$ rpki-client -vvf rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft File: 488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft (raw, json) Hash identifier: YKhxaBYYsDXThfgaFnovVxn55U9Nkq3XYiZZASK4Ny8= Subject key identifier: E6:D1:17:C7:F6:D8:95:07:68:53:99:94:1A:C5:25:8F:42:77:A5:F3 Authority key identifier: 48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71 Certificate issuer: /CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71 Certificate serial: 03B9351FE5A5413D2FD6AFEDD853BA39AD372935 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer Subject info access: rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft Manifest number: 02E0 Signing time: Mon 20 Oct 2025 04:50:32 +0000 Manifest this update: Mon 20 Oct 2025 04:45:32 +0000 Manifest next update: Tue 21 Oct 2025 07:27:32 +0000 Files and hashes: 1: 3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa (hash: I9G3ex2XveORcAEqGBwplD5mNPbZvqU6abd1zjBCLKY=) 2: 323830343a373836303a3a2f33322d3332203d3e20323731323338.roa (hash: ob/Dwvax52q+vhxyPcSWE0mkKcMCWrMtLj4d7yXoKhY=) 3: 488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl (hash: iEapZntKf6kxOq2Hh0qUa6KdyQZs1QdCh9namoOLBkw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b9:35:1f:e5:a5:41:3d:2f:d6:af:ed:d8:53:ba:39:ad:37:29:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71 Validity Not Before: Oct 20 04:45:32 2025 GMT Not After : Oct 21 07:27:32 2025 GMT Subject: CN=E6D117C7F6D89507685399941AC5258F4277A5F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5d:1c:fe:51:ab:e2:6f:0f:1a:ec:02:03:f4: 35:f6:b4:54:6e:da:9f:a2:7a:5b:e0:c5:bc:dc:de: 14:7f:c0:fe:1b:9d:c8:28:63:be:bb:8d:c2:b2:64: 79:0e:6f:5b:b9:e7:b4:d7:17:f0:fa:c9:b7:9e:ac: a7:bf:7b:33:d9:72:57:91:aa:54:52:9e:a3:e4:5c: 90:0b:78:10:2c:2f:51:13:a0:91:17:b9:86:ea:8c: bc:56:df:c6:3a:9b:42:51:d9:31:50:e4:a8:85:11: cd:17:89:47:69:9a:d7:18:fd:c1:4d:e6:4e:1a:e3: 4e:71:fd:81:cc:82:03:6c:32:3e:d6:07:de:27:a2: 4d:f8:9d:21:44:9b:0c:d7:a1:fa:1d:8c:51:98:4a: b3:9d:f9:1b:de:0e:83:00:00:e9:bf:4c:3c:ff:7b: ec:50:ea:4c:94:1f:46:cd:83:cc:dd:57:f5:86:e8: b6:09:5c:eb:33:89:35:8b:4c:60:75:1b:57:88:76: 70:7e:41:45:36:46:fd:59:ff:82:c8:a8:5d:56:ac: da:32:ae:de:58:8a:49:fa:b9:fb:97:25:d5:90:47: d6:07:4d:27:2d:a1:f9:7c:0c:14:29:4a:93:3c:b5: 9c:5c:4f:85:65:99:fd:87:6a:46:92:9e:61:49:9f: 93:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D1:17:C7:F6:D8:95:07:68:53:99:94:1A:C5:25:8F:42:77:A5:F3 X509v3 Authority Key Identifier: keyid:48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:3d:06:03:72:d6:85:9d:f5:9a:2d:39:eb:d1:2f:71:8d:b9: 5b:28:16:d0:99:de:38:63:8b:36:25:9e:a6:98:ad:a7:b2:23: d1:b8:1f:f2:c7:2a:38:d5:af:47:2e:05:19:d6:b0:c3:70:9d: e4:97:ed:2e:ba:5a:ca:e1:f9:dd:c3:f3:cd:f2:51:49:8f:ab: 9a:b5:b0:32:c0:e1:9a:e6:f6:92:6e:9f:57:80:12:19:dd:76: a7:7b:15:c9:0d:b6:51:46:8d:62:04:2a:f2:2c:a4:c9:a8:8a: c0:6a:42:2b:98:f7:4d:3b:f0:a0:09:3b:8a:1c:e7:58:e8:8e: 63:0d:10:6e:30:7a:6a:81:a1:88:cd:64:42:c6:9f:9b:6a:a5: 3f:dd:1e:99:39:6b:a2:46:ab:ea:6f:ad:fa:b5:7f:e3:6e:e1: 49:c4:e3:41:4d:45:d7:0f:c3:3b:c7:61:52:b0:04:fb:70:43: 81:7e:ce:19:58:6e:cb:e1:a1:48:5c:72:88:bc:f5:b0:ea:a2: 52:2a:fa:de:fe:97:97:b4:b6:33:52:d2:c5:02:7c:ec:36:9e: dd:d6:fc:8c:71:5b:21:04:df:4b:06:8e:41:7e:58:9b:54:5b: e0:b6:5a:1c:d6:0e:dd:cb:80:7f:29:62:28:16:b3:27:df:93: 1a:d9:40:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA7k1H+WlQT0v1q/t2FO6Oa03KTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4RDYxMzY3RjRDNDJFMDNBRTVDNUFFOEJFMDA3NkU0 OTYxQkU3MTAeFw0yNTEwMjAwNDQ1MzJaFw0yNTEwMjEwNzI3MzJaMDMxMTAvBgNV BAMTKEU2RDExN0M3RjZEODk1MDc2ODUzOTk5NDFBQzUyNThGNDI3N0E1RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYXRz+Uavibw8a7AID9DX2tFRu 2p+ielvgxbzc3hR/wP4bncgoY767jcKyZHkOb1u557TXF/D6ybeerKe/ezPZcleR qlRSnqPkXJALeBAsL1EToJEXuYbqjLxW38Y6m0JR2TFQ5KiFEc0XiUdpmtcY/cFN 5k4a405x/YHMggNsMj7WB94nok34nSFEmwzXofodjFGYSrOd+RveDoMAAOm/TDz/ e+xQ6kyUH0bNg8zdV/WG6LYJXOsziTWLTGB1G1eIdnB+QUU2Rv1Z/4LIqF1WrNoy rt5Yikn6ufuXJdWQR9YHTSctofl8DBQpSpM8tZxcT4Vlmf2HakaSnmFJn5MFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5tEXx/bYlQdoU5mUGsUlj0J3pfMwHwYDVR0j BBgwFoAUSI1hNn9MQuA65cWui+AHbklhvnEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0dZTnFlUVhHQ3VyV2Qxd3ZTYUFoaDFpTTNFeUNFdG12WkREUzhWdDRQ c2cvMC80ODhENjEzNjdGNEM0MkUwM0FFNUM1QUU4QkUwMDc2RTQ5NjFCRTcxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4OEQ2MTM2N0Y0QzQyRTAz QUU1QzVBRThCRTAwNzZFNDk2MUJFNzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0dZTnFlUVhHQ3VyV2Qxd3ZTYUFoaDFpTTNFeUNFdG12WkREUzhWdDRQc2cvMC80 ODhENjEzNjdGNEM0MkUwM0FFNUM1QUU4QkUwMDc2RTQ5NjFCRTcxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKT0GA3LWhZ31mi0569EvcY25WygW0JneOGOLNiWeppitp7Ij0bgf8scqONWv Ry4FGdaww3Cd5JftLrpayuH53cPzzfJRSY+rmrWwMsDhmub2km6fV4ASGd12p3sV yQ22UUaNYgQq8iykyaiKwGpCK5j3TTvwoAk7ihznWOiOYw0QbjB6aoGhiM1kQsaf m2qlP90emTlrokar6m+t+rV/427hScTjQU1F1w/DO8dhUrAE+3BDgX7OGVhuy+Gh SFxyiLz1sOqiUir63v6Xl7S2M1LSxQJ87Dae3db8jHFbIQTfSwaOQX5Ym1Rb4LZa HNYO3cuAfyliKBazJ9+TGtlAjg== -----END CERTIFICATE-----Generated at Mon Oct 20 11:27:05 2025 by rpki-client