$ rpki-client -vvf rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/4FE40A6F50732749EF4639D0CD3746356543A732.mft File: 4FE40A6F50732749EF4639D0CD3746356543A732.mft (raw, json) Hash identifier: 50gH9HjchBpb7mDIeVqNXiqkHz3+7LteASU0y63oU/w= Subject key identifier: 9F:03:50:89:C5:E2:89:11:C7:36:C9:3D:D9:B6:2A:11:B1:25:B7:CF Authority key identifier: 4F:E4:0A:6F:50:73:27:49:EF:46:39:D0:CD:37:46:35:65:43:A7:32 Certificate issuer: /CN=4FE40A6F50732749EF4639D0CD3746356543A732 Certificate serial: 6AE1DE507F61576194AB1FCE74BBD23DDBD89147 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE40A6F50732749EF4639D0CD3746356543A732.cer Subject info access: rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/4FE40A6F50732749EF4639D0CD3746356543A732.mft Manifest number: 01BF Signing time: Mon 03 Nov 2025 00:51:21 +0000 Manifest this update: Mon 03 Nov 2025 00:46:21 +0000 Manifest next update: Tue 04 Nov 2025 03:55:21 +0000 Files and hashes: 1: 3138392e39312e3137322e302f32322d3332203d3e20323731333030.roa (hash: 6JK+R09SAFrbsveS+Q3sQ2depWH1NTU2Jx6qQ5aGOsI=) 2: 323830343a373935383a3a2f33322d313238203d3e20323731333030.roa (hash: n/nB3LvGbriZhPFAeWC3oZHk4dSRhzefVu/K5W9Weqk=) 3: 4FE40A6F50732749EF4639D0CD3746356543A732.crl (hash: YhDNjHJDleT2+oXKbdgvgVeF0EtMrjXuurS0KY3l48w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/4FE40A6F50732749EF4639D0CD3746356543A732.crl rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/4FE40A6F50732749EF4639D0CD3746356543A732.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE40A6F50732749EF4639D0CD3746356543A732.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e1:de:50:7f:61:57:61:94:ab:1f:ce:74:bb:d2:3d:db:d8:91:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FE40A6F50732749EF4639D0CD3746356543A732 Validity Not Before: Nov 3 00:46:21 2025 GMT Not After : Nov 4 03:55:21 2025 GMT Subject: CN=9F035089C5E28911C736C93DD9B62A11B125B7CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:92:46:ad:d6:c6:8e:4c:37:79:ca:97:a7:c9: 56:f4:52:88:03:21:0e:c7:37:e9:73:17:ea:26:61: dd:25:59:e8:d1:8c:a2:f6:d7:e5:ef:7d:6f:25:83: 12:8c:d4:59:72:6b:00:e0:9f:82:ff:77:38:63:3c: 8c:d4:48:01:ad:70:3b:2c:8c:2b:23:78:9f:66:c1: 3d:5a:ed:8c:77:23:fe:c8:bf:24:ee:1b:e4:ee:6d: e0:ae:6f:84:54:05:e0:9a:85:84:1e:dd:87:1f:93: 6e:63:95:f2:de:27:65:77:99:fb:2f:89:a8:e2:95: 76:53:be:b7:f6:e1:b1:e5:ef:be:ff:ad:94:5e:74: 37:86:99:58:23:2f:38:ac:69:79:89:80:47:f3:2c: e0:67:04:c5:be:64:d6:20:12:98:46:43:5f:ca:13: 53:be:bc:87:41:3e:66:73:50:20:d7:21:3c:4d:5c: bb:d2:b9:16:7e:72:1b:f1:0f:55:66:92:a0:5b:f0: 9f:46:72:27:b6:40:bc:98:78:8e:0c:53:58:c5:aa: 53:65:17:76:58:df:0d:cd:57:d4:16:88:e6:c1:40: 1b:cf:d8:38:f8:b7:0e:de:6a:67:98:ff:77:34:78: 94:ab:f5:3e:3b:a2:d4:c9:d1:5f:8c:94:17:be:63: 1b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:03:50:89:C5:E2:89:11:C7:36:C9:3D:D9:B6:2A:11:B1:25:B7:CF X509v3 Authority Key Identifier: keyid:4F:E4:0A:6F:50:73:27:49:EF:46:39:D0:CD:37:46:35:65:43:A7:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/4FE40A6F50732749EF4639D0CD3746356543A732.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE40A6F50732749EF4639D0CD3746356543A732.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/4FE40A6F50732749EF4639D0CD3746356543A732.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c7:07:95:c0:1d:5a:51:15:d9:3e:29:5f:5d:5f:b1:18:34: 8c:71:c2:50:55:8c:7e:ad:e6:f4:f7:08:7d:c8:43:43:9d:54: e5:55:ec:c2:ff:96:70:2a:84:37:5f:bf:81:c5:33:77:10:1f: 41:4c:d3:02:0f:b2:92:55:70:d1:be:29:39:01:9d:86:28:fa: fd:c7:77:60:d5:51:de:45:88:f1:d7:ae:1c:77:48:d2:8d:c2: a7:44:7f:ce:c1:51:85:48:03:02:0f:c3:18:b1:d6:2e:af:bf: e7:57:22:ad:a9:63:7b:e3:92:88:cc:f1:e3:37:66:0d:ac:b5: 90:fe:7c:9f:1b:7d:bf:75:eb:84:0c:bd:f9:14:be:d8:3c:a9: c4:fe:31:9f:cb:2b:a7:bd:01:bf:c2:65:81:5b:4f:1f:26:29: 1c:1a:48:bd:ff:56:09:34:3c:b2:c0:9f:34:1b:2c:f1:c1:3f: 0c:f6:5a:0e:ce:b8:cc:56:fc:b4:f0:5e:cf:70:ee:c2:b7:ad: fc:8b:00:96:fb:8d:55:24:25:a4:81:4c:23:dc:0d:5b:f6:1e: c8:ee:5c:2a:dc:f3:59:73:6e:fd:5b:4a:f7:62:57:35:8e:7b: 8e:d0:9f:40:f8:08:18:e5:21:4c:a0:87:46:eb:92:2e:ec:a3: e3:57:30:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUauHeUH9hV2GUqx/OdLvSPdvYkUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZFNDBBNkY1MDczMjc0OUVGNDYzOUQwQ0QzNzQ2MzU2 NTQzQTczMjAeFw0yNTExMDMwMDQ2MjFaFw0yNTExMDQwMzU1MjFaMDMxMTAvBgNV BAMTKDlGMDM1MDg5QzVFMjg5MTFDNzM2QzkzREQ5QjYyQTExQjEyNUI3Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVkkat1saOTDd5ypenyVb0UogD IQ7HN+lzF+omYd0lWejRjKL21+XvfW8lgxKM1FlyawDgn4L/dzhjPIzUSAGtcDss jCsjeJ9mwT1a7Yx3I/7IvyTuG+TubeCub4RUBeCahYQe3Ycfk25jlfLeJ2V3mfsv iajilXZTvrf24bHl777/rZRedDeGmVgjLzisaXmJgEfzLOBnBMW+ZNYgEphGQ1/K E1O+vIdBPmZzUCDXITxNXLvSuRZ+chvxD1VmkqBb8J9Gcie2QLyYeI4MU1jFqlNl F3ZY3w3NV9QWiObBQBvP2Dj4tw7eameY/3c0eJSr9T47otTJ0V+MlBe+Yxs/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnwNQicXiiRHHNsk92bYqEbElt88wHwYDVR0j BBgwFoAUT+QKb1BzJ0nvRjnQzTdGNWVDpzIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHVDZ1ZyY3ZoUlRyTkJZUmlBS0Q5U2JzNUo5YjEzM1R2SnNvU1VaRHBq ZjcvMC80RkU0MEE2RjUwNzMyNzQ5RUY0NjM5RDBDRDM3NDYzNTY1NDNBNzMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGRTQwQTZGNTA3MzI3NDlF RjQ2MzlEMENEMzc0NjM1NjU0M0E3MzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHVDZ1ZyY3ZoUlRyTkJZUmlBS0Q5U2JzNUo5YjEzM1R2SnNvU1VaRHBqZjcvMC80 RkU0MEE2RjUwNzMyNzQ5RUY0NjM5RDBDRDM3NDYzNTY1NDNBNzMyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATMcHlcAdWlEV2T4pX11fsRg0jHHCUFWMfq3m9PcIfchDQ51U5VXswv+WcCqE N1+/gcUzdxAfQUzTAg+yklVw0b4pOQGdhij6/cd3YNVR3kWI8deuHHdI0o3Cp0R/ zsFRhUgDAg/DGLHWLq+/51ciralje+OSiMzx4zdmDay1kP58nxt9v3XrhAy9+RS+ 2DypxP4xn8srp70Bv8JlgVtPHyYpHBpIvf9WCTQ8ssCfNBss8cE/DPZaDs64zFb8 tPBez3Duwret/IsAlvuNVSQlpIFMI9wNW/YeyO5cKtzzWXNu/VtK92JXNY57jtCf QPgIGOUhTKCHRuuSLuyj41cwEQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:04 2025 by rpki-client