$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft File: 524E9D1652F660663CB5548E20AE99DA463B2CFA.mft (raw, json) Hash identifier: P7dg0zaU0a0chTZYel7J9UGX8xiEGeQZ8k9BD6GPpxQ= Subject key identifier: 44:97:48:9E:8B:21:93:F1:2B:F7:F7:2C:33:5E:19:57:57:3E:B2:6E Authority key identifier: 52:4E:9D:16:52:F6:60:66:3C:B5:54:8E:20:AE:99:DA:46:3B:2C:FA Certificate issuer: /CN=524E9D1652F660663CB5548E20AE99DA463B2CFA Certificate serial: 71B0B811FD4AEAA6DAAB9BEA2C15A44BFD830AE5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft Manifest number: 02F4 Signing time: Mon 20 Oct 2025 08:25:32 +0000 Manifest this update: Mon 20 Oct 2025 08:20:32 +0000 Manifest next update: Tue 21 Oct 2025 08:35:32 +0000 Files and hashes: 1: 3136382e3139372e31362e302f32322d3234203d3e203532393437.roa (hash: MPHO4BWPGCLq71dUFZ81qcr0K606XlOebKG3tsXzu6M=) 2: 323830343a316466343a3a2f33322d3438203d3e203532393437.roa (hash: 2SqYa/WLX2/b5k1jmm9h6Hi0HDkGkAIsRcKD3Qgzqqc=) 3: 3137372e33382e3133362e302f32312d3234203d3e203532393437.roa (hash: 2dAP4nSC3kCKXKq9aOFGJPXz415Dw7NcFS8BwiSIgYk=) 4: 524E9D1652F660663CB5548E20AE99DA463B2CFA.crl (hash: z3DhBpeCSlJ0CBpU9Aqsrh3+4NH9vitxYD4FBNs/jng=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.crl rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b0:b8:11:fd:4a:ea:a6:da:ab:9b:ea:2c:15:a4:4b:fd:83:0a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=524E9D1652F660663CB5548E20AE99DA463B2CFA Validity Not Before: Oct 20 08:20:32 2025 GMT Not After : Oct 21 08:35:32 2025 GMT Subject: CN=4497489E8B2193F12BF7F72C335E1957573EB26E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d6:9e:76:cf:d5:37:e0:08:7b:23:db:02:cf: db:fc:33:6e:f4:c9:77:a0:69:65:90:27:0d:7f:77: db:03:3f:9e:14:bb:bf:42:8b:e1:98:b7:ab:70:f1: f3:a7:d7:9a:28:1a:c9:39:d5:cb:a4:c2:e9:40:09: c4:ae:24:f4:dd:4e:07:72:4f:4a:28:24:94:86:4d: 46:22:ae:2b:a6:54:f4:7a:c2:29:b1:7a:43:3e:60: 16:9b:75:6c:c9:17:5b:e1:ec:2b:9d:7e:e3:ac:cd: f2:d7:4a:50:6c:ae:35:43:01:36:81:e7:f9:b1:bf: 26:bc:9f:4b:87:58:0d:53:b9:9d:e7:a3:08:01:c0: 1f:23:be:4c:ec:32:81:28:11:bb:0b:f3:6b:a3:a0: 0f:2d:65:72:c5:e2:21:75:d9:1b:a3:b4:16:4c:39: 51:1f:c1:69:0a:cd:b4:51:4c:57:90:98:83:17:69: 86:27:f5:54:4d:be:8e:38:54:21:74:73:02:62:2f: 3d:f8:08:98:d3:5b:66:8c:0a:af:37:fd:65:c3:c0: 4c:f1:f8:45:23:b7:6a:1a:3e:ae:66:87:b8:6f:a9: 51:8e:7e:43:1f:53:f3:7c:fb:5b:ab:61:d9:2f:58: f3:0c:e6:69:c7:03:9b:1d:5d:9c:64:36:d1:16:4a: c4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:97:48:9E:8B:21:93:F1:2B:F7:F7:2C:33:5E:19:57:57:3E:B2:6E X509v3 Authority Key Identifier: keyid:52:4E:9D:16:52:F6:60:66:3C:B5:54:8E:20:AE:99:DA:46:3B:2C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:90:de:76:3a:19:d6:4b:ef:ce:13:9b:2d:57:d9:16:25:48: 2a:f8:9c:18:e4:0b:58:a9:87:b6:c2:1e:2e:86:5d:ac:be:db: 42:56:d6:92:fe:be:c5:b0:63:12:3a:c2:cb:88:e9:bf:c0:3c: 84:f7:9f:a6:2f:69:32:78:65:9d:5f:2e:ba:1e:55:85:10:e5: e3:76:71:0e:4d:e4:7f:9f:54:ec:84:f0:06:d7:40:3c:eb:00: 0e:58:42:f5:0a:d5:66:ea:12:fa:db:85:02:81:66:09:43:8f: 96:02:70:34:5d:eb:97:8a:21:57:cb:97:7e:3b:8c:2a:d6:7f: 65:6a:80:05:b9:a4:34:67:ac:71:86:92:c4:cd:02:82:af:c7: b9:d7:f2:4d:3f:db:c3:31:2e:09:4b:17:3a:aa:8c:9a:c9:81: 6a:60:7b:d5:d5:78:34:73:5a:2a:22:66:2e:14:97:38:0f:ff: 22:a4:f8:13:32:9f:4d:08:49:86:16:d4:bf:b7:d8:10:ec:0c: a1:4a:7b:d7:9f:8e:70:5b:66:31:d7:c1:f2:0c:fb:74:1b:e4: ee:7a:c4:8c:ec:2e:c2:32:e9:ef:48:b6:0c:43:22:02:98:28: 43:06:57:4c:72:a4:89:28:13:d6:f6:1f:48:89:a4:96:c1:1c: c3:72:54:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcbC4Ef1K6qbaq5vqLBWkS/2DCuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI0RTlEMTY1MkY2NjA2NjNDQjU1NDhFMjBBRTk5REE0 NjNCMkNGQTAeFw0yNTEwMjAwODIwMzJaFw0yNTEwMjEwODM1MzJaMDMxMTAvBgNV BAMTKDQ0OTc0ODlFOEIyMTkzRjEyQkY3RjcyQzMzNUUxOTU3NTczRUIyNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy1p52z9U34Ah7I9sCz9v8M270 yXegaWWQJw1/d9sDP54Uu79Ci+GYt6tw8fOn15ooGsk51cukwulACcSuJPTdTgdy T0ooJJSGTUYiriumVPR6wimxekM+YBabdWzJF1vh7CudfuOszfLXSlBsrjVDATaB 5/mxvya8n0uHWA1TuZ3nowgBwB8jvkzsMoEoEbsL82ujoA8tZXLF4iF12RujtBZM OVEfwWkKzbRRTFeQmIMXaYYn9VRNvo44VCF0cwJiLz34CJjTW2aMCq83/WXDwEzx +EUjt2oaPq5mh7hvqVGOfkMfU/N8+1urYdkvWPMM5mnHA5sdXZxkNtEWSsQtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURJdInoshk/Er9/csM14ZV1c+sm4wHwYDVR0j BBgwFoAUUk6dFlL2YGY8tVSOIK6Z2kY7LPowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlNZMnpZWnY2QjVwSHJwN1U5d3ZxRmdmeFBxSzZ1NW1nekczWHhkZ2gx NUovMS81MjRFOUQxNjUyRjY2MDY2M0NCNTU0OEUyMEFFOTlEQTQ2M0IyQ0ZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyNEU5RDE2NTJGNjYwNjYz Q0I1NTQ4RTIwQUU5OURBNDYzQjJDRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlNZMnpZWnY2QjVwSHJwN1U5d3ZxRmdmeFBxSzZ1NW1nekczWHhkZ2gxNUovMS81 MjRFOUQxNjUyRjY2MDY2M0NCNTU0OEUyMEFFOTlEQTQ2M0IyQ0ZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACZDedjoZ1kvvzhObLVfZFiVIKvicGOQLWKmHtsIeLoZdrL7bQlbWkv6+xbBj EjrCy4jpv8A8hPefpi9pMnhlnV8uuh5VhRDl43ZxDk3kf59U7ITwBtdAPOsADlhC 9QrVZuoS+tuFAoFmCUOPlgJwNF3rl4ohV8uXfjuMKtZ/ZWqABbmkNGescYaSxM0C gq/HudfyTT/bwzEuCUsXOqqMmsmBamB71dV4NHNaKiJmLhSXOA//IqT4EzKfTQhJ hhbUv7fYEOwMoUp715+OcFtmMdfB8gz7dBvk7nrEjOwuwjLp70i2DEMiApgoQwZX THKkiSgT1vYfSImklsEcw3JUvg== -----END CERTIFICATE-----Generated at Mon Oct 20 21:37:05 2025 by rpki-client