$ rpki-client -vvf rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft File: 4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft (raw, json) Hash identifier: 2a19+ILSdrjeTA6U2I5Myt4zOwMvU3QhEkqRj8U1t2Y= Subject key identifier: F9:B5:19:AF:8C:05:48:51:7B:25:B3:F6:89:FF:A7:69:61:39:BE:BB Authority key identifier: 4A:72:67:5E:0C:B9:92:AE:4B:9D:50:A4:4F:F4:38:7F:A7:80:D7:CF Certificate issuer: /CN=4A72675E0CB992AE4B9D50A44FF4387FA780D7CF Certificate serial: 444855A4FF78845DB70FCABA47D218CA778E155F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.cer Subject info access: rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft Manifest number: 0121 Signing time: Mon 03 Nov 2025 13:24:19 +0000 Manifest this update: Mon 03 Nov 2025 13:19:19 +0000 Manifest next update: Tue 04 Nov 2025 17:19:19 +0000 Files and hashes: 1: 4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.crl (hash: 6qdwKxGbLs3gWdHV7XkRfggWCHLAAp1pqfTJf+dENVk=) 2: 323830343a366533343a3a2f33322d3438203d3e20323730353832.roa (hash: 77sf5PFcSpII+KrrS4nSPlOkVTpoGT3FycBU93oqWsg=) 3: 3137372e382e3133362e302f32322d3234203d3e20323730353832.roa (hash: krULwq9Rhl+VvAB64k7HqwFs18gauIlz8FGNJJMo8fQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.crl rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 17:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:48:55:a4:ff:78:84:5d:b7:0f:ca:ba:47:d2:18:ca:77:8e:15:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A72675E0CB992AE4B9D50A44FF4387FA780D7CF Validity Not Before: Nov 3 13:19:19 2025 GMT Not After : Nov 4 17:19:19 2025 GMT Subject: CN=F9B519AF8C0548517B25B3F689FFA7696139BEBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:40:3e:e5:8a:48:7e:c9:31:9a:56:ee:2c:49: 55:ae:de:15:59:be:2f:34:8d:bc:4e:a9:1e:2f:a0: d9:47:91:d0:8f:af:8b:d8:a3:e3:5a:d6:32:d2:c7: 95:25:28:70:11:ad:ac:8e:d4:3b:1c:7d:9b:96:e8: 46:c1:3a:74:56:95:5f:7e:80:76:86:1e:ab:16:0b: 91:75:bf:1e:5f:5a:90:a5:f6:f0:4c:cb:e9:fc:7a: 69:96:6b:a2:fd:de:4f:e2:6a:87:11:a4:21:b8:58: 51:d8:bf:2c:7a:37:e0:3d:53:65:86:04:5f:df:17: b2:b2:6a:19:f9:e5:ff:0a:2d:48:72:62:db:e6:ad: 66:ea:e2:00:ff:9d:43:ea:0b:ae:18:43:85:ec:c9: 9d:02:69:3d:a9:82:a8:1f:27:6b:d7:78:73:73:aa: bd:e0:cf:0d:c0:76:c0:15:9f:ae:0d:fe:f8:c9:ac: c3:8c:3a:3b:7d:c9:43:dc:97:e2:23:93:19:b2:e5: f5:1c:a7:e3:ef:e2:29:30:6b:e1:8c:cf:e2:1c:3b: ef:a9:3f:a0:09:42:c8:3f:57:b1:e1:7d:ce:03:69: 75:5b:9a:27:f0:f3:78:a1:fd:ac:43:15:57:a9:13: 6e:c5:3b:8e:89:78:01:bf:58:ba:19:67:88:b8:24: ce:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B5:19:AF:8C:05:48:51:7B:25:B3:F6:89:FF:A7:69:61:39:BE:BB X509v3 Authority Key Identifier: keyid:4A:72:67:5E:0C:B9:92:AE:4B:9D:50:A4:4F:F4:38:7F:A7:80:D7:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:48:38:b6:2c:78:84:c0:9c:f7:18:ed:e2:25:6c:1f:0d:7f: 78:7f:3c:68:1a:11:29:fd:a0:5e:96:5e:7b:7c:ab:65:e5:16: 72:3c:e6:b6:86:cc:e4:b2:71:af:e1:48:9b:b9:b8:e0:f6:36: d4:c7:a3:2b:8c:c8:b7:c5:29:41:05:4c:d8:02:c2:72:53:69: 5e:b2:b1:d7:36:c6:27:03:fa:54:0f:69:08:74:8d:bf:e7:c2: 62:dc:82:4c:67:da:81:9d:4f:7e:32:92:91:cd:01:0a:75:20: 52:4f:9d:0e:46:9e:b0:c9:d4:b1:71:75:6c:1e:af:e0:7f:a7: ca:39:2f:8d:18:72:c2:78:03:91:eb:74:5a:7c:84:d9:1e:a1: 2f:ac:7e:8b:6e:5d:28:9e:1f:84:55:1f:91:11:14:56:66:eb: c8:ba:57:66:ec:6a:c5:a9:87:f3:ea:fc:04:e9:13:51:ff:f6: 8f:22:9e:a6:7d:20:4c:b8:b5:5b:d0:29:60:2f:4d:c9:87:a4: 28:15:1e:8d:e0:e7:26:cf:37:51:b0:1b:37:c5:34:95:fd:b7: d9:87:57:84:ec:d0:1e:88:2e:f5:c7:2b:6b:39:19:cb:ca:4c: 0b:b8:2e:d6:08:b2:53:d8:5b:04:ab:f4:e5:f2:4e:e0:87:d3: a7:45:8f:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUREhVpP94hF23D8q6R9IYyneOFV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE3MjY3NUUwQ0I5OTJBRTRCOUQ1MEE0NEZGNDM4N0ZB NzgwRDdDRjAeFw0yNTExMDMxMzE5MTlaFw0yNTExMDQxNzE5MTlaMDMxMTAvBgNV BAMTKEY5QjUxOUFGOEMwNTQ4NTE3QjI1QjNGNjg5RkZBNzY5NjEzOUJFQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwQD7likh+yTGaVu4sSVWu3hVZ vi80jbxOqR4voNlHkdCPr4vYo+Na1jLSx5UlKHARrayO1DscfZuW6EbBOnRWlV9+ gHaGHqsWC5F1vx5fWpCl9vBMy+n8emmWa6L93k/iaocRpCG4WFHYvyx6N+A9U2WG BF/fF7Kyahn55f8KLUhyYtvmrWbq4gD/nUPqC64YQ4XsyZ0CaT2pgqgfJ2vXeHNz qr3gzw3AdsAVn64N/vjJrMOMOjt9yUPcl+Ijkxmy5fUcp+Pv4ikwa+GMz+IcO++p P6AJQsg/V7Hhfc4DaXVbmifw83ih/axDFVepE27FO46JeAG/WLoZZ4i4JM6RAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+bUZr4wFSFF7JbP2if+naWE5vrswHwYDVR0j BBgwFoAUSnJnXgy5kq5LnVCkT/Q4f6eA188wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3BacTRwRnFqcEJ1WEp5SngyMlhHMzFvb0cxZllDNjlDNXlvcGQxOHo0 dzIvMC80QTcyNjc1RTBDQjk5MkFFNEI5RDUwQTQ0RkY0Mzg3RkE3ODBEN0NGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBNzI2NzVFMENCOTkyQUU0 QjlENTBBNDRGRjQzODdGQTc4MEQ3Q0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3BacTRwRnFqcEJ1WEp5SngyMlhHMzFvb0cxZllDNjlDNXlvcGQxOHo0dzIvMC80 QTcyNjc1RTBDQjk5MkFFNEI5RDUwQTQ0RkY0Mzg3RkE3ODBEN0NGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh0g4tix4hMCc9xjt4iVsHw1/eH88aBoRKf2gXpZee3yrZeUWcjzmtobM5LJx r+FIm7m44PY21MejK4zIt8UpQQVM2ALCclNpXrKx1zbGJwP6VA9pCHSNv+fCYtyC TGfagZ1PfjKSkc0BCnUgUk+dDkaesMnUsXF1bB6v4H+nyjkvjRhywngDket0WnyE 2R6hL6x+i25dKJ4fhFUfkREUVmbryLpXZuxqxamH8+r8BOkTUf/2jyKepn0gTLi1 W9ApYC9NyYekKBUejeDnJs83UbAbN8U0lf232YdXhOzQHogu9ccrazkZy8pMC7gu 1giyU9hbBKv05fJO4IfTp0WPog== -----END CERTIFICATE-----Generated at Tue Nov 4 06:47:45 2025 by rpki-client