$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft File: 041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft (raw, json) Hash identifier: eyT0GvmiqjPePdjlZNdW0mEKDB8RdxeRshIx9u3uMF0= Subject key identifier: B2:0B:41:9B:DA:B3:66:17:31:9D:D6:AF:B4:78:4A:DF:79:13:89:E0 Authority key identifier: 04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3 Certificate issuer: /CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3 Certificate serial: 25EC086D640337A7C6E793521BB85D58DEDB3E04 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer Subject info access: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft Manifest number: 38 Signing time: Mon 03 Nov 2025 14:45:43 +0000 Manifest this update: Mon 03 Nov 2025 14:40:43 +0000 Manifest next update: Tue 04 Nov 2025 16:53:43 +0000 Files and hashes: 1: 323830343a316265383a3a2f33322d313238203d3e203631373536.roa (hash: pqgsM2ASUBh1TC0/RYOz8T+lL73SNCUA6ljQ57Xb+SQ=) 2: 3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (hash: ff5fnWNx341MgcrmBHedmB9h7orSMUG+v/FPbvSdt9w=) 3: 041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl (hash: 3o4NrPv3G0SJZ3Z0+0z3WXSfDDDmDW4UUjd8tiyZizI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 16:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ec:08:6d:64:03:37:a7:c6:e7:93:52:1b:b8:5d:58:de:db:3e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3 Validity Not Before: Nov 3 14:40:43 2025 GMT Not After : Nov 4 16:53:43 2025 GMT Subject: CN=B20B419BDAB36617319DD6AFB4784ADF791389E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b9:05:3e:4e:f0:d7:f9:57:5d:84:9e:8e:a5: 92:0e:93:33:9c:51:d5:0c:d6:b4:cd:0e:2e:24:8e: c9:90:ff:20:85:23:19:92:06:c0:aa:bd:77:b4:64: a2:e0:0a:a7:27:2a:39:69:e3:45:f2:98:5f:fa:a3: 6b:c4:eb:70:0e:00:72:80:ee:e1:3a:1c:ab:40:c8: f7:ef:7d:e5:c1:fd:a3:1c:b1:dd:b6:88:90:73:89: a8:ac:25:1d:e6:f6:0e:f4:7a:fd:5b:32:18:17:af: 83:c7:65:9e:a0:4f:3b:f2:8d:40:66:f4:fd:2d:73: 3f:74:d1:8d:b5:56:61:f2:a0:49:f4:0c:b1:34:7e: 04:c0:52:ce:2e:ce:69:f0:bf:2a:20:1f:c4:23:c2: 62:4e:71:0c:65:20:3f:57:99:16:95:4f:a9:92:c4: 3d:fa:00:65:a3:74:af:1c:03:e2:81:01:db:76:e5: 35:26:cb:05:be:f4:36:e9:25:90:ce:c9:25:2a:b1: 19:5a:dc:28:59:0e:8f:21:54:7a:6f:8c:03:90:10: 74:65:c6:48:7d:57:96:93:23:78:b1:92:7e:e3:82: 1d:8a:d6:c3:e4:55:ea:e1:56:60:74:c8:08:d5:80: 0d:4d:cc:1b:ff:8c:57:17:46:5f:5b:47:2a:61:0a: b8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0B:41:9B:DA:B3:66:17:31:9D:D6:AF:B4:78:4A:DF:79:13:89:E0 X509v3 Authority Key Identifier: keyid:04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:17:04:e0:45:91:0b:6e:d8:a1:23:80:f4:0e:48:3c:07:73: 1e:ca:13:b1:e2:52:c1:21:c7:90:8e:5e:94:95:ae:8c:9f:07: 04:29:bb:8d:fd:f3:17:fb:3b:3f:f5:3f:ae:67:72:26:65:72: 31:fe:3e:8d:6c:cf:b4:e3:21:b0:40:59:b9:a5:4b:f0:6b:f2: 35:3d:9e:91:57:f0:46:c3:b0:65:63:10:f2:a5:8b:77:df:d0: e7:1b:dc:61:4d:46:2a:60:34:75:0f:a9:11:ea:7e:26:05:dc: f3:e9:ad:af:a9:0e:ed:48:e7:d6:34:17:7c:a0:53:45:a4:2a: 52:e3:8b:88:69:d8:1a:b9:f6:1c:15:ec:79:a4:ef:fa:a5:e6: 2a:fc:96:f1:12:3c:71:d2:e7:d7:80:26:90:8c:5e:71:02:64: ca:e0:46:fd:8a:2e:6d:38:f8:c5:ff:88:63:5d:c7:fb:54:1b: ab:9d:3f:de:4d:d9:b7:ce:51:b0:07:c4:cd:33:c2:3f:19:73: 4d:71:e0:63:10:a4:b0:89:3d:02:3d:df:0b:c9:00:71:89:f3: 1d:8e:eb:2f:38:a6:82:f0:a2:da:bc:73:1f:34:94:ab:44:62: 9c:84:5b:5d:ef:36:d9:e4:57:56:9e:ef:5c:0a:95:cc:06:c6: b8:06:cf:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJewIbWQDN6fG55NSG7hdWN7bPgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQxRkEwQTQwOEFENTdFOTM4NERBMzMxQjMwNDBCOTFG REUwMEJFMzAeFw0yNTExMDMxNDQwNDNaFw0yNTExMDQxNjUzNDNaMDMxMTAvBgNV BAMTKEIyMEI0MTlCREFCMzY2MTczMTlERDZBRkI0Nzg0QURGNzkxMzg5RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCuQU+TvDX+VddhJ6OpZIOkzOc UdUM1rTNDi4kjsmQ/yCFIxmSBsCqvXe0ZKLgCqcnKjlp40XymF/6o2vE63AOAHKA 7uE6HKtAyPfvfeXB/aMcsd22iJBziaisJR3m9g70ev1bMhgXr4PHZZ6gTzvyjUBm 9P0tcz900Y21VmHyoEn0DLE0fgTAUs4uzmnwvyogH8QjwmJOcQxlID9XmRaVT6mS xD36AGWjdK8cA+KBAdt25TUmywW+9DbpJZDOySUqsRla3ChZDo8hVHpvjAOQEHRl xkh9V5aTI3ixkn7jgh2K1sPkVerhVmB0yAjVgA1NzBv/jFcXRl9bRyphCri7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsgtBm9qzZhcxndavtHhK33kTieAwHwYDVR0j BBgwFoAUBB+gpAitV+k4TaMxswQLkf3gC+MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVv QTkvMC8wNDFGQTBBNDA4QUQ1N0U5Mzg0REEzMzFCMzA0MEI5MUZERTAwQkUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0MUZBMEE0MDhBRDU3RTkz ODREQTMzMUIzMDQwQjkxRkRFMDBCRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVvQTkvMC8w NDFGQTBBNDA4QUQ1N0U5Mzg0REEzMzFCMzA0MEI5MUZERTAwQkUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAohcE4EWRC27YoSOA9A5IPAdzHsoTseJSwSHHkI5elJWujJ8HBCm7jf3zF/s7 P/U/rmdyJmVyMf4+jWzPtOMhsEBZuaVL8GvyNT2ekVfwRsOwZWMQ8qWLd9/Q5xvc YU1GKmA0dQ+pEep+JgXc8+mtr6kO7Ujn1jQXfKBTRaQqUuOLiGnYGrn2HBXseaTv +qXmKvyW8RI8cdLn14AmkIxecQJkyuBG/YoubTj4xf+IY13H+1Qbq50/3k3Zt85R sAfEzTPCPxlzTXHgYxCksIk9Aj3fC8kAcYnzHY7rLzimgvCi2rxzHzSUq0RinIRb Xe822eRXVp7vXAqVzAbGuAbPNw== -----END CERTIFICATE-----Generated at Mon Nov 3 18:52:57 2025 by rpki-client