$ rpki-client -vvf rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft File: 4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft (raw, json) Hash identifier: vkpvmcLs4aEVtnFHEBIiF7IyCFsKhk6n5p5Q5Y+iPLY= Subject key identifier: 01:54:23:40:21:B0:12:F4:43:39:B7:EE:61:36:AE:CC:EB:CA:42:F7 Authority key identifier: 4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33 Certificate issuer: /CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133 Certificate serial: 215DED5B665595D8FA756D8FA723DDDA42A56976 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer Subject info access: rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft Manifest number: 01AC Signing time: Sun 02 Nov 2025 23:11:47 +0000 Manifest this update: Sun 02 Nov 2025 23:06:47 +0000 Manifest next update: Tue 04 Nov 2025 01:58:47 +0000 Files and hashes: 1: 323830343a383732633a3a2f33322d3438203d3e20323732363932.roa (hash: kHLoRmafAK4uIGoyJ2MIAaX2srnBBGsfGchJnwrFwCA=) 2: 4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl (hash: vGgNpzKu6ZYDygMnYXFEGGe83B5gfTX438yu+pXU5bg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 01:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:5d:ed:5b:66:55:95:d8:fa:75:6d:8f:a7:23:dd:da:42:a5:69:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133 Validity Not Before: Nov 2 23:06:47 2025 GMT Not After : Nov 4 01:58:47 2025 GMT Subject: CN=0154234021B012F44339B7EE6136AECCEBCA42F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c6:98:30:66:c6:84:d4:3a:6a:51:a8:53:bf: 2d:cf:58:e3:fc:22:2c:21:68:fe:63:da:1e:09:71: bd:3c:6e:02:f2:79:3f:2c:75:01:be:ca:28:db:1a: 03:d3:9c:c2:40:42:88:82:72:59:b2:f1:b1:33:d2: 43:65:11:f2:de:11:00:15:af:ca:85:fb:de:bb:48: 7d:a5:57:16:2f:d0:0f:98:56:ea:e2:21:91:26:3a: 79:5f:82:02:eb:11:bd:c8:b2:dd:72:97:c4:04:6f: 9f:b3:8d:db:c8:7d:0d:e2:4d:c8:c1:6d:ab:d7:bb: 37:eb:6d:73:2c:98:6b:ba:53:4d:8e:2f:91:a6:eb: 43:49:34:89:d9:b1:95:0a:c3:f2:06:e1:c9:36:71: e5:1d:dc:88:35:0b:6c:09:2f:da:c6:c9:18:ff:ca: ff:b6:94:24:42:74:22:e7:ef:ba:df:d1:f6:f3:27: 97:3a:cc:6b:b2:18:ce:a7:ec:51:d2:59:e0:63:14: 82:08:2b:b1:66:4d:94:0c:c6:ea:17:58:8f:1a:ea: ff:4b:d1:56:1f:e3:23:96:cc:03:fc:72:e1:65:f0: a3:0e:de:de:34:c8:55:80:4c:f7:2d:11:9f:42:f5: 85:c9:e8:ab:31:46:69:a1:8f:04:f2:07:6b:e5:db: 2c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:54:23:40:21:B0:12:F4:43:39:B7:EE:61:36:AE:CC:EB:CA:42:F7 X509v3 Authority Key Identifier: keyid:4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:be:e0:27:83:f5:8a:0d:ef:22:a3:3e:97:1c:26:c0:3a:6d: 5a:c6:99:69:a0:19:38:37:10:75:35:9e:c5:df:49:f1:b5:78: 92:8f:39:46:d8:26:bc:f1:ed:8e:a0:58:5c:2a:0a:71:ac:56: 8e:64:42:17:b3:e9:c5:b9:8d:ea:80:37:9c:bc:c0:39:30:7a: 9e:3d:e7:fe:b9:a0:01:a2:33:fb:fa:01:dc:c3:7f:76:a7:e7: 49:fb:db:c7:29:ea:2c:9e:ef:89:7c:30:67:73:3c:de:c4:6f: 2a:9b:55:8b:ef:e1:73:2b:0a:51:1c:45:ff:a9:ed:af:f9:73: 87:ab:17:f9:08:7a:10:68:eb:5d:2c:05:ac:c7:fd:31:a3:d2: 2f:53:81:a6:79:2b:66:c9:53:c7:2c:35:48:e7:1a:48:78:e3: 32:c7:0b:d2:5f:e2:d2:1a:f5:83:32:a0:66:1c:54:6f:6a:3d: a1:e5:8b:d1:55:32:2e:92:54:b0:9a:48:e4:a8:87:6f:a7:7a: 2e:c4:7a:0c:12:47:69:44:c2:c6:19:e6:66:40:28:0f:d7:8b: 45:90:9f:5a:75:56:48:12:55:90:e7:83:d1:d9:b7:1e:b1:bf: 09:42:b5:8c:a8:73:b6:b5:4f:d1:65:61:d9:25:79:84:18:57: cd:ea:4b:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIV3tW2ZVldj6dW2PpyPd2kKlaXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI3RDAwOTBBNkY0QzdCMkZCREY5REQ1QkRCRTc4QjE0 NThEMTEzMzAeFw0yNTExMDIyMzA2NDdaFw0yNTExMDQwMTU4NDdaMDMxMTAvBgNV BAMTKDAxNTQyMzQwMjFCMDEyRjQ0MzM5QjdFRTYxMzZBRUNDRUJDQTQyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkxpgwZsaE1DpqUahTvy3PWOP8 IiwhaP5j2h4Jcb08bgLyeT8sdQG+yijbGgPTnMJAQoiCclmy8bEz0kNlEfLeEQAV r8qF+967SH2lVxYv0A+YVuriIZEmOnlfggLrEb3Ist1yl8QEb5+zjdvIfQ3iTcjB bavXuzfrbXMsmGu6U02OL5Gm60NJNInZsZUKw/IG4ck2ceUd3Ig1C2wJL9rGyRj/ yv+2lCRCdCLn77rf0fbzJ5c6zGuyGM6n7FHSWeBjFIIIK7FmTZQMxuoXWI8a6v9L 0VYf4yOWzAP8cuFl8KMO3t40yFWATPctEZ9C9YXJ6KsxRmmhjwTyB2vl2yx3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAVQjQCGwEvRDObfuYTauzOvKQvcwHwYDVR0j BBgwFoAUS30AkKb0x7L7353Vvb54sUWNETMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjdLSlVQdXpIRkhmanBrbWYyRzFNaWdvWjhGN2phQzMzR2QyS2FYd0RL TFEvMC80QjdEMDA5MEE2RjRDN0IyRkJERjlERDVCREJFNzhCMTQ1OEQxMTMzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCN0QwMDkwQTZGNEM3QjJG QkRGOURENUJEQkU3OEIxNDU4RDExMzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RjdLSlVQdXpIRkhmanBrbWYyRzFNaWdvWjhGN2phQzMzR2QyS2FYd0RLTFEvMC80 QjdEMDA5MEE2RjRDN0IyRkJERjlERDVCREJFNzhCMTQ1OEQxMTMzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHr7gJ4P1ig3vIqM+lxwmwDptWsaZaaAZODcQdTWexd9J8bV4ko85RtgmvPHt jqBYXCoKcaxWjmRCF7PpxbmN6oA3nLzAOTB6nj3n/rmgAaIz+/oB3MN/dqfnSfvb xynqLJ7viXwwZ3M83sRvKptVi+/hcysKURxF/6ntr/lzh6sX+Qh6EGjrXSwFrMf9 MaPSL1OBpnkrZslTxyw1SOcaSHjjMscL0l/i0hr1gzKgZhxUb2o9oeWL0VUyLpJU sJpI5KiHb6d6LsR6DBJHaUTCxhnmZkAoD9eLRZCfWnVWSBJVkOeD0dm3HrG/CUK1 jKhztrVP0WVh2SV5hBhXzepLQg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:28:00 2025 by rpki-client