$ rpki-client -vvf rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft File: 4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft (raw, json) Hash identifier: MTPjcOHcC3WFIClxA9aH+1fzhlCqzcYh2a8XkH3ZGkw= Subject key identifier: 53:05:8A:BF:53:00:C0:FA:9B:25:50:C4:60:DD:7F:A4:64:E5:4B:7A Authority key identifier: 4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E Certificate issuer: /CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E Certificate serial: 3F834B1533B7003E014ACFF9A6734D63E8F4EB53 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer Subject info access: rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft Manifest number: 02ED Signing time: Mon 20 Oct 2025 10:55:35 +0000 Manifest this update: Mon 20 Oct 2025 10:50:35 +0000 Manifest next update: Tue 21 Oct 2025 11:36:35 +0000 Files and hashes: 1: 323830343a363033383a3a2f33322d3438203d3e20323639313533.roa (hash: T4iUaekwa7W+wWBiZBhsMW92NOY/WFlQgDoo76BdH1c=) 2: 34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa (hash: tmAwqMhIhrFuqc+nYdV33Pa6/YiDFGZ4qnEWgs1O00c=) 3: 4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl (hash: l6bi7/m1THGM/Eu+PDOaeyxMFzBa57xH3z85ZmIh44E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:83:4b:15:33:b7:00:3e:01:4a:cf:f9:a6:73:4d:63:e8:f4:eb:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E Validity Not Before: Oct 20 10:50:35 2025 GMT Not After : Oct 21 11:36:35 2025 GMT Subject: CN=53058ABF5300C0FA9B2550C460DD7FA464E54B7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:45:55:dd:d7:19:cd:12:40:dc:25:d4:c4: a6:21:65:42:99:32:78:69:4f:33:9b:2c:cb:b8:c1: e8:a9:cc:b9:36:c8:22:37:e2:da:be:75:05:58:42: 3f:92:38:3e:f8:15:94:b9:65:97:a7:ec:84:67:97: cc:b3:d9:39:ee:be:ec:7e:e6:da:7e:b3:5c:5e:a5: e4:9f:1d:89:d6:86:4e:e0:9a:61:21:3d:39:05:e6: dc:93:54:6e:ee:dc:31:6c:b8:db:68:81:d5:68:01: aa:2f:be:d8:77:5f:0e:3f:69:2a:b8:8c:bb:d8:bd: 59:dd:90:6b:f5:18:a2:ef:a4:1e:01:89:47:d8:0c: 20:dc:b3:1d:43:0a:b8:53:a8:22:6e:3b:96:fe:e9: 20:67:2a:89:7a:df:79:dd:e4:2b:37:c1:6c:fa:fc: a0:db:b6:04:ee:32:03:43:76:0b:b7:2a:9e:1a:05: 98:8e:ae:2b:d5:fc:3b:f6:14:54:8c:d7:af:2f:af: 29:bc:0f:c0:f3:d0:4c:dc:18:23:09:40:12:f8:2a: 25:0f:12:1a:42:e3:73:ca:b1:9c:9d:64:4a:2b:23: f1:f0:f6:0f:07:7e:f0:8d:a3:15:f1:7d:8e:dd:f4: fd:e2:5f:25:d2:3c:dc:9b:44:1e:19:b5:34:d7:7f: 57:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:05:8A:BF:53:00:C0:FA:9B:25:50:C4:60:DD:7F:A4:64:E5:4B:7A X509v3 Authority Key Identifier: keyid:4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:59:e7:74:b7:1a:60:6d:d7:73:3b:e4:59:83:77:ad:30:cd: 5a:2b:51:04:63:ca:03:5c:51:54:8e:26:62:76:4d:de:1a:73: 73:b0:22:ef:b3:b0:0f:72:c0:81:47:ae:3e:de:8e:0d:b7:3f: c0:74:a5:a1:56:e5:90:ea:ce:00:53:c1:03:a0:8d:0a:a5:e4: cd:cd:05:6a:5b:c3:87:7f:33:92:c4:a0:05:39:22:c7:99:07: 13:88:40:52:06:ee:5b:8e:0a:91:b7:f5:56:c4:c5:26:9d:52: 00:bd:2e:52:9d:5f:dc:97:d8:bb:4c:43:71:fe:01:d9:e7:06: fe:cf:a6:18:64:52:a0:27:b2:af:99:24:95:77:df:1d:3a:02: bb:b0:fc:30:a4:9b:6f:88:d0:81:61:66:b2:2a:68:57:81:3c: cd:e8:16:b8:d6:8e:a4:13:9b:ab:ed:ba:b9:65:80:c5:fe:37: 25:6b:f7:86:83:71:9f:de:f3:aa:18:bc:17:df:38:98:c2:51: d3:f3:70:73:69:dc:2f:a5:45:2e:f6:e5:b6:92:0a:8f:d4:c5: 90:f2:e3:43:f4:af:8a:e2:79:59:2c:04:7b:11:82:26:fa:e2: fc:bf:d8:3b:8e:af:55:71:ea:5a:07:cc:0a:66:c3:d2:a9:9e: 8f:dc:ce:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP4NLFTO3AD4BSs/5pnNNY+j061MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGQ0M2NTREQjQyNDhFRDlDQzhBRkM3RDYxQjcxRjcw QTQ4NzA3RTAeFw0yNTEwMjAxMDUwMzVaFw0yNTEwMjExMTM2MzVaMDMxMTAvBgNV BAMTKDUzMDU4QUJGNTMwMEMwRkE5QjI1NTBDNDYwREQ3RkE0NjRFNTRCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+vUVV3dcZzRJA3CXUxKYhZUKZ MnhpTzObLMu4weipzLk2yCI34tq+dQVYQj+SOD74FZS5ZZen7IRnl8yz2Tnuvux+ 5tp+s1xepeSfHYnWhk7gmmEhPTkF5tyTVG7u3DFsuNtogdVoAaovvth3Xw4/aSq4 jLvYvVndkGv1GKLvpB4BiUfYDCDcsx1DCrhTqCJuO5b+6SBnKol633nd5Cs3wWz6 /KDbtgTuMgNDdgu3Kp4aBZiOrivV/Dv2FFSM168vrym8D8Dz0EzcGCMJQBL4KiUP EhpC43PKsZydZEorI/Hw9g8HfvCNoxXxfY7d9P3iXyXSPNybRB4ZtTTXf1e5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUwWKv1MAwPqbJVDEYN1/pGTlS3owHwYDVR0j BBgwFoAUS/zGVNtCSO2cyK/H1htx9wpIcH4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3JaWHpmd2EyUDFpQzJVNmVNTVlGU1VrQnJmQzRDc2JVUjZ3QTJQVFZa QWgvMS80QkZDQzY1NERCNDI0OEVEOUNDOEFGQzdENjFCNzFGNzBBNDg3MDdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCRkNDNjU0REI0MjQ4RUQ5 Q0M4QUZDN0Q2MUI3MUY3MEE0ODcwN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3JaWHpmd2EyUDFpQzJVNmVNTVlGU1VrQnJmQzRDc2JVUjZ3QTJQVFZaQWgvMS80 QkZDQzY1NERCNDI0OEVEOUNDOEFGQzdENjFCNzFGNzBBNDg3MDdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAalnndLcaYG3XczvkWYN3rTDNWitRBGPKA1xRVI4mYnZN3hpzc7Ai77OwD3LA gUeuPt6ODbc/wHSloVblkOrOAFPBA6CNCqXkzc0FalvDh38zksSgBTkix5kHE4hA UgbuW44Kkbf1VsTFJp1SAL0uUp1f3JfYu0xDcf4B2ecG/s+mGGRSoCeyr5kklXff HToCu7D8MKSbb4jQgWFmsipoV4E8zegWuNaOpBObq+26uWWAxf43JWv3hoNxn97z qhi8F984mMJR0/Nwc2ncL6VFLvbltpIKj9TFkPLjQ/SviuJ5WSwEexGCJvri/L/Y O46vVXHqWgfMCmbD0qmej9zOfw== -----END CERTIFICATE-----Generated at Mon Oct 20 21:34:26 2025 by rpki-client