$ rpki-client -vvf rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft File: 4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft (raw, json) Hash identifier: qO2/fE28vrc48ulMat4oHtULD6GVHQPJfU8uAffMe6I= Subject key identifier: 6A:54:F0:E7:7C:4C:8C:E1:F3:06:4B:F7:C2:32:A0:55:AE:9C:AE:0A Authority key identifier: 4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42 Certificate issuer: /CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642 Certificate serial: 2FF3B33D9B3F7D8769CC4B152E0D03169FE2471D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer Subject info access: rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft Manifest number: 02F1 Signing time: Mon 20 Oct 2025 00:20:00 +0000 Manifest this update: Mon 20 Oct 2025 00:15:00 +0000 Manifest next update: Tue 21 Oct 2025 00:47:00 +0000 Files and hashes: 1: 4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl (hash: YpDlAcKgD/P2hJeY71PBGW6cSNFLRLTvf67usieaSac=) 2: 323830343a313732343a3a2f33322d3332203d3e20323633313236.roa (hash: xsPWu5Oyc8zYvFSpUQl6AyPy98auaRdocgkmpbAT+rI=) 3: 3137372e39322e3138342e302f32312d3231203d3e20323633313236.roa (hash: 0afFfPJistXXEZlrXlXusI1hM5eNaq3t1i5SVTRNels=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 00:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f3:b3:3d:9b:3f:7d:87:69:cc:4b:15:2e:0d:03:16:9f:e2:47:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642 Validity Not Before: Oct 20 00:15:00 2025 GMT Not After : Oct 21 00:47:00 2025 GMT Subject: CN=6A54F0E77C4C8CE1F3064BF7C232A055AE9CAE0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:51:e9:1d:3f:ed:ed:05:1a:ba:da:a6:66:39: 1a:e5:26:ef:3f:ab:8f:33:72:ba:6a:0e:fa:24:a6: 53:60:e5:2c:dd:0a:2f:29:d4:36:1f:1c:c2:a5:d3: 96:c6:cd:df:db:56:87:93:4a:cf:c6:d7:9b:e1:94: 31:2a:3e:bb:4b:a2:2d:09:9b:16:7b:50:71:7a:d4: 50:5a:49:3a:b8:3c:07:39:3b:36:ed:ec:8f:a7:3a: a7:4b:34:f3:cd:d5:97:1d:ec:30:9f:a5:f6:e0:3f: 3b:e6:f6:af:92:91:5e:5b:58:1c:99:a2:e2:d6:d7: f8:a7:62:89:6d:b6:1f:55:72:35:20:42:45:41:57: a5:94:a1:6a:59:b1:bc:87:cc:af:15:0f:13:0f:b8: 5e:31:05:9c:99:0c:36:79:c6:44:31:78:61:02:66: 45:d9:d2:1e:35:c0:88:1f:25:55:e7:f6:b0:56:ab: 96:e4:ae:b7:56:68:70:cf:72:ff:32:d6:58:8b:18: 86:7c:20:f8:1b:f1:a7:61:27:e5:20:82:0b:db:65: d9:dd:ed:95:9f:91:1b:50:cc:0f:dd:28:ac:fd:74: 8f:67:98:eb:08:46:ec:ad:73:2b:49:06:91:20:91: bf:e3:2d:dd:f9:e1:f6:0e:f3:fa:79:ee:4e:c6:96: 37:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:54:F0:E7:7C:4C:8C:E1:F3:06:4B:F7:C2:32:A0:55:AE:9C:AE:0A X509v3 Authority Key Identifier: keyid:4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:4c:3d:0e:58:06:ea:6d:ae:01:a3:3b:fa:c1:95:25:68:bd: a8:0b:32:6c:59:de:1f:d0:1e:d3:3c:e4:eb:b2:0f:78:a9:5f: 2b:87:b3:a2:97:1d:3a:90:19:8e:dd:ae:75:5c:2d:ea:43:b3: cb:f3:58:aa:41:ba:40:e6:a7:be:db:06:5b:5b:d1:09:69:0e: ff:4a:43:73:c0:c7:69:72:6f:94:07:13:61:e9:6c:5e:52:b6: fa:33:d1:d1:1c:8d:c0:80:2e:20:21:ee:2c:0c:9f:47:2f:bd: 68:19:92:12:f8:44:d4:a1:f9:11:10:8b:65:01:0b:21:2c:97: d5:19:90:01:d0:d4:2a:96:5a:da:ef:5e:69:21:97:2e:21:31: e8:a8:f8:76:a3:6b:59:4d:98:16:78:c5:b4:ef:ea:d9:cf:40: 1d:6f:ff:d1:29:f8:81:57:ef:5c:73:e3:03:bd:06:0a:4a:69: 87:3b:4f:cf:d0:08:a7:9f:8f:de:54:31:9e:5b:36:ba:bd:29: 5e:58:89:21:ad:85:94:e6:27:f8:33:d1:45:48:72:68:c7:29: 63:f8:24:db:3b:c7:74:fe:36:97:11:a2:35:e0:23:3b:ed:a9: 25:bd:e1:aa:40:94:1d:6f:2a:6a:a3:f8:40:1f:a0:10:9c:7f: 1c:72:ae:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL/OzPZs/fYdpzEsVLg0DFp/iRx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBMjFBOEQ5MjhDQUJDMEM5RUYxMzg1MDYzNUIzMUVB RjNDMjY0MjAeFw0yNTEwMjAwMDE1MDBaFw0yNTEwMjEwMDQ3MDBaMDMxMTAvBgNV BAMTKDZBNTRGMEU3N0M0QzhDRTFGMzA2NEJGN0MyMzJBMDU1QUU5Q0FFMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8UekdP+3tBRq62qZmORrlJu8/ q48zcrpqDvokplNg5SzdCi8p1DYfHMKl05bGzd/bVoeTSs/G15vhlDEqPrtLoi0J mxZ7UHF61FBaSTq4PAc5Ozbt7I+nOqdLNPPN1Zcd7DCfpfbgPzvm9q+SkV5bWByZ ouLW1/inYoltth9VcjUgQkVBV6WUoWpZsbyHzK8VDxMPuF4xBZyZDDZ5xkQxeGEC ZkXZ0h41wIgfJVXn9rBWq5bkrrdWaHDPcv8y1liLGIZ8IPgb8adhJ+UgggvbZdnd 7ZWfkRtQzA/dKKz9dI9nmOsIRuytcytJBpEgkb/jLd354fYO8/p57k7Gljd1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUalTw53xMjOHzBkv3wjKgVa6crgowHwYDVR0j BBgwFoAUTKIajZKMq8DJ7xOFBjWzHq88JkIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDl1VzFrQ2hjRFlBRWpaZWc4RlhxWTdFRXBXWnZCOHozeEQ0aTJQWVZU c2cvMS80Q0EyMUE4RDkyOENBQkMwQzlFRjEzODUwNjM1QjMxRUFGM0MyNjQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDQTIxQThEOTI4Q0FCQzBD OUVGMTM4NTA2MzVCMzFFQUYzQzI2NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NDl1VzFrQ2hjRFlBRWpaZWc4RlhxWTdFRXBXWnZCOHozeEQ0aTJQWVZUc2cvMS80 Q0EyMUE4RDkyOENBQkMwQzlFRjEzODUwNjM1QjMxRUFGM0MyNjQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAkw9DlgG6m2uAaM7+sGVJWi9qAsybFneH9Ae0zzk67IPeKlfK4ezopcdOpAZ jt2udVwt6kOzy/NYqkG6QOanvtsGW1vRCWkO/0pDc8DHaXJvlAcTYelsXlK2+jPR 0RyNwIAuICHuLAyfRy+9aBmSEvhE1KH5ERCLZQELISyX1RmQAdDUKpZa2u9eaSGX LiEx6Kj4dqNrWU2YFnjFtO/q2c9AHW//0Sn4gVfvXHPjA70GCkpphztPz9AIp5+P 3lQxnls2ur0pXliJIa2FlOYn+DPRRUhyaMcpY/gk2zvHdP42lxGiNeAjO+2pJb3h qkCUHW8qaqP4QB+gEJx/HHKuuA== -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:15 2025 by rpki-client