$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft File: 4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft (raw, json) Hash identifier: V6Ey6gHTHE+RR6BNBCbm3ayIxWCoQ1c5JQEMOi99U80= Subject key identifier: 4B:DC:2E:CD:7D:4A:C9:A7:E1:A9:6A:6D:CF:D0:0C:64:AE:48:73:42 Authority key identifier: 4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19 Certificate issuer: /CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519 Certificate serial: 188997B30E0D57D13B53D5CC68CE7106E72D068A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft Manifest number: 0321 Signing time: Mon 03 Nov 2025 10:31:37 +0000 Manifest this update: Mon 03 Nov 2025 10:26:37 +0000 Manifest next update: Tue 04 Nov 2025 10:46:37 +0000 Files and hashes: 1: 3139302e3131312e3130382e302f32322d3234203d3e20323730343137.roa (hash: gpm/0PXcAio5zaXBKIME9f+opfZ4vyceUQhgW/q0Loc=) 2: 4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl (hash: 72m0gJ9ZtP3ClYJix8Uzi8n4c2f4PFERR1eiIu87YcA=) 3: 323830343a366262303a3a2f33322d3438203d3e20323730343137.roa (hash: ulWcHqimCcaLC71Cc0U5ajO6lXgnNtoY2SeIWmeZTEc=) 4: 34352e3232352e3234342e302f32322d3234203d3e20323730343137.roa (hash: GjG1Mv8q7/+5pTIyYEZdpGEF5+avf3SU6nfp83cgKxI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:89:97:b3:0e:0d:57:d1:3b:53:d5:cc:68:ce:71:06:e7:2d:06:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519 Validity Not Before: Nov 3 10:26:37 2025 GMT Not After : Nov 4 10:46:37 2025 GMT Subject: CN=4BDC2ECD7D4AC9A7E1A96A6DCFD00C64AE487342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2e:f6:69:93:b7:a8:9d:23:19:b6:b5:d0:fc: e9:3a:4d:ac:de:6d:a8:50:37:68:38:22:71:1f:cb: bf:da:3d:18:9b:1d:43:bb:43:b8:5e:4a:ca:d1:78: c5:ae:4f:89:69:23:0b:7a:fd:75:de:be:6f:76:88: c3:96:ae:d1:14:ee:6b:d8:6b:e5:82:2f:29:cb:46: 7b:1f:bf:dc:76:68:8b:53:f4:fa:3e:f9:be:be:0e: 4c:ae:26:49:c6:cb:93:1e:28:09:8d:e6:cb:4f:50: 55:49:c4:c4:3f:ad:94:6f:c6:a3:67:d1:ce:30:ec: e8:5c:0e:99:82:4e:2e:21:9e:a7:c3:5f:3d:4c:d6: a3:b3:1d:d2:4b:6a:e3:fd:2f:0b:ad:fc:c9:4b:f1: 0d:31:16:6b:87:fe:46:5d:8d:d7:00:b2:90:f4:0c: 47:86:65:61:db:3d:c8:90:e3:3e:b5:ca:c9:ed:28: d3:10:82:ac:af:5c:28:27:3a:97:ed:c3:97:cd:a8: 43:9d:8f:5a:28:56:cf:5a:23:63:af:dd:ce:4e:09: 47:ec:31:ed:5f:ce:22:3f:bc:dd:35:f1:5e:0b:b3: 4c:44:5d:1b:8f:6b:d7:55:c2:13:9b:6c:55:ac:14: 0e:98:c8:0e:0f:f0:67:7b:2f:00:34:40:dd:92:95: 2e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DC:2E:CD:7D:4A:C9:A7:E1:A9:6A:6D:CF:D0:0C:64:AE:48:73:42 X509v3 Authority Key Identifier: keyid:4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:8f:2b:a2:b3:2b:97:39:df:73:ed:01:e8:d3:d9:1d:35:58: 70:1b:51:e5:58:8f:d9:30:f3:af:19:a0:5c:af:46:9b:86:b7: 3a:76:6d:70:65:6d:08:72:7d:ec:ca:0f:48:47:50:d7:6c:13: 3f:0e:2d:6c:c2:4c:d0:7b:47:be:15:b0:34:62:9c:dd:71:1d: 46:74:e8:85:33:06:ce:21:06:c7:29:7c:16:bd:8e:27:1e:9e: dd:3b:13:e3:29:50:53:ab:dc:f5:91:d3:79:21:0f:64:d3:2f: 73:69:dd:59:43:fb:cd:76:63:e3:20:91:43:a7:ac:58:9e:d3: cf:f1:6c:ce:2e:66:10:d7:6e:8f:25:43:88:95:ed:40:0a:01: c4:fd:72:09:69:4e:45:64:35:9e:3b:cf:a5:98:95:67:b8:98: 7d:42:74:fe:f3:59:15:6d:38:dc:b3:eb:3f:0b:7d:37:f0:63: a3:83:33:2d:0d:08:c8:1f:e8:5d:67:4f:b4:00:71:ac:8a:7b: bd:cd:b2:9f:b4:f4:2e:f4:13:50:0f:1d:80:a7:ff:39:22:82: bd:ae:d8:c8:14:53:53:71:9a:3e:7d:df:f9:1c:88:64:62:9b: 78:8b:04:cf:59:52:62:c9:20:2b:fc:a9:ec:cc:57:f5:b0:ab: 75:9d:3d:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGImXsw4NV9E7U9XMaM5xBuctBoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERFNDU0RkYxQjhCRjBERjJBQzdGRUM4RTBBRDY4Nzgy QjdEODUxOTAeFw0yNTExMDMxMDI2MzdaFw0yNTExMDQxMDQ2MzdaMDMxMTAvBgNV BAMTKDRCREMyRUNEN0Q0QUM5QTdFMUE5NkE2RENGRDAwQzY0QUU0ODczNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9LvZpk7eonSMZtrXQ/Ok6Taze bahQN2g4InEfy7/aPRibHUO7Q7heSsrReMWuT4lpIwt6/XXevm92iMOWrtEU7mvY a+WCLynLRnsfv9x2aItT9Po++b6+DkyuJknGy5MeKAmN5stPUFVJxMQ/rZRvxqNn 0c4w7OhcDpmCTi4hnqfDXz1M1qOzHdJLauP9Lwut/MlL8Q0xFmuH/kZdjdcAspD0 DEeGZWHbPciQ4z61ysntKNMQgqyvXCgnOpftw5fNqEOdj1ooVs9aI2Ov3c5OCUfs Me1fziI/vN018V4Ls0xEXRuPa9dVwhObbFWsFA6YyA4P8Gd7LwA0QN2SlS6/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUS9wuzX1KyafhqWptz9AMZK5Ic0IwHwYDVR0j BBgwFoAUTeRU/xuL8N8qx/7I4K1oeCt9hRkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmEzaWRmQWZjTGdnRE1DcXc5QUdMS0o4ZnhEamFUbm1Qb3EzeGlzVTMz VXMvMS80REU0NTRGRjFCOEJGMERGMkFDN0ZFQzhFMEFENjg3ODJCN0Q4NTE5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRERTQ1NEZGMUI4QkYwREYy QUM3RkVDOEUwQUQ2ODc4MkI3RDg1MTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmEzaWRmQWZjTGdnRE1DcXc5QUdMS0o4ZnhEamFUbm1Qb3EzeGlzVTMzVXMvMS80 REU0NTRGRjFCOEJGMERGMkFDN0ZFQzhFMEFENjg3ODJCN0Q4NTE5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARY8rorMrlznfc+0B6NPZHTVYcBtR5ViP2TDzrxmgXK9Gm4a3OnZtcGVtCHJ9 7MoPSEdQ12wTPw4tbMJM0HtHvhWwNGKc3XEdRnTohTMGziEGxyl8Fr2OJx6e3TsT 4ylQU6vc9ZHTeSEPZNMvc2ndWUP7zXZj4yCRQ6esWJ7Tz/Fszi5mENdujyVDiJXt QAoBxP1yCWlORWQ1njvPpZiVZ7iYfUJ0/vNZFW043LPrPwt9N/Bjo4MzLQ0IyB/o XWdPtABxrIp7vc2yn7T0LvQTUA8dgKf/OSKCva7YyBRTU3GaPn3f+RyIZGKbeIsE z1lSYskgK/yp7MxX9bCrdZ09BQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:09 2025 by rpki-client