$ rpki-client -vvf rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft File: 4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft (raw, json) Hash identifier: hrwV6YB8/Zi+/wgED5mJh3ChbNjf638MEIYveruDCiA= Subject key identifier: 9A:8F:67:99:A7:D1:4F:EF:D8:E1:32:6E:2E:DF:61:A8:AF:CE:23:97 Authority key identifier: 4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4 Certificate issuer: /CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4 Certificate serial: 5F57A308C74DF94574A7B2E021108A9447984188 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer Subject info access: rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft Manifest number: B0 Signing time: Mon 20 Oct 2025 00:46:44 +0000 Manifest this update: Mon 20 Oct 2025 00:41:44 +0000 Manifest next update: Tue 21 Oct 2025 03:21:44 +0000 Files and hashes: 1: 4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl (hash: MHm5lNmz5WaVPcrZjdnZb/fsY/LThhAWwxmQLrtb7DI=) 2: 3136382e3139362e3231362e302f32322d3234203d3e20323635343733.roa (hash: fPsx4d62UPQm+f5HlAHqo78FphvrRmReo6la1d77pLU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:57:a3:08:c7:4d:f9:45:74:a7:b2:e0:21:10:8a:94:47:98:41:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4 Validity Not Before: Oct 20 00:41:44 2025 GMT Not After : Oct 21 03:21:44 2025 GMT Subject: CN=9A8F6799A7D14FEFD8E1326E2EDF61A8AFCE2397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:8a:ce:f9:4e:b8:9c:d0:0d:a6:65:dc:45: 78:ab:95:4f:20:5f:92:9f:b7:af:68:25:8c:7b:8e: 00:58:b1:29:11:06:e9:9a:16:e5:42:d6:b9:52:55: 33:e3:09:38:fa:09:56:67:9f:d7:20:b5:57:f6:23: ea:c8:7f:84:ce:17:b6:91:97:18:cd:b1:c0:be:36: 98:e3:fe:41:72:25:fe:d2:ed:76:66:a0:08:2d:f8: ce:3d:35:d7:a6:8b:a7:af:45:97:de:36:f9:d5:2e: 28:6b:c4:fb:ac:f9:e6:21:c3:be:df:2b:09:14:bb: 78:44:54:e3:bd:c5:1d:09:52:bf:0b:46:d9:c2:5c: 0d:1e:10:23:51:e4:b4:4a:a5:9a:b2:77:9d:25:58: f5:52:b9:4a:92:79:c9:07:87:85:06:49:d2:c4:30: a7:a9:1e:22:4f:f6:b1:56:f0:e0:5b:58:3c:cc:c0: 26:c4:26:ca:aa:47:3a:59:cd:0a:be:8a:18:a3:a3: 38:c8:e6:88:22:95:a5:99:d2:1b:00:b2:6f:4e:5b: a7:74:3a:c5:4b:d7:69:75:11:90:b9:61:6c:5e:27: fc:1b:a0:c8:72:59:2c:25:d2:46:28:2d:ad:89:ad: b4:f2:2c:cc:7f:ee:91:99:25:0a:d3:51:6b:70:c0: 3b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8F:67:99:A7:D1:4F:EF:D8:E1:32:6E:2E:DF:61:A8:AF:CE:23:97 X509v3 Authority Key Identifier: keyid:4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:08:ba:46:96:39:04:98:7f:89:c6:31:2c:67:58:ce:66:7a: 7c:64:cf:d2:be:8d:da:4c:31:f4:a6:ee:b0:53:18:11:1d:0d: 19:11:59:96:7f:a1:91:b6:63:d2:65:de:9a:16:b4:87:d5:6d: 73:b1:84:c9:7d:a9:53:e5:58:41:cb:f3:fd:1a:6e:6e:51:6b: 33:9b:e9:d7:70:54:b0:5f:2b:19:33:7a:b9:84:2d:a7:ae:db: 99:0d:0e:87:19:ea:bd:38:a8:e5:f2:de:a8:da:09:6d:4a:1a: 28:fd:aa:a7:12:a3:66:4c:db:85:1e:84:c8:8c:a1:79:f3:8e: 95:3f:8c:da:21:fa:69:fb:2c:51:f7:c6:17:82:1d:19:45:97: f5:48:b0:7b:67:14:17:a1:51:dc:1c:48:ad:dd:36:12:ff:3e: ea:ec:5b:cd:e0:b6:4a:03:a1:33:99:01:90:eb:9f:21:a1:f5: 08:34:24:bb:32:74:a9:8f:45:f9:21:09:b9:d2:63:91:11:1d: 73:c5:74:ae:a2:2b:25:34:e1:57:86:1e:f1:8f:98:bd:ee:d7: 7d:50:c8:ac:92:63:dc:3c:3d:f0:4b:d5:76:63:66:38:2c:ec: 75:7c:1e:5f:d7:5b:24:d7:d6:2e:55:c5:95:5f:83:0b:ec:e2: 89:32:42:64 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUX1ejCMdN+UV0p7LgIRCKlEeYQYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVGMDdENTE0QkExRDZCMkZCREE2QzREQzM2MEJFQjc1 MEQzQzlDNDAeFw0yNTEwMjAwMDQxNDRaFw0yNTEwMjEwMzIxNDRaMDMxMTAvBgNV BAMTKDlBOEY2Nzk5QTdEMTRGRUZEOEUxMzI2RTJFREY2MUE4QUZDRTIzOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7v4rO+U64nNANpmXcRXirlU8g X5Kft69oJYx7jgBYsSkRBumaFuVC1rlSVTPjCTj6CVZnn9cgtVf2I+rIf4TOF7aR lxjNscC+Npjj/kFyJf7S7XZmoAgt+M49Ndemi6evRZfeNvnVLihrxPus+eYhw77f KwkUu3hEVOO9xR0JUr8LRtnCXA0eECNR5LRKpZqyd50lWPVSuUqSeckHh4UGSdLE MKepHiJP9rFW8OBbWDzMwCbEJsqqRzpZzQq+ihijozjI5ogilaWZ0hsAsm9OW6d0 OsVL12l1EZC5YWxeJ/wboMhyWSwl0kYoLa2JrbTyLMx/7pGZJQrTUWtwwDvHAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUmo9nmafRT+/Y4TJuLt9hqK/OI5cwHwYDVR0j BBgwFoAUTvB9UUuh1rL72mxNw2C+t1DTycQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YemFHSkM0bTRCWXgyb21abkszdFo4cFV6R0NZR1NVblFkdm0xUUZMeVZz LzAvNEVGMDdENTE0QkExRDZCMkZCREE2QzREQzM2MEJFQjc1MEQzQzlDNC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80RUYwN0Q1MTRCQTFENkIyRkJE QTZDNERDMzYwQkVCNzUwRDNDOUM0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1h6 YUdKQzRtNEJZeDJvbVpuSzN0WjhwVXpHQ1lHU1VuUWR2bTFRRkx5VnMvMC80RUYw N0Q1MTRCQTFENkIyRkJEQTZDNERDMzYwQkVCNzUwRDNDOUM0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA qgi6RpY5BJh/icYxLGdYzmZ6fGTP0r6N2kwx9KbusFMYER0NGRFZln+hkbZj0mXe mha0h9Vtc7GEyX2pU+VYQcvz/RpublFrM5vp13BUsF8rGTN6uYQtp67bmQ0Ohxnq vTio5fLeqNoJbUoaKP2qpxKjZkzbhR6EyIyhefOOlT+M2iH6afssUffGF4IdGUWX 9Uiwe2cUF6FR3BxIrd02Ev8+6uxbzeC2SgOhM5kBkOufIaH1CDQkuzJ0qY9F+SEJ udJjkREdc8V0rqIrJTThV4Ye8Y+Yve7XfVDIrJJj3Dw98EvVdmNmOCzsdXweX9db JNfWLlXFlV+DC+ziiTJCZA== -----END CERTIFICATE-----Generated at Mon Oct 20 09:32:22 2025 by rpki-client