$ rpki-client -vvf rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft File: 470AE1EB9714E43320F9D361336505142D7D836B.mft (raw, json) Hash identifier: hPTCAQdI0QCaVs4yRisIvVtTqACxDs87NEm/mylksbU= Subject key identifier: A7:15:C8:C2:FC:D0:2B:E1:51:64:E1:B0:29:A5:C9:1C:7F:46:C2:1C Authority key identifier: 47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B Certificate issuer: /CN=470AE1EB9714E43320F9D361336505142D7D836B Certificate serial: 51940F64AAB095195D94ACCC26AE1C79597BF351 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft Manifest number: A2 Signing time: Mon 20 Oct 2025 13:10:24 +0000 Manifest this update: Mon 20 Oct 2025 13:05:24 +0000 Manifest next update: Tue 21 Oct 2025 14:57:24 +0000 Files and hashes: 1: 470AE1EB9714E43320F9D361336505142D7D836B.crl (hash: bQJh7HOJ7b+My5TKLoTpyeeoXMX0+qIyKwwI95Bi7os=) 2: 3137372e33392e39362e302f32342d3332203d3e20323731363135.roa (hash: 1vyNuWE5jauLyptTokeHnfrLaNFayN+UWnzSx2Hk+eA=) 3: 323830343a376534633a3a2f33322d313238203d3e20323731363135.roa (hash: OdU9UEZt02QpSGkR3fyYMJem0AChe2we0Z/o1VOpO5k=) 4: 3137372e33392e39382e302f32332d3332203d3e20323731363135.roa (hash: BdLrbEU7II3NX1HsAT1F9Ah5WD1IUR9s5CyZjRaEy4Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:94:0f:64:aa:b0:95:19:5d:94:ac:cc:26:ae:1c:79:59:7b:f3:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470AE1EB9714E43320F9D361336505142D7D836B Validity Not Before: Oct 20 13:05:24 2025 GMT Not After : Oct 21 14:57:24 2025 GMT Subject: CN=A715C8C2FCD02BE15164E1B029A5C91C7F46C21C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:46:d2:55:f2:a5:41:f5:de:67:4d:93:ae:47: 86:5a:97:8c:91:06:3d:74:b6:ea:9c:5d:66:d0:a4: f6:c0:0d:c7:29:07:6b:62:8a:e5:0b:cc:08:2e:52: c9:e0:1c:03:ef:4f:85:80:0e:16:47:21:6b:e1:f5: 4e:5e:0f:81:fe:64:0a:73:e3:be:1c:b8:8c:be:f5: e9:66:a3:c9:a7:5f:43:30:a6:8b:54:08:55:2a:e3: d3:c7:c5:ce:15:ee:b3:fa:1a:cc:b3:83:85:1d:4b: 22:e7:49:1f:f4:3f:e6:c7:fb:bd:57:46:14:af:2b: d1:5b:0d:10:8e:f7:1e:ab:e3:dc:75:53:c3:51:ec: 30:f8:7c:a4:76:6d:c5:4f:e4:6a:a7:44:d5:43:a5: d9:24:60:0d:ef:29:99:9a:2c:ff:41:be:bc:0f:ac: 18:80:f6:ba:d7:7b:55:b0:03:ff:5d:20:64:03:82: 3c:14:a5:f7:65:df:a5:70:7a:1d:e5:d0:21:40:e3: 7c:d1:d2:be:ee:d7:50:6b:6b:47:fe:b5:ee:3c:48: 44:c1:d5:48:19:b7:55:e4:b1:4d:a3:c6:20:83:ec: 0e:d6:54:d2:dc:44:c1:a7:c5:53:bf:0b:89:6f:11: 8b:d2:dc:f2:55:88:dd:37:71:28:f2:d8:86:7b:b4: e8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:15:C8:C2:FC:D0:2B:E1:51:64:E1:B0:29:A5:C9:1C:7F:46:C2:1C X509v3 Authority Key Identifier: keyid:47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3d:9b:07:26:fa:26:ef:5f:77:81:a6:d0:f8:b6:b6:7b:b1: 93:06:9b:a2:39:53:0f:4d:b5:40:92:0b:a6:ac:55:68:e4:8b: e0:05:27:ec:0b:7f:50:e6:b3:29:76:ed:58:5e:56:08:fd:13: e1:08:95:04:ce:1c:e7:5e:cb:cd:9a:60:a8:da:5e:6b:42:a7: 05:15:11:03:0d:4e:ab:a4:0f:6b:52:f3:57:3a:bf:90:a8:10: ea:8a:68:14:15:dd:72:87:4c:53:25:de:4a:d5:b3:43:24:cb: 34:f9:eb:3f:12:b3:da:a4:1a:8b:5c:39:24:f1:10:45:69:6c: 43:07:96:0f:75:fb:3b:6c:f5:98:e1:35:bd:bb:a7:32:f0:44: 3d:24:49:79:2f:7a:9a:e0:0c:41:c0:82:4e:13:1f:dd:2c:e3: 61:46:65:3d:59:39:85:ab:2c:e7:ac:6e:41:fb:ef:26:53:f6: f0:65:dd:f5:c7:5d:47:8b:a6:18:94:c3:d3:80:c5:2e:1a:a1: 17:1d:83:4f:62:50:91:82:32:b0:e1:82:ce:a7:02:31:9c:7f: f2:51:5f:5c:32:c9:3c:59:8d:14:72:90:50:67:92:0c:8e:c6: 70:2e:18:db:74:59:ec:fd:10:b8:91:81:49:9f:04:66:6d:13: 03:28:42:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUZQPZKqwlRldlKzMJq4ceVl781EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDcwQUUxRUI5NzE0RTQzMzIwRjlEMzYxMzM2NTA1MTQy RDdEODM2QjAeFw0yNTEwMjAxMzA1MjRaFw0yNTEwMjExNDU3MjRaMDMxMTAvBgNV BAMTKEE3MTVDOEMyRkNEMDJCRTE1MTY0RTFCMDI5QTVDOTFDN0Y0NkMyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURtJV8qVB9d5nTZOuR4Zal4yR Bj10tuqcXWbQpPbADccpB2tiiuULzAguUsngHAPvT4WADhZHIWvh9U5eD4H+ZApz 474cuIy+9elmo8mnX0MwpotUCFUq49PHxc4V7rP6Gsyzg4UdSyLnSR/0P+bH+71X RhSvK9FbDRCO9x6r49x1U8NR7DD4fKR2bcVP5GqnRNVDpdkkYA3vKZmaLP9BvrwP rBiA9rrXe1WwA/9dIGQDgjwUpfdl36Vweh3l0CFA43zR0r7u11Bra0f+te48SETB 1UgZt1XksU2jxiCD7A7WVNLcRMGnxVO/C4lvEYvS3PJViN03cSjy2IZ7tOj7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpxXIwvzQK+FRZOGwKaXJHH9GwhwwHwYDVR0j BBgwFoAURwrh65cU5DMg+dNhM2UFFC19g2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dv THcvMC80NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3MEFFMUVCOTcxNEU0MzMy MEY5RDM2MTMzNjUwNTE0MkQ3RDgzNkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dvTHcvMC80 NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXj2bByb6Ju9fd4Gm0Pi2tnuxkwabojlTD021QJILpqxVaOSL4AUn7At/UOaz KXbtWF5WCP0T4QiVBM4c517LzZpgqNpea0KnBRURAw1Oq6QPa1LzVzq/kKgQ6opo FBXdcodMUyXeStWzQyTLNPnrPxKz2qQai1w5JPEQRWlsQweWD3X7O2z1mOE1vbun MvBEPSRJeS96muAMQcCCThMf3SzjYUZlPVk5hass56xuQfvvJlP28GXd9cddR4um GJTD04DFLhqhFx2DT2JQkYIysOGCzqcCMZx/8lFfXDLJPFmNFHKQUGeSDI7GcC4Y 23RZ7P0QuJGBSZ8EZm0TAyhCxw== -----END CERTIFICATE-----Generated at Tue Oct 21 05:17:40 2025 by rpki-client