$ rpki-client -vvf rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft File: 43B19C9E57D3EDADD315DF0E16760E303285E640.mft (raw, json) Hash identifier: iUeL0Pf1wAqZqg+7dyQVAaEKLgcoZPg70R98JMPScIg= Subject key identifier: 4E:B9:21:DE:B7:99:91:35:BE:F8:0F:99:0E:14:48:37:28:ED:88:9A Authority key identifier: 43:B1:9C:9E:57:D3:ED:AD:D3:15:DF:0E:16:76:0E:30:32:85:E6:40 Certificate issuer: /CN=43B19C9E57D3EDADD315DF0E16760E303285E640 Certificate serial: 38551D6C4FC895CC2384562E3E28CAA7729DD9CA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft Manifest number: 02F2 Signing time: Mon 20 Oct 2025 12:27:33 +0000 Manifest this update: Mon 20 Oct 2025 12:22:33 +0000 Manifest next update: Tue 21 Oct 2025 15:50:33 +0000 Files and hashes: 1: 43B19C9E57D3EDADD315DF0E16760E303285E640.crl (hash: VoMym3iu+RbLTvx2JXoN31QzNtcT4Im/mJITOZTLeM0=) 2: 323830343a333330633a3a2f33322d3336203d3e20323635313133.roa (hash: fx1aVoJ8u5swT9sokjs71rdgCIfOetZ7kdmMctTx2UU=) 3: 3137302e3235342e3130382e302f32322d3234203d3e20323635313133.roa (hash: jSR8/YMl7l3F3ZQFPLDZugzcVfH7Z8XPfuj/tMptYgw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.crl rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 15:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:55:1d:6c:4f:c8:95:cc:23:84:56:2e:3e:28:ca:a7:72:9d:d9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43B19C9E57D3EDADD315DF0E16760E303285E640 Validity Not Before: Oct 20 12:22:33 2025 GMT Not After : Oct 21 15:50:33 2025 GMT Subject: CN=4EB921DEB7999135BEF80F990E14483728ED889A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:10:e1:6b:35:1f:e7:5b:9f:74:5d:52:6e:5c: 39:0b:30:bb:36:62:11:47:19:d2:83:e4:8c:b1:1c: 21:e8:1e:e5:9e:84:cc:36:82:ca:d9:5c:95:9a:1d: c4:e8:e0:dc:da:c9:5c:af:14:55:e2:8e:35:58:b8: ae:3c:96:2b:bd:75:76:d8:7d:8f:1b:cb:11:9e:69: c6:53:43:36:5b:85:6b:2f:ff:10:c2:50:94:d2:18: 06:b3:af:29:29:96:db:5a:fd:7c:9a:2d:20:9d:7b: af:6d:f0:02:1d:c2:cc:5a:98:ff:ab:36:af:5e:ea: 9a:38:32:b5:90:d0:0b:50:b7:b0:e8:aa:ee:85:c4: c4:c5:a6:83:eb:c0:f9:52:61:0b:68:90:17:90:5c: bb:04:24:39:49:06:2d:9e:56:b2:52:61:38:a4:a6: f3:b1:23:c8:53:4d:8c:13:59:9b:54:30:92:b4:8d: 39:64:f6:b4:c4:7f:9b:eb:45:fa:1d:cc:83:b4:96: 7c:6f:15:24:d2:54:1e:26:28:76:8f:ec:af:ef:23: 30:e1:b4:c1:55:59:8b:84:46:b6:e5:93:c4:80:38: d3:de:3e:62:ce:09:c1:8a:ce:ea:ed:bd:4e:f7:ea: b6:43:b3:3a:36:52:16:96:be:73:a8:45:f0:f7:36: 07:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B9:21:DE:B7:99:91:35:BE:F8:0F:99:0E:14:48:37:28:ED:88:9A X509v3 Authority Key Identifier: keyid:43:B1:9C:9E:57:D3:ED:AD:D3:15:DF:0E:16:76:0E:30:32:85:E6:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ae:c3:49:7b:61:87:e7:94:a0:30:3e:49:17:72:81:dc:1d: c5:42:9d:5d:77:c4:da:98:76:a2:4d:35:15:08:b6:47:eb:d7: 90:89:29:96:18:24:ec:e3:68:23:a4:30:a2:c0:c3:64:45:ed: da:5b:d4:42:09:22:7b:a7:d9:cd:e3:8c:51:f6:27:ec:78:c5: 25:ee:c2:31:01:e8:1a:b8:4b:60:69:73:16:3d:6d:b7:cd:0c: 77:c0:52:07:e8:bc:9a:9a:38:75:ec:a1:f1:ba:76:9a:16:3b: c9:53:22:ab:fd:17:b4:a0:89:84:87:aa:c1:79:76:e1:8f:e0: 4c:d0:a2:b7:38:8b:c9:b5:84:97:0e:7f:8f:76:87:aa:cf:9b: 31:7f:0d:3a:2b:79:99:14:12:44:88:89:da:65:76:34:25:67: f2:35:ac:60:e5:6a:39:fc:72:f5:92:92:d8:13:5c:4d:88:58: 45:39:3f:23:f6:36:6b:a1:69:ca:0e:11:93:91:82:6e:91:0d: 88:06:a3:5c:ed:ce:6a:4e:26:05:e6:2f:8b:59:69:15:d9:c8: 86:14:03:2b:ca:0b:12:c9:73:7c:7e:fa:82:01:99:70:de:c1: fe:3a:80:bf:7d:84:ad:d2:23:4f:e8:5f:20:cc:1f:7b:14:cf: bb:7f:b2:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOFUdbE/IlcwjhFYuPijKp3Kd2cowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNCMTlDOUU1N0QzRURBREQzMTVERjBFMTY3NjBFMzAz Mjg1RTY0MDAeFw0yNTEwMjAxMjIyMzNaFw0yNTEwMjExNTUwMzNaMDMxMTAvBgNV BAMTKDRFQjkyMURFQjc5OTkxMzVCRUY4MEY5OTBFMTQ0ODM3MjhFRDg4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEEOFrNR/nW590XVJuXDkLMLs2 YhFHGdKD5IyxHCHoHuWehMw2gsrZXJWaHcTo4NzayVyvFFXijjVYuK48liu9dXbY fY8byxGeacZTQzZbhWsv/xDCUJTSGAazrykpltta/XyaLSCde69t8AIdwsxamP+r Nq9e6po4MrWQ0AtQt7Doqu6FxMTFpoPrwPlSYQtokBeQXLsEJDlJBi2eVrJSYTik pvOxI8hTTYwTWZtUMJK0jTlk9rTEf5vrRfodzIO0lnxvFSTSVB4mKHaP7K/vIzDh tMFVWYuERrblk8SAONPePmLOCcGKzurtvU736rZDszo2UhaWvnOoRfD3NgfJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTrkh3reZkTW++A+ZDhRINyjtiJowHwYDVR0j BBgwFoAUQ7GcnlfT7a3TFd8OFnYOMDKF5kAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ241NFp1ZFJ3Rkx4cnhRVEtaZHFZOTNNYzF6YUNUWXBab3FvR3VKS29Z M3MvMS80M0IxOUM5RTU3RDNFREFERDMxNURGMEUxNjc2MEUzMDMyODVFNjQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzQjE5QzlFNTdEM0VEQURE MzE1REYwRTE2NzYwRTMwMzI4NUU2NDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q241NFp1ZFJ3Rkx4cnhRVEtaZHFZOTNNYzF6YUNUWXBab3FvR3VKS29ZM3MvMS80 M0IxOUM5RTU3RDNFREFERDMxNURGMEUxNjc2MEUzMDMyODVFNjQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgK7DSXthh+eUoDA+SRdygdwdxUKdXXfE2ph2ok01FQi2R+vXkIkplhgk7ONo I6QwosDDZEXt2lvUQgkie6fZzeOMUfYn7HjFJe7CMQHoGrhLYGlzFj1tt80Md8BS B+i8mpo4deyh8bp2mhY7yVMiq/0XtKCJhIeqwXl24Y/gTNCitziLybWElw5/j3aH qs+bMX8NOit5mRQSRIiJ2mV2NCVn8jWsYOVqOfxy9ZKS2BNcTYhYRTk/I/Y2a6Fp yg4Rk5GCbpENiAajXO3Oak4mBeYvi1lpFdnIhhQDK8oLEslzfH76ggGZcN7B/jqA v32ErdIjT+hfIMwfexTPu3+y1Q== -----END CERTIFICATE-----Generated at Mon Oct 20 21:35:12 2025 by rpki-client