$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/D122D268516BC498BFD4DFF4B38F0B442647ABE4.mft File: D122D268516BC498BFD4DFF4B38F0B442647ABE4.mft (raw, json) Hash identifier: 3CIrKZnV1+gcva4mLIfi4FPlRYiECukEk4x6Rgu1gRE= Subject key identifier: 4C:2E:68:FA:54:5D:FF:20:C3:C2:43:CE:D2:B3:93:99:B8:18:E1:3E Authority key identifier: D1:22:D2:68:51:6B:C4:98:BF:D4:DF:F4:B3:8F:0B:44:26:47:AB:E4 Certificate issuer: /CN=D122D268516BC498BFD4DFF4B38F0B442647ABE4 Certificate serial: 43799510A18082210D0722CD53B0A3112422A27E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D122D268516BC498BFD4DFF4B38F0B442647ABE4.cer Subject info access: rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/D122D268516BC498BFD4DFF4B38F0B442647ABE4.mft Manifest number: 32 Signing time: Mon 20 Oct 2025 06:12:04 +0000 Manifest this update: Mon 20 Oct 2025 06:07:04 +0000 Manifest next update: Tue 21 Oct 2025 09:54:04 +0000 Files and hashes: 1: 323830343a333439633a313030303a3a2f34302d3430203d3e20323635343638.roa (hash: +6EcJeb4m4ySaoD30mnagx1VHy6E7LnBocZ/s2OaBNQ=) 2: 3136382e3139362e3136342e302f32322d3234203d3e20323635343638.roa (hash: sGbWmqHk5weRKCYyrc4ZjKQWdl1w9X76+3agDKEMckg=) 3: 323830343a333439633a3a2f33322d3332203d3e20323635343638.roa (hash: r66Aeqw8b147aSMsrCsymAMKAh4gmmWCOyQTkSDTGwM=) 4: 323830343a333439633a323030303a3a2f34302d3430203d3e20323635343638.roa (hash: 5T7MSkgaxTJ/rqCWIgYcgyi/8FfzgGH+U23C/YlzQa0=) 5: D122D268516BC498BFD4DFF4B38F0B442647ABE4.crl (hash: eIM9Ka0TfHr7y5tEwCDXWV4tTPSLuhBeuCL4oiOrO2g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/D122D268516BC498BFD4DFF4B38F0B442647ABE4.crl rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/D122D268516BC498BFD4DFF4B38F0B442647ABE4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D122D268516BC498BFD4DFF4B38F0B442647ABE4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:79:95:10:a1:80:82:21:0d:07:22:cd:53:b0:a3:11:24:22:a2:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D122D268516BC498BFD4DFF4B38F0B442647ABE4 Validity Not Before: Oct 20 06:07:04 2025 GMT Not After : Oct 21 09:54:04 2025 GMT Subject: CN=4C2E68FA545DFF20C3C243CED2B39399B818E13E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1d:af:1f:52:50:59:24:09:f7:19:f4:25:3e: a9:9d:13:15:55:4e:04:d1:59:a1:09:ff:af:a4:f7: 0b:1c:7f:23:76:dd:6e:dd:7a:81:d0:be:47:21:b6: f4:b6:dd:8b:73:d8:a2:82:35:c7:52:82:13:9c:dc: 03:9e:fb:f6:dd:ca:36:e1:c1:ea:26:8a:f5:58:ac: e7:f5:9e:b9:7f:93:dd:27:c6:dd:e0:5a:fd:ba:52: 43:06:d4:8b:f1:07:2c:87:c0:c0:3a:59:81:96:ea: da:36:a8:fc:40:b3:b6:01:91:38:f2:91:bd:cb:59: 35:04:1b:13:85:39:44:6e:bf:ff:b5:43:00:6f:3d: 10:1e:a6:9e:74:ee:01:9c:0a:0f:d3:36:2d:11:ad: 9b:61:39:b7:8f:e6:42:45:9f:0c:f0:86:49:8d:15: 60:73:38:5b:46:f6:34:b2:50:e6:0f:e0:3c:f3:dd: d8:24:30:72:59:ca:35:8c:c4:13:f6:05:45:88:98: 2c:73:7a:2b:ce:8b:4d:38:58:74:9f:ad:f1:8d:6b: 12:3c:a0:fc:79:d2:4a:6f:c5:77:46:76:7a:71:bf: 96:07:4f:bf:3e:35:d4:87:2c:2d:86:09:7b:31:10: 43:a1:48:44:03:63:d7:1f:7a:79:17:a3:90:45:50: 2b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2E:68:FA:54:5D:FF:20:C3:C2:43:CE:D2:B3:93:99:B8:18:E1:3E X509v3 Authority Key Identifier: keyid:D1:22:D2:68:51:6B:C4:98:BF:D4:DF:F4:B3:8F:0B:44:26:47:AB:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/D122D268516BC498BFD4DFF4B38F0B442647ABE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D122D268516BC498BFD4DFF4B38F0B442647ABE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/D122D268516BC498BFD4DFF4B38F0B442647ABE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:6f:28:5c:9c:2f:74:9d:9f:77:86:4b:d1:88:9f:15:9f:fe: 2e:45:cd:7b:87:be:54:47:22:ac:08:d6:30:20:5d:ef:df:4a: f1:0a:70:8c:5e:b4:92:c1:02:6e:ee:59:bc:0d:d8:fc:95:b8: 38:28:cf:30:cb:38:b7:f4:bb:33:d3:8b:63:fc:5a:bb:5e:e5: 3e:14:e3:26:2a:75:fb:dd:ae:46:e1:18:30:84:b0:f3:11:c7: 03:b4:af:ef:72:f2:57:44:82:7c:d7:71:4f:f9:9b:75:cd:2a: 28:2c:9a:23:8e:73:f7:b0:8a:3e:83:81:4e:c3:95:2a:f4:cf: 7c:33:f6:e1:ec:94:45:db:55:49:c5:78:c0:2a:6a:af:31:c8: df:fb:32:26:c5:ba:a4:66:b4:e8:fd:83:8e:0e:f2:5b:16:19: 79:ca:0a:2f:a2:ad:c7:99:ca:73:85:26:08:82:b5:ef:78:97: a0:34:33:29:72:8d:69:d0:60:34:b5:d4:cb:02:b6:7f:87:10: 54:a1:a7:75:98:5f:7e:ec:86:48:5f:2e:ea:32:98:e7:27:40: f2:25:1f:27:74:f9:3d:b7:41:eb:af:7f:d1:c8:9c:ef:ac:6f: 2e:17:00:89:bb:20:11:aa:4e:5b:46:05:79:b2:88:a9:28:a8: ec:10:37:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ3mVEKGAgiENByLNU7CjESQion4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDEyMkQyNjg1MTZCQzQ5OEJGRDRERkY0QjM4RjBCNDQy NjQ3QUJFNDAeFw0yNTEwMjAwNjA3MDRaFw0yNTEwMjEwOTU0MDRaMDMxMTAvBgNV BAMTKDRDMkU2OEZBNTQ1REZGMjBDM0MyNDNDRUQyQjM5Mzk5QjgxOEUxM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHa8fUlBZJAn3GfQlPqmdExVV TgTRWaEJ/6+k9wscfyN23W7deoHQvkchtvS23Ytz2KKCNcdSghOc3AOe+/bdyjbh weomivVYrOf1nrl/k90nxt3gWv26UkMG1IvxByyHwMA6WYGW6to2qPxAs7YBkTjy kb3LWTUEGxOFOURuv/+1QwBvPRAepp507gGcCg/TNi0RrZthObeP5kJFnwzwhkmN FWBzOFtG9jSyUOYP4Dzz3dgkMHJZyjWMxBP2BUWImCxzeivOi004WHSfrfGNaxI8 oPx50kpvxXdGdnpxv5YHT78+NdSHLC2GCXsxEEOhSEQDY9cfenkXo5BFUCvPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTC5o+lRd/yDDwkPO0rOTmbgY4T4wHwYDVR0j BBgwFoAU0SLSaFFrxJi/1N/0s48LRCZHq+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVFZU2VvenFzcGl1bkNrOTR5SnNLTmhwUjNibzFRNVFwakZUNnlxczdN V0IvMC9EMTIyRDI2ODUxNkJDNDk4QkZENERGRjRCMzhGMEI0NDI2NDdBQkU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMjJEMjY4NTE2QkM0OThC RkQ0REZGNEIzOEYwQjQ0MjY0N0FCRTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVFZU2VvenFzcGl1bkNrOTR5SnNLTmhwUjNibzFRNVFwakZUNnlxczdNV0IvMC9E MTIyRDI2ODUxNkJDNDk4QkZENERGRjRCMzhGMEI0NDI2NDdBQkU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAm8oXJwvdJ2fd4ZL0YifFZ/+LkXNe4e+VEcirAjWMCBd799K8QpwjF60ksEC bu5ZvA3Y/JW4OCjPMMs4t/S7M9OLY/xau17lPhTjJip1+92uRuEYMISw8xHHA7Sv 73LyV0SCfNdxT/mbdc0qKCyaI45z97CKPoOBTsOVKvTPfDP24eyURdtVScV4wCpq rzHI3/syJsW6pGa06P2Djg7yWxYZecoKL6Ktx5nKc4UmCIK173iXoDQzKXKNadBg NLXUywK2f4cQVKGndZhffuyGSF8u6jKY5ydA8iUfJ3T5PbdB669/0cic76xvLhcA ibsgEapOW0YFebKIqSio7BA3qA== -----END CERTIFICATE-----Generated at Mon Oct 20 09:12:58 2025 by rpki-client