$ rpki-client -vvf rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft File: 411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft (raw, json) Hash identifier: Fbbe9zOwxuGfBnWqkOUqg6Xc2MV6zj8vJeIAjoxLm7Y= Subject key identifier: 3C:C9:1D:E6:B5:DE:CA:B6:06:33:A2:33:6A:CA:E0:0D:5F:59:83:C5 Authority key identifier: 41:1F:4F:8C:4C:5A:70:80:7A:28:FC:3C:85:F6:C6:BA:F0:11:24:5B Certificate issuer: /CN=411F4F8C4C5A70807A28FC3C85F6C6BAF011245B Certificate serial: 3EB0339B9FCF197915B2AC124344A024D0CC512C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer Subject info access: rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft Manifest number: 0128 Signing time: Mon 20 Oct 2025 01:00:00 +0000 Manifest this update: Mon 20 Oct 2025 00:55:00 +0000 Manifest next update: Tue 21 Oct 2025 01:00:00 +0000 Files and hashes: 1: 323830343a343235303a3a2f33322d3438203d3e20323637343932.roa (hash: /LHvi05kCt9zKgKY+WIZNYGkbzjxuWi5IXygDqTTTek=) 2: 3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa (hash: bqvZ1PV8LUhBf5JFS4uCb4PW7l97mORSa3iC75GRr/8=) 3: 411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.crl (hash: f1SKQVnzIawjgCaBRTLRuTsp1gB5uxWMvo48gFcQmLc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.crl rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b0:33:9b:9f:cf:19:79:15:b2:ac:12:43:44:a0:24:d0:cc:51:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411F4F8C4C5A70807A28FC3C85F6C6BAF011245B Validity Not Before: Oct 20 00:55:00 2025 GMT Not After : Oct 21 01:00:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:5c:ea:ec:5b:53:88:8d:77:f0:51:0a:bb: 46:15:fa:9b:30:f0:aa:85:0e:97:3f:98:97:8d:44: d0:b4:1f:b9:d0:35:fa:23:fb:5c:2c:87:b9:c9:9b: b5:ea:66:a7:e7:02:5e:71:6d:ed:bf:ac:84:3b:1d: d6:38:8f:bc:91:de:d5:a4:64:0c:52:90:df:5b:6a: 60:03:87:52:22:cb:82:c5:1b:70:a2:cd:02:9c:35: 1c:20:34:e3:db:8c:12:29:39:be:58:82:73:c4:74: 19:30:32:7c:45:01:d5:f0:88:6a:a2:22:79:d8:a4: 47:91:9f:32:91:85:72:1a:be:15:4a:d8:58:77:df: a2:67:78:3d:e4:96:ba:25:88:50:be:90:ec:5a:d6: ef:ef:f8:f4:c0:b9:ea:fc:79:dd:73:6f:50:8b:af: 20:ca:57:94:0f:3d:7b:d0:a7:82:63:42:62:3c:68: 17:7f:0b:ee:fe:f3:78:44:16:4f:1f:b6:e5:00:b0: b9:ea:82:e7:cc:05:1f:d9:70:43:e6:20:e6:2d:30: 59:d2:70:0f:ec:f2:28:69:19:72:ea:e5:15:9c:66: 71:a0:f3:f6:4c:60:2f:bd:ea:29:12:b1:0c:96:1a: ea:5c:fb:33:5b:ff:c9:a2:c3:98:e5:22:5b:e7:81: 96:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C9:1D:E6:B5:DE:CA:B6:06:33:A2:33:6A:CA:E0:0D:5F:59:83:C5 X509v3 Authority Key Identifier: keyid:41:1F:4F:8C:4C:5A:70:80:7A:28:FC:3C:85:F6:C6:BA:F0:11:24:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:75:b0:51:12:d5:34:54:b3:5e:77:5b:a7:b1:58:28:4d:f2: 72:2a:d2:46:e0:ba:19:47:c6:26:aa:ca:d1:c2:25:53:92:4a: db:2f:5a:96:b9:50:b2:7f:5e:9c:79:e4:06:81:2a:4e:ca:0e: e2:aa:12:6c:37:db:0e:7a:82:cb:9c:4f:99:ba:aa:b8:af:3d: 1b:b6:24:d2:dc:e8:e7:04:91:70:47:33:cc:09:e2:b4:ee:b3: 06:f5:60:3e:a8:28:23:6c:08:aa:e2:5a:cc:92:c2:16:e5:77: f2:85:7c:bb:04:71:35:80:ee:d0:57:d6:4d:c7:17:9e:a9:1c: 62:51:52:29:c2:85:cc:2a:43:9b:6d:82:05:15:f4:b0:56:5e: a5:ca:36:d1:d5:66:9f:ab:20:33:57:57:56:a4:12:6c:f0:2e: 3b:08:bb:c9:c5:ce:e4:97:8a:c2:92:d8:7d:4a:3c:97:eb:2a: 49:d7:f3:ab:27:6a:4a:ab:85:3b:d5:a9:d6:70:80:ad:f5:f3: bb:84:f8:33:69:45:27:76:0b:8b:22:b2:e8:4c:62:2b:9a:29: 17:ce:29:4c:3c:98:45:c1:bc:dc:98:62:14:b4:02:f7:03:63: 79:e6:a8:7b:cc:a7:94:20:c7:68:31:6e:11:26:fa:74:20:5a: c5:2e:8e:2b -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUPrAzm5/PGXkVsqwSQ0SgJNDMUSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExRjRGOEM0QzVBNzA4MDdBMjhGQzNDODVGNkM2QkFG MDExMjQ1QjAeFw0yNTEwMjAwMDU1MDBaFw0yNTEwMjEwMTAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0Q0NTVDRUFFQzVCNTM4ODhE NzdGMDUxMEFCQjQ2MTVGQTlCMzBGMEFBODUwRTk3M0Y5ODk3OEQ0NEQwQjQxRkI5 RDAzNUZBMjNGQjVDMkM4N0I5Qzk5QkI1RUE2NkE3RTcwMjVFNzE2REVEQkZBQzg0 M0IxREQ2Mzg4RkJDOTFERUQ1QTQ2NDBDNTI5MERGNUI2QTYwMDM4NzUyMjJDQjgy QzUxQjcwQTJDRDAyOUMzNTFDMjAzNEUzREI4QzEyMjkzOUJFNTg4MjczQzQ3NDE5 MzAzMjdDNDUwMUQ1RjA4ODZBQTIyMjc5RDhBNDQ3OTE5RjMyOTE4NTcyMUFCRTE1 NEFEODU4NzdERkEyNjc3ODNERTQ5NkJBMjU4ODUwQkU5MEVDNUFENkVGRUZGOEY0 QzBCOUVBRkM3OURENzM2RjUwOEJBRjIwQ0E1Nzk0MEYzRDdCRDBBNzgyNjM0MjYy M0M2ODE3N0YwQkVFRkVGMzc4NDQxNjRGMUZCNkU1MDBCMEI5RUE4MkU3Q0MwNTFG RDk3MDQzRTYyMEU2MkQzMDU5RDI3MDBGRUNGMjI4NjkxOTcyRUFFNTE1OUM2Njcx QTBGM0Y2NEM2MDJGQkRFQTI5MTJCMTBDOTYxQUVBNUNGQjMzNUJGRkM5QTJDMzk4 RTUyMjVCRTc4MTk2N0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAzUVc6uxbU4iNd/BRCrtGFfqbMPCqhQ6XP5iXjUTQtB+50DX6I/tc LIe5yZu16man5wJecW3tv6yEOx3WOI+8kd7VpGQMUpDfW2pgA4dSIsuCxRtwos0C nDUcIDTj24wSKTm+WIJzxHQZMDJ8RQHV8IhqoiJ52KRHkZ8ykYVyGr4VSthYd9+i Z3g95Ja6JYhQvpDsWtbv7/j0wLnq/Hndc29Qi68gyleUDz170KeCY0JiPGgXfwvu /vN4RBZPH7blALC56oLnzAUf2XBD5iDmLTBZ0nAP7PIoaRly6uUVnGZxoPP2TGAv veopErEMlhrqXPszW//JosOY5SJb54GWfQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FDzJHea13sq2BjOiM2rK4A1fWYPFMB8GA1UdIwQYMBaAFEEfT4xMWnCAeij8PIX2 xrrwESRbMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNiaDlDVm51Y1k3Sldz ekRHRjhXbjFFYngxeXlkcTJvUHJnemlOdjNXeDV5LzAvNDExRjRGOEM0QzVBNzA4 MDdBMjhGQzNDODVGNkM2QkFGMDExMjQ1Qi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS80MTFGNEY4QzRDNUE3MDgwN0EyOEZDM0M4NUY2QzZCQUYwMTEy NDVCLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNiaDlDVm51Y1k3SldzekRHRjhX bjFFYngxeXlkcTJvUHJnemlOdjNXeDV5LzAvNDExRjRGOEM0QzVBNzA4MDdBMjhG QzNDODVGNkM2QkFGMDExMjQ1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABl1sFES1TRUs153W6exWChN 8nIq0kbguhlHxiaqytHCJVOSStsvWpa5ULJ/Xpx55AaBKk7KDuKqEmw32w56gsuc T5m6qrivPRu2JNLc6OcEkXBHM8wJ4rTuswb1YD6oKCNsCKriWsySwhbld/KFfLsE cTWA7tBX1k3HF56pHGJRUinChcwqQ5ttggUV9LBWXqXKNtHVZp+rIDNXV1akEmzw LjsIu8nFzuSXisKS2H1KPJfrKknX86snakqrhTvVqdZwgK3187uE+DNpRSd2C4si suhMYiuaKRfOKUw8mEXBvNyYYhS0AvcDY3nmqHvMp5Qgx2gxbhEm+nQgWsUujis= -----END CERTIFICATE-----Generated at Mon Oct 20 17:56:05 2025 by rpki-client