$ rpki-client -vvf rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/4530D40A16BC19C8930B27067C400F5328018441.mft File: 4530D40A16BC19C8930B27067C400F5328018441.mft (raw, json) Hash identifier: VrLMKEBeurnKb/Ki2RaXt/89HNi5BlByv07G2mRsaEA= Subject key identifier: 5C:34:60:2D:E4:E9:6F:8E:BF:A6:76:7C:EF:65:B0:9E:E6:D9:16:7E Authority key identifier: 45:30:D4:0A:16:BC:19:C8:93:0B:27:06:7C:40:0F:53:28:01:84:41 Certificate issuer: /CN=4530D40A16BC19C8930B27067C400F5328018441 Certificate serial: 790E2F8CA53143B621C40D9549E6C41A8F044D80 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4530D40A16BC19C8930B27067C400F5328018441.cer Subject info access: rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/4530D40A16BC19C8930B27067C400F5328018441.mft Manifest number: 3F Signing time: Mon 20 Oct 2025 03:50:00 +0000 Manifest this update: Mon 20 Oct 2025 03:45:00 +0000 Manifest next update: Tue 21 Oct 2025 05:30:00 +0000 Files and hashes: 1: 4530D40A16BC19C8930B27067C400F5328018441.crl (hash: jRfi5Jb+8PjYDakhADMVusiQ+HXyYOg3CcNIZJJbSnM=) 2: 323830343a393335633a3a2f33322d3336203d3e20323734373732.roa (hash: Ea8qGBPuP3Cd2o7wJzdnX6tVHHRMfnctp4KmiW2QKOY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/4530D40A16BC19C8930B27067C400F5328018441.crl rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/4530D40A16BC19C8930B27067C400F5328018441.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4530D40A16BC19C8930B27067C400F5328018441.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 05:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0e:2f:8c:a5:31:43:b6:21:c4:0d:95:49:e6:c4:1a:8f:04:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4530D40A16BC19C8930B27067C400F5328018441 Validity Not Before: Oct 20 03:45:00 2025 GMT Not After : Oct 21 05:30:00 2025 GMT Subject: CN=5C34602DE4E96F8EBFA6767CEF65B09EE6D9167E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:26:eb:08:52:fa:d7:a3:d9:d4:c5:4d:0a:a8: e1:11:10:fb:78:42:98:1d:66:85:9f:ea:b4:65:ee: 2c:45:ba:bb:5a:ec:1b:4f:d1:be:62:45:05:75:c5: b0:07:67:eb:8e:a9:e8:1c:eb:6e:d2:f1:e1:c6:3c: 8d:fe:8a:b8:c8:09:a7:c9:e2:29:4f:94:43:ff:7e: c1:fa:98:98:d1:ce:cb:e9:cc:79:b5:c9:29:7f:35: 79:af:f3:a9:fd:84:66:25:7a:b8:20:09:ae:e3:a7: e6:50:11:4c:b9:7e:bd:3f:89:ec:2e:79:04:ae:8c: 62:a3:ae:ea:e0:ed:5c:00:b5:06:2c:4b:15:25:74: ad:a8:7c:14:30:3a:cc:12:ab:0b:c9:a7:b3:62:3f: 0e:6e:4d:92:c3:da:cd:9c:6f:f0:1f:45:98:a1:35: 37:f7:c5:9a:ba:18:ae:79:59:99:49:7e:5b:da:95: af:e1:c3:08:0b:2a:93:31:4e:31:d2:77:23:72:05: 33:ee:cc:af:6b:b3:c3:17:61:79:b5:02:e5:2f:a7: 61:37:eb:b6:c4:4a:f2:fb:17:93:85:3e:d6:53:02: 45:e9:69:9f:c8:79:a2:df:e9:0b:77:26:80:14:eb: f1:85:b6:6c:a7:fd:a8:9f:0b:c1:91:e3:7a:e8:34: 09:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:34:60:2D:E4:E9:6F:8E:BF:A6:76:7C:EF:65:B0:9E:E6:D9:16:7E X509v3 Authority Key Identifier: keyid:45:30:D4:0A:16:BC:19:C8:93:0B:27:06:7C:40:0F:53:28:01:84:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/4530D40A16BC19C8930B27067C400F5328018441.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4530D40A16BC19C8930B27067C400F5328018441.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/4530D40A16BC19C8930B27067C400F5328018441.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:25:1d:fa:e0:f7:23:54:fe:81:55:e1:35:6e:1a:20:67:8c: 34:3c:e2:0d:f4:36:2f:6a:07:f1:bf:e4:bd:a5:a9:5e:a7:1b: de:74:ba:62:e6:8d:7d:d1:f4:49:c1:a9:21:c8:33:39:e0:a2: 96:04:65:e6:be:19:f6:47:a0:5e:cd:99:d1:8c:31:6c:b8:22: 11:ed:b7:14:fb:56:79:7f:9e:c3:6f:15:37:bd:f5:89:5d:54: 0d:15:a6:bc:e5:58:6f:e7:ac:39:e6:c1:40:73:5d:d0:d2:e5: 11:c6:7a:93:39:b6:36:67:c0:c9:71:74:e4:01:aa:67:03:a1: 13:39:ac:9f:31:d9:df:fb:e7:17:e5:a2:bd:8d:1c:8f:78:78: 0e:e1:dc:12:6e:ef:f9:5c:07:6b:f2:ff:2b:d9:2a:da:99:be: fc:a5:a2:ae:e9:ed:3e:7c:6e:8a:03:9f:b7:01:65:a7:b9:2c: 07:49:9d:ae:79:f1:a4:24:92:4d:7c:52:2d:f5:4b:28:f8:6c: 49:ad:ca:99:d4:b2:91:99:43:30:f0:f5:26:a8:30:b5:5e:21: 61:d7:ce:69:36:e9:93:15:c4:b7:4b:ff:d8:30:e2:94:43:0d: 3d:30:c2:f0:d2:e3:94:ac:bc:62:1c:ff:ca:dd:da:50:8d:d0: e5:13:a3:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeQ4vjKUxQ7YhxA2VSebEGo8ETYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzMEQ0MEExNkJDMTlDODkzMEIyNzA2N0M0MDBGNTMy ODAxODQ0MTAeFw0yNTEwMjAwMzQ1MDBaFw0yNTEwMjEwNTMwMDBaMDMxMTAvBgNV BAMTKDVDMzQ2MDJERTRFOTZGOEVCRkE2NzY3Q0VGNjVCMDlFRTZEOTE2N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQJusIUvrXo9nUxU0KqOEREPt4 QpgdZoWf6rRl7ixFurta7BtP0b5iRQV1xbAHZ+uOqegc627S8eHGPI3+irjICafJ 4ilPlEP/fsH6mJjRzsvpzHm1ySl/NXmv86n9hGYlerggCa7jp+ZQEUy5fr0/iewu eQSujGKjrurg7VwAtQYsSxUldK2ofBQwOswSqwvJp7NiPw5uTZLD2s2cb/AfRZih NTf3xZq6GK55WZlJflvala/hwwgLKpMxTjHSdyNyBTPuzK9rs8MXYXm1AuUvp2E3 67bESvL7F5OFPtZTAkXpaZ/IeaLf6Qt3JoAU6/GFtmyn/aifC8GR43roNAnPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXDRgLeTpb46/pnZ872WwnubZFn4wHwYDVR0j BBgwFoAURTDUCha8GciTCycGfEAPUygBhEEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNU1KZ0JNSEFvVWN0bzJOY2ttVk1YWFNBS3d5a1N6TFMxdTU2dlhWRzJV MngvMC80NTMwRDQwQTE2QkMxOUM4OTMwQjI3MDY3QzQwMEY1MzI4MDE4NDQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1MzBENDBBMTZCQzE5Qzg5 MzBCMjcwNjdDNDAwRjUzMjgwMTg0NDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NU1KZ0JNSEFvVWN0bzJOY2ttVk1YWFNBS3d5a1N6TFMxdTU2dlhWRzJVMngvMC80 NTMwRDQwQTE2QkMxOUM4OTMwQjI3MDY3QzQwMEY1MzI4MDE4NDQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeSUd+uD3I1T+gVXhNW4aIGeMNDziDfQ2L2oH8b/kvaWpXqcb3nS6YuaNfdH0 ScGpIcgzOeCilgRl5r4Z9kegXs2Z0YwxbLgiEe23FPtWeX+ew28VN731iV1UDRWm vOVYb+esOebBQHNd0NLlEcZ6kzm2NmfAyXF05AGqZwOhEzmsnzHZ3/vnF+WivY0c j3h4DuHcEm7v+VwHa/L/K9kq2pm+/KWiruntPnxuigOftwFlp7ksB0mdrnnxpCSS TXxSLfVLKPhsSa3KmdSykZlDMPD1JqgwtV4hYdfOaTbpkxXEt0v/2DDilEMNPTDC 8NLjlKy8Yhz/yt3aUI3Q5ROjtQ== -----END CERTIFICATE-----Generated at Mon Oct 20 20:50:18 2025 by rpki-client