$ rpki-client -vvf rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft File: 4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft (raw, json) Hash identifier: I17+zhDADMTVl+jKODQL73Y3JP8UdJPoqNfOoIeJe44= Subject key identifier: 3A:D3:D6:04:23:4A:EE:24:7E:C7:8A:81:77:92:30:AD:41:0E:99:70 Authority key identifier: 4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4 Certificate issuer: /CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4 Certificate serial: 120A32D5BBA24D2E1F64DA354F21B81E9B1C90CC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer Subject info access: rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft Manifest number: C4 Signing time: Mon 03 Nov 2025 19:38:48 +0000 Manifest this update: Mon 03 Nov 2025 19:33:48 +0000 Manifest next update: Tue 04 Nov 2025 22:22:48 +0000 Files and hashes: 1: 3136382e3139362e3231362e302f32322d3234203d3e20323635343733.roa (hash: fPsx4d62UPQm+f5HlAHqo78FphvrRmReo6la1d77pLU=) 2: 4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl (hash: F1ExodhCgeRU2KlHPGgkg4Fs3sioFc2l3ylXUtLmdk0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 22:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:0a:32:d5:bb:a2:4d:2e:1f:64:da:35:4f:21:b8:1e:9b:1c:90:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4 Validity Not Before: Nov 3 19:33:48 2025 GMT Not After : Nov 4 22:22:48 2025 GMT Subject: CN=3AD3D604234AEE247EC78A81779230AD410E9970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b5:8e:ac:79:eb:ff:5b:df:4a:b4:19:9e:95: 66:b1:90:7d:0d:be:33:d4:58:0c:78:27:a0:a2:0a: 91:24:fd:9b:d8:3b:24:a1:1b:a6:25:5f:f2:29:4a: 1e:a9:8d:fa:a2:dd:0d:36:f4:fa:61:85:32:df:2a: 96:4f:45:f1:69:bb:32:a7:24:01:9c:9b:0c:f3:b7: 83:cb:38:21:5f:bf:8a:08:a0:5a:a0:f6:d5:7d:ff: 95:2c:2f:4c:bd:81:ae:df:f7:2b:f9:2a:63:58:98: f4:29:05:1b:4d:49:2b:2b:2b:9a:f5:62:49:79:ab: 26:d8:20:cd:13:2b:f4:66:34:f5:ee:99:9c:84:a7: 5c:cd:c2:40:2c:56:45:ef:6c:d1:33:8f:8f:31:5c: eb:45:e4:78:43:32:b0:ba:bc:28:dd:28:b3:ff:87: 93:ef:2d:ff:c9:8b:10:3a:b4:1b:a0:97:3a:7e:ba: 17:65:d7:4e:5c:e2:d1:ed:21:bd:64:8c:5f:c7:9c: ad:07:9f:e2:b0:6c:bb:59:25:a7:6b:25:db:78:cd: ab:9f:95:20:fd:d9:d3:5e:51:7f:45:96:a0:d0:eb: 21:14:2b:56:3e:5e:03:bb:09:63:f6:ec:25:9a:ca: e1:ca:56:e1:ad:fe:a4:01:f1:cc:c5:80:63:cc:e6: db:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D3:D6:04:23:4A:EE:24:7E:C7:8A:81:77:92:30:AD:41:0E:99:70 X509v3 Authority Key Identifier: keyid:4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:70:7d:7c:1f:95:35:52:dd:b4:3e:12:08:0c:d5:9b:8a:68: eb:a4:10:9a:6c:f2:07:1e:bd:c1:43:26:53:7b:7a:f6:ce:87: 9b:41:49:2e:77:0e:33:e1:3b:b2:5e:56:9c:3f:0f:26:d2:11: 1b:a5:c2:23:57:03:a3:8f:1f:e0:c7:89:59:e7:4e:51:51:42: 60:13:72:71:36:17:b1:6b:73:35:32:c4:b2:51:c7:44:c0:07: bc:cc:09:b8:1a:dc:1e:c7:78:5b:0d:8f:df:35:29:59:e8:73: d7:21:38:ab:fd:66:51:b7:f7:a2:ca:4b:e9:44:28:23:66:6e: 06:af:a5:aa:ee:a0:c5:5b:9c:63:c1:71:58:e7:01:8f:89:ea: c1:d5:59:e3:98:18:bf:50:e0:57:a6:55:c1:f7:cf:c3:4c:f2: 0f:6b:75:2c:2d:c9:e4:dc:51:db:34:85:2c:9f:16:c4:42:a0: e8:a8:ae:83:73:51:95:7a:a3:bf:f0:e2:68:6d:bf:36:b5:ec: 3b:ca:02:b0:97:71:82:98:d0:cf:3d:c0:f6:18:21:13:8e:5f: 68:78:c7:3a:b1:67:fb:f6:d5:b0:e4:7c:26:44:23:7f:42:97: ca:dc:8d:8c:71:b3:07:f7:2a:d1:e2:09:33:98:da:f8:2a:0d: 70:31:83:82 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUEgoy1buiTS4fZNo1TyG4HpsckMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVGMDdENTE0QkExRDZCMkZCREE2QzREQzM2MEJFQjc1 MEQzQzlDNDAeFw0yNTExMDMxOTMzNDhaFw0yNTExMDQyMjIyNDhaMDMxMTAvBgNV BAMTKDNBRDNENjA0MjM0QUVFMjQ3RUM3OEE4MTc3OTIzMEFENDEwRTk5NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtY6seev/W99KtBmelWaxkH0N vjPUWAx4J6CiCpEk/ZvYOyShG6YlX/IpSh6pjfqi3Q029PphhTLfKpZPRfFpuzKn JAGcmwzzt4PLOCFfv4oIoFqg9tV9/5UsL0y9ga7f9yv5KmNYmPQpBRtNSSsrK5r1 Ykl5qybYIM0TK/RmNPXumZyEp1zNwkAsVkXvbNEzj48xXOtF5HhDMrC6vCjdKLP/ h5PvLf/JixA6tBuglzp+uhdl105c4tHtIb1kjF/HnK0Hn+KwbLtZJadrJdt4zauf lSD92dNeUX9FlqDQ6yEUK1Y+XgO7CWP27CWayuHKVuGt/qQB8czFgGPM5tuDAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUOtPWBCNK7iR+x4qBd5IwrUEOmXAwHwYDVR0j BBgwFoAUTvB9UUuh1rL72mxNw2C+t1DTycQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YemFHSkM0bTRCWXgyb21abkszdFo4cFV6R0NZR1NVblFkdm0xUUZMeVZz LzAvNEVGMDdENTE0QkExRDZCMkZCREE2QzREQzM2MEJFQjc1MEQzQzlDNC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80RUYwN0Q1MTRCQTFENkIyRkJE QTZDNERDMzYwQkVCNzUwRDNDOUM0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1h6 YUdKQzRtNEJZeDJvbVpuSzN0WjhwVXpHQ1lHU1VuUWR2bTFRRkx5VnMvMC80RUYw N0Q1MTRCQTFENkIyRkJEQTZDNERDMzYwQkVCNzUwRDNDOUM0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA JXB9fB+VNVLdtD4SCAzVm4po66QQmmzyBx69wUMmU3t69s6Hm0FJLncOM+E7sl5W nD8PJtIRG6XCI1cDo48f4MeJWedOUVFCYBNycTYXsWtzNTLEslHHRMAHvMwJuBrc Hsd4Ww2P3zUpWehz1yE4q/1mUbf3ospL6UQoI2ZuBq+lqu6gxVucY8FxWOcBj4nq wdVZ45gYv1DgV6ZVwffPw0zyD2t1LC3J5NxR2zSFLJ8WxEKg6Kiug3NRlXqjv/Di aG2/NrXsO8oCsJdxgpjQzz3A9hghE45faHjHOrFn+/bVsOR8JkQjf0KXytyNjHGz B/cq0eIJM5ja+CoNcDGDgg== -----END CERTIFICATE-----Generated at Tue Nov 4 06:47:49 2025 by rpki-client