$ rpki-client -vvf rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.mft File: 4BFCE5FC9A3645DB029C80D748212328591F7EC7.mft (raw, json) Hash identifier: dysx/Q46/Ax4Ja4D+otBijUyJ/xo0DYUbjoH7aNVi6k= Subject key identifier: 09:AF:3E:10:98:3C:BB:25:E7:25:B6:3E:FE:21:07:F5:5C:A4:E2:FC Authority key identifier: 4B:FC:E5:FC:9A:36:45:DB:02:9C:80:D7:48:21:23:28:59:1F:7E:C7 Certificate issuer: /CN=4BFCE5FC9A3645DB029C80D748212328591F7EC7 Certificate serial: 3FB78E34BE10E190C8AA046F38F9D32F66B2F01C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCE5FC9A3645DB029C80D748212328591F7EC7.cer Subject info access: rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.mft Manifest number: 2C Signing time: Tue 04 Nov 2025 23:06:53 +0000 Manifest this update: Tue 04 Nov 2025 23:01:53 +0000 Manifest next update: Wed 05 Nov 2025 23:47:53 +0000 Files and hashes: 1: 4BFCE5FC9A3645DB029C80D748212328591F7EC7.crl (hash: 3/0nMvrmX6qjgh+l3VGq+zlZhNRg+h5Vak6XQLN5Fg4=) 2: 3137392e34382e3133392e302f32342d3234203d3e20323732323031.roa (hash: SeV8cj8cukqegcvLW5DdE77K1OGxpztmdS5rTw/whwI=) 3: 323830343a383337633a3a2f33332d3333203d3e20323732323031.roa (hash: ++2LIdnH40IAkrTxkDaokLEKVnE5dtYjBRStGMrWkZo=) 4: 323830343a383337633a3a2f33322d3332203d3e20323732323031.roa (hash: Q3YEtRo3xkXexNJe8+W+KK+do/HA/hyNxTXledKmbKg=) 5: 323830343a383337633a383030303a3a2f33332d3333203d3e20323732323031.roa (hash: 9XDoAfm7De4sDyoh39gcI5DxhojffFWqbroXJEpqWvU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.crl rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCE5FC9A3645DB029C80D748212328591F7EC7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 23:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b7:8e:34:be:10:e1:90:c8:aa:04:6f:38:f9:d3:2f:66:b2:f0:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BFCE5FC9A3645DB029C80D748212328591F7EC7 Validity Not Before: Nov 4 23:01:53 2025 GMT Not After : Nov 5 23:47:53 2025 GMT Subject: CN=09AF3E10983CBB25E725B63EFE2107F55CA4E2FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0d:f3:6d:2f:34:7f:1e:d9:5a:99:3f:d9:48: bc:c8:04:11:a9:c6:ca:23:6e:75:40:cb:ab:85:50: 85:b8:fc:d5:0e:76:2d:1f:70:0a:35:9e:65:08:ee: 46:89:ac:68:af:20:65:53:fd:3f:8b:e8:a0:cd:7a: 1b:a7:94:e2:2c:f0:42:2a:59:ca:cc:10:50:93:53: 77:50:86:02:15:85:47:a2:9b:74:d7:27:58:45:98: 97:57:94:48:92:9b:cd:09:63:53:b2:b4:e8:35:05: 9f:44:df:ec:6f:9d:6a:93:2a:9d:2d:fc:ed:26:c5: 94:dd:0a:25:2f:c7:02:c6:08:a3:7d:f2:d7:f0:59: 24:3d:e5:cf:77:34:d8:44:85:a4:eb:c7:1d:02:7e: 76:10:f0:2b:bf:14:2d:19:81:6f:3d:a0:6f:3a:c0: a4:ba:91:83:8e:95:84:b9:3d:55:b9:7e:ff:66:e0: 4d:bb:d2:4f:85:2a:90:96:5a:9e:13:c8:c9:b4:84: bf:b5:90:0c:b2:7f:53:d4:c2:5c:f0:93:bd:62:9c: e0:fc:f5:98:c0:ac:f1:14:33:32:02:6b:7b:91:bc: 55:ab:93:39:1e:e8:d8:cb:a5:0c:25:7b:e9:6a:42: 62:01:b5:da:f0:a5:06:85:70:a6:30:c9:d9:5a:84: 82:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AF:3E:10:98:3C:BB:25:E7:25:B6:3E:FE:21:07:F5:5C:A4:E2:FC X509v3 Authority Key Identifier: keyid:4B:FC:E5:FC:9A:36:45:DB:02:9C:80:D7:48:21:23:28:59:1F:7E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCE5FC9A3645DB029C80D748212328591F7EC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f5:3b:89:0f:85:69:84:40:cc:39:fd:51:30:8a:30:10:2b: 80:05:f5:d6:82:36:ea:b1:17:aa:a3:f7:65:74:d3:8f:91:bc: 22:a1:48:ce:41:b1:50:40:73:77:56:a6:33:0e:88:37:d5:78: 61:a3:cd:36:ae:1f:da:27:9e:a2:2a:d7:87:d2:4e:ee:1c:b9: 8b:09:ce:59:9c:4f:e7:ae:98:ed:10:75:cc:70:9b:e5:1e:4e: 3a:cb:44:71:3a:fe:a5:fe:12:5d:a0:c2:d0:04:09:e1:39:5e: 37:0a:fb:2d:0b:8e:c6:24:09:36:8b:b9:73:65:2b:69:9b:2d: 88:f8:09:47:59:26:6a:dc:db:94:34:e8:5c:29:56:2f:df:90: e0:20:03:d7:6c:a7:fd:2f:2f:6e:78:71:1f:ff:85:d0:f4:a2: f2:00:b9:79:89:fc:cb:a2:7a:23:89:f0:6f:c6:e5:ef:95:69: 76:3a:54:43:aa:e2:28:9f:52:a8:93:43:83:62:8d:f6:38:f7: 76:28:52:bd:08:bd:8b:79:a4:77:01:bc:da:c3:6b:fd:99:94: 7f:9d:85:bc:9d:0b:73:98:06:62:55:ad:c7:fe:d3:59:cd:84: 3a:68:8a:eb:84:e9:64:dd:23:53:6a:a4:28:aa:69:81:8c:89: 55:4b:7e:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP7eONL4Q4ZDIqgRvOPnTL2ay8BwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGQ0U1RkM5QTM2NDVEQjAyOUM4MEQ3NDgyMTIzMjg1 OTFGN0VDNzAeFw0yNTExMDQyMzAxNTNaFw0yNTExMDUyMzQ3NTNaMDMxMTAvBgNV BAMTKDA5QUYzRTEwOTgzQ0JCMjVFNzI1QjYzRUZFMjEwN0Y1NUNBNEUyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbDfNtLzR/HtlamT/ZSLzIBBGp xsojbnVAy6uFUIW4/NUOdi0fcAo1nmUI7kaJrGivIGVT/T+L6KDNehunlOIs8EIq WcrMEFCTU3dQhgIVhUeim3TXJ1hFmJdXlEiSm80JY1OytOg1BZ9E3+xvnWqTKp0t /O0mxZTdCiUvxwLGCKN98tfwWSQ95c93NNhEhaTrxx0CfnYQ8Cu/FC0ZgW89oG86 wKS6kYOOlYS5PVW5fv9m4E270k+FKpCWWp4TyMm0hL+1kAyyf1PUwlzwk71inOD8 9ZjArPEUMzICa3uRvFWrkzke6NjLpQwle+lqQmIBtdrwpQaFcKYwydlahIIVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCa8+EJg8uyXnJbY+/iEH9Vyk4vwwHwYDVR0j BBgwFoAUS/zl/Jo2RdsCnIDXSCEjKFkffscwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2VzWFJIa2d5R3BmaHdjd2hxYU1WdUJLaDhSTjlMVEhxaGkxVkZCdTVR NlEvMC80QkZDRTVGQzlBMzY0NURCMDI5QzgwRDc0ODIxMjMyODU5MUY3RUM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCRkNFNUZDOUEzNjQ1REIw MjlDODBENzQ4MjEyMzI4NTkxRjdFQzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2VzWFJIa2d5R3BmaHdjd2hxYU1WdUJLaDhSTjlMVEhxaGkxVkZCdTVRNlEvMC80 QkZDRTVGQzlBMzY0NURCMDI5QzgwRDc0ODIxMjMyODU5MUY3RUM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGvU7iQ+FaYRAzDn9UTCKMBArgAX11oI26rEXqqP3ZXTTj5G8IqFIzkGxUEBz d1amMw6IN9V4YaPNNq4f2ieeoirXh9JO7hy5iwnOWZxP566Y7RB1zHCb5R5OOstE cTr+pf4SXaDC0AQJ4TleNwr7LQuOxiQJNou5c2UraZstiPgJR1kmatzblDToXClW L9+Q4CAD12yn/S8vbnhxH/+F0PSi8gC5eYn8y6J6I4nwb8bl75VpdjpUQ6riKJ9S qJNDg2KN9jj3dihSvQi9i3mkdwG82sNr/ZmUf52FvJ0Lc5gGYlWtx/7TWc2EOmiK 64TpZN0jU2qkKKppgYyJVUt+wQ== -----END CERTIFICATE-----Generated at Wed Nov 5 04:07:18 2025 by rpki-client