$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft File: 4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft (raw, json) Hash identifier: hPz+C5juQjhBiMMGDCBOxVsMw71cn5YxhbCwgz9jKZM= Subject key identifier: 95:BE:1B:A3:61:21:AC:68:B7:02:F4:FE:F7:C3:D6:52:08:D2:A9:1B Authority key identifier: 4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19 Certificate issuer: /CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519 Certificate serial: 63FAFC6B6847C74AB2A1EF717F24F9BE1D7FD9CA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft Manifest number: 030D Signing time: Sun 19 Oct 2025 19:00:21 +0000 Manifest this update: Sun 19 Oct 2025 18:55:21 +0000 Manifest next update: Mon 20 Oct 2025 21:47:21 +0000 Files and hashes: 1: 3139302e3131312e3130382e302f32322d3234203d3e20323730343137.roa (hash: gpm/0PXcAio5zaXBKIME9f+opfZ4vyceUQhgW/q0Loc=) 2: 4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl (hash: emei8/S0oyUlkECt4kPiIHxx8MiWOO0g3cyoIBQHp3w=) 3: 34352e3232352e3234342e302f32322d3234203d3e20323730343137.roa (hash: GjG1Mv8q7/+5pTIyYEZdpGEF5+avf3SU6nfp83cgKxI=) 4: 323830343a366262303a3a2f33322d3438203d3e20323730343137.roa (hash: ulWcHqimCcaLC71Cc0U5ajO6lXgnNtoY2SeIWmeZTEc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 21:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:fa:fc:6b:68:47:c7:4a:b2:a1:ef:71:7f:24:f9:be:1d:7f:d9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519 Validity Not Before: Oct 19 18:55:21 2025 GMT Not After : Oct 20 21:47:21 2025 GMT Subject: CN=95BE1BA36121AC68B702F4FEF7C3D65208D2A91B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:13:c8:72:ce:85:52:42:38:ad:bc:84:11:53: 0d:49:5f:97:27:59:fb:dd:8d:01:13:aa:05:51:8a: be:b0:4d:e1:5d:09:9b:98:74:9d:2d:26:fc:58:67: 3a:da:ac:d9:61:ac:98:4b:5d:67:34:bb:0b:98:16: de:47:f2:af:38:c6:1e:a7:73:21:de:73:33:72:df: 65:b2:9a:7f:a7:8d:b6:d8:03:fe:6c:dc:2c:1d:c6: 5e:eb:67:f3:31:73:cf:fe:27:fa:86:b4:a0:f7:81: 1f:ca:1f:fc:66:e8:ba:d4:d2:6f:c3:3f:a3:2e:40: 20:4d:cf:a4:ba:9a:84:97:9b:66:0d:a9:ea:dc:14: aa:4b:7d:cd:91:06:be:96:d0:83:a5:da:3f:5a:bc: ad:78:bf:e1:63:11:60:9e:41:e2:b1:85:3b:41:67: a9:6e:18:cc:7c:f7:9a:50:09:3e:e3:87:8b:e2:81: ca:b1:10:3d:31:86:63:19:14:ca:b7:c4:a8:8b:3c: 37:0d:67:6c:42:01:2a:8e:2c:53:17:58:6b:3c:54: 8b:e6:d8:ac:e4:1f:e6:65:10:af:09:56:84:37:50: c8:f5:0a:b8:99:4f:84:f8:07:7e:f3:48:9a:e1:3a: d5:90:88:58:bc:12:2a:d0:69:5e:65:85:f7:72:54: 69:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BE:1B:A3:61:21:AC:68:B7:02:F4:FE:F7:C3:D6:52:08:D2:A9:1B X509v3 Authority Key Identifier: keyid:4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:e1:7f:a6:a3:ec:29:53:14:4e:43:ec:b3:a8:2f:56:2c:3a: 84:4f:57:60:c2:cd:da:9c:54:f6:37:d4:fd:92:b6:2a:75:8f: 28:da:21:97:2a:11:21:76:ff:62:f2:e8:3a:88:d0:d7:ad:7b: d7:8d:6f:43:3f:0e:0d:7b:2a:e1:f9:53:33:55:0b:8f:10:2d: e9:ce:15:6d:04:b4:59:04:ce:23:9a:4c:e9:14:52:22:46:86: cb:19:c5:09:69:55:97:3c:d4:60:c4:ce:9e:17:e1:17:bf:8b: 6c:26:41:d2:1f:ef:a2:b0:e2:1f:8b:0d:48:de:aa:93:eb:69: 3f:4e:e7:ef:71:7f:9b:d0:3e:3c:cd:14:54:a3:ed:d4:3c:db: e5:5a:a9:63:f4:05:11:44:ca:fb:a2:2f:20:7e:1d:66:75:ca: a5:8d:61:1a:d3:76:58:43:a2:ec:ef:79:da:5e:ce:93:16:11: 83:31:99:97:be:cc:cb:51:1d:23:27:dc:a5:84:9e:93:7a:78: 2b:12:15:a2:0b:c3:90:98:f3:12:7d:17:42:5b:1b:f3:fc:3c: 9f:89:dd:b2:5c:1a:9e:b0:3d:b7:1f:d4:5e:63:30:62:25:08: dd:f1:16:c0:7e:09:f5:b7:c4:3f:a3:cb:a6:16:c5:be:2d:10: 5b:38:6b:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY/r8a2hHx0qyoe9xfyT5vh1/2cowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERFNDU0RkYxQjhCRjBERjJBQzdGRUM4RTBBRDY4Nzgy QjdEODUxOTAeFw0yNTEwMTkxODU1MjFaFw0yNTEwMjAyMTQ3MjFaMDMxMTAvBgNV BAMTKDk1QkUxQkEzNjEyMUFDNjhCNzAyRjRGRUY3QzNENjUyMDhEMkE5MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpE8hyzoVSQjitvIQRUw1JX5cn WfvdjQETqgVRir6wTeFdCZuYdJ0tJvxYZzrarNlhrJhLXWc0uwuYFt5H8q84xh6n cyHeczNy32Wymn+njbbYA/5s3Cwdxl7rZ/Mxc8/+J/qGtKD3gR/KH/xm6LrU0m/D P6MuQCBNz6S6moSXm2YNqercFKpLfc2RBr6W0IOl2j9avK14v+FjEWCeQeKxhTtB Z6luGMx895pQCT7jh4vigcqxED0xhmMZFMq3xKiLPDcNZ2xCASqOLFMXWGs8VIvm 2KzkH+ZlEK8JVoQ3UMj1CriZT4T4B37zSJrhOtWQiFi8EirQaV5lhfdyVGnnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlb4bo2EhrGi3AvT+98PWUgjSqRswHwYDVR0j BBgwFoAUTeRU/xuL8N8qx/7I4K1oeCt9hRkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmEzaWRmQWZjTGdnRE1DcXc5QUdMS0o4ZnhEamFUbm1Qb3EzeGlzVTMz VXMvMS80REU0NTRGRjFCOEJGMERGMkFDN0ZFQzhFMEFENjg3ODJCN0Q4NTE5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRERTQ1NEZGMUI4QkYwREYy QUM3RkVDOEUwQUQ2ODc4MkI3RDg1MTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmEzaWRmQWZjTGdnRE1DcXc5QUdMS0o4ZnhEamFUbm1Qb3EzeGlzVTMzVXMvMS80 REU0NTRGRjFCOEJGMERGMkFDN0ZFQzhFMEFENjg3ODJCN0Q4NTE5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEuF/pqPsKVMUTkPss6gvViw6hE9XYMLN2pxU9jfU/ZK2KnWPKNohlyoRIXb/ YvLoOojQ1617141vQz8ODXsq4flTM1ULjxAt6c4VbQS0WQTOI5pM6RRSIkaGyxnF CWlVlzzUYMTOnhfhF7+LbCZB0h/vorDiH4sNSN6qk+tpP07n73F/m9A+PM0UVKPt 1Dzb5VqpY/QFEUTK+6IvIH4dZnXKpY1hGtN2WEOi7O952l7OkxYRgzGZl77My1Ed IyfcpYSek3p4KxIVogvDkJjzEn0XQlsb8/w8n4ndslwanrA9tx/UXmMwYiUI3fEW wH4J9bfEP6PLphbFvi0QWzhr4g== -----END CERTIFICATE-----Generated at Mon Oct 20 12:43:16 2025 by rpki-client