$ rpki-client -vvf rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.mft File: 4F855F6808FCD163FB20E5E5F939427253847DC2.mft (raw, json) Hash identifier: lSiAQY1sm10tDQxxCuLo7qXTeKiViZA+ma0+2insIVU= Subject key identifier: 12:63:9A:89:76:8E:FA:1C:BE:79:72:39:81:04:AA:F9:88:82:9A:B7 Authority key identifier: 4F:85:5F:68:08:FC:D1:63:FB:20:E5:E5:F9:39:42:72:53:84:7D:C2 Certificate issuer: /CN=4F855F6808FCD163FB20E5E5F939427253847DC2 Certificate serial: 2235F84417D0B33EBDFDD68BA5E5F39883DFD1B0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F855F6808FCD163FB20E5E5F939427253847DC2.cer Subject info access: rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.mft Manifest number: 0255 Signing time: Mon 03 Nov 2025 12:04:05 +0000 Manifest this update: Mon 03 Nov 2025 11:59:05 +0000 Manifest next update: Tue 04 Nov 2025 15:52:05 +0000 Files and hashes: 1: 3134332e3133372e3139302e302f32332d3233203d3e20323634303431.roa (hash: 1HTD6y5UWBPqwd8LTvadEg1TbplgL7dF29d2W6epFAE=) 2: 4F855F6808FCD163FB20E5E5F939427253847DC2.crl (hash: lE2VGxayjEZFn5w8+jIC/UmR7pwi7uVXEBfUJgcDPZQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.crl rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F855F6808FCD163FB20E5E5F939427253847DC2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 15:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:35:f8:44:17:d0:b3:3e:bd:fd:d6:8b:a5:e5:f3:98:83:df:d1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F855F6808FCD163FB20E5E5F939427253847DC2 Validity Not Before: Nov 3 11:59:05 2025 GMT Not After : Nov 4 15:52:05 2025 GMT Subject: CN=12639A89768EFA1CBE7972398104AAF988829AB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:0d:b8:3f:da:88:00:94:7e:ad:7b:f7:eb:f8: c3:cb:bc:ff:1a:64:39:66:b3:88:92:b0:d1:ef:97: 70:06:5a:a0:df:f8:77:90:e6:78:33:bf:65:41:20: 7e:a5:20:11:04:51:6f:af:1a:70:ef:46:a6:5c:ad: bd:4e:d7:f3:8f:b0:a1:c7:03:00:11:2c:20:e8:4d: 10:41:ae:c0:1e:46:05:1b:9a:07:7c:52:3f:77:e9: 03:4c:c5:f2:7f:3f:fc:af:4f:bc:21:e5:9e:92:fc: 3c:88:fd:97:fe:db:97:dc:a5:17:fe:21:a0:3b:51: 63:98:bf:a8:81:53:4e:d0:df:6e:d0:70:1d:46:07: b0:e6:fa:2a:7b:9a:bd:8d:6d:fc:62:24:37:5f:b0: 8b:f9:4a:db:2c:0d:f4:81:3a:1a:5d:e0:5e:9c:ca: 84:07:2f:f3:91:ee:a3:71:c3:d2:52:24:41:ab:32: e4:ee:bd:c8:34:91:80:6e:99:f4:d4:fd:45:97:06: fc:de:60:c7:36:2a:7e:0f:80:c4:d6:a4:dc:29:01: d7:ba:db:81:f8:0e:1e:e8:07:a3:74:38:f0:71:aa: 5e:a3:fc:4e:19:bb:6e:6a:30:c5:cb:1e:43:fb:1d: 77:3d:b2:b0:f1:75:89:cf:b0:21:ec:c2:32:dd:ab: fb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:63:9A:89:76:8E:FA:1C:BE:79:72:39:81:04:AA:F9:88:82:9A:B7 X509v3 Authority Key Identifier: keyid:4F:85:5F:68:08:FC:D1:63:FB:20:E5:E5:F9:39:42:72:53:84:7D:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F855F6808FCD163FB20E5E5F939427253847DC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ad:cf:04:62:0e:f5:b5:60:32:76:0f:f0:a8:a2:9d:5c:24: 6f:a7:d0:af:f8:53:3f:f3:1b:07:5b:85:24:f7:06:49:03:51: 4c:2b:42:cc:37:62:03:d1:b4:bf:82:28:48:c9:55:99:1e:d3: 96:de:0b:8f:ab:26:a8:c0:6e:e2:89:b3:06:93:b4:6d:11:a6: 44:3f:71:2b:91:fc:4d:9e:6a:6c:c3:e0:15:95:8d:f3:e1:6f: c2:0d:55:89:53:f2:25:6e:76:dc:59:7c:ba:29:f5:6c:1d:2a: d3:68:0c:4d:7a:5f:ab:52:8b:cc:a8:2d:95:e8:10:d0:5a:48: 5c:b2:57:9f:6d:20:63:5c:5f:43:a7:41:f9:9a:09:23:d9:24: bf:71:66:9b:76:6a:ed:99:bc:64:f9:6f:cc:de:8b:36:5f:3f: 2b:1f:10:3b:3b:71:6b:fd:a2:ee:c0:07:85:a4:11:c1:7f:4a: c3:32:04:6a:1d:0c:c6:15:c1:d8:3d:1e:b4:c7:d1:ba:1d:0e: b5:6c:f4:ca:64:5c:e4:75:d2:84:a1:86:a0:74:be:1b:89:8b: 1e:ab:8e:e9:d3:ae:af:5c:29:76:72:16:b5:f4:69:b5:96:28: 17:0b:5b:62:2b:c3:7e:4f:dc:b8:c9:e4:13:08:ea:31:66:ed: d8:4f:d6:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIjX4RBfQsz69/daLpeXzmIPf0bAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY4NTVGNjgwOEZDRDE2M0ZCMjBFNUU1RjkzOTQyNzI1 Mzg0N0RDMjAeFw0yNTExMDMxMTU5MDVaFw0yNTExMDQxNTUyMDVaMDMxMTAvBgNV BAMTKDEyNjM5QTg5NzY4RUZBMUNCRTc5NzIzOTgxMDRBQUY5ODg4MjlBQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvDbg/2ogAlH6te/fr+MPLvP8a ZDlms4iSsNHvl3AGWqDf+HeQ5ngzv2VBIH6lIBEEUW+vGnDvRqZcrb1O1/OPsKHH AwARLCDoTRBBrsAeRgUbmgd8Uj936QNMxfJ/P/yvT7wh5Z6S/DyI/Zf+25fcpRf+ IaA7UWOYv6iBU07Q327QcB1GB7Dm+ip7mr2NbfxiJDdfsIv5StssDfSBOhpd4F6c yoQHL/OR7qNxw9JSJEGrMuTuvcg0kYBumfTU/UWXBvzeYMc2Kn4PgMTWpNwpAde6 24H4Dh7oB6N0OPBxql6j/E4Zu25qMMXLHkP7HXc9srDxdYnPsCHswjLdq/tlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEmOaiXaO+hy+eXI5gQSq+YiCmrcwHwYDVR0j BBgwFoAUT4VfaAj80WP7IOXl+TlCclOEfcIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGFFSkVIcmIxbmJQc1FLVVhWRFlCZTM3eDlyb1g4Y3BFNHFRR05qck5S YzQvMC80Rjg1NUY2ODA4RkNEMTYzRkIyMEU1RTVGOTM5NDI3MjUzODQ3REMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGODU1RjY4MDhGQ0QxNjNG QjIwRTVFNUY5Mzk0MjcyNTM4NDdEQzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGFFSkVIcmIxbmJQc1FLVVhWRFlCZTM3eDlyb1g4Y3BFNHFRR05qck5SYzQvMC80 Rjg1NUY2ODA4RkNEMTYzRkIyMEU1RTVGOTM5NDI3MjUzODQ3REMyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYK3PBGIO9bVgMnYP8KiinVwkb6fQr/hTP/MbB1uFJPcGSQNRTCtCzDdiA9G0 v4IoSMlVmR7Tlt4Lj6smqMBu4omzBpO0bRGmRD9xK5H8TZ5qbMPgFZWN8+Fvwg1V iVPyJW523Fl8uin1bB0q02gMTXpfq1KLzKgtlegQ0FpIXLJXn20gY1xfQ6dB+ZoJ I9kkv3Fmm3Zq7Zm8ZPlvzN6LNl8/Kx8QOztxa/2i7sAHhaQRwX9KwzIEah0MxhXB 2D0etMfRuh0OtWz0ymRc5HXShKGGoHS+G4mLHquO6dOur1wpdnIWtfRptZYoFwtb YivDfk/cuMnkEwjqMWbt2E/Wgw== -----END CERTIFICATE-----Generated at Tue Nov 4 00:27:55 2025 by rpki-client