$ rpki-client -vvf rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft File: 4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft (raw, json) Hash identifier: GixGb6QhkgTwUuk0T+zF+U0bI/cxgvhbRPA1824SEZk= Subject key identifier: 18:C9:45:C5:B4:B0:92:29:6F:43:37:EF:3D:71:2A:6C:26:17:87:FD Authority key identifier: 4A:1F:EB:8C:E3:07:A0:10:64:8F:FE:E1:98:D2:F6:AF:BE:64:5E:49 Certificate issuer: /CN=4A1FEB8CE307A010648FFEE198D2F6AFBE645E49 Certificate serial: 1EAFF61767145FE948E174E1FBAD81DEE8C61F93 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft Manifest number: 02F2 Signing time: Mon 20 Oct 2025 00:38:38 +0000 Manifest this update: Mon 20 Oct 2025 00:33:38 +0000 Manifest next update: Tue 21 Oct 2025 03:09:38 +0000 Files and hashes: 1: 34352e37302e3137362e302f32322d3234203d3e20323637353736.roa (hash: qPJDf0ZzOHhjuG0zLopodnYM0KBTlwwMbPfxeuoZ2to=) 2: 323830343a343338383a3a2f33322d3438203d3e20323637353736.roa (hash: cZd/ssKML83qdXJo2RFt0hxOAlYnrkcYP1rxyHfPV10=) 3: 4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl (hash: XVFUr4IqnsgXnInacvFkRWY7SUvCIMpXldFt3DBgKYQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:af:f6:17:67:14:5f:e9:48:e1:74:e1:fb:ad:81:de:e8:c6:1f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A1FEB8CE307A010648FFEE198D2F6AFBE645E49 Validity Not Before: Oct 20 00:33:38 2025 GMT Not After : Oct 21 03:09:38 2025 GMT Subject: CN=18C945C5B4B092296F4337EF3D712A6C261787FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:67:72:f1:bb:31:11:8a:6b:c7:40:9c:da:18: 74:53:d3:60:f2:c1:8b:71:c4:81:57:b5:56:2a:ff: a1:f1:fb:fe:eb:62:61:98:d4:36:8d:6b:ee:de:40: 8c:38:8e:9a:04:c5:22:b2:ac:12:8c:34:f3:c0:d2: 4a:4f:16:97:85:95:85:53:ea:89:b9:42:90:cc:36: 36:c8:23:b0:b0:d9:04:20:90:03:97:d9:20:e6:7d: 1b:7d:57:17:ee:c1:78:eb:06:01:0e:a7:66:ed:b9: 07:81:68:66:cc:28:37:6c:ce:75:7d:23:d6:78:8e: c4:5b:cb:49:c3:17:74:16:c8:f3:8c:fb:33:02:68: 01:1d:d2:8e:68:dc:cc:d8:7a:4d:bd:19:2e:bc:ba: 11:4d:46:42:2a:21:08:ca:2f:74:20:22:55:3d:c9: ed:6b:7b:1c:d8:28:aa:3f:bd:2c:7d:24:05:e4:c7: bd:64:69:82:a8:c5:d0:ae:66:09:d6:32:40:46:42: 99:36:e6:79:72:f7:c5:41:8d:06:f7:65:ec:a6:ac: 73:1f:3d:f6:2a:7f:5e:1e:b4:bd:02:77:a0:51:8c: fe:3b:7a:c2:8a:06:3c:7e:10:79:dc:da:65:2f:d6: b6:b0:74:d3:ab:1e:8c:3f:12:71:c6:12:19:9d:60: 22:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C9:45:C5:B4:B0:92:29:6F:43:37:EF:3D:71:2A:6C:26:17:87:FD X509v3 Authority Key Identifier: keyid:4A:1F:EB:8C:E3:07:A0:10:64:8F:FE:E1:98:D2:F6:AF:BE:64:5E:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ed:32:a5:d0:f2:24:c6:52:e0:7d:56:1d:cf:58:33:ee:9c: d9:79:db:79:e6:0e:8c:3e:71:1a:ed:27:f1:9d:23:42:df:d5: 0c:2c:2a:50:5c:b4:8d:a5:9a:23:0a:26:bb:a8:73:36:0a:98: 04:f2:5c:09:d1:88:dd:11:cb:42:98:ef:48:a7:fe:11:9a:a6: 13:5e:5f:5e:a7:ec:c8:1e:d9:6f:f0:d9:14:e8:41:9e:d2:1d: 16:17:b2:40:1b:a2:39:0a:1c:89:7c:72:24:aa:66:29:f4:c7: 41:07:d7:1d:e9:a1:89:91:a8:f1:b2:e1:8e:41:80:1b:9b:59: 89:4a:35:95:3d:83:f2:14:b1:c5:0a:68:63:27:87:ba:4d:b9: 37:67:2e:1f:a7:cf:b0:7f:70:8c:d4:33:b9:5e:7d:59:e5:18: f7:2e:16:2d:3a:ca:32:ff:32:0f:83:64:05:79:a8:cd:f8:55: c0:3e:51:68:7d:a6:74:ee:f0:94:c4:99:c5:97:41:e8:14:41: 71:66:e9:55:a4:8c:5a:21:14:2c:c7:46:9d:29:04:73:49:63: 29:8e:36:59:34:d4:09:2f:82:93:85:54:56:1c:90:9b:ed:21: 9e:2b:92:27:b1:03:67:d8:4c:79:60:7c:9e:69:2b:b9:cf:3e: 23:0a:49:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHq/2F2cUX+lI4XTh+62B3ujGH5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEExRkVCOENFMzA3QTAxMDY0OEZGRUUxOThEMkY2QUZC RTY0NUU0OTAeFw0yNTEwMjAwMDMzMzhaFw0yNTEwMjEwMzA5MzhaMDMxMTAvBgNV BAMTKDE4Qzk0NUM1QjRCMDkyMjk2RjQzMzdFRjNENzEyQTZDMjYxNzg3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpZ3LxuzERimvHQJzaGHRT02Dy wYtxxIFXtVYq/6Hx+/7rYmGY1DaNa+7eQIw4jpoExSKyrBKMNPPA0kpPFpeFlYVT 6om5QpDMNjbII7Cw2QQgkAOX2SDmfRt9VxfuwXjrBgEOp2btuQeBaGbMKDdsznV9 I9Z4jsRby0nDF3QWyPOM+zMCaAEd0o5o3MzYek29GS68uhFNRkIqIQjKL3QgIlU9 ye1rexzYKKo/vSx9JAXkx71kaYKoxdCuZgnWMkBGQpk25nly98VBjQb3ZeymrHMf PfYqf14etL0Cd6BRjP47esKKBjx+EHnc2mUv1rawdNOrHow/EnHGEhmdYCKdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGMlFxbSwkilvQzfvPXEqbCYXh/0wHwYDVR0j BBgwFoAUSh/rjOMHoBBkj/7hmNL2r75kXkkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHdvbW02Y3RYUW84QXF0bllhR1ZGa3Z4VEhrdzNhOWVIU1Y3eW11MUVG VUEvMS80QTFGRUI4Q0UzMDdBMDEwNjQ4RkZFRTE5OEQyRjZBRkJFNjQ1RTQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBMUZFQjhDRTMwN0EwMTA2 NDhGRkVFMTk4RDJGNkFGQkU2NDVFNDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHdvbW02Y3RYUW84QXF0bllhR1ZGa3Z4VEhrdzNhOWVIU1Y3eW11MUVGVUEvMS80 QTFGRUI4Q0UzMDdBMDEwNjQ4RkZFRTE5OEQyRjZBRkJFNjQ1RTQ5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADO0ypdDyJMZS4H1WHc9YM+6c2XnbeeYOjD5xGu0n8Z0jQt/VDCwqUFy0jaWa Iwomu6hzNgqYBPJcCdGI3RHLQpjvSKf+EZqmE15fXqfsyB7Zb/DZFOhBntIdFhey QBuiOQociXxyJKpmKfTHQQfXHemhiZGo8bLhjkGAG5tZiUo1lT2D8hSxxQpoYyeH uk25N2cuH6fPsH9wjNQzuV59WeUY9y4WLTrKMv8yD4NkBXmozfhVwD5RaH2mdO7w lMSZxZdB6BRBcWbpVaSMWiEULMdGnSkEc0ljKY42WTTUCS+Ck4VUVhyQm+0hniuS J7EDZ9hMeWB8nmkruc8+IwpJbQ== -----END CERTIFICATE-----Generated at Mon Oct 20 10:44:25 2025 by rpki-client