$ rpki-client -vvf rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft File: 7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft (raw, json) Hash identifier: XNWEJsF8JmebqL04URScerTfVx+cq/o1UsGwoIwHEyM= Subject key identifier: 0C:A7:6B:BC:97:89:ED:E2:4B:8B:A3:54:B4:B0:F2:E2:9F:31:EA:9C Authority key identifier: 7B:E7:B1:02:06:B5:B5:6C:0F:50:0A:1A:71:E8:2A:5C:D9:1B:CF:59 Certificate issuer: /CN=7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59 Certificate serial: 12BE42A1BC3FA2BC3CEF55D7007F8983FD3E8D0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer Subject info access: rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft Manifest number: 4E Signing time: Mon 20 Oct 2025 11:56:32 +0000 Manifest this update: Mon 20 Oct 2025 11:51:32 +0000 Manifest next update: Tue 21 Oct 2025 12:06:32 +0000 Files and hashes: 1: 34352e3137312e34342e302f32322d3332203d3e20323638373338.roa (hash: 1hfLLgPLndMHPA/uuDeQstzCTGkdyFHXJMoTMJfWJRo=) 2: 7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.crl (hash: WqucKLrK6/VG2INKKyRuhm+h2aI4hM6+N916BY/BD3E=) 3: 34352e37312e32382e302f32322d3332203d3e20323638373338.roa (hash: Hx7VZ6sTDCFaalE2SLScBc+sSPjVZs+H5AlI3gGKGWc=) 4: 323830343a353966633a3a2f33322d313238203d3e20323638373338.roa (hash: YWtnKwx3klbu9MAu6MOtd9+cJMXR/zaTU7e+i6U0BXs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.crl rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:be:42:a1:bc:3f:a2:bc:3c:ef:55:d7:00:7f:89:83:fd:3e:8d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59 Validity Not Before: Oct 20 11:51:32 2025 GMT Not After : Oct 21 12:06:32 2025 GMT Subject: CN=0CA76BBC9789EDE24B8BA354B4B0F2E29F31EA9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3d:9f:a2:bd:7c:e8:cc:6e:5f:f7:29:8d:40: 18:26:30:ab:4b:74:c1:87:3b:a0:5c:f6:6e:ca:68: 34:ef:f3:07:a5:a6:d2:a1:d2:40:8c:a5:de:dc:ef: 67:36:e4:43:e5:71:a8:4c:bd:f4:72:02:30:f0:0c: bf:10:c0:bf:8f:9e:70:b8:98:9a:82:95:76:75:f8: 26:d6:b8:3c:9a:61:f2:27:22:e2:e6:67:92:80:bb: cd:2b:1d:98:ee:ae:96:e1:28:24:24:14:12:2d:45: 78:83:24:8b:f8:c0:96:c2:ef:b7:33:57:26:48:7b: 23:c9:c3:c2:cf:7a:9d:c0:fe:f1:3a:1a:fc:e2:b3: 3b:02:ce:a1:8f:c6:63:54:e8:74:ce:08:cc:03:58: 60:02:fe:1a:c1:6f:41:4b:78:b4:c0:35:11:9a:0b: 59:fc:b1:0a:c8:7e:8e:7b:60:14:1b:c3:9b:f6:50: 70:b6:00:80:e0:88:a7:d6:9c:df:b4:52:de:45:ab: 06:6a:84:6e:26:2d:b8:b8:a5:01:a9:4c:fd:dc:22: 9b:3b:ac:f1:09:f4:e8:58:f1:18:b8:77:5d:0a:cd: 30:9f:dc:c2:e9:39:b2:e5:2a:76:d8:d1:d5:5d:cc: 7e:df:e6:37:37:47:d3:bb:51:73:89:ee:4c:67:ae: 70:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A7:6B:BC:97:89:ED:E2:4B:8B:A3:54:B4:B0:F2:E2:9F:31:EA:9C X509v3 Authority Key Identifier: keyid:7B:E7:B1:02:06:B5:B5:6C:0F:50:0A:1A:71:E8:2A:5C:D9:1B:CF:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:66:61:92:63:19:7a:35:b3:8c:ec:cd:06:c7:5a:65:1b:e2: f8:df:3c:a9:b8:56:c6:ec:6f:7e:5c:c9:d6:1b:b3:90:80:a4: d6:41:62:14:f7:08:fd:68:69:37:28:e5:50:11:f8:5f:82:35: cc:94:6c:b7:f4:a5:19:51:18:30:ce:48:c1:e7:21:ac:15:b3: 8c:0a:e5:3d:7a:1c:8b:c4:73:8b:b8:4a:da:fb:aa:ca:1b:ee: 89:ac:38:9b:74:99:b7:f7:30:c1:84:74:e3:e4:89:2c:33:fd: 7e:d5:44:26:35:f2:57:cc:63:5d:fd:9d:aa:d3:2d:00:79:3b: b7:90:75:3d:9c:2b:76:a4:91:90:f5:a2:e2:6a:36:e7:67:3f: b7:f5:bd:14:dc:bd:97:73:81:bc:5c:32:52:19:06:a4:60:ef: 8b:93:e3:d3:54:4b:68:36:68:8e:f0:6f:f6:06:7d:d6:13:7a: c3:02:1a:55:84:3f:75:db:a4:0f:9d:83:24:b0:00:28:f6:49: ff:25:d1:07:65:f8:5e:32:e8:b0:b3:c2:4e:51:d5:b7:13:e3: a6:65:66:ab:a5:0f:bd:0e:36:c3:bd:d8:88:56:7c:86:77:36: 9f:7f:18:af:88:1b:ab:26:15:7a:5f:c3:63:64:45:cd:b3:63: dd:ae:c4:47 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUEr5Cobw/orw871XXAH+Jg/0+jQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0JFN0IxMDIwNkI1QjU2QzBGNTAwQTFBNzFFODJBNUNE OTFCQ0Y1OTAeFw0yNTEwMjAxMTUxMzJaFw0yNTEwMjExMjA2MzJaMDMxMTAvBgNV BAMTKDBDQTc2QkJDOTc4OUVERTI0QjhCQTM1NEI0QjBGMkUyOUYzMUVBOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPZ+ivXzozG5f9ymNQBgmMKtL dMGHO6Bc9m7KaDTv8welptKh0kCMpd7c72c25EPlcahMvfRyAjDwDL8QwL+PnnC4 mJqClXZ1+CbWuDyaYfInIuLmZ5KAu80rHZjurpbhKCQkFBItRXiDJIv4wJbC77cz VyZIeyPJw8LPep3A/vE6GvziszsCzqGPxmNU6HTOCMwDWGAC/hrBb0FLeLTANRGa C1n8sQrIfo57YBQbw5v2UHC2AIDgiKfWnN+0Ut5FqwZqhG4mLbi4pQGpTP3cIps7 rPEJ9OhY8Ri4d10KzTCf3MLpObLlKnbY0dVdzH7f5jc3R9O7UXOJ7kxnrnCRAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUDKdrvJeJ7eJLi6NUtLDy4p8x6pwwHwYDVR0j BBgwFoAUe+exAga1tWwPUAoacegqXNkbz1kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9xWWNxNGNyemYxZEFyeW5iQXdSN2JUR0Z1N3dqNjNxQ3Jtckc2Y3VaVUJk LzAvN0JFN0IxMDIwNkI1QjU2QzBGNTAwQTFBNzFFODJBNUNEOTFCQ0Y1OS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83QkU3QjEwMjA2QjVCNTZDMEY1 MDBBMUE3MUU4MkE1Q0Q5MUJDRjU5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3FZ Y3E0Y3J6ZjFkQXJ5bmJBd1I3YlRHRnU3d2o2M3FDcm1yRzZjdVpVQmQvMC83QkU3 QjEwMjA2QjVCNTZDMEY1MDBBMUE3MUU4MkE1Q0Q5MUJDRjU5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA dmZhkmMZejWzjOzNBsdaZRvi+N88qbhWxuxvflzJ1huzkICk1kFiFPcI/WhpNyjl UBH4X4I1zJRst/SlGVEYMM5IwechrBWzjArlPXoci8Rzi7hK2vuqyhvuiaw4m3SZ t/cwwYR04+SJLDP9ftVEJjXyV8xjXf2dqtMtAHk7t5B1PZwrdqSRkPWi4mo252c/ t/W9FNy9l3OBvFwyUhkGpGDvi5Pj01RLaDZojvBv9gZ91hN6wwIaVYQ/ddukD52D JLAAKPZJ/yXRB2X4XjLosLPCTlHVtxPjpmVmq6UPvQ42w73YiFZ8hnc2n38Yr4gb qyYVel/DY2RFzbNj3a7ERw== -----END CERTIFICATE-----Generated at Mon Oct 20 16:57:53 2025 by rpki-client