$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft File: 4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft (raw, json) Hash identifier: iBs6eJhNTkuDau9+p92JyEX/RHnrIonk6fkqlRAnd8U= Subject key identifier: 5F:EA:D2:3C:3A:96:DC:DA:49:05:AA:E0:EC:66:CF:59:2D:E9:E7:C9 Authority key identifier: 44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13 Certificate issuer: /CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13 Certificate serial: 2A75014CAE7D3F321F998F7660DC3A0CB610D9F3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer Subject info access: rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft Manifest number: FC Signing time: Mon 20 Oct 2025 07:22:47 +0000 Manifest this update: Mon 20 Oct 2025 07:17:47 +0000 Manifest next update: Tue 21 Oct 2025 09:08:47 +0000 Files and hashes: 1: 3139312e3234332e3138302e302f32322d3332203d3e20323633353039.roa (hash: KlULxHMxyBYgHOWDvr82ep/Pt0PmGQBYgR+pKvkMFlE=) 2: 3139312e3234332e3137362e302f32322d3332203d3e20323633353039.roa (hash: 5MnHP1gwm6VSUR7iHYTvcw72QzSqthXM1z6v3zFxW5g=) 3: 3139312e3234332e3138342e302f32322d3332203d3e20323633353039.roa (hash: gplvuyLjGUhF+i6ssDirDxIMyE9T2g6roXbZ9yzSMSc=) 4: 3139312e3234332e3138382e302f32322d3332203d3e20323633353039.roa (hash: 2YCS6Yb/9D0/n8xix6Bzd5N6XCOxnBclmTpI31jfQuw=) 5: 4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl (hash: w2fq4aRrwpogU/VCIT8qvPVZ7ZgkjfVDITb4VPPFZb4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:75:01:4c:ae:7d:3f:32:1f:99:8f:76:60:dc:3a:0c:b6:10:d9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13 Validity Not Before: Oct 20 07:17:47 2025 GMT Not After : Oct 21 09:08:47 2025 GMT Subject: CN=5FEAD23C3A96DCDA4905AAE0EC66CF592DE9E7C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:af:eb:a8:f6:c9:2f:cd:fb:32:c3:b0:17:42: 66:c3:4e:fc:fb:bf:be:e9:b8:cc:c2:4d:a9:b0:94: 43:1f:9a:cf:73:45:b5:ff:96:69:8c:01:59:58:e1: 53:ac:21:d1:7c:bd:2c:99:6f:39:37:78:f5:81:a7: 01:1a:35:63:dd:29:ac:05:88:1b:44:0a:06:82:5d: 35:67:ef:d7:5e:57:ff:94:6f:39:99:5b:25:b8:50: 4e:b8:64:e7:f6:28:f3:2e:05:bb:81:48:1c:bd:57: 9d:61:fc:7b:2f:1b:10:8e:0a:05:8f:72:aa:c3:b3: 51:f2:b7:a8:5b:1b:62:7a:61:17:e6:e2:77:b8:9c: 22:8a:f9:6b:5a:bb:da:cd:b4:fc:4c:66:73:c8:a7: 9a:47:2b:56:28:78:cc:b1:f9:38:44:4c:86:85:56: fa:32:84:1a:4a:43:2a:fe:f9:50:ca:00:ff:5f:71: ff:21:93:87:e2:85:12:b2:af:ee:29:24:5c:37:c0: ce:e8:d2:78:7f:87:72:16:f7:70:1c:c5:23:3f:02: ac:0c:72:ab:06:58:12:be:9a:5e:00:7b:94:9d:82: 85:69:b3:10:01:df:a8:48:42:00:92:b5:29:07:2e: 09:92:3f:9c:0b:c3:50:20:4a:8a:d5:b2:e7:29:c9: 06:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EA:D2:3C:3A:96:DC:DA:49:05:AA:E0:EC:66:CF:59:2D:E9:E7:C9 X509v3 Authority Key Identifier: keyid:44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:2f:c1:d5:ab:c2:c8:34:76:cf:18:3a:08:33:b4:7b:eb:9a: a8:e0:22:48:c7:30:2c:9e:d6:17:c0:71:2f:9e:c5:81:49:37: 8b:1c:0d:05:42:8b:14:45:5e:8b:9e:af:86:e6:8f:4e:16:48: 84:47:ca:d9:0c:d0:8d:40:b0:ce:6d:6c:b2:85:c9:f6:79:70: 2a:d1:e1:44:63:84:b5:6e:80:8c:3a:70:6d:a3:c0:c2:9d:18: 61:a2:39:5d:8c:5d:c6:da:7e:73:38:ff:95:7c:c1:91:26:5a: 10:6e:a0:c5:77:52:d7:bb:5e:db:d1:c1:de:0a:67:24:74:74: 70:83:26:31:22:58:f0:80:1c:45:5f:48:d0:ed:c6:f9:82:cc: a7:ea:e2:68:3d:a7:3f:9e:01:9a:7e:4c:3f:7e:7d:03:7e:8b: f0:bb:8f:c3:17:35:f0:b3:39:7e:c0:c9:43:58:6c:97:db:12: 7a:38:22:2e:46:b2:4b:8c:a4:47:62:75:5a:5c:b9:8b:c6:d7: f3:46:64:d6:32:86:eb:77:c8:79:89:2b:fd:48:e4:b9:ad:87: 4e:b3:43:de:60:6c:c7:7c:b2:12:48:d4:f1:3f:d8:34:40:a2: 87:23:58:05:2c:bc:50:68:e9:71:5c:7b:5c:b1:a4:a0:a5:c4: 1a:c6:94:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKnUBTK59PzIfmY92YNw6DLYQ2fMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQwN0RGQzFDRDU4QUQ0MDA5NzRCOERDNEMwQTMxRDRF RTVDMkExMzAeFw0yNTEwMjAwNzE3NDdaFw0yNTEwMjEwOTA4NDdaMDMxMTAvBgNV BAMTKDVGRUFEMjNDM0E5NkRDREE0OTA1QUFFMEVDNjZDRjU5MkRFOUU3QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbr+uo9skvzfsyw7AXQmbDTvz7 v77puMzCTamwlEMfms9zRbX/lmmMAVlY4VOsIdF8vSyZbzk3ePWBpwEaNWPdKawF iBtECgaCXTVn79deV/+UbzmZWyW4UE64ZOf2KPMuBbuBSBy9V51h/HsvGxCOCgWP cqrDs1Hyt6hbG2J6YRfm4ne4nCKK+Wtau9rNtPxMZnPIp5pHK1YoeMyx+ThETIaF VvoyhBpKQyr++VDKAP9fcf8hk4fihRKyr+4pJFw3wM7o0nh/h3IW93AcxSM/AqwM cqsGWBK+ml4Ae5SdgoVpsxAB36hIQgCStSkHLgmSP5wLw1AgSorVsucpyQYZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUX+rSPDqW3NpJBarg7GbPWS3p58kwHwYDVR0j BBgwFoAURAffwc1YrUAJdLjcTAox1O5cKhMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzFVZmlqWlVyVHp2QzJBc2VzUVNrVmtGMXpTdm9oRzhacTFNUHFHQnlI VGkvMC80NDA3REZDMUNENThBRDQwMDk3NEI4REM0QzBBMzFENEVFNUMyQTEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0MDdERkMxQ0Q1OEFENDAw OTc0QjhEQzRDMEEzMUQ0RUU1QzJBMTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzFVZmlqWlVyVHp2QzJBc2VzUVNrVmtGMXpTdm9oRzhacTFNUHFHQnlIVGkvMC80 NDA3REZDMUNENThBRDQwMDk3NEI4REM0QzBBMzFENEVFNUMyQTEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEy/B1avCyDR2zxg6CDO0e+uaqOAiSMcwLJ7WF8BxL57FgUk3ixwNBUKLFEVe i56vhuaPThZIhEfK2QzQjUCwzm1ssoXJ9nlwKtHhRGOEtW6AjDpwbaPAwp0YYaI5 XYxdxtp+czj/lXzBkSZaEG6gxXdS17te29HB3gpnJHR0cIMmMSJY8IAcRV9I0O3G +YLMp+riaD2nP54Bmn5MP359A36L8LuPwxc18LM5fsDJQ1hsl9sSejgiLkayS4yk R2J1Wly5i8bX80Zk1jKG63fIeYkr/Ujkua2HTrND3mBsx3yyEkjU8T/YNECihyNY BSy8UGjpcVx7XLGkoKXEGsaUMQ== -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:55 2025 by rpki-client