$ rpki-client -vvf rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft File: 4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft (raw, json) Hash identifier: tsQes/v1KxRK5d/kjXHmWTDlHeingGGdeCc88x87o6w= Subject key identifier: A4:53:E8:23:56:4A:C2:75:28:ED:30:C2:9D:3C:79:F5:75:CF:89:50 Authority key identifier: 4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD Certificate issuer: /CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD Certificate serial: 4545C1AE0C5A6CC46BFB7B49F428DFA9733569FD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer Subject info access: rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft Manifest number: 02F5 Signing time: Mon 20 Oct 2025 00:29:56 +0000 Manifest this update: Mon 20 Oct 2025 00:24:56 +0000 Manifest next update: Tue 21 Oct 2025 02:55:56 +0000 Files and hashes: 1: 3139312e3234302e3136382e302f32312d3234203d3e20323632343936.roa (hash: j2+hQ4MNSNTWlAJLNxr+XIB88NETIiHDSKZlPxGTJpg=) 2: 323830343a3532303a3a2f33322d3332203d3e20323632343936.roa (hash: n0NxI/T03ubvSJ9fhliGQQ7T+kbx52z4+V5w0tAr5sQ=) 3: 3137372e36362e3133362e302f32312d3234203d3e20323632343936.roa (hash: QCRjImVQ+sXZdXp/nTsc9d7BRaBNwmGOP03IUMH4boo=) 4: 3137372e36362e3132382e302f32312d3234203d3e20323632343936.roa (hash: SIKR/+3V/cvlwQJCJvG1+T/46zC9b+k5a7Z/nHkUycI=) 5: 4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl (hash: BnVJRsMNYjKtv7E+E9+5cRL10LJanQ9F/Qagpw4WRiE=) 6: 323830343a3532303a313a3a2f34382d3438203d3e20323632343936.roa (hash: zOqfEDUinGvj5I8qsg8YzfXtVWIv95al9sVdatoonjo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:45:c1:ae:0c:5a:6c:c4:6b:fb:7b:49:f4:28:df:a9:73:35:69:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD Validity Not Before: Oct 20 00:24:56 2025 GMT Not After : Oct 21 02:55:56 2025 GMT Subject: CN=A453E823564AC27528ED30C29D3C79F575CF8950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:12:44:15:57:5d:0a:12:cf:98:09:51:c2:0e: 62:f3:42:d2:92:02:84:ec:57:f6:51:a0:1e:86:79: 7c:85:37:7d:02:85:48:53:05:54:9a:62:97:be:5e: 65:89:87:f2:5a:68:35:5c:c4:30:95:f9:9c:54:d4: a5:48:67:27:bf:3d:eb:b5:cb:b4:d7:ce:c1:21:d7: 1f:3f:b5:2c:1c:d6:ce:a4:7c:99:90:c3:dd:9b:8b: 7a:09:c2:91:99:c8:65:e6:0e:65:f7:92:75:f4:9d: ed:e4:77:d8:5a:d3:4c:6f:0c:5a:66:b6:97:f4:bc: 32:1d:ae:73:72:73:f2:a3:d4:42:18:f9:e2:69:69: 7c:0d:c0:71:87:a8:d0:8b:57:98:f2:6d:5a:14:02: db:b2:5e:39:70:10:26:e0:31:3c:eb:90:50:34:72: 64:5c:a3:0b:55:e5:e6:4a:a2:31:3f:e1:b3:5d:3b: 4f:ad:c2:4b:f7:91:28:09:bb:50:e8:40:ac:56:a4: b6:18:8d:b6:02:66:d6:c6:1c:76:e6:53:3d:6c:47: fb:19:10:cf:0e:31:ec:d1:a6:3e:78:c4:ff:a0:55: 8f:a8:42:5e:47:f1:25:73:47:ee:b4:84:94:50:0c: 5f:e6:97:a0:47:ea:66:42:72:87:32:28:a3:7c:f7: 67:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:53:E8:23:56:4A:C2:75:28:ED:30:C2:9D:3C:79:F5:75:CF:89:50 X509v3 Authority Key Identifier: keyid:4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ba:aa:18:1d:c8:67:24:4f:ab:99:4c:2c:ed:c8:bb:39:58: bc:07:a5:73:e2:8e:d8:0f:b8:a5:83:f1:63:00:3f:34:55:28: a7:55:fd:5f:24:68:38:46:02:00:7f:92:8a:65:48:fe:be:be: 0b:a7:4f:81:c0:d7:70:74:17:d1:1d:0b:29:b0:4e:cf:f3:10: 46:e2:d0:7d:9a:72:e5:b5:bf:43:e7:52:34:11:a4:c7:7d:3b: 6d:9c:e7:6f:da:58:d9:80:13:40:02:5b:81:5a:40:38:fc:28: 54:42:48:dc:df:4a:7a:dd:06:4c:0c:ee:76:cc:c5:77:9a:ee: ca:0c:8e:24:7d:0f:59:db:ab:dd:1e:3d:6d:0f:5a:c4:9b:35: 14:58:ee:4e:3f:50:d6:7c:54:91:e2:2f:b7:f9:98:fe:8a:32: 8e:4e:5f:61:3d:dc:aa:31:6b:ef:5e:0d:80:87:f3:57:27:73: eb:d0:41:40:2e:7f:90:41:6d:e9:68:35:82:49:f5:2c:77:37: 39:e3:15:fa:5c:ea:03:a7:f9:f7:ae:42:00:24:74:df:d8:30: 0f:7f:7c:e9:bc:aa:e1:d3:79:9a:0c:77:51:b3:bb:c5:65:42: 6f:65:64:6b:23:29:7b:0e:a0:9f:76:75:10:67:a9:18:db:62: a3:2b:ad:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURUXBrgxabMRr+3tJ9CjfqXM1af0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU0QzJDNENGQTEzNzg1NUVBMjVBNEZFQzQzOTFCNzBD MjFBNUJCRDAeFw0yNTEwMjAwMDI0NTZaFw0yNTEwMjEwMjU1NTZaMDMxMTAvBgNV BAMTKEE0NTNFODIzNTY0QUMyNzUyOEVEMzBDMjlEM0M3OUY1NzVDRjg5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuEkQVV10KEs+YCVHCDmLzQtKS AoTsV/ZRoB6GeXyFN30ChUhTBVSaYpe+XmWJh/JaaDVcxDCV+ZxU1KVIZye/Peu1 y7TXzsEh1x8/tSwc1s6kfJmQw92bi3oJwpGZyGXmDmX3knX0ne3kd9ha00xvDFpm tpf0vDIdrnNyc/Kj1EIY+eJpaXwNwHGHqNCLV5jybVoUAtuyXjlwECbgMTzrkFA0 cmRcowtV5eZKojE/4bNdO0+twkv3kSgJu1DoQKxWpLYYjbYCZtbGHHbmUz1sR/sZ EM8OMezRpj54xP+gVY+oQl5H8SVzR+60hJRQDF/ml6BH6mZCcocyKKN892dxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpFPoI1ZKwnUo7TDCnTx59XXPiVAwHwYDVR0j BBgwFoAUTkwsTPoTeFXqJaT+xDkbcMIaW70wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTVidnA3bVZrcDRwYW1vSjhkZ05mQlhvTVREa2FBTGI2OVRLenFKWUQz WTgvMS80RTRDMkM0Q0ZBMTM3ODU1RUEyNUE0RkVDNDM5MUI3MEMyMUE1QkJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFNEMyQzRDRkExMzc4NTVF QTI1QTRGRUM0MzkxQjcwQzIxQTVCQkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTVidnA3bVZrcDRwYW1vSjhkZ05mQlhvTVREa2FBTGI2OVRLenFKWUQzWTgvMS80 RTRDMkM0Q0ZBMTM3ODU1RUEyNUE0RkVDNDM5MUI3MEMyMUE1QkJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABLqqGB3IZyRPq5lMLO3IuzlYvAelc+KO2A+4pYPxYwA/NFUop1X9XyRoOEYC AH+SimVI/r6+C6dPgcDXcHQX0R0LKbBOz/MQRuLQfZpy5bW/Q+dSNBGkx307bZzn b9pY2YATQAJbgVpAOPwoVEJI3N9Ket0GTAzudszFd5ruygyOJH0PWdur3R49bQ9a xJs1FFjuTj9Q1nxUkeIvt/mY/ooyjk5fYT3cqjFr714NgIfzVydz69BBQC5/kEFt 6Wg1gkn1LHc3OeMV+lzqA6f5965CACR039gwD3986byq4dN5mgx3UbO7xWVCb2Vk ayMpew6gn3Z1EGepGNtioyutvA== -----END CERTIFICATE-----Generated at Mon Oct 20 19:29:18 2025 by rpki-client