$ rpki-client -vvf rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft File: C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft (raw, json) Hash identifier: 3EwtaeNqxTW9X4J3Jze6UbEjCtxLUMHKLjCXd+vEwlM= Subject key identifier: 4B:35:07:CB:A9:09:D9:C3:75:FC:79:A1:E1:F7:D8:E6:37:0B:A1:28 Authority key identifier: C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A Certificate issuer: /CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A Certificate serial: 5BA98B377A8B2CB2D3293D5BA17B33D22BF9A979 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer Subject info access: rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft Manifest number: 02BE Signing time: Sun 19 Oct 2025 17:28:43 +0000 Manifest this update: Sun 19 Oct 2025 17:23:43 +0000 Manifest next update: Mon 20 Oct 2025 19:10:43 +0000 Files and hashes: 1: 3230312e3135302e3135322e302f32322d3234203d3e203631383334.roa (hash: bQb6OqUWfTVIWbNybHXXMLPCBzgY58GGYHDVLDz95Ug=) 2: 3134332e3133372e3138302e302f32322d3234203d3e203631383334.roa (hash: TybVhUEfgBREmL3NJsvdZgicXA/on5VwTBTGR0erAho=) 3: 323830343a316131303a3a2f33322d3438203d3e203631383334.roa (hash: gkUxHP8r9+Fhu5QWQf9DujXsJaThMNFObjuKFQmBFk0=) 4: C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl (hash: msNFXL7RYIo+QGRkHW7WKnthHbzDNd7XZ7HsNsOrmVY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 19:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a9:8b:37:7a:8b:2c:b2:d3:29:3d:5b:a1:7b:33:d2:2b:f9:a9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A Validity Not Before: Oct 19 17:23:43 2025 GMT Not After : Oct 20 19:10:43 2025 GMT Subject: CN=4B3507CBA909D9C375FC79A1E1F7D8E6370BA128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:68:34:22:eb:8d:36:15:13:04:f9:a3:ae:f3: c7:40:a4:a1:67:eb:d6:80:74:49:7c:86:7f:53:63: 09:7f:f3:55:19:b4:ae:3e:a9:0d:7f:90:e5:dd:22: 34:70:da:6c:c3:bb:ae:79:db:5e:5f:31:fe:c0:28: 1b:78:7d:4e:46:9b:dc:54:39:6d:7c:b5:1d:70:8f: 48:84:26:82:fc:fd:33:4b:e9:39:f3:27:74:10:0d: 44:06:df:b9:24:18:d3:1d:46:4d:23:b8:77:88:d6: 04:33:f9:cc:12:44:03:90:9b:14:c0:39:1d:29:85: 84:19:f5:a0:21:95:0b:89:43:6d:d7:01:67:ca:d1: ee:0b:15:07:81:1b:d6:69:da:a9:93:1f:01:29:29: ab:e4:5b:be:91:c3:66:88:04:3a:13:27:f6:95:e5: 1c:16:62:6a:c0:c5:c8:35:c8:55:f9:97:ae:ec:7b: cf:af:e1:c0:8f:95:2b:de:5b:de:ca:65:28:e8:ed: 05:7a:ec:10:f0:97:3d:e4:ee:48:6d:74:6b:e2:d0: 54:43:22:f8:21:84:54:b1:01:6b:bb:f2:61:3f:8c: cf:e9:19:66:d7:b5:5f:5f:55:09:1d:07:63:b0:fd: a8:ee:34:82:c6:41:9a:15:89:c8:c0:10:e3:d6:5e: d1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:35:07:CB:A9:09:D9:C3:75:FC:79:A1:E1:F7:D8:E6:37:0B:A1:28 X509v3 Authority Key Identifier: keyid:C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:40:8e:ee:a1:1f:a9:fd:12:81:e3:db:6a:e6:dc:90:01:d3: 40:5b:4a:8c:37:dc:ac:92:b2:95:5d:20:d9:09:54:32:d4:08: c8:c3:78:7d:e8:df:a8:e9:d9:46:67:38:01:c1:dd:7b:96:12: ee:0e:bf:5d:a8:a7:6c:f9:63:c3:5b:7a:a6:94:20:2b:07:b8: 48:08:fa:a8:70:49:aa:0f:8c:12:c6:95:ca:50:04:49:42:8a: 5f:23:86:cb:93:1f:bb:40:78:43:a6:ec:d4:fa:41:86:19:f9: 85:70:02:a8:65:ae:c2:bb:0e:ad:b5:93:20:65:ef:5d:2d:84: 3c:5c:55:2b:df:70:f9:60:ee:16:8d:5d:ca:7d:20:cb:97:bc: 8c:ef:99:c0:4f:5d:9c:60:eb:dc:6b:79:47:b1:e5:ed:8d:55: 0a:71:44:4a:2e:b4:b5:72:65:95:82:ec:66:6c:30:65:38:bd: 21:16:12:19:d6:db:4e:6f:3a:e2:d8:ee:c8:22:15:e7:a6:50: 6a:31:50:e9:c1:d6:b4:d2:1c:1e:31:2d:80:2d:16:00:0f:77: 85:4b:7f:e1:d6:6b:d8:71:30:6f:8f:f0:dd:26:93:5f:14:f1: 07:7a:58:bb:4a:cb:5f:f3:ec:7d:af:8f:83:48:92:c5:8f:59: c5:ae:5a:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUW6mLN3qLLLLTKT1boXsz0iv5qXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNkM2NUFBMEJBMzNDNjI2RkFCMEI5QzI2RTAyNkVC OTA4NDU0QTAeFw0yNTEwMTkxNzIzNDNaFw0yNTEwMjAxOTEwNDNaMDMxMTAvBgNV BAMTKDRCMzUwN0NCQTkwOUQ5QzM3NUZDNzlBMUUxRjdEOEU2MzcwQkExMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSaDQi6402FRME+aOu88dApKFn 69aAdEl8hn9TYwl/81UZtK4+qQ1/kOXdIjRw2mzDu655215fMf7AKBt4fU5Gm9xU OW18tR1wj0iEJoL8/TNL6TnzJ3QQDUQG37kkGNMdRk0juHeI1gQz+cwSRAOQmxTA OR0phYQZ9aAhlQuJQ23XAWfK0e4LFQeBG9Zp2qmTHwEpKavkW76Rw2aIBDoTJ/aV 5RwWYmrAxcg1yFX5l67se8+v4cCPlSveW97KZSjo7QV67BDwlz3k7khtdGvi0FRD IvghhFSxAWu78mE/jM/pGWbXtV9fVQkdB2Ow/ajuNILGQZoVicjAEOPWXtEHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSzUHy6kJ2cN1/Hmh4ffY5jcLoSgwHwYDVR0j BBgwFoAUwzbGWqC6M8Ym+rC5wm4CbrkIRUowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHBIQjFOV25iZVdBaEJLS1VvZFJrcDFVejFacjVQVDJBSlV4a21BMzFq b2svMS9DMzM2QzY1QUEwQkEzM0M2MjZGQUIwQjlDMjZFMDI2RUI5MDg0NTRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzMzZDNjVBQTBCQTMzQzYy NkZBQjBCOUMyNkUwMjZFQjkwODQ1NEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHBIQjFOV25iZVdBaEJLS1VvZFJrcDFVejFacjVQVDJBSlV4a21BMzFqb2svMS9D MzM2QzY1QUEwQkEzM0M2MjZGQUIwQjlDMjZFMDI2RUI5MDg0NTRBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYUCO7qEfqf0SgePbaubckAHTQFtKjDfcrJKylV0g2QlUMtQIyMN4fejfqOnZ Rmc4AcHde5YS7g6/XainbPljw1t6ppQgKwe4SAj6qHBJqg+MEsaVylAESUKKXyOG y5Mfu0B4Q6bs1PpBhhn5hXACqGWuwrsOrbWTIGXvXS2EPFxVK99w+WDuFo1dyn0g y5e8jO+ZwE9dnGDr3Gt5R7Hl7Y1VCnFESi60tXJllYLsZmwwZTi9IRYSGdbbTm86 4tjuyCIV56ZQajFQ6cHWtNIcHjEtgC0WAA93hUt/4dZr2HEwb4/w3SaTXxTxB3pY u0rLX/Psfa+Pg0iSxY9Zxa5apA== -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:19 2025 by rpki-client