$ rpki-client -vvf rpki-repo.registro.br/repo/7gWgmn6XysfngtU6tTRRfoX3Mg3iXrKESCnF8m6m2yxa/0/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.mft File: 4C539A68ECE2E8F0BE8E155A0E78005044890AEC.mft (raw, json) Hash identifier: kSaZGig0nEQ/rd4RVe+xyJLTjSVYsaAbNE1YevksUJk= Subject key identifier: B6:2A:BA:5F:69:21:E8:63:D9:43:BB:37:F6:98:93:15:68:24:48:9F Authority key identifier: 4C:53:9A:68:EC:E2:E8:F0:BE:8E:15:5A:0E:78:00:50:44:89:0A:EC Certificate issuer: /CN=4C539A68ECE2E8F0BE8E155A0E78005044890AEC Certificate serial: 402C504100B51918F7809D1AEFF83F6517CD2948 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.cer Subject info access: rsync://rpki-repo.registro.br/repo/7gWgmn6XysfngtU6tTRRfoX3Mg3iXrKESCnF8m6m2yxa/0/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.mft Manifest number: A4 Signing time: Mon 20 Oct 2025 15:44:05 +0000 Manifest this update: Mon 20 Oct 2025 15:39:05 +0000 Manifest next update: Tue 21 Oct 2025 17:23:05 +0000 Files and hashes: 1: 4C539A68ECE2E8F0BE8E155A0E78005044890AEC.crl (hash: 16hMgQYRfbq4rW1b6omV1tTsMYJJYHDQCvAV11DORJg=) 2: 323830343a356134383a3a2f33322d3438203d3e20323638373632.roa (hash: 8oqKgl6goVmJi8wxd0B4s477NzXKy7+81b3yRyfursc=) 3: 34352e3137322e35362e302f32322d3234203d3e20323638373632.roa (hash: EKOgHj4yxNdz9Y4XxGUayWrsOgR16imBpcDtkHU6BWw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7gWgmn6XysfngtU6tTRRfoX3Mg3iXrKESCnF8m6m2yxa/0/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.crl rsync://rpki-repo.registro.br/repo/7gWgmn6XysfngtU6tTRRfoX3Mg3iXrKESCnF8m6m2yxa/0/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 17:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2c:50:41:00:b5:19:18:f7:80:9d:1a:ef:f8:3f:65:17:cd:29:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C539A68ECE2E8F0BE8E155A0E78005044890AEC Validity Not Before: Oct 20 15:39:05 2025 GMT Not After : Oct 21 17:23:05 2025 GMT Subject: CN=B62ABA5F6921E863D943BB37F69893156824489F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4a:3e:17:ed:5e:01:8f:bd:6f:13:cb:7e:cc: d0:cb:5a:7c:6d:1d:e6:52:38:ec:bc:58:5c:39:1a: 78:9e:67:34:02:bb:d4:f3:75:11:f9:76:13:fb:9c: 28:58:4a:c7:ad:f3:56:5b:53:2d:bb:09:35:31:5f: 94:27:6f:65:15:47:78:95:53:fe:7f:84:b9:9f:f7: 03:27:a1:1c:ca:97:53:dc:0a:a1:e3:4d:62:21:f4: d7:23:61:e4:1c:89:28:95:f2:0c:11:f0:e4:02:b6: ae:ee:9d:c7:5a:44:76:f8:7d:4e:32:40:25:81:bf: a9:47:13:e6:55:2f:01:d0:a0:09:96:43:8b:29:82: 88:34:a4:62:56:0c:1a:7b:dc:f2:ad:13:19:39:a2: 2c:b9:ca:d4:5d:50:1e:57:8b:91:92:bb:67:e7:ff: 40:50:b5:65:6e:95:63:4d:45:03:45:19:99:79:73: d9:d5:cb:eb:6a:96:a9:85:c6:15:76:1c:22:07:9c: 6f:17:0e:96:65:fe:6e:de:1d:7f:00:78:79:c0:89: 3e:bd:8b:67:2a:be:13:3a:d7:0e:a8:01:a5:ad:df: 03:71:7f:35:84:1e:48:1a:2b:21:03:8f:6a:36:2f: a0:d6:23:d2:ab:8d:c5:23:4a:25:4c:c0:74:69:f3: d8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2A:BA:5F:69:21:E8:63:D9:43:BB:37:F6:98:93:15:68:24:48:9F X509v3 Authority Key Identifier: keyid:4C:53:9A:68:EC:E2:E8:F0:BE:8E:15:5A:0E:78:00:50:44:89:0A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7gWgmn6XysfngtU6tTRRfoX3Mg3iXrKESCnF8m6m2yxa/0/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7gWgmn6XysfngtU6tTRRfoX3Mg3iXrKESCnF8m6m2yxa/0/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:60:c1:82:c0:53:53:6b:7d:92:2f:de:2c:28:bb:da:58:19: f6:02:06:de:84:f9:74:3d:dd:b4:46:2a:c2:a5:2d:57:31:a4: f0:c2:d9:43:93:83:f9:3a:dc:f7:75:23:8e:e9:04:75:ed:fc: c7:12:f2:cb:89:a3:a7:50:07:cb:4a:9c:a4:5e:7e:2c:c4:cc: 36:26:00:25:00:ba:7a:52:cf:b6:6f:88:a7:9c:74:e2:7b:7c: e7:ed:b8:33:aa:38:0c:67:ae:92:89:d9:da:c7:f2:09:51:5a: 57:b3:72:f9:c2:b3:fd:2e:51:ef:cb:5a:49:30:c5:57:e1:6f: b3:d1:14:62:7d:73:ba:6b:26:8d:9c:94:8f:77:0e:63:69:37: 45:58:ad:e2:1e:1e:a4:93:bd:0e:4b:7b:98:6d:2f:e3:d5:ee: 2d:10:4b:81:1a:1f:11:3a:3c:65:4f:c1:58:9f:1a:1a:96:43: 57:f4:bd:a2:44:f5:e7:79:fb:01:23:cb:1a:99:6e:d9:3d:12: 0a:b8:7e:0e:87:de:63:fa:cc:07:80:d7:8a:53:eb:26:8c:de: 52:31:25:b8:a5:6b:40:61:37:6e:ed:4e:c1:9c:2c:2e:36:4f: d9:ec:0b:d3:35:d5:85:32:9a:53:81:fa:50:17:0f:1a:f8:58: 5c:35:64:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQCxQQQC1GRj3gJ0a7/g/ZRfNKUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM1MzlBNjhFQ0UyRThGMEJFOEUxNTVBMEU3ODAwNTA0 NDg5MEFFQzAeFw0yNTEwMjAxNTM5MDVaFw0yNTEwMjExNzIzMDVaMDMxMTAvBgNV BAMTKEI2MkFCQTVGNjkyMUU4NjNEOTQzQkIzN0Y2OTg5MzE1NjgyNDQ4OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Sj4X7V4Bj71vE8t+zNDLWnxt HeZSOOy8WFw5GnieZzQCu9TzdRH5dhP7nChYSset81ZbUy27CTUxX5Qnb2UVR3iV U/5/hLmf9wMnoRzKl1PcCqHjTWIh9NcjYeQciSiV8gwR8OQCtq7uncdaRHb4fU4y QCWBv6lHE+ZVLwHQoAmWQ4spgog0pGJWDBp73PKtExk5oiy5ytRdUB5Xi5GSu2fn /0BQtWVulWNNRQNFGZl5c9nVy+tqlqmFxhV2HCIHnG8XDpZl/m7eHX8AeHnAiT69 i2cqvhM61w6oAaWt3wNxfzWEHkgaKyEDj2o2L6DWI9KrjcUjSiVMwHRp89iZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtiq6X2kh6GPZQ7s39piTFWgkSJ8wHwYDVR0j BBgwFoAUTFOaaOzi6PC+jhVaDngAUESJCuwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2dXZ21uNlh5c2ZuZ3RVNnRUUlJmb1gzTWczaVhyS0VTQ25GOG02bTJ5 eGEvMC80QzUzOUE2OEVDRTJFOEYwQkU4RTE1NUEwRTc4MDA1MDQ0ODkwQUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDNTM5QTY4RUNFMkU4RjBC RThFMTU1QTBFNzgwMDUwNDQ4OTBBRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2dXZ21uNlh5c2ZuZ3RVNnRUUlJmb1gzTWczaVhyS0VTQ25GOG02bTJ5eGEvMC80 QzUzOUE2OEVDRTJFOEYwQkU4RTE1NUEwRTc4MDA1MDQ0ODkwQUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHGDBgsBTU2t9ki/eLCi72lgZ9gIG3oT5dD3dtEYqwqUtVzGk8MLZQ5OD+Trc 93UjjukEde38xxLyy4mjp1AHy0qcpF5+LMTMNiYAJQC6elLPtm+Ip5x04nt85+24 M6o4DGeukonZ2sfyCVFaV7Ny+cKz/S5R78taSTDFV+Fvs9EUYn1zumsmjZyUj3cO Y2k3RVit4h4epJO9Dkt7mG0v49XuLRBLgRofETo8ZU/BWJ8aGpZDV/S9okT153n7 ASPLGplu2T0SCrh+DofeY/rMB4DXilPrJozeUjEluKVrQGE3bu1OwZwsLjZP2ewL 0zXVhTKaU4H6UBcPGvhYXDVk8g== -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:10 2025 by rpki-client