$ rpki-client -vvf rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft File: 1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft (raw, json) Hash identifier: YS1/aGao7FM56M+ktknfbZqgTGlfjM3zCA9TP603BAc= Subject key identifier: 40:6E:95:6F:D9:8A:17:1C:33:F9:8F:CA:08:CA:A0:09:B4:27:11:5C Authority key identifier: 1A:38:4B:FA:88:60:D5:3A:BC:ED:BC:8A:91:B3:7A:97:2B:89:18:1B Certificate issuer: /CN=1A384BFA8860D53ABCEDBC8A91B37A972B89181B Certificate serial: 1564ACEE9772E547D07DA29EDE23A474BD3AFFE8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer Subject info access: rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft Manifest number: 44 Signing time: Mon 20 Oct 2025 08:26:55 +0000 Manifest this update: Mon 20 Oct 2025 08:21:55 +0000 Manifest next update: Tue 21 Oct 2025 11:44:55 +0000 Files and hashes: 1: 3139302e382e3136302e302f32322d3332203d3e20323730363138.roa (hash: NFOlwNRCMdO9B97BInd7TuPA7qaYKAf/pG9TnCSjm5w=) 2: 1A384BFA8860D53ABCEDBC8A91B37A972B89181B.crl (hash: OwTdTRuLfMIjPKw3Rv/VdF50VBEobiyuyCcst1qsnF8=) 3: 323830343a366563383a3a2f33322d313238203d3e20323730363138.roa (hash: x87eBH+DzA1bwStUsY3ov3cCPNX6b/Fmr9pOc9L8pws=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.crl rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:64:ac:ee:97:72:e5:47:d0:7d:a2:9e:de:23:a4:74:bd:3a:ff:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A384BFA8860D53ABCEDBC8A91B37A972B89181B Validity Not Before: Oct 20 08:21:55 2025 GMT Not After : Oct 21 11:44:55 2025 GMT Subject: CN=406E956FD98A171C33F98FCA08CAA009B427115C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:23:e4:e4:ac:a9:1d:9d:c2:0f:41:7f:d2:39: 79:b3:fa:da:15:43:82:98:80:29:4a:34:76:22:6f: e5:bd:7a:97:b9:b5:29:1a:3e:bc:ad:cf:7b:33:7c: 1c:63:13:fc:5b:4b:a1:42:2b:a0:83:90:f3:20:20: 77:26:35:c6:50:a3:9f:42:f9:53:a7:b8:4d:fe:3d: 92:5c:3d:d5:0b:e1:4f:79:09:40:cc:ea:44:b8:47: 7a:b0:41:c4:51:33:5e:53:14:13:71:f1:5d:21:a2: 4f:b0:d5:db:b0:9f:42:36:74:11:21:2e:e4:4e:e0: 77:4e:0c:b4:eb:3e:ff:89:49:65:dc:69:56:3b:cb: 81:5a:e3:05:9b:6d:b8:c9:ae:f9:e2:11:cb:80:5a: df:13:5f:84:2f:37:81:ad:7b:4c:64:f6:8c:ba:59: 14:9f:79:ec:10:8f:2f:1d:a6:b1:17:5f:59:38:d2: 81:a6:d2:e9:bd:a5:03:aa:3b:20:a6:ca:99:cc:97: dd:fa:6b:4d:23:e4:6f:7a:b9:f8:4c:7f:8a:f9:7d: b7:a9:3c:d6:98:22:0e:8c:28:d5:d8:5c:88:9d:92: f9:cb:93:85:e2:f0:51:5a:87:bd:8e:01:c6:f2:7b: 0c:e7:a4:4c:b8:d6:1d:9c:cf:f0:43:1a:37:53:43: e4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6E:95:6F:D9:8A:17:1C:33:F9:8F:CA:08:CA:A0:09:B4:27:11:5C X509v3 Authority Key Identifier: keyid:1A:38:4B:FA:88:60:D5:3A:BC:ED:BC:8A:91:B3:7A:97:2B:89:18:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6d:26:05:f3:01:0e:57:f4:1e:71:08:49:4b:88:e4:20:66: 4c:3e:5d:27:bc:a5:b7:f2:cf:75:a7:96:22:9d:bf:b3:25:fd: f4:ba:57:be:c8:41:42:f5:66:c6:2f:b2:bf:42:f5:f7:2e:5d: f8:09:ee:71:6b:f5:dd:df:61:c5:d5:03:a6:33:9a:de:52:3e: b0:e4:0a:3c:5c:e2:27:82:80:67:96:db:94:8c:ac:65:f9:02: ff:aa:83:d4:26:00:52:13:6d:c9:96:30:b8:d9:96:bb:e0:5e: a6:67:a9:51:21:12:18:5e:fe:24:b0:10:da:48:f0:64:e2:1e: 18:22:c9:64:15:35:72:01:c1:cb:43:0b:51:59:c7:4d:8c:60: de:ab:b7:5c:da:f8:61:40:a9:83:01:e4:00:53:1a:18:de:c4: c8:19:22:38:f4:b0:d7:6d:4a:0d:75:d6:30:41:76:7c:56:99: 01:c8:b6:53:b4:3f:f0:e9:ab:0a:cc:f4:af:b4:11:c1:7a:03: 5e:af:81:8f:0a:53:ca:7f:f3:09:54:66:b2:f5:77:00:08:ea: d9:5d:16:58:9f:32:98:d4:f6:93:2d:aa:60:76:29:fe:7e:c6: 49:9e:28:cf:31:63:82:a4:d0:16:b6:54:70:4a:92:d3:7f:08: 1b:6c:23:02 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUFWSs7pdy5UfQfaKe3iOkdL06/+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzODRCRkE4ODYwRDUzQUJDRURCQzhBOTFCMzdBOTcy Qjg5MTgxQjAeFw0yNTEwMjAwODIxNTVaFw0yNTEwMjExMTQ0NTVaMDMxMTAvBgNV BAMTKDQwNkU5NTZGRDk4QTE3MUMzM0Y5OEZDQTA4Q0FBMDA5QjQyNzExNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqI+TkrKkdncIPQX/SOXmz+toV Q4KYgClKNHYib+W9epe5tSkaPrytz3szfBxjE/xbS6FCK6CDkPMgIHcmNcZQo59C +VOnuE3+PZJcPdUL4U95CUDM6kS4R3qwQcRRM15TFBNx8V0hok+w1duwn0I2dBEh LuRO4HdODLTrPv+JSWXcaVY7y4Fa4wWbbbjJrvniEcuAWt8TX4QvN4Gte0xk9oy6 WRSfeewQjy8dprEXX1k40oGm0um9pQOqOyCmypnMl936a00j5G96ufhMf4r5fbep PNaYIg6MKNXYXIidkvnLk4Xi8FFah72OAcbyewznpEy41h2cz/BDGjdTQ+QLAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUQG6Vb9mKFxwz+Y/KCMqgCbQnEVwwHwYDVR0j BBgwFoAUGjhL+ohg1Tq87byKkbN6lyuJGBswDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9taEdFSEVvRlRGZTNOY2NVRkY0M3pBaTFBcEhqN2VXQ3Y1cmJheVkzQlNa LzEvMUEzODRCRkE4ODYwRDUzQUJDRURCQzhBOTFCMzdBOTcyQjg5MTgxQi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xQTM4NEJGQTg4NjBENTNBQkNF REJDOEE5MUIzN0E5NzJCODkxODFCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL21o R0VIRW9GVEZlM05jY1VGRjQzekFpMUFwSGo3ZVdDdjVyYmF5WTNCU1ovMS8xQTM4 NEJGQTg4NjBENTNBQkNFREJDOEE5MUIzN0E5NzJCODkxODFCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA i20mBfMBDlf0HnEISUuI5CBmTD5dJ7ylt/LPdaeWIp2/syX99LpXvshBQvVmxi+y v0L19y5d+AnucWv13d9hxdUDpjOa3lI+sOQKPFziJ4KAZ5bblIysZfkC/6qD1CYA UhNtyZYwuNmWu+BepmepUSESGF7+JLAQ2kjwZOIeGCLJZBU1cgHBy0MLUVnHTYxg 3qu3XNr4YUCpgwHkAFMaGN7EyBkiOPSw121KDXXWMEF2fFaZAci2U7Q/8OmrCsz0 r7QRwXoDXq+BjwpTyn/zCVRmsvV3AAjq2V0WWJ8ymNT2ky2qYHYp/n7GSZ4ozzFj gqTQFrZUcEqS038IG2wjAg== -----END CERTIFICATE-----Generated at Mon Oct 20 13:00:57 2025 by rpki-client