$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft File: A4C9B133126401D92DA5457C573EA0078BF42BA8.mft (raw, json) Hash identifier: Enw+u/pB3TeOh7CsCWnUn1uyqxVvi5sQ1RBa6AMN2xE= Subject key identifier: 5A:CE:38:B2:5D:9D:27:CC:82:21:E5:D6:B6:95:97:EB:E9:19:AF:87 Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8 Certificate issuer: /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8 Certificate serial: 04E0E72412039C2C1991BEFA12523449BAAB15E2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer Subject info access: rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft Manifest number: 02FA Signing time: Mon 20 Oct 2025 01:09:32 +0000 Manifest this update: Mon 20 Oct 2025 01:04:32 +0000 Manifest next update: Tue 21 Oct 2025 04:19:32 +0000 Files and hashes: 1: 323830343a333332343a633030303a3a2f33342d3334203d3e20323635333737.roa (hash: 9h3U3poxStX4ANY2dbqtLdnWScOo9qYI6dfeVV9hSPc=) 2: 323830343a333332343a3a2f33342d3334203d3e20323635333737.roa (hash: CRPJCw0trNU3LSJUJ1amYvMXs8/paBkR35eiTmLMARU=) 3: 323830343a333332343a3a2f33322d3332203d3e20323635333737.roa (hash: OvKV79ss/YfzHe5jw7+dZigchffOJMhCmzwoBeRgnBk=) 4: 3136382e3139342e31322e302f32322d3232203d3e20323635333737.roa (hash: /+yp1PfHZWQZfC8mwGGi0AulGaKTrIZ4wUD3Ry55A9k=) 5: A4C9B133126401D92DA5457C573EA0078BF42BA8.crl (hash: sEVMMOTwMtEcZ4tMXlGD4yDxwiGCJLNqpz4peuSN8bw=) 6: 3136382e3139342e31342e302f32332d3234203d3e20323635333737.roa (hash: BIH2imkXSWieWKcbpjBXbzQAILFdJjJYlzY36H5j5co=) 7: 323830343a333332343a383030303a3a2f33342d3334203d3e20323635333737.roa (hash: 08rCts65NgrMUmCVCReHmGh25aZ/GJPYiqPULTn3O5M=) 8: 323830343a333332343a343030303a3a2f33342d3334203d3e20323635333737.roa (hash: V7OKMw6wLYmzkiFtxBiZo+WHOZp5aHtUcYKQVwN2aAk=) 9: 3136382e3139342e31322e302f32332d3234203d3e20323635333737.roa (hash: 6ckCPa2dlKKdsBhZSS321FBipViWsRSsq8r3gklI62Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e0:e7:24:12:03:9c:2c:19:91:be:fa:12:52:34:49:ba:ab:15:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8 Validity Not Before: Oct 20 01:04:32 2025 GMT Not After : Oct 21 04:19:32 2025 GMT Subject: CN=5ACE38B25D9D27CC8221E5D6B69597EBE919AF87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:41:66:f0:64:88:d3:ed:76:cf:aa:4e:32:52: be:c2:c3:a7:f6:0a:ac:a1:a9:e6:85:f6:e4:f1:6a: 47:f2:83:08:39:5f:2c:56:09:a6:26:ec:9d:a1:67: 10:b0:dd:31:b8:88:88:7f:8f:02:0b:7a:73:31:1d: 8c:01:1c:d1:36:12:80:82:6c:87:85:84:63:18:15: e1:bc:5a:c9:76:ad:16:95:91:9a:33:bc:81:0e:65: 58:ea:9b:17:3c:87:4c:9a:91:0b:89:47:50:75:04: 16:8c:10:b8:73:e5:29:67:12:cc:6e:ab:7d:cc:f2: bd:00:26:d3:79:a3:6f:91:89:ca:67:a5:9a:e8:96: 4c:9e:7e:a1:e8:d0:e2:8a:9a:c9:15:8f:35:ad:4b: ec:4c:1a:61:94:e6:8b:56:58:2a:c2:6b:54:6b:4b: 8c:06:b8:6e:2d:01:4a:af:5c:d9:ba:51:97:47:e9: 5f:0d:00:d6:cb:2e:94:5c:f3:4a:73:64:f2:3f:c1: 54:4b:1c:c7:73:37:e4:93:dc:15:0f:3b:7e:a5:de: 9a:3d:8f:49:3c:1b:7e:8d:6b:c9:fa:31:ca:4f:c1: b2:23:ad:53:ba:25:7e:4b:86:b7:e3:b4:34:b6:e7: c6:58:24:f1:87:43:74:1b:80:34:d2:02:69:19:7f: 9e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CE:38:B2:5D:9D:27:CC:82:21:E5:D6:B6:95:97:EB:E9:19:AF:87 X509v3 Authority Key Identifier: keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:67:0f:06:b3:2b:81:5a:82:a7:d6:ac:b1:b9:c4:8e:96:ab: ae:92:4a:00:03:d1:68:95:2b:b4:75:2c:6a:cb:de:9a:5f:a6: 26:8e:c1:4b:a8:ae:b1:5c:26:04:72:63:63:23:c6:65:28:b7: 69:74:27:4f:6b:98:f8:8a:f5:87:6b:c9:18:4a:16:ba:07:98: d5:74:e3:ea:94:56:ab:76:dc:71:f9:eb:22:73:bc:6c:64:67: 60:d6:95:05:fc:94:a0:52:41:ac:1f:6a:d4:32:48:39:95:f0: 9c:d5:03:c0:a6:82:15:6b:98:6c:73:0a:a7:ed:b1:6d:c3:a5: fb:77:79:e0:53:bd:c3:92:de:42:47:d1:90:fe:5d:f8:ec:b0: 63:1a:31:76:a4:7d:84:ec:bf:19:4d:91:11:58:51:36:5d:1a: 4b:be:3b:41:4c:b4:a6:2a:89:b7:ac:46:ca:fa:eb:44:b7:ce: da:03:70:15:53:bc:e4:18:a1:82:43:1f:b7:05:cd:c8:2a:d5: aa:9f:6a:a4:f1:23:44:52:95:66:8a:93:ca:36:c3:7a:32:59: 5c:10:a2:7d:58:6c:01:84:67:4e:85:ff:0e:80:3d:b4:b4:13: ff:89:d6:4c:f2:d7:ac:64:a4:e6:42:a0:44:e7:49:54:9a:d8: b8:f8:eb:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBODnJBIDnCwZkb76ElI0SbqrFeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRDOUIxMzMxMjY0MDFEOTJEQTU0NTdDNTczRUEwMDc4 QkY0MkJBODAeFw0yNTEwMjAwMTA0MzJaFw0yNTEwMjEwNDE5MzJaMDMxMTAvBgNV BAMTKDVBQ0UzOEIyNUQ5RDI3Q0M4MjIxRTVENkI2OTU5N0VCRTkxOUFGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQWbwZIjT7XbPqk4yUr7Cw6f2 CqyhqeaF9uTxakfygwg5XyxWCaYm7J2hZxCw3TG4iIh/jwILenMxHYwBHNE2EoCC bIeFhGMYFeG8Wsl2rRaVkZozvIEOZVjqmxc8h0yakQuJR1B1BBaMELhz5SlnEsxu q33M8r0AJtN5o2+RicpnpZrolkyefqHo0OKKmskVjzWtS+xMGmGU5otWWCrCa1Rr S4wGuG4tAUqvXNm6UZdH6V8NANbLLpRc80pzZPI/wVRLHMdzN+ST3BUPO36l3po9 j0k8G36Na8n6McpPwbIjrVO6JX5LhrfjtDS258ZYJPGHQ3QbgDTSAmkZf56NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWs44sl2dJ8yCIeXWtpWX6+kZr4cwHwYDVR0j BBgwFoAUpMmxMxJkAdktpUV8Vz6gB4v0K6gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGU3YlBacWVhcjhVa0VxM29kZjlTRVpTWXZiUTl1UDQ0NHFoczVxWmJK R1EvMS9BNEM5QjEzMzEyNjQwMUQ5MkRBNTQ1N0M1NzNFQTAwNzhCRjQyQkE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0QzlCMTMzMTI2NDAxRDky REE1NDU3QzU3M0VBMDA3OEJGNDJCQTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGU3YlBacWVhcjhVa0VxM29kZjlTRVpTWXZiUTl1UDQ0NHFoczVxWmJKR1EvMS9B NEM5QjEzMzEyNjQwMUQ5MkRBNTQ1N0M1NzNFQTAwNzhCRjQyQkE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzGcPBrMrgVqCp9assbnEjparrpJKAAPRaJUrtHUsasveml+mJo7BS6iusVwm BHJjYyPGZSi3aXQnT2uY+Ir1h2vJGEoWugeY1XTj6pRWq3bccfnrInO8bGRnYNaV BfyUoFJBrB9q1DJIOZXwnNUDwKaCFWuYbHMKp+2xbcOl+3d54FO9w5LeQkfRkP5d +OywYxoxdqR9hOy/GU2REVhRNl0aS747QUy0piqJt6xGyvrrRLfO2gNwFVO85Bih gkMftwXNyCrVqp9qpPEjRFKVZoqTyjbDejJZXBCifVhsAYRnToX/DoA9tLQT/4nW TPLXrGSk5kKgROdJVJrYuPjrHg== -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:08 2025 by rpki-client