$ rpki-client -vvf rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft File: 470AE1EB9714E43320F9D361336505142D7D836B.mft (raw, json) Hash identifier: LKeCVZjQ6Wenh+wke18YhrBJQrB3cesXtSXpO/vum9A= Subject key identifier: D5:68:09:3C:F4:3F:0E:99:35:00:A9:AA:B5:A9:A3:D5:66:D5:69:60 Authority key identifier: 47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B Certificate issuer: /CN=470AE1EB9714E43320F9D361336505142D7D836B Certificate serial: 119796CA6A7CAA601E4A11F835DB26D5DDD04417 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft Manifest number: B6 Signing time: Tue 04 Nov 2025 17:42:47 +0000 Manifest this update: Tue 04 Nov 2025 17:37:47 +0000 Manifest next update: Wed 05 Nov 2025 19:05:47 +0000 Files and hashes: 1: 470AE1EB9714E43320F9D361336505142D7D836B.crl (hash: XasZU1mUQMII41uX9CHhGwD2xIhhJ3iYV399Q22UeiM=) 2: 3137372e33392e39382e302f32332d3332203d3e20323731363135.roa (hash: BdLrbEU7II3NX1HsAT1F9Ah5WD1IUR9s5CyZjRaEy4Y=) 3: 3137372e33392e39362e302f32342d3332203d3e20323731363135.roa (hash: 1vyNuWE5jauLyptTokeHnfrLaNFayN+UWnzSx2Hk+eA=) 4: 323830343a376534633a3a2f33322d313238203d3e20323731363135.roa (hash: OdU9UEZt02QpSGkR3fyYMJem0AChe2we0Z/o1VOpO5k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:97:96:ca:6a:7c:aa:60:1e:4a:11:f8:35:db:26:d5:dd:d0:44:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470AE1EB9714E43320F9D361336505142D7D836B Validity Not Before: Nov 4 17:37:47 2025 GMT Not After : Nov 5 19:05:47 2025 GMT Subject: CN=D568093CF43F0E993500A9AAB5A9A3D566D56960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5b:23:0a:b4:a3:fc:c2:03:63:3b:f6:d8:27: 91:81:27:c5:ce:d9:9a:9a:af:5c:9f:c3:28:ea:f1: e2:6e:56:df:c2:aa:4c:51:59:f2:61:a9:8f:de:db: 29:d7:e6:89:7e:7e:76:91:ce:b2:44:64:f7:75:3b: 6b:5b:6f:14:05:f6:12:58:9f:06:54:c7:e7:da:88: f4:db:b0:dc:36:ce:6a:4d:49:aa:47:43:a1:da:76: 28:2f:9a:c3:f0:be:27:34:84:84:7f:0e:0a:a8:f7: a3:3e:1c:b0:94:ea:25:00:f5:66:ee:d5:e5:06:7d: d7:44:f2:7e:0b:15:22:ad:f3:96:91:47:ca:2f:c2: 2e:f7:d2:d8:59:44:dc:a3:43:95:af:a7:a3:cd:b7: 16:32:f8:42:fc:aa:1c:fe:33:42:49:70:c7:79:b6: e0:72:53:e4:31:ed:c2:a9:b3:da:95:a8:d0:ce:bb: c5:19:7c:4c:0a:e6:a3:66:b7:a7:2f:95:00:f3:90: 7a:1f:f8:e9:61:f7:e5:b1:14:48:54:d0:65:a1:0f: 5a:f4:5a:30:e7:40:53:cf:4f:f1:28:0a:d4:c9:0c: 53:6c:d1:ff:46:b9:6d:58:42:c2:5b:ff:9c:98:5b: f3:33:1e:a0:49:ae:32:1a:2c:f0:07:4f:eb:1e:10: 4c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:68:09:3C:F4:3F:0E:99:35:00:A9:AA:B5:A9:A3:D5:66:D5:69:60 X509v3 Authority Key Identifier: keyid:47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:82:cb:8a:1b:a5:ba:7f:1b:4b:42:55:b2:2d:14:9c:67:d7: 4f:d8:94:8a:c8:a0:58:7a:4b:a5:97:6f:be:39:6f:d2:2b:a1: 4c:61:4b:54:93:45:94:b5:aa:ca:43:76:0d:b5:a0:22:0a:f1: 0e:ed:9d:fe:31:91:35:a4:57:a4:42:5f:b7:76:45:f0:5e:d7: 59:05:18:6f:c8:54:fd:0d:7e:83:cf:15:5c:66:b7:17:41:e7: d8:3b:87:b7:67:78:cc:ef:4a:42:4b:3a:78:0d:00:6a:28:be: 0f:9e:15:21:0d:c9:a4:fd:8f:b9:e2:08:50:a7:42:55:a3:ec: 77:67:32:69:fb:fd:1f:90:51:d7:fe:98:7f:74:c6:a3:ec:8e: 60:73:6b:78:9b:b3:cf:50:de:d0:28:c9:d5:30:ef:5b:16:d6: 7b:af:11:59:8f:fb:15:a2:a2:f7:48:ba:79:7a:bc:aa:65:5d: ca:d4:5b:70:6c:5e:0f:f5:94:76:9f:5c:9f:b0:ea:c8:2a:3b: a0:be:e9:8a:f0:fd:c4:98:91:e4:c5:14:6b:0a:c6:c7:26:bc: a3:3c:fc:74:c2:26:13:e6:27:0c:0e:da:8d:e7:f1:e5:31:6e: 3d:43:51:17:4a:3b:f2:6d:e8:3a:b4:50:11:03:14:34:a9:b1: 42:6a:f1:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEZeWymp8qmAeShH4Ndsm1d3QRBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDcwQUUxRUI5NzE0RTQzMzIwRjlEMzYxMzM2NTA1MTQy RDdEODM2QjAeFw0yNTExMDQxNzM3NDdaFw0yNTExMDUxOTA1NDdaMDMxMTAvBgNV BAMTKEQ1NjgwOTNDRjQzRjBFOTkzNTAwQTlBQUI1QTlBM0Q1NjZENTY5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRWyMKtKP8wgNjO/bYJ5GBJ8XO 2Zqar1yfwyjq8eJuVt/CqkxRWfJhqY/e2ynX5ol+fnaRzrJEZPd1O2tbbxQF9hJY nwZUx+faiPTbsNw2zmpNSapHQ6HadigvmsPwvic0hIR/Dgqo96M+HLCU6iUA9Wbu 1eUGfddE8n4LFSKt85aRR8ovwi730thZRNyjQ5Wvp6PNtxYy+EL8qhz+M0JJcMd5 tuByU+Qx7cKps9qVqNDOu8UZfEwK5qNmt6cvlQDzkHof+Olh9+WxFEhU0GWhD1r0 WjDnQFPPT/EoCtTJDFNs0f9GuW1YQsJb/5yYW/MzHqBJrjIaLPAHT+seEEyXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1WgJPPQ/Dpk1AKmqtamj1WbVaWAwHwYDVR0j BBgwFoAURwrh65cU5DMg+dNhM2UFFC19g2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dv THcvMC80NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3MEFFMUVCOTcxNEU0MzMy MEY5RDM2MTMzNjUwNTE0MkQ3RDgzNkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dvTHcvMC80 NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACoLLihulun8bS0JVsi0UnGfXT9iUisigWHpLpZdvvjlv0iuhTGFLVJNFlLWq ykN2DbWgIgrxDu2d/jGRNaRXpEJft3ZF8F7XWQUYb8hU/Q1+g88VXGa3F0Hn2DuH t2d4zO9KQks6eA0Aaii+D54VIQ3JpP2PueIIUKdCVaPsd2cyafv9H5BR1/6Yf3TG o+yOYHNreJuzz1De0CjJ1TDvWxbWe68RWY/7FaKi90i6eXq8qmVdytRbcGxeD/WU dp9cn7DqyCo7oL7pivD9xJiR5MUUawrGxya8ozz8dMImE+YnDA7ajefx5TFuPUNR F0o78m3oOrRQEQMUNKmxQmrxvg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:03 2025 by rpki-client