$ rpki-client -vvf rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft File: 4959F557EDB40C3E3B7D450A5F4FE57884600618.mft (raw, json) Hash identifier: vpA9XQ9tEdNCpiytqUGyYBbpv50fFNgw3z4C5K3wbXg= Subject key identifier: F7:75:D1:94:07:11:E9:D3:B7:B3:8B:F5:73:B2:24:C4:17:D0:D3:A2 Authority key identifier: 49:59:F5:57:ED:B4:0C:3E:3B:7D:45:0A:5F:4F:E5:78:84:60:06:18 Certificate issuer: /CN=4959F557EDB40C3E3B7D450A5F4FE57884600618 Certificate serial: 227716593C26E4445BAFB8170B79E1A19667ABAC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4959F557EDB40C3E3B7D450A5F4FE57884600618.cer Subject info access: rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft Manifest number: 023A Signing time: Mon 20 Oct 2025 10:47:21 +0000 Manifest this update: Mon 20 Oct 2025 10:42:21 +0000 Manifest next update: Tue 21 Oct 2025 11:31:21 +0000 Files and hashes: 1: 323830343a313836383a3a2f33322d313238203d3e203631393330.roa (hash: womes7nW6j6cJzPaigMdTVDQyMe9VIOJq6T7IXcSnzo=) 2: 3230302e31302e35362e302f32322d3234203d3e203631393330.roa (hash: IeXUMqTD+Japny11NJhGMFTRJW0pIY9flSE1LpaOesQ=) 3: 4959F557EDB40C3E3B7D450A5F4FE57884600618.crl (hash: sCUIloMCECZhv+/LTbc0LGBJJKWv2zvt7RsFHZjJI2s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.crl rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4959F557EDB40C3E3B7D450A5F4FE57884600618.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:77:16:59:3c:26:e4:44:5b:af:b8:17:0b:79:e1:a1:96:67:ab:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4959F557EDB40C3E3B7D450A5F4FE57884600618 Validity Not Before: Oct 20 10:42:21 2025 GMT Not After : Oct 21 11:31:21 2025 GMT Subject: CN=F775D1940711E9D3B7B38BF573B224C417D0D3A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:74:bd:dd:42:4a:0c:1e:70:54:8c:c2:2b: 1c:66:3f:fd:05:27:41:98:27:15:17:c2:4d:eb:c1: bd:0a:62:6e:5e:c4:34:ab:52:80:c1:ce:af:ef:de: a5:da:70:41:fa:42:25:75:d7:a9:c6:47:d0:8e:22: d5:f3:92:ae:e4:c4:ec:90:45:46:fc:fb:5c:f3:69: da:6f:b9:c2:9b:ac:66:33:fc:e6:48:4b:08:cf:91: 5e:99:90:80:b6:39:65:11:e8:eb:d5:30:32:45:73: e7:3a:fa:49:3e:8d:8b:55:9e:91:e8:f2:23:e5:46: b9:1f:82:09:43:4e:79:ce:37:1e:ee:72:a4:a0:b3: e7:99:6a:d3:0f:da:6e:57:f1:56:db:cf:de:bc:2c: b6:7b:1f:76:f0:5b:dc:18:19:1d:27:15:6b:04:d0: ae:b6:b8:9f:7b:bb:34:8a:18:d4:53:41:91:3c:5f: 0f:0d:18:e2:72:d5:12:6c:93:43:db:c9:13:ca:af: a2:01:8d:f3:38:49:a6:d8:8d:0a:b3:98:bc:8a:da: 41:eb:60:fb:43:be:f0:3b:ec:89:f9:2e:e7:d0:0f: 50:9a:e1:2d:b4:4b:bf:a1:6b:2a:c0:46:5e:c3:e3: c4:5c:c9:d2:8f:4c:5f:86:47:22:04:87:99:e9:81: d4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:75:D1:94:07:11:E9:D3:B7:B3:8B:F5:73:B2:24:C4:17:D0:D3:A2 X509v3 Authority Key Identifier: keyid:49:59:F5:57:ED:B4:0C:3E:3B:7D:45:0A:5F:4F:E5:78:84:60:06:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4959F557EDB40C3E3B7D450A5F4FE57884600618.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:b0:42:d2:dd:0d:8f:b0:92:de:12:a0:5e:6f:0a:ff:14:d4: ec:b9:55:82:34:de:d5:6c:d2:c9:c7:9e:c4:71:36:63:42:35: 30:e0:d3:b5:24:2a:b4:3b:a6:60:12:f1:3a:59:36:b0:bd:7a: 6a:ef:e4:b2:f9:00:7f:68:32:ed:12:27:3b:63:97:89:ef:ca: bb:8c:6c:e2:05:1e:3d:eb:ef:34:ef:57:c5:ca:dc:e0:df:7f: c1:04:a7:84:8f:ce:7d:8d:f7:28:cf:8e:17:0f:c7:e1:b2:0c: e4:b8:51:01:58:99:e6:ed:81:2e:c9:c6:2f:d6:d1:b2:72:71: 5b:5a:d7:e2:57:36:bb:9a:c2:55:1d:90:60:e0:64:24:cc:80: 25:16:1d:44:8d:e5:c2:5f:e7:91:a8:f8:a0:93:88:d1:a6:9d: 21:79:d5:16:0e:d1:1b:c1:f4:a5:cc:fd:82:0d:a7:5c:21:b3: 80:9a:c6:47:18:71:fb:b3:76:1d:11:fe:0f:cf:62:9c:3e:11: e9:18:78:b6:99:ae:55:29:75:be:be:3e:e8:fb:38:40:cd:e5: 85:56:66:e0:b0:d8:74:60:b6:2f:a9:08:63:56:40:cb:23:36: dd:73:5c:df:c2:9b:01:8b:60:4c:57:b7:d3:ff:e1:9c:ab:9e: ec:dc:71:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIncWWTwm5ERbr7gXC3nhoZZnq6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1OUY1NTdFREI0MEMzRTNCN0Q0NTBBNUY0RkU1Nzg4 NDYwMDYxODAeFw0yNTEwMjAxMDQyMjFaFw0yNTEwMjExMTMxMjFaMDMxMTAvBgNV BAMTKEY3NzVEMTk0MDcxMUU5RDNCN0IzOEJGNTczQjIyNEM0MTdEMEQzQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEMXS93UJKDB5wVIzCKxxmP/0F J0GYJxUXwk3rwb0KYm5exDSrUoDBzq/v3qXacEH6QiV116nGR9COItXzkq7kxOyQ RUb8+1zzadpvucKbrGYz/OZISwjPkV6ZkIC2OWUR6OvVMDJFc+c6+kk+jYtVnpHo 8iPlRrkfgglDTnnONx7ucqSgs+eZatMP2m5X8Vbbz968LLZ7H3bwW9wYGR0nFWsE 0K62uJ97uzSKGNRTQZE8Xw8NGOJy1RJsk0PbyRPKr6IBjfM4SabYjQqzmLyK2kHr YPtDvvA77In5LufQD1Ca4S20S7+hayrARl7D48RcydKPTF+GRyIEh5npgdQnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU93XRlAcR6dO3s4v1c7IkxBfQ06IwHwYDVR0j BBgwFoAUSVn1V+20DD47fUUKX0/leIRgBhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXZyWWoxWDNQZ0hiY1g5R2VKeDdyQW5BNjZlOEtLN2dNUmQ5eEVpVjdi SnUvMC80OTU5RjU1N0VEQjQwQzNFM0I3RDQ1MEE1RjRGRTU3ODg0NjAwNjE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5NTlGNTU3RURCNDBDM0Uz QjdENDUwQTVGNEZFNTc4ODQ2MDA2MTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXZyWWoxWDNQZ0hiY1g5R2VKeDdyQW5BNjZlOEtLN2dNUmQ5eEVpVjdiSnUvMC80 OTU5RjU1N0VEQjQwQzNFM0I3RDQ1MEE1RjRGRTU3ODg0NjAwNjE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArbBC0t0Nj7CS3hKgXm8K/xTU7LlVgjTe1WzSyceexHE2Y0I1MODTtSQqtDum YBLxOlk2sL16au/ksvkAf2gy7RInO2OXie/Ku4xs4gUePevvNO9Xxcrc4N9/wQSn hI/OfY33KM+OFw/H4bIM5LhRAViZ5u2BLsnGL9bRsnJxW1rX4lc2u5rCVR2QYOBk JMyAJRYdRI3lwl/nkaj4oJOI0aadIXnVFg7RG8H0pcz9gg2nXCGzgJrGRxhx+7N2 HRH+D89inD4R6Rh4tpmuVSl1vr4+6Ps4QM3lhVZm4LDYdGC2L6kIY1ZAyyM23XNc 38KbAYtgTFe30//hnKue7NxxNg== -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:40 2025 by rpki-client