$ rpki-client -vvf rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft File: 4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft (raw, json) Hash identifier: Z6QP8rYIrKhrbHfcUmFVzqMXCIDZVTIgh08GzebBbh4= Subject key identifier: 95:E8:FD:CC:82:74:57:0D:41:70:03:3C:36:B1:FB:14:CD:00:E5:14 Authority key identifier: 4F:3B:34:40:57:7D:0E:47:4F:F1:5D:DF:4D:E7:A4:78:CF:07:F3:FB Certificate issuer: /CN=4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB Certificate serial: 4844671A7769B7A540C9AC6E93F60649FD9F332D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft Manifest number: 7D Signing time: Mon 20 Oct 2025 12:50:52 +0000 Manifest this update: Mon 20 Oct 2025 12:45:52 +0000 Manifest next update: Tue 21 Oct 2025 16:06:52 +0000 Files and hashes: 1: 4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.crl (hash: niKsUI5nf2H0sG9T2jc79NWtA68DHNRwIhyGuUXhYRE=) 2: 323830343a393239303a3a2f33322d3438203d3e20323734373139.roa (hash: RA5I+vzoQlcGK0NMw5Qd6CqIjhtm9+nKDVEJJYgQHJ8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.crl rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:44:67:1a:77:69:b7:a5:40:c9:ac:6e:93:f6:06:49:fd:9f:33:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB Validity Not Before: Oct 20 12:45:52 2025 GMT Not After : Oct 21 16:06:52 2025 GMT Subject: CN=95E8FDCC8274570D4170033C36B1FB14CD00E514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d9:30:34:30:03:a2:03:ca:3e:7d:53:d4:81: 28:ae:64:c0:32:b9:75:86:06:35:52:85:01:ad:68: 52:98:ff:af:12:43:49:5f:1b:93:d6:6c:97:27:52: 56:2c:9c:5c:22:fa:d9:cd:14:bf:84:10:4b:6f:7f: e5:19:63:e1:69:b6:a8:bf:3c:47:7c:90:83:03:e9: 45:e6:6e:14:67:28:71:e0:ba:4d:e8:2f:af:fb:17: 82:85:29:b5:ce:0b:8b:a5:3a:9e:99:d8:54:07:cf: cf:a4:1a:18:0a:e1:6d:71:24:d2:ac:3c:a3:e6:ea: de:27:72:7f:96:83:0e:9b:50:b5:d5:01:14:ef:9f: 16:98:43:f5:7e:46:a7:2f:b7:11:d2:cc:ac:ed:c2: 57:3b:c9:cf:27:c7:7b:39:1a:9e:f9:85:de:fb:00: dd:55:de:f2:29:9b:01:3b:f1:33:be:ed:a6:0b:82: e2:e4:71:02:c9:3a:c7:4e:61:cc:5c:6d:27:79:ce: ff:56:1e:ac:6a:e8:b9:69:26:48:15:7b:a4:6e:b9: 29:ee:06:ef:0e:19:03:c6:7d:b4:9d:28:e6:46:78: 73:a2:51:76:68:19:a4:27:d1:85:49:3c:c1:0d:b4: 8b:15:d6:01:5f:e0:18:c6:44:7b:c6:36:71:42:1b: c2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E8:FD:CC:82:74:57:0D:41:70:03:3C:36:B1:FB:14:CD:00:E5:14 X509v3 Authority Key Identifier: keyid:4F:3B:34:40:57:7D:0E:47:4F:F1:5D:DF:4D:E7:A4:78:CF:07:F3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:45:80:5c:ec:72:40:4c:76:79:0b:3a:56:84:b4:d9:e6:5d: c3:fb:01:14:d2:41:05:3e:02:3c:3a:e6:65:3f:52:0d:77:91: 59:3d:bf:ad:53:42:94:a6:5b:21:6b:5a:b5:28:1b:ca:fa:ca: 45:b0:8c:6b:1d:87:e6:7b:f8:02:90:13:91:3f:86:05:7c:bd: e5:cf:eb:01:9a:8f:bd:85:d4:b4:dc:95:b9:31:2e:b9:dc:a9: 4d:84:93:77:37:89:05:b4:db:6d:8f:77:f4:30:c4:b5:2a:09: d9:5b:f9:4f:f3:76:e5:86:69:04:fe:93:06:11:6e:e8:0a:f7: 48:44:6b:a9:4f:3d:7c:d5:78:d4:32:60:34:ef:f1:69:d6:6e: 32:e2:5f:5b:18:33:f9:52:d4:b3:00:28:ee:a9:62:d4:a5:29: 78:a1:06:bb:ca:c9:d1:73:f8:92:41:01:47:99:a1:ef:bf:07: 12:1a:3b:97:40:08:71:7d:5f:6a:6c:3b:15:79:f8:84:5d:47: 3f:dc:50:d5:fe:32:61:4a:60:fb:c8:8f:b2:a7:9f:75:36:0e: 11:db:cb:69:75:a5:12:ff:ef:2a:b0:50:78:18:1b:83:11:97: c7:f1:72:73:e3:27:60:64:03:b8:f2:c3:47:7f:01:91:44:1a: 80:f9:15:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSERnGndpt6VAyaxuk/YGSf2fMy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYzQjM0NDA1NzdEMEU0NzRGRjE1RERGNERFN0E0NzhD RjA3RjNGQjAeFw0yNTEwMjAxMjQ1NTJaFw0yNTEwMjExNjA2NTJaMDMxMTAvBgNV BAMTKDk1RThGRENDODI3NDU3MEQ0MTcwMDMzQzM2QjFGQjE0Q0QwMEU1MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU2TA0MAOiA8o+fVPUgSiuZMAy uXWGBjVShQGtaFKY/68SQ0lfG5PWbJcnUlYsnFwi+tnNFL+EEEtvf+UZY+Fptqi/ PEd8kIMD6UXmbhRnKHHguk3oL6/7F4KFKbXOC4ulOp6Z2FQHz8+kGhgK4W1xJNKs PKPm6t4ncn+Wgw6bULXVARTvnxaYQ/V+RqcvtxHSzKztwlc7yc8nx3s5Gp75hd77 AN1V3vIpmwE78TO+7aYLguLkcQLJOsdOYcxcbSd5zv9WHqxq6LlpJkgVe6RuuSnu Bu8OGQPGfbSdKOZGeHOiUXZoGaQn0YVJPMENtIsV1gFf4BjGRHvGNnFCG8JTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlej9zIJ0Vw1BcAM8NrH7FM0A5RQwHwYDVR0j BBgwFoAUTzs0QFd9DkdP8V3fTeekeM8H8/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmlrUGtRbU1FYlczdUtLbzdEMmlkMjhMVlY5NHRFQ3MxbUREeDhURnFo NWkvMC80RjNCMzQ0MDU3N0QwRTQ3NEZGMTVEREY0REU3QTQ3OENGMDdGM0ZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGM0IzNDQwNTc3RDBFNDc0 RkYxNURERjRERTdBNDc4Q0YwN0YzRkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmlrUGtRbU1FYlczdUtLbzdEMmlkMjhMVlY5NHRFQ3MxbUREeDhURnFoNWkvMC80 RjNCMzQ0MDU3N0QwRTQ3NEZGMTVEREY0REU3QTQ3OENGMDdGM0ZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHEWAXOxyQEx2eQs6VoS02eZdw/sBFNJBBT4CPDrmZT9SDXeRWT2/rVNClKZb IWtatSgbyvrKRbCMax2H5nv4ApATkT+GBXy95c/rAZqPvYXUtNyVuTEuudypTYST dzeJBbTbbY939DDEtSoJ2Vv5T/N25YZpBP6TBhFu6Ar3SERrqU89fNV41DJgNO/x adZuMuJfWxgz+VLUswAo7qli1KUpeKEGu8rJ0XP4kkEBR5mh778HEho7l0AIcX1f amw7FXn4hF1HP9xQ1f4yYUpg+8iPsqefdTYOEdvLaXWlEv/vKrBQeBgbgxGXx/Fy c+MnYGQDuPLDR38BkUQagPkVpQ== -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:27 2025 by rpki-client