$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft File: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft (raw, json) Hash identifier: lAyyJKImZtXhdxCfv+O2MoWKZQNA9to0sLFnJZ9KZvI= Subject key identifier: 81:7E:98:72:83:5D:D4:59:E1:54:97:86:B4:7E:AB:23:F5:59:8C:A0 Authority key identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 Certificate issuer: /CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Certificate serial: 44250E16A0802A3A451EB7E60247A8FA3DDBFF93 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject info access: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft Manifest number: 0172 Signing time: Mon 20 Oct 2025 01:54:44 +0000 Manifest this update: Mon 20 Oct 2025 01:49:44 +0000 Manifest next update: Tue 21 Oct 2025 05:07:44 +0000 Files and hashes: 1: 3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa (hash: fxTpR6kGjpzHUi4HM+ey62/lxDfVFp1Mya/83PptAgs=) 2: 323830343a316137633a3a2f33322d3334203d3e203631383632.roa (hash: TJaA5xEZrkse1eozPtBQZAtjZj6iE5o4CDiRrM/8CKc=) 3: 3230312e3135302e3132302e302f32322d3234203d3e203631383632.roa (hash: N7pBzAqFHQXwjW/KS0P1VsU5DUXI/b+mnSTAPuK/6eo=) 4: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl (hash: OAHCLPuZ5aZyGa+ZtozWGKtwZFMCNIjXh2UInXpvkYI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 05:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:25:0e:16:a0:80:2a:3a:45:1e:b7:e6:02:47:a8:fa:3d:db:ff:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Validity Not Before: Oct 20 01:49:44 2025 GMT Not After : Oct 21 05:07:44 2025 GMT Subject: CN=817E9872835DD459E1549786B47EAB23F5598CA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2e:c4:76:57:2b:87:ef:b2:ea:6d:5b:8c:8f: 3a:f9:88:94:ab:f9:8c:6c:bf:52:5c:f6:51:41:a8: 43:1b:9a:f8:aa:3b:ab:96:45:a1:a6:15:1f:98:8b: a5:36:9a:a4:e4:fa:6e:24:97:1d:6e:f4:4b:7e:03: dc:9d:3d:ad:b5:4b:ff:f1:35:b8:7f:f1:22:f1:98: d4:a7:a0:9d:02:20:00:01:77:72:5e:6d:ab:36:9e: 1c:85:04:3c:bb:79:b3:fb:7f:15:b3:b3:09:67:dc: 18:e1:12:93:21:17:a3:c3:20:0f:c2:0a:40:83:0d: c4:01:f0:8e:62:45:6f:2c:29:c2:07:89:92:86:da: a4:bc:d2:12:2b:fe:92:4a:c3:2d:c3:28:63:bb:39: f2:44:b0:33:27:dc:c5:e4:45:8d:b1:a2:a7:fa:91: bc:1d:db:c7:ad:e6:f1:09:fb:06:cd:25:f9:84:d1: 9e:39:aa:e2:2a:8b:9e:87:d4:bd:ca:ed:fb:ca:9a: 34:c0:c6:bf:2b:28:83:b8:ff:0a:38:03:46:3c:01: f7:af:1b:fa:83:7f:22:a5:e8:8b:65:df:a4:f8:45: 64:eb:8b:db:12:17:64:10:64:c5:33:74:a7:5a:aa: 07:60:97:07:be:e4:ea:f9:4e:a8:a3:ed:aa:63:ee: 4a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7E:98:72:83:5D:D4:59:E1:54:97:86:B4:7E:AB:23:F5:59:8C:A0 X509v3 Authority Key Identifier: keyid:4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e2:09:01:04:2c:78:e9:0b:99:62:33:fb:cc:86:be:0b:ab: 2b:60:af:22:4d:65:65:f2:fe:40:a3:f5:cb:44:ff:26:77:ef: b7:14:30:d6:c3:25:80:67:a8:0f:0c:91:83:72:c9:1a:9b:a5: 24:96:d1:a4:d1:cd:ad:81:de:ce:eb:66:1e:9a:67:be:4d:b0: dc:eb:3a:98:ac:90:c3:7a:f0:7a:bd:6d:44:0a:80:2d:94:10: d3:dd:a9:20:08:09:fb:70:67:71:b9:e1:99:23:d0:46:4e:b2: f6:8e:74:7e:c7:60:9d:d7:46:9a:3f:8d:4c:aa:06:80:56:01: 6a:f9:64:61:9a:33:e8:dd:63:35:ec:00:01:a0:f9:64:17:f6: 73:e2:95:c7:95:8b:56:ea:dc:46:24:f7:91:1b:a3:13:a8:cd: 12:d2:e7:7e:07:6b:69:08:95:7e:14:01:32:53:a8:02:a0:2c: 12:c7:5c:04:8b:a3:35:52:2a:3c:be:1b:93:20:78:33:2e:f9: 3b:9d:8b:3b:66:42:cc:a4:f7:b5:6d:9c:72:92:2e:84:b4:75: 59:c8:c5:03:5d:55:a4:4a:7b:dd:66:3f:47:82:37:ac:ca:df: 03:e1:c8:26:f6:e9:2b:62:95:ca:60:41:a6:51:08:df:07:ef: 0a:d4:d0:64 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIURCUOFqCAKjpFHrfmAkeo+j3b/5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlF NTMwNjM1NTAeFw0yNTEwMjAwMTQ5NDRaFw0yNTEwMjEwNTA3NDRaMDMxMTAvBgNV BAMTKDgxN0U5ODcyODM1REQ0NTlFMTU0OTc4NkI0N0VBQjIzRjU1OThDQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdLsR2VyuH77LqbVuMjzr5iJSr +Yxsv1Jc9lFBqEMbmviqO6uWRaGmFR+Yi6U2mqTk+m4klx1u9Et+A9ydPa21S//x Nbh/8SLxmNSnoJ0CIAABd3Jebas2nhyFBDy7ebP7fxWzswln3BjhEpMhF6PDIA/C CkCDDcQB8I5iRW8sKcIHiZKG2qS80hIr/pJKwy3DKGO7OfJEsDMn3MXkRY2xoqf6 kbwd28et5vEJ+wbNJfmE0Z45quIqi56H1L3K7fvKmjTAxr8rKIO4/wo4A0Y8Afev G/qDfyKl6Itl36T4RWTri9sSF2QQZMUzdKdaqgdglwe+5Or5Tqij7apj7kqvAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUgX6YcoNd1FnhVJeGtH6rI/VZjKAwHwYDVR0j BBgwFoAUS4CyC9dA34r88PjFpv64ueUwY1UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9Tb2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNz LzAvNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlFNTMwNjM1NS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjgwQjIwQkQ3NDBERjhBRkNG MEY4QzVBNkZFQjhCOUU1MzA2MzU1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1Nv aHZqRkhLWHBwa05RazdRYnF5ZWpONWZQa1oyY0dyUDQ5cjZ1QVF2Y3MvMC80Qjgw QjIwQkQ3NDBERjhBRkNGMEY4QzVBNkZFQjhCOUU1MzA2MzU1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA fuIJAQQseOkLmWIz+8yGvgurK2CvIk1lZfL+QKP1y0T/JnfvtxQw1sMlgGeoDwyR g3LJGpulJJbRpNHNrYHezutmHppnvk2w3Os6mKyQw3rwer1tRAqALZQQ092pIAgJ +3BncbnhmSPQRk6y9o50fsdgnddGmj+NTKoGgFYBavlkYZoz6N1jNewAAaD5ZBf2 c+KVx5WLVurcRiT3kRujE6jNEtLnfgdraQiVfhQBMlOoAqAsEsdcBIujNVIqPL4b kyB4My75O52LO2ZCzKT3tW2ccpIuhLR1WcjFA11VpEp73WY/R4I3rMrfA+HIJvbp K2KVymBBplEI3wfvCtTQZA== -----END CERTIFICATE-----Generated at Mon Oct 20 19:12:48 2025 by rpki-client