$ rpki-client -vvf rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft File: 4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft (raw, json) Hash identifier: G2CoN6G8iefztRqlKhyIKaOKUupC9ik4qQsRFwadmmA= Subject key identifier: 37:40:26:A0:6A:E4:B1:95:AF:81:31:5B:4D:82:A7:46:D2:0E:ED:43 Authority key identifier: 4B:2D:30:8A:10:AC:42:64:B7:DC:7D:90:3F:FE:47:8F:2A:40:0E:1D Certificate issuer: /CN=4B2D308A10AC4264B7DC7D903FFE478F2A400E1D Certificate serial: 7F5A79A5CD2891C295B0C163466E123E66A2EF53 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer Subject info access: rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft Manifest number: 8B Signing time: Mon 03 Nov 2025 01:16:56 +0000 Manifest this update: Mon 03 Nov 2025 01:11:56 +0000 Manifest next update: Tue 04 Nov 2025 03:50:56 +0000 Files and hashes: 1: 3137302e3234352e3131362e302f32322d3332203d3e20323634343239.roa (hash: bdYqLTrmyZVtnX3hQzjggcKDrPInm/SX7ouRHDPAjqE=) 2: 4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl (hash: gEnIYy8/U8/U872/bJfwLfhzkuApT1ESQ5vzkpxpxuI=) 3: 323830343a316537303a3a2f33322d313238203d3e20323634343239.roa (hash: 6ObJH/Yn0OhNlenVZChDhjf8OzouFK3QjeWFSU2/I54=) 4: 3133312e3232312e3133322e302f32322d3332203d3e20323634343239.roa (hash: 4kjU7jzExWeoE5Ul09K/8oKzzSaEzcW2EMczGqlS9Wk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:5a:79:a5:cd:28:91:c2:95:b0:c1:63:46:6e:12:3e:66:a2:ef:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2D308A10AC4264B7DC7D903FFE478F2A400E1D Validity Not Before: Nov 3 01:11:56 2025 GMT Not After : Nov 4 03:50:56 2025 GMT Subject: CN=374026A06AE4B195AF81315B4D82A746D20EED43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1f:d6:de:2e:f7:ab:a9:97:b6:90:60:fb:9d: 8e:85:1e:93:21:aa:5c:75:ff:24:33:ea:bf:e5:89: 6d:3e:6b:62:27:c4:77:57:7c:26:7b:a4:8e:d4:0d: 5a:63:c8:49:fc:fd:38:a0:0e:27:8d:d9:4d:85:c6: b0:b8:3e:f3:9a:f3:a4:ed:56:c3:fd:73:6b:4d:04: f0:52:a5:e3:db:d3:b4:3d:61:d0:a9:be:ba:0e:da: 87:e5:8e:1e:d2:e3:8d:2a:8a:00:74:f9:2a:ca:ac: a5:57:cf:12:8b:24:c9:a0:21:86:98:33:38:f7:4a: c1:a4:04:7c:2e:37:a9:79:bb:7f:42:85:b7:2d:9f: d3:31:3c:ed:65:63:ac:3c:5b:16:ac:65:17:71:bd: 2f:f3:48:a5:f2:5f:b3:92:56:ad:e0:e0:b6:93:51: f6:b2:c2:4d:3e:18:80:0c:06:89:c9:09:86:74:a5: b2:4d:d2:04:3a:2a:5d:8d:80:4f:de:71:68:8a:a4: ff:e2:3a:ec:e7:85:64:1c:4f:4f:54:e4:80:47:fc: 5e:ea:ab:a4:d6:22:81:b8:32:b9:2b:a0:46:b2:b2: fd:1d:f3:d9:13:73:18:22:f2:ed:af:ab:54:dd:69: ff:90:b0:ad:55:61:d6:a1:f5:40:82:69:cf:d1:d9: 52:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:40:26:A0:6A:E4:B1:95:AF:81:31:5B:4D:82:A7:46:D2:0E:ED:43 X509v3 Authority Key Identifier: keyid:4B:2D:30:8A:10:AC:42:64:B7:DC:7D:90:3F:FE:47:8F:2A:40:0E:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:57:69:31:93:df:a6:9b:de:a5:07:42:dd:ac:35:0e:db:ac: d8:22:75:a2:dc:ff:2d:b1:5e:47:8f:db:11:4b:e6:e2:8c:19: f2:20:e0:7e:da:b7:28:ea:ca:53:b7:4f:e9:56:03:6c:b3:39: 1b:e3:df:a7:eb:46:f7:4d:da:78:ef:62:96:22:6c:c9:de:5b: ae:15:4a:f6:64:ab:bc:0a:cf:91:17:e3:0e:0e:d4:71:15:e2: de:2b:52:97:d2:7f:f4:1d:d0:12:8b:9d:f0:eb:11:44:ac:15: 09:d4:07:50:ab:9b:ea:12:52:86:47:0d:23:55:6f:e2:20:4c: b4:25:4c:18:7c:73:ed:f9:75:be:29:7a:31:92:13:96:8c:da: 28:37:d2:9c:2d:f9:64:28:31:28:93:8c:df:06:8f:97:65:57: a5:ab:6a:17:a3:ed:0f:ce:51:55:f2:19:34:2b:de:19:16:46: f2:c1:be:ac:c0:38:53:8a:bf:56:b2:c4:18:15:66:ac:08:90: 32:e5:02:63:74:57:b5:ed:fb:c9:43:dd:da:6e:65:6e:48:9e: 30:db:0f:00:bb:22:3c:53:d1:5e:ab:8f:9a:a8:43:be:35:07: ce:fc:53:db:b9:0a:21:70:55:f6:a1:ec:9d:a0:22:33:59:bd: c3:36:1a:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUf1p5pc0okcKVsMFjRm4SPmai71MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyRDMwOEExMEFDNDI2NEI3REM3RDkwM0ZGRTQ3OEYy QTQwMEUxRDAeFw0yNTExMDMwMTExNTZaFw0yNTExMDQwMzUwNTZaMDMxMTAvBgNV BAMTKDM3NDAyNkEwNkFFNEIxOTVBRjgxMzE1QjREODJBNzQ2RDIwRUVENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZH9beLverqZe2kGD7nY6FHpMh qlx1/yQz6r/liW0+a2InxHdXfCZ7pI7UDVpjyEn8/TigDieN2U2FxrC4PvOa86Tt VsP9c2tNBPBSpePb07Q9YdCpvroO2ofljh7S440qigB0+SrKrKVXzxKLJMmgIYaY Mzj3SsGkBHwuN6l5u39Chbctn9MxPO1lY6w8WxasZRdxvS/zSKXyX7OSVq3g4LaT Ufaywk0+GIAMBonJCYZ0pbJN0gQ6Kl2NgE/ecWiKpP/iOuznhWQcT09U5IBH/F7q q6TWIoG4MrkroEaysv0d89kTcxgi8u2vq1Tdaf+QsK1VYdah9UCCac/R2VLhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUN0AmoGrksZWvgTFbTYKnRtIO7UMwHwYDVR0j BBgwFoAUSy0wihCsQmS33H2QP/5HjypADh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXNRRTg3cHZMbzJCMllHUFNZSHpWa2g2QWpLdGE3cjVmZkFCTlk1RmpG TlEvMC80QjJEMzA4QTEwQUM0MjY0QjdEQzdEOTAzRkZFNDc4RjJBNDAwRTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCMkQzMDhBMTBBQzQyNjRC N0RDN0Q5MDNGRkU0NzhGMkE0MDBFMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXNRRTg3cHZMbzJCMllHUFNZSHpWa2g2QWpLdGE3cjVmZkFCTlk1RmpGTlEvMC80 QjJEMzA4QTEwQUM0MjY0QjdEQzdEOTAzRkZFNDc4RjJBNDAwRTFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOVdpMZPfppvepQdC3aw1Dtus2CJ1otz/LbFeR4/bEUvm4owZ8iDgftq3KOrK U7dP6VYDbLM5G+Pfp+tG903aeO9iliJsyd5brhVK9mSrvArPkRfjDg7UcRXi3itS l9J/9B3QEoud8OsRRKwVCdQHUKub6hJShkcNI1Vv4iBMtCVMGHxz7fl1vil6MZIT lozaKDfSnC35ZCgxKJOM3waPl2VXpatqF6PtD85RVfIZNCveGRZG8sG+rMA4U4q/ VrLEGBVmrAiQMuUCY3RXte37yUPd2m5lbkieMNsPALsiPFPRXquPmqhDvjUHzvxT 27kKIXBV9qHsnaAiM1m9wzYatw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:38 2025 by rpki-client