$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft File: 19260CFDC65E0274748EF44AA37858B8E34F0C25.mft (raw, json) Hash identifier: fn25UcrtkC2ts0SdrV6EpwgHg7vyDjdA4zaTM47Obl0= Subject key identifier: 46:09:1E:B7:43:2D:19:D6:61:16:B0:BD:6C:28:1A:16:F2:B0:98:18 Authority key identifier: 19:26:0C:FD:C6:5E:02:74:74:8E:F4:4A:A3:78:58:B8:E3:4F:0C:25 Certificate issuer: /CN=19260CFDC65E0274748EF44AA37858B8E34F0C25 Certificate serial: 1DA9FA29D2DF2FE9E0F9C0783F6A4CBE7D0A603D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19260CFDC65E0274748EF44AA37858B8E34F0C25.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft Manifest number: 0196 Signing time: Mon 20 Oct 2025 12:53:22 +0000 Manifest this update: Mon 20 Oct 2025 12:48:22 +0000 Manifest next update: Tue 21 Oct 2025 14:15:22 +0000 Files and hashes: 1: 19260CFDC65E0274748EF44AA37858B8E34F0C25.crl (hash: yCnEWWtyOVbnPeIrpLUkE1jWZE25zSeR4J4Pb+Ke1Wo=) 2: 323830343a6339343a3a2f33322d3438203d3e20323632373230.roa (hash: p+GTiuuAWFu/8S3EJbQPooQG4K6WnOklzedG1N3D0sA=) 3: 3138362e3139352e39362e302f32302d3234203d3e20323632373230.roa (hash: syT/Sbgem75/2+FPj7DQALiSeFmma+ew6V2XqT7gzqc=) 4: 3137372e382e3139322e302f32302d3234203d3e20323632373230.roa (hash: ZoJKSec6k6riogUVp0cHV/6gr5piXlvNZBydTk1teNw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.crl rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19260CFDC65E0274748EF44AA37858B8E34F0C25.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a9:fa:29:d2:df:2f:e9:e0:f9:c0:78:3f:6a:4c:be:7d:0a:60:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19260CFDC65E0274748EF44AA37858B8E34F0C25 Validity Not Before: Oct 20 12:48:22 2025 GMT Not After : Oct 21 14:15:22 2025 GMT Subject: CN=46091EB7432D19D66116B0BD6C281A16F2B09818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:28:30:96:4c:bd:f1:df:1c:b6:52:7d:7a:67: 29:95:74:89:d8:9c:5f:3a:a0:08:8b:3a:94:38:40: d8:f8:94:09:46:5e:e0:f5:aa:a6:87:75:37:6a:70: 3f:96:a1:ec:c9:4b:10:bd:0e:cf:7e:82:fa:cb:6a: 85:82:b5:a4:3d:f6:ce:74:a6:5a:08:60:0a:10:79: 7b:4b:f9:95:1f:7c:12:fd:67:29:27:f7:f3:2e:e5: 17:99:b4:4c:8f:12:70:5d:5b:0e:ef:19:ec:1b:b7: 9e:ed:54:38:e8:23:ec:70:5f:72:96:86:81:05:80: 8c:e7:9c:05:47:37:98:37:9a:33:e8:c0:76:2b:ea: 07:c4:bb:a8:5d:8d:88:bb:8c:16:d3:82:ce:c4:c5: fb:c1:31:17:e9:f7:27:f1:5d:df:14:c5:81:df:c2: ae:34:78:cb:7c:05:c5:29:83:fb:58:ce:d9:da:1c: 61:bf:4f:b8:30:62:f2:15:9b:e7:2d:8a:55:5f:6c: a9:6b:01:31:99:38:c5:2b:89:8c:f4:e5:8f:18:46: 57:c9:f0:25:f4:95:30:cf:8f:10:b6:ba:79:8d:a8: ca:ac:eb:a6:30:2b:32:a6:8c:97:5d:65:35:20:04: c8:66:03:3d:4d:23:ee:09:a4:6a:de:56:34:50:0a: df:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:09:1E:B7:43:2D:19:D6:61:16:B0:BD:6C:28:1A:16:F2:B0:98:18 X509v3 Authority Key Identifier: keyid:19:26:0C:FD:C6:5E:02:74:74:8E:F4:4A:A3:78:58:B8:E3:4F:0C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19260CFDC65E0274748EF44AA37858B8E34F0C25.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b9:c2:4c:66:51:d7:9a:4c:bc:29:50:46:34:0d:61:60:bf: 54:dd:bf:02:62:60:1a:d4:4a:18:50:32:98:fc:d7:77:88:eb: 7e:48:e3:46:65:7b:b4:3b:1e:49:8d:57:78:17:5e:e0:66:eb: 55:f6:cb:53:28:33:6b:ef:f3:72:be:2d:17:97:38:c9:79:1a: 85:44:2a:b9:07:ac:8e:45:5e:58:13:49:15:74:44:35:23:87: 01:85:8b:7e:11:e0:32:0b:b9:21:aa:ae:de:47:01:cd:07:21: 83:68:e4:74:a1:6b:8d:4d:5f:1c:a7:00:58:cf:cf:03:49:3b: 0c:55:81:61:5f:43:40:48:5b:28:45:01:f3:d3:d8:4f:6d:e7: cf:71:96:1f:86:16:4a:0b:4d:86:d6:1c:70:b5:09:b8:93:6f: 7e:bc:d0:c7:2b:e0:c1:93:3d:ff:96:e3:94:fa:25:1f:12:74: 2a:9c:b3:73:6d:5e:f5:d8:8c:1e:bd:3a:81:1e:96:e2:5a:98: 14:ff:56:d4:ab:72:8e:f8:75:40:56:90:56:b6:f5:97:9e:18: 55:bf:ec:97:0c:9f:8c:50:2a:12:e8:12:12:8b:88:6e:d7:fc: 3a:1e:25:9f:2c:02:86:01:02:c8:aa:f1:d2:3f:8d:27:69:71: 6b:5e:91:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHan6KdLfL+ng+cB4P2pMvn0KYD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkyNjBDRkRDNjVFMDI3NDc0OEVGNDRBQTM3ODU4QjhF MzRGMEMyNTAeFw0yNTEwMjAxMjQ4MjJaFw0yNTEwMjExNDE1MjJaMDMxMTAvBgNV BAMTKDQ2MDkxRUI3NDMyRDE5RDY2MTE2QjBCRDZDMjgxQTE2RjJCMDk4MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcKDCWTL3x3xy2Un16ZymVdInY nF86oAiLOpQ4QNj4lAlGXuD1qqaHdTdqcD+WoezJSxC9Ds9+gvrLaoWCtaQ99s50 ploIYAoQeXtL+ZUffBL9Zykn9/Mu5ReZtEyPEnBdWw7vGewbt57tVDjoI+xwX3KW hoEFgIznnAVHN5g3mjPowHYr6gfEu6hdjYi7jBbTgs7ExfvBMRfp9yfxXd8UxYHf wq40eMt8BcUpg/tYztnaHGG/T7gwYvIVm+ctilVfbKlrATGZOMUriYz05Y8YRlfJ 8CX0lTDPjxC2unmNqMqs66YwKzKmjJddZTUgBMhmAz1NI+4JpGreVjRQCt8ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURgket0MtGdZhFrC9bCgaFvKwmBgwHwYDVR0j BBgwFoAUGSYM/cZeAnR0jvRKo3hYuONPDCUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFEyVG9xUDJyR0t0M3pIZ1RHNldQTnRDNm5pMUMyZlNmbmUxS0xqRWF4 S2gvMC8xOTI2MENGREM2NUUwMjc0NzQ4RUY0NEFBMzc4NThCOEUzNEYwQzI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MjYwQ0ZEQzY1RTAyNzQ3 NDhFRjQ0QUEzNzg1OEI4RTM0RjBDMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFEyVG9xUDJyR0t0M3pIZ1RHNldQTnRDNm5pMUMyZlNmbmUxS0xqRWF4S2gvMC8x OTI2MENGREM2NUUwMjc0NzQ4RUY0NEFBMzc4NThCOEUzNEYwQzI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP7nCTGZR15pMvClQRjQNYWC/VN2/AmJgGtRKGFAymPzXd4jrfkjjRmV7tDse SY1XeBde4GbrVfbLUygza+/zcr4tF5c4yXkahUQquQesjkVeWBNJFXRENSOHAYWL fhHgMgu5Iaqu3kcBzQchg2jkdKFrjU1fHKcAWM/PA0k7DFWBYV9DQEhbKEUB89PY T23nz3GWH4YWSgtNhtYccLUJuJNvfrzQxyvgwZM9/5bjlPolHxJ0Kpyzc21e9diM Hr06gR6W4lqYFP9W1Ktyjvh1QFaQVrb1l54YVb/slwyfjFAqEugSEouIbtf8Oh4l nywChgECyKrx0j+NJ2lxa16RLg== -----END CERTIFICATE-----Generated at Mon Oct 20 16:32:31 2025 by rpki-client