$ rpki-client -vvf rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.mft File: B937F473A95655C5D7B945095573D217C3A1DC11.mft (raw, json) Hash identifier: SymfScsc3c9floDgDP7P+HxokNFspiZhlTjRWEWBpII= Subject key identifier: 39:04:F0:52:51:57:D8:74:2A:7F:5A:48:04:D5:B2:E9:C7:7D:AF:97 Authority key identifier: B9:37:F4:73:A9:56:55:C5:D7:B9:45:09:55:73:D2:17:C3:A1:DC:11 Certificate issuer: /CN=B937F473A95655C5D7B945095573D217C3A1DC11 Certificate serial: 290E99BBC812B5EF589F6C5B2D1A45191DD773B0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B937F473A95655C5D7B945095573D217C3A1DC11.cer Subject info access: rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.mft Manifest number: 0A Signing time: Mon 20 Oct 2025 14:58:28 +0000 Manifest this update: Mon 20 Oct 2025 14:53:28 +0000 Manifest next update: Tue 21 Oct 2025 15:14:28 +0000 Files and hashes: 1: 323830343a386135303a3a2f33322d3332203d3e20323733363631.roa (hash: BWs9FP6BDbDsmDYZV2W+M4MdNXrw7Vl+hgPyWv3lw5U=) 2: B937F473A95655C5D7B945095573D217C3A1DC11.crl (hash: 2VR2v6yXkC954ez/gsMvBeMPuvU1tKZVZ6ANZt7ke7A=) 3: 323830343a386135303a3a2f33332d3333203d3e20323733363631.roa (hash: qrca0D1TlUJdIVAjeSy6LF0A6MRtQNdKCGanqjUJNXM=) 4: 323830343a386135303a383030303a3a2f33332d3333203d3e20323733363631.roa (hash: np0pht6I6awyJtH3iD71bahJNTBootED1EaKcxVVUr0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.crl rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B937F473A95655C5D7B945095573D217C3A1DC11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 15:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:0e:99:bb:c8:12:b5:ef:58:9f:6c:5b:2d:1a:45:19:1d:d7:73:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B937F473A95655C5D7B945095573D217C3A1DC11 Validity Not Before: Oct 20 14:53:28 2025 GMT Not After : Oct 21 15:14:28 2025 GMT Subject: CN=3904F0525157D8742A7F5A4804D5B2E9C77DAF97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ff:7b:b5:da:5f:ee:94:20:27:f6:51:72:89: c6:11:af:02:dc:2b:84:c2:f6:65:49:d1:eb:dd:85: 71:ec:fd:d0:06:8c:9c:78:0b:77:05:92:14:91:d3: c2:1c:e3:d1:3c:9d:75:b1:ac:8f:8d:0f:fc:4b:0c: 4d:48:95:26:f7:c0:37:cd:ff:7f:1c:0e:6a:13:12: b9:92:67:61:b6:81:14:68:85:23:1e:e7:3c:42:24: b1:4a:cd:0f:03:82:81:4c:92:c3:41:3b:87:f2:80: 20:7c:7b:29:fa:d5:a2:d4:9f:8c:13:c9:93:c0:de: 5d:03:2a:69:12:4a:d0:fd:78:81:cb:46:ab:e7:c5: 40:22:f8:19:50:f7:03:b1:d9:9f:5f:09:6d:7e:a0: 0c:5d:4a:5f:0e:63:38:a0:42:f1:43:75:83:2a:a4: 70:f7:59:5c:a4:7b:8c:16:87:45:4f:2a:c5:09:ba: 7f:0d:c1:aa:9c:87:6a:de:f4:05:09:2c:7c:60:ea: ba:47:0d:4c:53:67:61:52:98:9a:d7:4b:e0:63:6f: b7:5f:5a:fe:3c:0d:32:59:24:d9:23:8d:05:a4:4e: 90:83:64:98:c3:95:aa:64:72:32:6a:51:52:62:de: 1c:cc:a4:b4:d6:db:6c:26:f5:a3:c0:38:b5:36:1e: a1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:04:F0:52:51:57:D8:74:2A:7F:5A:48:04:D5:B2:E9:C7:7D:AF:97 X509v3 Authority Key Identifier: keyid:B9:37:F4:73:A9:56:55:C5:D7:B9:45:09:55:73:D2:17:C3:A1:DC:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B937F473A95655C5D7B945095573D217C3A1DC11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:09:35:e2:c8:16:78:e9:54:c7:d8:27:5c:f1:9e:eb:5c:3c: 34:5d:a1:26:d4:19:4b:40:a9:2f:4a:09:7d:49:cf:62:da:30: bb:92:74:47:c3:3a:db:47:87:61:32:27:ab:86:6e:e7:9c:fd: 88:0b:40:a4:c9:db:60:ec:b3:17:44:83:98:72:8a:66:75:d8: 89:ec:84:f9:7c:59:4d:25:be:fd:ca:c1:23:00:ec:da:e5:5f: 19:58:3a:65:8c:1c:b7:dc:95:91:be:c2:36:05:da:83:ad:aa: 7a:9a:15:ca:ac:95:9f:0a:eb:58:31:45:d9:3b:a2:f1:7b:22: d1:12:28:03:07:f3:ba:f5:2d:a1:50:64:2a:8d:c9:4a:35:9d: 81:85:51:46:e4:79:e4:18:dc:29:70:4a:d5:f5:76:7b:11:92: d4:46:58:ad:8d:dc:e2:b1:75:aa:7d:3c:36:ff:a7:41:c0:3b: d4:cf:c6:22:45:42:cb:4b:72:56:d6:b3:06:8b:7e:2c:9d:4f: 1d:75:23:ac:26:f0:6e:15:12:de:6a:c3:43:c6:93:fd:ec:67: b1:fc:3d:7c:ed:71:17:0e:3a:f9:ba:73:8f:db:87:c7:81:ac: f5:dc:07:40:20:fd:25:a4:49:2b:39:e6:51:67:29:22:1a:c0: 0c:dc:f0:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKQ6Zu8gSte9Yn2xbLRpFGR3Xc7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkzN0Y0NzNBOTU2NTVDNUQ3Qjk0NTA5NTU3M0QyMTdD M0ExREMxMTAeFw0yNTEwMjAxNDUzMjhaFw0yNTEwMjExNTE0MjhaMDMxMTAvBgNV BAMTKDM5MDRGMDUyNTE1N0Q4NzQyQTdGNUE0ODA0RDVCMkU5Qzc3REFGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM/3u12l/ulCAn9lFyicYRrwLc K4TC9mVJ0evdhXHs/dAGjJx4C3cFkhSR08Ic49E8nXWxrI+ND/xLDE1IlSb3wDfN /38cDmoTErmSZ2G2gRRohSMe5zxCJLFKzQ8DgoFMksNBO4fygCB8eyn61aLUn4wT yZPA3l0DKmkSStD9eIHLRqvnxUAi+BlQ9wOx2Z9fCW1+oAxdSl8OYzigQvFDdYMq pHD3WVyke4wWh0VPKsUJun8Nwaqch2re9AUJLHxg6rpHDUxTZ2FSmJrXS+Bjb7df Wv48DTJZJNkjjQWkTpCDZJjDlapkcjJqUVJi3hzMpLTW22wm9aPAOLU2HqFBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOQTwUlFX2HQqf1pIBNWy6cd9r5cwHwYDVR0j BBgwFoAUuTf0c6lWVcXXuUUJVXPSF8Oh3BEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHZSNjVpRThzZmp3N3RVYmZnUlh3eUJkTFB4TTdydGFGNDRla2R3U3Rz MzMvMC9COTM3RjQ3M0E5NTY1NUM1RDdCOTQ1MDk1NTczRDIxN0MzQTFEQzExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5MzdGNDczQTk1NjU1QzVE N0I5NDUwOTU1NzNEMjE3QzNBMURDMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHZSNjVpRThzZmp3N3RVYmZnUlh3eUJkTFB4TTdydGFGNDRla2R3U3RzMzMvMC9C OTM3RjQ3M0E5NTY1NUM1RDdCOTQ1MDk1NTczRDIxN0MzQTFEQzExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhwk14sgWeOlUx9gnXPGe61w8NF2hJtQZS0CpL0oJfUnPYtowu5J0R8M620eH YTInq4Zu55z9iAtApMnbYOyzF0SDmHKKZnXYieyE+XxZTSW+/crBIwDs2uVfGVg6 ZYwct9yVkb7CNgXag62qepoVyqyVnwrrWDFF2Tui8Xsi0RIoAwfzuvUtoVBkKo3J SjWdgYVRRuR55BjcKXBK1fV2exGS1EZYrY3c4rF1qn08Nv+nQcA71M/GIkVCy0ty VtazBot+LJ1PHXUjrCbwbhUS3mrDQ8aT/exnsfw9fO1xFw46+bpzj9uHx4Gs9dwH QCD9JaRJKznmUWcpIhrADNzw0A== -----END CERTIFICATE-----Generated at Tue Oct 21 00:33:14 2025 by rpki-client