$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft File: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft (raw, json) Hash identifier: I/1W5a8+laQ3v3dVZKsZTd3LzE+h6RjaduOwSYYeVGU= Subject key identifier: 44:67:BC:6D:9C:8E:6B:1A:F3:B1:6D:70:F2:52:B7:FC:EE:4D:76:9A Authority key identifier: 4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E Certificate issuer: /CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E Certificate serial: 21D57957C525C5CC0FF4ED95826406985DB7A956 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer Subject info access: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft Manifest number: 02D7 Signing time: Mon 03 Nov 2025 05:35:23 +0000 Manifest this update: Mon 03 Nov 2025 05:30:23 +0000 Manifest next update: Tue 04 Nov 2025 06:37:23 +0000 Files and hashes: 1: 3137372e39312e3136342e302f32322d3235203d3e20323633343435.roa (hash: scT74f9+IGXquXgeiznfoCCJYP7gQXwCIwX0K3d7sQY=) 2: 323830343a313165303a3a2f33322d3535203d3e20323633343435.roa (hash: JY9NjnQ88soBYNRVthMyseU4hIC042l72p6YiSE2yyU=) 3: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl (hash: ADNSkn2+GhZF8aVc/cE1BJTQZ7FNDDyrPiupZob/+F8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 06:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d5:79:57:c5:25:c5:cc:0f:f4:ed:95:82:64:06:98:5d:b7:a9:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E Validity Not Before: Nov 3 05:30:23 2025 GMT Not After : Nov 4 06:37:23 2025 GMT Subject: CN=4467BC6D9C8E6B1AF3B16D70F252B7FCEE4D769A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:8a:29:8c:76:55:9b:6f:92:cd:f8:ce:6b: a4:a6:ce:8e:40:56:1c:8f:4c:fe:8b:4f:eb:20:19: aa:2c:5b:e9:20:d2:58:ca:1e:40:c0:d9:83:7f:77: 56:60:a8:9b:8a:32:c5:ae:85:fe:57:c3:94:75:fa: ca:1f:81:d4:7c:7f:5b:13:4b:94:d7:f8:35:22:ab: 6a:8d:56:e5:a3:6c:56:0b:e3:de:b0:fd:c7:43:50: 2a:a8:04:ac:7f:35:ee:7a:52:bb:8c:71:d5:e2:10: d7:18:57:7e:67:30:25:38:aa:c2:35:da:89:b0:17: 88:d3:26:ac:50:55:d7:b2:0e:ae:02:52:c1:46:95: ab:22:63:f0:98:8a:d2:a0:08:11:42:8c:15:c5:a3: 97:6f:b8:83:a2:d2:83:90:fe:5f:6f:b7:75:ea:1f: ff:1d:55:fd:b9:49:7b:a1:00:dd:1b:5e:72:1b:5e: 86:1a:c6:4e:c2:3b:56:13:d7:4f:54:78:62:b2:26: 9c:51:e8:c8:8f:5c:b5:3f:d9:be:6b:ea:f8:d8:65: fe:39:da:a6:f3:21:e2:bc:84:e8:ef:24:14:29:e3: 78:83:59:08:da:4f:51:95:1e:bc:55:29:0d:07:73: 11:38:c9:a1:9b:e2:50:c1:86:f5:7f:04:7a:01:2a: 80:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:67:BC:6D:9C:8E:6B:1A:F3:B1:6D:70:F2:52:B7:FC:EE:4D:76:9A X509v3 Authority Key Identifier: keyid:4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:76:0b:02:48:41:2b:90:50:13:67:0a:e6:82:2a:41:0d:50: 40:0b:d4:18:7e:cf:3a:3e:1e:b9:96:3f:07:3f:71:5e:24:12: aa:4a:da:77:9c:a7:9a:c5:39:16:74:9a:ff:e9:59:bb:5f:05: af:f1:e7:dd:14:7d:f0:ce:ca:10:18:bc:f0:7c:30:6b:33:a7: c7:8c:ba:aa:ae:c8:f4:d6:d8:d3:61:87:ba:86:43:ca:dc:c8: ea:a8:be:75:03:48:45:b0:de:f6:70:18:3f:c8:98:e2:64:9a: 72:26:ca:c7:be:65:18:66:e3:5d:82:ad:4a:c7:44:49:09:4c: 29:ad:d0:a2:6a:f6:5c:09:ab:66:28:ee:60:29:ac:91:ae:60: e5:0c:4b:e8:7e:01:d0:df:cb:0d:9d:38:df:81:46:1b:04:6b: 01:28:ef:8e:4c:5a:5b:81:a9:66:9b:81:03:58:ca:cf:9d:97: a3:34:8a:99:44:e1:de:f4:e2:49:20:67:63:30:d9:4f:6a:17: 69:fd:97:3d:0f:dc:27:fa:f4:bb:1b:ec:28:9f:07:38:d9:d2: 94:0b:1b:ff:e7:fb:c7:a8:e6:9c:e2:bd:5d:5c:89:1f:25:14: 2a:20:42:ac:d7:58:ec:3f:85:73:2a:60:e5:41:2a:0e:e0:92: 4a:d4:36:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIdV5V8UlxcwP9O2VgmQGmF23qVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzRTlDRDA5RTNGNEE2OUI0MEI0NEM4QzgxNjFFMUYw MEJFMEY1RTAeFw0yNTExMDMwNTMwMjNaFw0yNTExMDQwNjM3MjNaMDMxMTAvBgNV BAMTKDQ0NjdCQzZEOUM4RTZCMUFGM0IxNkQ3MEYyNTJCN0ZDRUU0RDc2OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0bIopjHZVm2+SzfjOa6Smzo5A VhyPTP6LT+sgGaosW+kg0ljKHkDA2YN/d1ZgqJuKMsWuhf5Xw5R1+sofgdR8f1sT S5TX+DUiq2qNVuWjbFYL496w/cdDUCqoBKx/Ne56UruMcdXiENcYV35nMCU4qsI1 2omwF4jTJqxQVdeyDq4CUsFGlasiY/CYitKgCBFCjBXFo5dvuIOi0oOQ/l9vt3Xq H/8dVf25SXuhAN0bXnIbXoYaxk7CO1YT109UeGKyJpxR6MiPXLU/2b5r6vjYZf45 2qbzIeK8hOjvJBQp43iDWQjaT1GVHrxVKQ0HcxE4yaGb4lDBhvV/BHoBKoAzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURGe8bZyOaxrzsW1w8lK3/O5NdpowHwYDVR0j BBgwFoAUSz6c0J4/Smm0C0TIyBYeHwC+D14wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZE bXgvMC80QjNFOUNEMDlFM0Y0QTY5QjQwQjQ0QzhDODE2MUUxRjAwQkUwRjVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCM0U5Q0QwOUUzRjRBNjlC NDBCNDRDOEM4MTYxRTFGMDBCRTBGNUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Sjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZEbXgvMC80 QjNFOUNEMDlFM0Y0QTY5QjQwQjQ0QzhDODE2MUUxRjAwQkUwRjVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWnYLAkhBK5BQE2cK5oIqQQ1QQAvUGH7POj4euZY/Bz9xXiQSqkrad5ynmsU5 FnSa/+lZu18Fr/Hn3RR98M7KEBi88HwwazOnx4y6qq7I9NbY02GHuoZDytzI6qi+ dQNIRbDe9nAYP8iY4mSacibKx75lGGbjXYKtSsdESQlMKa3Qomr2XAmrZijuYCms ka5g5QxL6H4B0N/LDZ0434FGGwRrASjvjkxaW4GpZpuBA1jKz52XozSKmUTh3vTi SSBnYzDZT2oXaf2XPQ/cJ/r0uxvsKJ8HONnSlAsb/+f7x6jmnOK9XVyJHyUUKiBC rNdY7D+Fcypg5UEqDuCSStQ22Q== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:39 2025 by rpki-client