$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft File: 041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft (raw, json) Hash identifier: tD0oifrd6qyX6ZsTAY3bfyKA4f8lmVPvPMyOsTdbyyo= Subject key identifier: 97:2A:D3:6E:95:70:AB:82:1E:C7:97:2A:94:01:CB:F1:6D:09:2E:2F Authority key identifier: 04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3 Certificate issuer: /CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3 Certificate serial: 513349CCDE8DB10C5745535DD33B2E4DEA7B6CBB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer Subject info access: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft Manifest number: 25 Signing time: Mon 20 Oct 2025 09:26:40 +0000 Manifest this update: Mon 20 Oct 2025 09:21:40 +0000 Manifest next update: Tue 21 Oct 2025 12:11:40 +0000 Files and hashes: 1: 041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl (hash: rQ1NjHoYS2Bp+K1Vw5bGAzSjVZjsNsv+ufq6mF/ypJ8=) 2: 323830343a316265383a3a2f33322d313238203d3e203631373536.roa (hash: pqgsM2ASUBh1TC0/RYOz8T+lL73SNCUA6ljQ57Xb+SQ=) 3: 3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (hash: ff5fnWNx341MgcrmBHedmB9h7orSMUG+v/FPbvSdt9w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:33:49:cc:de:8d:b1:0c:57:45:53:5d:d3:3b:2e:4d:ea:7b:6c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3 Validity Not Before: Oct 20 09:21:40 2025 GMT Not After : Oct 21 12:11:40 2025 GMT Subject: CN=972AD36E9570AB821EC7972A9401CBF16D092E2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8e:f7:19:41:60:69:00:fd:da:32:74:88:af: cf:d4:2e:34:36:88:e0:9e:38:79:36:a1:6c:4d:d2: 5a:c3:9f:a3:16:26:cf:db:e9:92:ce:6b:87:d1:af: 9c:0a:80:a5:84:c7:6e:10:a3:91:02:4a:96:f4:e9: 11:0d:ec:22:1a:25:8b:bb:4a:87:1d:06:78:f8:41: 04:50:e5:9c:8b:36:59:22:5e:83:24:a8:26:65:aa: 8c:61:5a:f2:f9:32:0f:d1:58:45:3f:dc:da:6c:97: d8:5a:c4:58:34:b9:dd:fa:66:3a:36:f7:bf:a2:8b: 60:0a:b8:0a:1d:c0:00:c7:bc:d4:f8:0f:90:e2:ff: 6d:7d:83:60:7b:b7:eb:9d:46:5c:17:e9:e6:73:99: 78:e6:42:7b:14:84:d7:c3:2a:50:62:87:b4:15:9a: 33:0d:ac:fb:83:65:1c:c7:f5:74:2d:b1:09:b7:ca: fb:91:20:e2:c5:cf:2b:ed:09:4f:9f:c7:29:88:e7: 0d:9b:19:dc:46:ff:23:07:b2:0c:ee:44:b9:60:c0: 1b:45:86:eb:80:75:25:51:2d:71:f5:6b:49:4c:9b: ce:02:3e:b7:5d:c0:37:04:ec:08:4a:d7:b1:31:6a: fe:27:99:b2:82:3a:75:4e:ec:be:c4:3d:73:17:af: 17:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2A:D3:6E:95:70:AB:82:1E:C7:97:2A:94:01:CB:F1:6D:09:2E:2F X509v3 Authority Key Identifier: keyid:04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c4:25:0a:7c:58:2d:a3:f6:a9:6d:52:b6:34:e2:8a:e1:d0: b7:6c:32:e7:46:cd:27:6b:70:e2:77:af:3e:9c:ca:63:2a:a2: fe:3e:9f:e6:09:dc:c9:c1:86:ab:57:9b:dc:9c:1b:03:d1:a7: a9:b3:7e:19:f3:89:27:72:fb:c5:f0:10:8e:9f:70:e4:e2:f2: 1d:b9:00:79:22:a3:87:d0:e8:9f:83:1b:26:d4:c2:df:15:b6: 6f:8e:29:dc:70:29:5d:e2:4f:fb:e4:73:dc:24:cb:90:ee:9a: a6:7b:41:b9:b7:8f:27:cc:e2:c3:be:22:e4:df:1a:5e:96:4d: 45:83:6b:10:0a:24:66:67:0c:61:2b:87:c3:8f:ab:ff:88:df: e0:75:59:95:27:9c:97:29:bd:3e:f0:22:b7:76:f1:5c:d8:e6: 86:b1:03:b4:b9:ed:5f:25:d8:c6:e9:82:cd:3a:41:4b:27:c3: 93:d6:70:f9:e7:a8:4a:f2:03:db:bb:76:a2:00:ef:2d:6e:8f: d1:d6:c2:1b:59:be:01:e7:d6:55:20:b9:f8:b3:7e:36:8d:3c: 84:b8:ae:11:2e:e2:35:96:ea:f0:40:e9:be:d6:dd:0d:e5:f7: 37:db:22:ca:78:45:2d:e0:72:8f:db:f7:7c:63:85:99:aa:be: fb:a3:2c:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUTNJzN6NsQxXRVNd0zsuTep7bLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQxRkEwQTQwOEFENTdFOTM4NERBMzMxQjMwNDBCOTFG REUwMEJFMzAeFw0yNTEwMjAwOTIxNDBaFw0yNTEwMjExMjExNDBaMDMxMTAvBgNV BAMTKDk3MkFEMzZFOTU3MEFCODIxRUM3OTcyQTk0MDFDQkYxNkQwOTJFMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jvcZQWBpAP3aMnSIr8/ULjQ2 iOCeOHk2oWxN0lrDn6MWJs/b6ZLOa4fRr5wKgKWEx24Qo5ECSpb06REN7CIaJYu7 SocdBnj4QQRQ5ZyLNlkiXoMkqCZlqoxhWvL5Mg/RWEU/3Npsl9haxFg0ud36Zjo2 97+ii2AKuAodwADHvNT4D5Di/219g2B7t+udRlwX6eZzmXjmQnsUhNfDKlBih7QV mjMNrPuDZRzH9XQtsQm3yvuRIOLFzyvtCU+fxymI5w2bGdxG/yMHsgzuRLlgwBtF huuAdSVRLXH1a0lMm84CPrddwDcE7AhK17Exav4nmbKCOnVO7L7EPXMXrxd9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlyrTbpVwq4Iex5cqlAHL8W0JLi8wHwYDVR0j BBgwFoAUBB+gpAitV+k4TaMxswQLkf3gC+MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVv QTkvMC8wNDFGQTBBNDA4QUQ1N0U5Mzg0REEzMzFCMzA0MEI5MUZERTAwQkUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0MUZBMEE0MDhBRDU3RTkz ODREQTMzMUIzMDQwQjkxRkRFMDBCRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVvQTkvMC8w NDFGQTBBNDA4QUQ1N0U5Mzg0REEzMzFCMzA0MEI5MUZERTAwQkUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX8QlCnxYLaP2qW1StjTiiuHQt2wy50bNJ2tw4nevPpzKYyqi/j6f5gncycGG q1eb3JwbA9GnqbN+GfOJJ3L7xfAQjp9w5OLyHbkAeSKjh9Don4MbJtTC3xW2b44p 3HApXeJP++Rz3CTLkO6apntBubePJ8ziw74i5N8aXpZNRYNrEAokZmcMYSuHw4+r /4jf4HVZlSeclym9PvAit3bxXNjmhrEDtLntXyXYxumCzTpBSyfDk9Zw+eeoSvID 27t2ogDvLW6P0dbCG1m+AefWVSC5+LN+No08hLiuES7iNZbq8EDpvtbdDeX3N9si ynhFLeByj9v3fGOFmaq++6MsMg== -----END CERTIFICATE-----Generated at Mon Oct 20 14:49:36 2025 by rpki-client