:A3:A1:56 X509v3 Authority Key Identifier: keyid:4E:8B:36:1B:95:AC:54:F0:1D:2E:E4:C1:60:49:02:6E:50:FE:80:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E8B361B95AC54F01D2EE4C16049026E50FE807A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:66:78:8b:f0:26:eb:91:b4:90:a6:34:d1:44:b6:b1:99:fe: 67:a9:c9:6f:49:64:9b:37:4a:b3:67:dc:97:ad:a6:74:38:fa: 4b:ef:76:ef:9d:46:f2:e7:86:90:00:15:a4:49:fe:24:4d:c0: e5:f8:1f:d3:d9:0f:ba:4a:36:14:63:2f:13:0a:0c:28:a5:c0: 6b:6e:61:66:18:df:cb:05:52:0e:d6:ed:c2:4b:80:a4:4c:a0: 0c:be:a6:b7:2c:b6:91:8c:2b:f3:4b:b5:c8:1c:55:f1:06:fa: b8:f2:0d:5d:8b:76:36:30:fa:33:7c:e9:de:26:79:bd:e3:ff: 7f:57:ae:a4:54:d2:94:c9:89:9f:1a:8c:ea:70:4a:31:d0:03: 66:ae:36:b0:46:65:24:9f:aa:c4:79:a3:14:5a:18:74:e0:bd: 6d:2a:92:00:c2:d7:d8:58:dc:62:8a:46:70:35:b0:25:97:ec: b6:2a:bc:fd:7b:00:7e:de:c1:a1:53:70:29:57:63:53:78:80: 97:8f:3d:55:69:9c:61:9c:ea:61:78:e2:ce:11:9b:cd:9b:d6: 8d:6b:5b:62:d4:51:9b:cf:26:fa:6f:d1:d9:22:52:b5:37:7c: 5f:91:8c:57:c2:74:30:23:52:db:b5:f2:eb:cc:47:03:dd:75: 89:50:39:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULz3m3aAjh6Ft8CeH5N8oicoF+i0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU4QjM2MUI5NUFDNTRGMDFEMkVFNEMxNjA0OTAyNkU1 MEZFODA3QTAeFw0yNTExMDIxMjQ0NDNaFw0yNTExMDMxMzM5NDNaMDMxMTAvBgNV BAMTKDE2QTNFN0RDRUFDNzFDMUE0NTZDOEEwMUIyRTBGOTRCMDVBM0ExNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQHPxjYQA0EyUlEY6W43zty1GG VbRcJk/ZVJSWc1YNyh3qhF58mHEjyIT8+68pleHLIx/Cs1A+QNVjfwl+7l/ETd0v frM0SG1wC62cNuHLedsnYDQBjlxqQYr3f+0Bo+FCk5ojUhSyxt1Qm/JSehnjvbHZ XUqXaMLC1SDI5G0EceLrDJnvPf4l2dQM0I+6dFfuOVJSTqa3U9NBtng2v8DLJN+9 nmM2hfw4Z9aQG0+uXWyY4mgMSG721UfFIg1lxDxVxiM/CmweXdHjLjCnPT2O7Itd ADN7Vfd1DYfQE2h4J4ZdjmecBHoqZbrRr+oZrQWg7yWNIGxOX7RL2+6VxUD1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFqPn3OrHHBpFbIoBsuD5SwWjoVYwHwYDVR0j BBgwFoAUTos2G5WsVPAdLuTBYEkCblD+gHowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVlKWVJjUlRrY05CaUNEakE0Mk5uU1RnNDNucEVyVzRoV0Jaa29waWlD TFkvMC80RThCMzYxQjk1QUM1NEYwMUQyRUU0QzE2MDQ5MDI2RTUwRkU4MDdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFOEIzNjFCOTVBQzU0RjAx RDJFRTRDMTYwNDkwMjZFNTBGRTgwN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVlKWVJjUlRrY05CaUNEakE0Mk5uU1RnNDNucEVyVzRoV0Jaa29waWlDTFkvMC80 RThCMzYxQjk1QUM1NEYwMUQyRUU0QzE2MDQ5MDI2RTUwRkU4MDdBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcWZ4i/Am65G0kKY00US2sZn+Z6nJb0lkmzdKs2fcl62mdDj6S+92751G8ueG kAAVpEn+JE3A5fgf09kPuko2FGMvEwoMKKXAa25hZhjfywVSDtbtwkuApEygDL6m tyy2kYwr80u1yBxV8Qb6uPINXYt2NjD6M3zp3iZ5veP/f1eupFTSlMmJnxqM6nBK MdADZq42sEZlJJ+qxHmjFFoYdOC9bSqSAMLX2FjcYopGcDWwJZfstiq8/XsAft7B oVNwKVdjU3iAl489VWmcYZzqYXjizhGbzZvWjWtbYtRRm88m+m/R2SJStTd8X5GM V8J0MCNS27Xy68xHA911iVA5Rw== -----END CERTIFICATE-----Generated at Mon Nov 3 05:43:49 2025 by rpki-client