$ rpki-client -vvf rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft File: 295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft (raw, json) Hash identifier: qRVSOSzL0NdgdvnlPFjQWOo+4kSZjtDWJWZNhDP+nAU= Subject key identifier: 42:86:CF:C6:DE:C1:CD:40:D7:B9:8F:2E:FF:61:A9:07:F3:4F:CD:22 Authority key identifier: 29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20 Certificate issuer: /CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520 Certificate serial: 6A1A7829CC86C6F98F9D1B227EC8FB39480D0EC6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer Subject info access: rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft Manifest number: 027F Signing time: Mon 20 Oct 2025 09:23:37 +0000 Manifest this update: Mon 20 Oct 2025 09:18:37 +0000 Manifest next update: Tue 21 Oct 2025 11:22:37 +0000 Files and hashes: 1: 34352e3138302e35362e302f32322d3332203d3e20323639313331.roa (hash: If21jOcvMUFkh16cxpcGthCoNkKvfyC5oUDpgsyZRvQ=) 2: 295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl (hash: BySPvh0EmW8VL0XVom0EP5DcFmyXK5OiRMUuAYxQz4A=) 3: 323830343a356665383a3a2f33322d313238203d3e20323639313331.roa (hash: Knl+wwRgdmDvowjQ9JACRJfXXqw4YrTkY1L1JgQ1SZk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1a:78:29:cc:86:c6:f9:8f:9d:1b:22:7e:c8:fb:39:48:0d:0e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520 Validity Not Before: Oct 20 09:18:37 2025 GMT Not After : Oct 21 11:22:37 2025 GMT Subject: CN=4286CFC6DEC1CD40D7B98F2EFF61A907F34FCD22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:ca:d2:3a:ef:02:10:c5:db:f4:e1:ce:8a: 4d:9c:56:45:83:b3:0c:42:d4:a0:dc:38:61:c3:bf: 8d:13:7f:5d:23:0f:e2:d0:00:4a:47:af:2c:78:6d: ec:da:eb:0f:20:d0:5b:ba:43:0c:2f:5c:92:25:96: 95:2e:af:83:07:00:4a:4b:2c:53:2f:8d:95:ce:7a: 13:f3:09:66:5e:c6:c4:2b:13:60:c2:70:b4:06:1a: f9:40:d1:3d:79:3f:c5:fb:c7:c7:e3:ea:0f:c6:6a: 04:c5:09:32:3c:a4:c1:0b:47:38:58:b8:c8:18:4f: 25:08:53:0a:6c:de:91:15:8a:a5:b0:0d:5b:41:e9: 4c:67:e7:0e:5f:f4:36:a1:f8:d6:7c:f2:9f:de:f2: 84:ee:7b:6e:5a:61:ce:cd:34:96:58:5f:1c:77:da: f8:a2:c3:9c:f1:35:36:67:44:39:54:62:53:01:dd: 20:cc:90:3b:24:bd:76:a3:ad:af:1a:e7:5f:da:b3: df:03:33:ef:e0:fe:f8:72:ea:89:87:fa:28:3a:57: 95:ec:e4:62:a3:3e:73:15:6a:21:d6:a7:44:bb:82: e6:bd:27:b9:9c:40:5d:e4:d3:1c:02:46:2b:d9:d3: c1:52:e1:5e:1e:53:a2:fc:32:4f:94:f7:7b:85:20: e8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:86:CF:C6:DE:C1:CD:40:D7:B9:8F:2E:FF:61:A9:07:F3:4F:CD:22 X509v3 Authority Key Identifier: keyid:29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:88:ad:da:46:56:14:af:3f:fc:c6:a5:90:f0:33:14:8d:0b: 01:d1:1d:8a:bd:31:28:a8:d8:b2:0f:b3:44:6a:68:28:49:42: 68:c5:83:08:a7:f0:79:cb:e7:e0:b3:53:d7:db:73:66:e1:60: f6:b1:46:e4:7b:70:4c:4a:11:39:0a:15:ba:7d:cc:a8:61:80: 76:e9:e1:c6:96:1e:e0:61:44:22:c0:0c:7c:cb:29:f5:03:bf: 2d:43:18:f6:8b:2c:7d:41:a1:7c:6a:a2:ce:a5:a3:cc:0c:a6: 79:cd:1e:2f:f4:27:1e:1f:a5:8d:1d:8b:aa:35:2c:71:04:1f: 26:4e:55:17:09:b6:b8:32:97:73:65:86:07:40:9f:73:8d:ed: cf:65:bc:53:97:c2:32:2b:3e:60:e4:f4:54:f5:51:02:1d:a7: 69:d9:1f:08:75:f6:d8:e2:f4:bf:73:12:df:e8:76:cf:38:e9: a7:92:2a:e8:9d:57:d7:e7:97:df:77:1e:82:b9:83:8e:d8:93: bb:94:23:cd:9a:a9:66:99:84:11:f3:35:5a:cf:9a:9c:eb:64: 28:44:b8:53:7d:e4:6a:2e:8f:16:71:07:95:37:03:5f:41:99: a5:37:38:3c:68:78:9e:11:eb:0c:b3:12:d4:49:db:c5:ad:4d: 59:aa:51:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUahp4KcyGxvmPnRsifsj7OUgNDsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1QjlEMzY0QkQ3NkE4MUREMzRBQTVENUM5NjVCQjFG QzI3QTUyMDAeFw0yNTEwMjAwOTE4MzdaFw0yNTEwMjExMTIyMzdaMDMxMTAvBgNV BAMTKDQyODZDRkM2REVDMUNENDBEN0I5OEYyRUZGNjFBOTA3RjM0RkNEMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0O8rSOu8CEMXb9OHOik2cVkWD swxC1KDcOGHDv40Tf10jD+LQAEpHryx4beza6w8g0Fu6QwwvXJIllpUur4MHAEpL LFMvjZXOehPzCWZexsQrE2DCcLQGGvlA0T15P8X7x8fj6g/GagTFCTI8pMELRzhY uMgYTyUIUwps3pEViqWwDVtB6Uxn5w5f9Dah+NZ88p/e8oTue25aYc7NNJZYXxx3 2viiw5zxNTZnRDlUYlMB3SDMkDskvXajra8a51/as98DM+/g/vhy6omH+ig6V5Xs 5GKjPnMVaiHWp0S7gua9J7mcQF3k0xwCRivZ08FS4V4eU6L8Mk+U93uFIOgHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQobPxt7BzUDXuY8u/2GpB/NPzSIwHwYDVR0j BBgwFoAUKVudNkvXaoHdNKpdXJZbsfwnpSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGJOVmhqeXZzRTZUQXpreFRaV0dHajZSMWJidnlZMWNKcTNUeXA4Ujg1 OVEvMS8yOTVCOUQzNjRCRDc2QTgxREQzNEFBNUQ1Qzk2NUJCMUZDMjdBNTIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NUI5RDM2NEJENzZBODFE RDM0QUE1RDVDOTY1QkIxRkMyN0E1MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGJOVmhqeXZzRTZUQXpreFRaV0dHajZSMWJidnlZMWNKcTNUeXA4Ujg1OVEvMS8y OTVCOUQzNjRCRDc2QTgxREQzNEFBNUQ1Qzk2NUJCMUZDMjdBNTIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM4it2kZWFK8//MalkPAzFI0LAdEdir0xKKjYsg+zRGpoKElCaMWDCKfwecvn 4LNT19tzZuFg9rFG5HtwTEoROQoVun3MqGGAdunhxpYe4GFEIsAMfMsp9QO/LUMY 9ossfUGhfGqizqWjzAymec0eL/QnHh+ljR2LqjUscQQfJk5VFwm2uDKXc2WGB0Cf c43tz2W8U5fCMis+YOT0VPVRAh2nadkfCHX22OL0v3MS3+h2zzjpp5Iq6J1X1+eX 33cegrmDjtiTu5QjzZqpZpmEEfM1Ws+anOtkKES4U33kai6PFnEHlTcDX0GZpTc4 PGh4nhHrDLMS1Enbxa1NWapRVw== -----END CERTIFICATE-----Generated at Mon Oct 20 21:37:56 2025 by rpki-client