$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft File: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft (raw, json) Hash identifier: tcqcJAzU+9THaj/334bahmawiqSQyPeC2c0w/aRBNpg= Subject key identifier: CD:B4:9C:E9:FE:E3:FB:E2:A8:02:83:E3:28:9A:B0:88:5C:10:4F:43 Authority key identifier: 4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E Certificate issuer: /CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E Certificate serial: 64E6C22B0060FC4C87460EB90A897111A78CB623 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer Subject info access: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft Manifest number: 02C4 Signing time: Mon 20 Oct 2025 02:10:23 +0000 Manifest this update: Mon 20 Oct 2025 02:05:23 +0000 Manifest next update: Tue 21 Oct 2025 06:09:23 +0000 Files and hashes: 1: 3137372e39312e3136342e302f32322d3235203d3e20323633343435.roa (hash: scT74f9+IGXquXgeiznfoCCJYP7gQXwCIwX0K3d7sQY=) 2: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl (hash: cCPM/8G5WbpEGCxONVbn0SY2nsGa++xi3f7B1u3wqEo=) 3: 323830343a313165303a3a2f33322d3535203d3e20323633343435.roa (hash: JY9NjnQ88soBYNRVthMyseU4hIC042l72p6YiSE2yyU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e6:c2:2b:00:60:fc:4c:87:46:0e:b9:0a:89:71:11:a7:8c:b6:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E Validity Not Before: Oct 20 02:05:23 2025 GMT Not After : Oct 21 06:09:23 2025 GMT Subject: CN=CDB49CE9FEE3FBE2A80283E3289AB0885C104F43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:45:26:7c:5a:5d:50:0d:eb:f0:a1:f8:d3:33: f4:d6:e9:7f:cd:6b:d4:ea:dd:89:bd:94:3f:62:63: 01:70:01:06:22:ba:a5:e2:85:3d:c8:07:e9:26:13: 51:88:7a:a7:d5:ef:d7:26:d6:e2:b4:26:98:c5:3c: ea:f7:36:dc:13:58:a2:ed:ce:a8:d1:ea:b5:4a:5f: b2:4d:88:57:e4:a0:a1:ce:59:b0:99:2a:d3:18:6a: 09:5d:89:38:6b:b4:a4:a2:0b:9a:75:fc:63:ff:4e: 24:2b:7a:17:55:11:45:a9:89:14:db:4e:bc:ed:60: d1:dd:88:e4:58:f6:9e:19:12:f3:2f:e3:73:ec:e0: b1:a4:95:41:da:95:93:33:cb:bf:7b:50:8a:46:db: 66:a2:1c:81:67:8f:7c:70:70:a2:1f:e7:c1:f7:47: d2:b5:be:54:c9:e5:ea:da:a9:ad:3a:cb:c7:8f:ff: 9d:e1:f7:a9:74:61:27:1d:5a:4a:08:bc:49:0b:e1: 16:b1:92:e8:94:ba:cd:9a:ee:ad:36:1c:19:58:da: 09:4b:7a:02:22:d6:bd:68:43:88:d9:df:85:6b:d8: 05:fc:4f:17:fa:b2:f0:1f:e0:f2:19:ad:19:e5:37: 8c:b3:d0:85:01:f3:9f:44:69:2d:81:55:bf:39:cc: ee:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B4:9C:E9:FE:E3:FB:E2:A8:02:83:E3:28:9A:B0:88:5C:10:4F:43 X509v3 Authority Key Identifier: keyid:4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:59:fb:3f:7b:38:c8:ae:52:e6:98:c5:01:4f:72:bd:00:9f: 07:01:9f:61:e9:56:9a:5f:2c:fb:ee:1c:00:62:54:f0:b9:f4: 3a:c4:dc:47:97:f8:19:df:f6:2d:33:4e:3a:7c:6f:54:12:d4: 71:60:12:cb:a6:99:61:eb:9d:7e:12:7d:2d:70:11:73:e2:28: dd:80:4c:00:c6:28:30:11:eb:e1:84:b9:07:3a:03:0d:f4:b0: f8:74:a3:70:1d:6a:1a:7c:83:91:d4:d1:76:54:4e:31:6c:74: 1d:93:13:88:e5:a0:53:5f:72:ba:c2:8d:0a:2e:3a:a4:cf:72: ca:b7:3e:67:12:50:16:a6:a1:19:7d:bf:2e:10:70:b3:1b:44: 01:9b:57:48:17:f1:20:7c:ec:e1:c3:fc:da:de:fd:ca:4d:4b: 63:e1:b3:60:ff:b3:33:7b:53:a4:3c:ea:c4:90:5d:76:dc:90: 85:7a:09:95:ab:88:de:40:61:b1:e5:1d:d2:f9:1f:92:d8:e8: 11:55:f2:02:5b:db:6d:86:38:a0:ea:8d:ad:49:e8:d0:4a:c7: 7a:bc:da:c6:1e:53:24:43:0a:d8:31:82:b4:5e:5b:8b:a0:69: 15:db:a1:29:23:dd:cb:90:2f:93:43:d9:b1:e7:b0:a0:c3:43: 8e:db:0c:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZObCKwBg/EyHRg65ColxEaeMtiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzRTlDRDA5RTNGNEE2OUI0MEI0NEM4QzgxNjFFMUYw MEJFMEY1RTAeFw0yNTEwMjAwMjA1MjNaFw0yNTEwMjEwNjA5MjNaMDMxMTAvBgNV BAMTKENEQjQ5Q0U5RkVFM0ZCRTJBODAyODNFMzI4OUFCMDg4NUMxMDRGNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCURSZ8Wl1QDevwofjTM/TW6X/N a9Tq3Ym9lD9iYwFwAQYiuqXihT3IB+kmE1GIeqfV79cm1uK0JpjFPOr3NtwTWKLt zqjR6rVKX7JNiFfkoKHOWbCZKtMYagldiThrtKSiC5p1/GP/TiQrehdVEUWpiRTb TrztYNHdiORY9p4ZEvMv43Ps4LGklUHalZMzy797UIpG22aiHIFnj3xwcKIf58H3 R9K1vlTJ5eraqa06y8eP/53h96l0YScdWkoIvEkL4RaxkuiUus2a7q02HBlY2glL egIi1r1oQ4jZ34Vr2AX8Txf6svAf4PIZrRnlN4yz0IUB859EaS2BVb85zO6zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzbSc6f7j++KoAoPjKJqwiFwQT0MwHwYDVR0j BBgwFoAUSz6c0J4/Smm0C0TIyBYeHwC+D14wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZE bXgvMC80QjNFOUNEMDlFM0Y0QTY5QjQwQjQ0QzhDODE2MUUxRjAwQkUwRjVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCM0U5Q0QwOUUzRjRBNjlC NDBCNDRDOEM4MTYxRTFGMDBCRTBGNUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Sjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZEbXgvMC80 QjNFOUNEMDlFM0Y0QTY5QjQwQjQ0QzhDODE2MUUxRjAwQkUwRjVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsln7P3s4yK5S5pjFAU9yvQCfBwGfYelWml8s++4cAGJU8Ln0OsTcR5f4Gd/2 LTNOOnxvVBLUcWASy6aZYeudfhJ9LXARc+Io3YBMAMYoMBHr4YS5BzoDDfSw+HSj cB1qGnyDkdTRdlROMWx0HZMTiOWgU19yusKNCi46pM9yyrc+ZxJQFqahGX2/LhBw sxtEAZtXSBfxIHzs4cP82t79yk1LY+GzYP+zM3tTpDzqxJBddtyQhXoJlauI3kBh seUd0vkfktjoEVXyAlvbbYY4oOqNrUno0ErHerzaxh5TJEMK2DGCtF5bi6BpFduh KSPdy5Avk0PZseewoMNDjtsMjg== -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:57 2025 by rpki-client