$ rpki-client -vvf rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft File: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft (raw, json) Hash identifier: Ye7X3YpuG7TEJ4gqjMP8/gM7b6FSRI5vYzYo5Lbo82A= Subject key identifier: C1:D6:96:5A:20:AA:94:40:3F:03:CD:4D:ED:BD:E7:71:FF:BD:A0:0F Authority key identifier: 40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE Certificate issuer: /CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Certificate serial: 67D28D9599D1172BF2A443C0DD0165B78873AE46 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft Manifest number: F8 Signing time: Sun 19 Oct 2025 17:31:33 +0000 Manifest this update: Sun 19 Oct 2025 17:26:33 +0000 Manifest next update: Mon 20 Oct 2025 21:14:33 +0000 Files and hashes: 1: 34352e3138392e33352e302f32342d3234203d3e20323734373633.roa (hash: 1p2OZ2GU51vARCDd2EzB05jBSXBxDQiaqictJ71WwZg=) 2: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl (hash: 2Usc+Mli4ItvyXFOY1ctW9hPVcEaHNHD0AtDRYPX8cI=) 3: 323830343a393333343a666630303a3a2f34302d3430203d3e20323734373633.roa (hash: Y/91UtAKoquFsWubq6LOKvQldnEvym4LP9Ysec9nxMw=) 4: 34352e3138392e33332e302f32342d3234203d3e20323734373633.roa (hash: 94RYiufY7USp0r1Hhmx7uAPsAj5eXGZhHiDHteIZcag=) 5: 34352e3138392e33322e302f32342d3234203d3e20323734373633.roa (hash: f9h0xJPe6EC4HPN8Q4Vq2DpTHhojeqACv3nqBQ14BsY=) 6: 34352e3138392e33342e302f32342d3234203d3e20323734373633.roa (hash: +8SomA8CorpblFccJ5hAIRLE8zYsycHTpbXTAfqfp8w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 21:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d2:8d:95:99:d1:17:2b:f2:a4:43:c0:dd:01:65:b7:88:73:ae:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Validity Not Before: Oct 19 17:26:33 2025 GMT Not After : Oct 20 21:14:33 2025 GMT Subject: CN=C1D6965A20AA94403F03CD4DEDBDE771FFBDA00F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:d1:eb:7d:89:72:dd:6a:5c:47:ef:fe:ec: 62:67:83:82:da:c9:62:79:1b:d3:7f:80:77:d8:e9: 98:f2:50:c7:64:b7:eb:67:83:01:6b:fe:cd:40:4e: 51:58:29:27:05:7e:08:b1:47:8e:2d:90:61:08:6a: 76:41:66:66:e6:79:82:9e:c2:23:4d:b4:d2:a0:8f: 6a:63:7a:ad:04:23:1d:3b:d0:45:7e:38:de:71:8f: ee:a0:80:df:d7:b7:bc:73:7c:6a:fe:57:67:0d:9c: a4:6f:56:4e:07:e6:2f:ad:b2:22:4c:34:48:a0:99: be:38:c5:d4:94:9d:df:6b:40:64:05:fb:60:5e:4e: 19:53:3c:3f:32:f8:9c:09:79:b6:ee:9e:9b:c3:1c: 40:5b:ea:9a:df:99:51:01:d7:1c:84:dd:f9:a1:4e: fa:3d:27:29:00:6b:a8:0b:c6:8e:8e:ca:b6:ef:42: 5b:6e:2a:41:0f:ec:3e:a0:67:29:45:bd:35:01:69: a7:77:6b:87:4d:3f:e2:46:b2:b7:6a:52:f7:73:ad: 23:fa:10:0f:4e:9d:df:64:82:be:6b:e8:be:36:dd: fe:00:f3:71:88:dd:e6:8d:c6:73:52:19:57:83:7c: 30:7b:26:0c:e8:bb:40:c8:18:83:00:63:79:c5:65: 38:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D6:96:5A:20:AA:94:40:3F:03:CD:4D:ED:BD:E7:71:FF:BD:A0:0F X509v3 Authority Key Identifier: keyid:40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f0:01:1f:50:08:cb:03:4d:37:8a:76:16:a1:a1:ca:e4:5f: 80:a0:24:02:6c:22:44:03:01:ad:09:aa:c2:73:23:6c:bd:48: 47:3d:59:fa:c5:54:b4:61:9d:c4:cd:97:d3:68:f7:be:85:e0: c1:8a:17:96:24:32:19:84:d2:b8:72:01:6d:fb:b8:47:11:db: 7e:cb:33:cc:2e:7f:9b:60:4a:12:0b:4b:1c:1b:da:0d:f5:02: 57:88:c4:11:43:db:c9:de:ec:64:29:04:80:e4:36:e6:5f:57: fb:e8:21:ce:ac:74:e7:ab:12:b5:35:bb:46:e9:52:cc:f7:df: 4f:60:74:88:67:4c:ac:02:fd:48:4b:e0:5f:1b:9e:0e:d8:ac: 6b:3a:8f:0f:21:8f:de:6a:45:84:8f:e1:91:c6:a1:e1:4f:de: 1f:e2:7e:bb:75:39:47:ec:87:4a:9a:5f:5e:2b:32:ae:e8:6c: 70:29:e1:8a:97:54:48:53:5a:af:78:93:8d:da:1e:33:a4:19: 2f:f3:0c:57:31:6d:57:8b:10:ce:a0:ab:03:a2:fa:f9:6a:35: ec:73:7e:fa:08:02:cf:4c:7c:cb:5b:eb:8f:e0:85:40:56:ea: 3c:c4:8a:8b:42:21:92:1e:98:8d:c1:4b:66:10:f8:69:28:b7: 17:60:d7:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ9KNlZnRFyvypEPA3QFlt4hzrkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCQjE0QTJGRDhCODExMDMwNDJCRjMyRkFDOUIyRDkw QUNGOEFGRTAeFw0yNTEwMTkxNzI2MzNaFw0yNTEwMjAyMTE0MzNaMDMxMTAvBgNV BAMTKEMxRDY5NjVBMjBBQTk0NDAzRjAzQ0Q0REVEQkRFNzcxRkZCREEwMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8tHrfYly3WpcR+/+7GJng4La yWJ5G9N/gHfY6ZjyUMdkt+tngwFr/s1ATlFYKScFfgixR44tkGEIanZBZmbmeYKe wiNNtNKgj2pjeq0EIx070EV+ON5xj+6ggN/Xt7xzfGr+V2cNnKRvVk4H5i+tsiJM NEigmb44xdSUnd9rQGQF+2BeThlTPD8y+JwJebbunpvDHEBb6prfmVEB1xyE3fmh Tvo9JykAa6gLxo6OyrbvQltuKkEP7D6gZylFvTUBaad3a4dNP+JGsrdqUvdzrSP6 EA9Ond9kgr5r6L423f4A83GI3eaNxnNSGVeDfDB7Jgzou0DIGIMAY3nFZTgBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwdaWWiCqlEA/A81N7b3ncf+9oA8wHwYDVR0j BBgwFoAUQLsUov2LgRAwQr8y+smy2QrPiv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2 NjIvMC80MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQkIxNEEyRkQ4QjgxMTAz MDQyQkYzMkZBQzlCMkQ5MEFDRjhBRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2NjIvMC80 MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgvABH1AIywNNN4p2FqGhyuRfgKAkAmwiRAMBrQmqwnMjbL1IRz1Z+sVUtGGd xM2X02j3voXgwYoXliQyGYTSuHIBbfu4RxHbfsszzC5/m2BKEgtLHBvaDfUCV4jE EUPbyd7sZCkEgOQ25l9X++ghzqx056sStTW7RulSzPffT2B0iGdMrAL9SEvgXxue DtisazqPDyGP3mpFhI/hkcah4U/eH+J+u3U5R+yHSppfXisyruhscCnhipdUSFNa r3iTjdoeM6QZL/MMVzFtV4sQzqCrA6L6+Wo17HN++ggCz0x8y1vrj+CFQFbqPMSK i0Ihkh6YjcFLZhD4aSi3F2DXkg== -----END CERTIFICATE-----Generated at Mon Oct 20 15:43:00 2025 by rpki-client