$ rpki-client -vvf rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft File: 1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft (raw, json) Hash identifier: F7/LlX9ijnKmJSti2uo0Q0X8b6qSfr+7T3aAjvfXut4= Subject key identifier: 4B:88:A6:5F:28:50:21:1B:08:D2:96:58:D1:52:E1:3C:73:E6:59:44 Authority key identifier: 1B:E0:04:C8:8C:DE:B7:36:10:FC:82:75:8B:90:B1:30:EB:9F:7D:38 Certificate issuer: /CN=1BE004C88CDEB73610FC82758B90B130EB9F7D38 Certificate serial: 5DF97FEEA4C0C5FD41FC98C4F6303B4D47E58805 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer Subject info access: rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft Manifest number: 02D3 Signing time: Mon 20 Oct 2025 19:19:17 +0000 Manifest this update: Mon 20 Oct 2025 19:14:17 +0000 Manifest next update: Tue 21 Oct 2025 21:29:17 +0000 Files and hashes: 1: 34352e37302e3135362e302f32322d3234203d3e20323637363534.roa (hash: 0qU6G+XnOCeyrCosGPKXLhVn+QRuLcy3dI4+NhMHtKA=) 2: 3133312e3232312e3130302e302f32322d3234203d3e20323637363534.roa (hash: oF9u1/oCkGwo1UBS2Ntc4XCaeUf1mcRHEF1FbP5ncxs=) 3: 323830343a343463633a3a2f33322d3430203d3e20323637363534.roa (hash: 5EOPo2+Gu7jRpWQ23GA0NFFlzySjFOtoTh+IjuXIpdY=) 4: 1BE004C88CDEB73610FC82758B90B130EB9F7D38.crl (hash: mrRFtW3N8lW43wF1AxXUL2HdZCUhZmnXFfeIyl3Fa3I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.crl rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 19:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f9:7f:ee:a4:c0:c5:fd:41:fc:98:c4:f6:30:3b:4d:47:e5:88:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BE004C88CDEB73610FC82758B90B130EB9F7D38 Validity Not Before: Oct 20 19:14:17 2025 GMT Not After : Oct 21 21:29:17 2025 GMT Subject: CN=4B88A65F2850211B08D29658D152E13C73E65944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e3:4c:36:56:d6:1e:24:4a:54:21:63:57:3d: 2e:61:f2:40:fc:be:f3:fc:ad:8a:15:a8:dd:3a:0a: 60:cd:86:36:42:cd:06:c1:93:4e:01:f5:cc:f2:ef: 6f:50:bd:1d:4e:57:29:80:88:a8:ff:f1:c9:7d:3b: 90:b5:47:ec:91:92:70:1b:36:6c:65:c7:1b:e2:b2: c6:b1:4a:dc:65:59:67:e7:e3:ef:36:51:d0:f2:53: b3:14:d0:52:ac:4b:c8:f9:ba:ae:90:72:c8:13:5f: 59:e1:60:aa:bb:91:94:1c:23:d2:3b:eb:9d:e0:f0: ea:25:8c:31:24:29:2d:59:f0:19:f4:2b:de:62:7a: 43:95:63:32:ba:3f:df:3e:b3:ce:87:b8:10:48:91: f6:de:2b:33:73:12:28:ba:7d:24:c3:61:09:7f:8a: 10:25:ed:bc:1a:8a:66:d9:0d:3d:40:d2:cb:27:d6: 71:20:6d:c0:f2:d5:49:78:e1:34:d3:66:2b:30:fc: 59:ef:ad:03:2b:e2:6a:40:98:ac:a9:3b:c1:12:f0: 10:2b:59:4e:82:ef:2b:2d:a5:21:18:e9:c0:6f:a6: 8d:75:b3:ec:f5:e4:e2:b7:dc:d7:35:7b:e9:d0:11: 24:d0:12:4f:b2:22:31:41:66:3e:2f:45:0b:b9:d5: fb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:88:A6:5F:28:50:21:1B:08:D2:96:58:D1:52:E1:3C:73:E6:59:44 X509v3 Authority Key Identifier: keyid:1B:E0:04:C8:8C:DE:B7:36:10:FC:82:75:8B:90:B1:30:EB:9F:7D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:29:3f:59:7f:f2:40:50:c5:66:38:f5:29:12:df:0d:af:91: 65:99:2d:af:6d:96:1d:68:99:5b:a2:f3:dc:84:f8:d8:fb:14: cb:4d:10:40:25:6b:c0:5e:74:d7:90:d5:56:6e:b4:74:65:28: 92:cf:7f:e6:cc:38:60:89:cd:2f:c4:3e:18:43:e0:0f:ed:9c: 40:81:e3:22:a6:f2:8c:ad:7a:cb:9f:f0:ad:ad:69:89:79:3e: 11:6d:56:d1:f9:b5:7c:74:02:f6:fc:14:bf:b3:41:73:90:23: 2c:9b:72:08:6d:15:dd:17:9e:e2:17:19:9d:70:24:2c:7a:f5: 51:ed:4e:4b:74:d3:b8:a2:b2:d9:45:4e:91:59:02:df:41:79: ec:e7:1d:d5:f9:50:2a:cf:5a:75:38:86:6d:a8:ff:e9:79:16: 79:6c:46:aa:e8:43:f5:12:c4:96:01:a3:d9:03:19:af:b8:ff: ff:7c:af:81:3e:d7:f0:99:ae:32:54:26:e1:09:f9:72:ed:a1: cd:cf:02:b6:f2:ce:bb:79:6e:8f:8c:8f:80:e7:da:7e:c2:12: 1e:2f:af:76:07:50:dc:36:28:cf:e6:14:40:26:93:f4:f6:3f: 04:41:c3:12:5a:e1:d9:00:6f:68:be:f1:75:7b:8a:6f:3b:f7: 6e:0b:50:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXfl/7qTAxf1B/JjE9jA7TUfliAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJFMDA0Qzg4Q0RFQjczNjEwRkM4Mjc1OEI5MEIxMzBF QjlGN0QzODAeFw0yNTEwMjAxOTE0MTdaFw0yNTEwMjEyMTI5MTdaMDMxMTAvBgNV BAMTKDRCODhBNjVGMjg1MDIxMUIwOEQyOTY1OEQxNTJFMTNDNzNFNjU5NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt40w2VtYeJEpUIWNXPS5h8kD8 vvP8rYoVqN06CmDNhjZCzQbBk04B9czy729QvR1OVymAiKj/8cl9O5C1R+yRknAb NmxlxxvissaxStxlWWfn4+82UdDyU7MU0FKsS8j5uq6QcsgTX1nhYKq7kZQcI9I7 653g8OoljDEkKS1Z8Bn0K95iekOVYzK6P98+s86HuBBIkfbeKzNzEii6fSTDYQl/ ihAl7bwaimbZDT1A0ssn1nEgbcDy1Ul44TTTZisw/FnvrQMr4mpAmKypO8ES8BAr WU6C7ystpSEY6cBvpo11s+z15OK33Nc1e+nQESTQEk+yIjFBZj4vRQu51fvxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUS4imXyhQIRsI0pZY0VLhPHPmWUQwHwYDVR0j BBgwFoAUG+AEyIzetzYQ/IJ1i5CxMOuffTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHFCQjVEdndtUkRKWjZ6azhLQlA1TmZOM3R0V2lhakhoS3Q4aEpxWW1h cWUvMC8xQkUwMDRDODhDREVCNzM2MTBGQzgyNzU4QjkwQjEzMEVCOUY3RDM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCRTAwNEM4OENERUI3MzYx MEZDODI3NThCOTBCMTMwRUI5RjdEMzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHFCQjVEdndtUkRKWjZ6azhLQlA1TmZOM3R0V2lhakhoS3Q4aEpxWW1hcWUvMC8x QkUwMDRDODhDREVCNzM2MTBGQzgyNzU4QjkwQjEzMEVCOUY3RDM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZSk/WX/yQFDFZjj1KRLfDa+RZZktr22WHWiZW6Lz3IT42PsUy00QQCVrwF50 15DVVm60dGUoks9/5sw4YInNL8Q+GEPgD+2cQIHjIqbyjK16y5/wra1piXk+EW1W 0fm1fHQC9vwUv7NBc5AjLJtyCG0V3Ree4hcZnXAkLHr1Ue1OS3TTuKKy2UVOkVkC 30F57Ocd1flQKs9adTiGbaj/6XkWeWxGquhD9RLElgGj2QMZr7j//3yvgT7X8Jmu MlQm4Qn5cu2hzc8CtvLOu3luj4yPgOfafsISHi+vdgdQ3DYoz+YUQCaT9PY/BEHD Elrh2QBvaL7xdXuKbzv3bgtQFg== -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:54 2025 by rpki-client