$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft File: 00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft (raw, json) Hash identifier: qxWc8+dYA8EKEKhk8l+/xudgZluV2k6v5JHiX5fcFrg= Subject key identifier: B4:55:9E:11:AE:6A:D2:93:E4:DF:4E:1C:07:B9:96:57:87:0F:63:8D Authority key identifier: 00:AA:5B:85:77:C0:69:7C:84:43:75:D4:EF:44:00:A3:7F:A7:FA:18 Certificate issuer: /CN=00AA5B8577C0697C844375D4EF4400A37FA7FA18 Certificate serial: 1EE9DE0638B3C5CEFB5E8D3864B47E78567565EC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft Manifest number: 4B Signing time: Tue 04 Nov 2025 08:22:02 +0000 Manifest this update: Tue 04 Nov 2025 08:17:02 +0000 Manifest next update: Wed 05 Nov 2025 09:30:02 +0000 Files and hashes: 1: 3138392e37362e3230382e302f32302d3332203d3e203238333630.roa (hash: EcLvYJ5xXNXY5gIzb1pkz+/2vmLJCwdKtVpNSXjcukQ=) 2: 3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa (hash: BMY+x9x6EPiDqvs4O5YjGOp4Ob0vxL21fEmA76rw7CE=) 3: 00AA5B8577C0697C844375D4EF4400A37FA7FA18.crl (hash: DM7u1IIlGrCDbOMp2T8FnR1r3FxvhaOaSx/IDDors7o=) 4: 3138392e37362e3232342e302f32302d3332203d3e203238333630.roa (hash: R1Zal9MMCa3HpUf3nNLECiokSOkKFmvMggF0dTHKrfU=) 5: 3137372e382e302e302f31392d3332203d3e203238333630.roa (hash: q2MM6gW+szcX2JkOtewWGLVXtIPye4Uedtw9vSocUTw=) 6: 3133382e39342e382e302f32322d3332203d3e203238333630.roa (hash: qVFu16WURJiIjC5/CAUBfP8XkesupOfzx1EfYvhtmoU=) 7: 323830343a31343a3a2f33322d313238203d3e203238333630.roa (hash: Y6yxr1t2ucquhWthqdIZlHIrK+C1q9ZqzNpWy5p7+84=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.crl rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 09:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e9:de:06:38:b3:c5:ce:fb:5e:8d:38:64:b4:7e:78:56:75:65:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AA5B8577C0697C844375D4EF4400A37FA7FA18 Validity Not Before: Nov 4 08:17:02 2025 GMT Not After : Nov 5 09:30:02 2025 GMT Subject: CN=B4559E11AE6AD293E4DF4E1C07B99657870F638D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:c6:36:63:39:e6:ae:26:a3:b7:53:03:b2: 6e:83:95:e7:55:6f:47:30:f0:db:af:89:c6:69:9f: 65:f4:76:b8:62:0f:88:37:b7:d2:39:dc:98:5b:9a: e0:2d:6a:ab:62:04:3b:17:30:85:91:06:7f:79:7f: d9:0a:ca:64:34:6a:04:17:83:b7:7f:45:24:b0:f4: 67:f4:fb:4c:bf:cb:bb:3f:be:51:43:3d:11:71:b0: ca:8d:55:7f:96:1b:08:98:ef:01:35:46:58:65:01: a6:d1:f8:5a:94:90:73:23:7f:5f:8e:cd:a8:e0:2f: d7:d8:b6:ae:2b:7d:ef:dc:24:38:a6:4c:08:f5:4a: a9:e8:69:79:33:ee:12:8d:04:1c:2f:d8:ae:f0:3b: 37:a7:32:63:40:d0:83:e6:c0:33:1d:d8:54:3d:66: 4c:65:46:4b:66:89:b5:a9:f5:9c:38:92:ec:56:c2: c5:d7:5d:6d:9b:b5:f8:e5:68:16:ee:ed:5f:99:b2: a9:77:00:ba:1b:cd:20:2c:1b:3e:d9:e7:16:dd:6c: dd:8b:cc:d2:f9:c2:d5:4d:19:12:6f:b3:eb:80:22: 7d:06:c1:46:e4:dd:5e:1a:7a:f6:65:d7:24:a7:f8: 7a:cb:57:88:5f:d8:03:e8:af:fd:ff:ef:52:9f:4d: 78:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:55:9E:11:AE:6A:D2:93:E4:DF:4E:1C:07:B9:96:57:87:0F:63:8D X509v3 Authority Key Identifier: keyid:00:AA:5B:85:77:C0:69:7C:84:43:75:D4:EF:44:00:A3:7F:A7:FA:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:9b:d0:33:dc:0a:a1:a6:2f:ac:19:da:8d:87:fe:ab:31:62: 2f:ff:b7:25:d9:af:82:fe:94:de:c4:e9:9f:7b:99:e2:0e:e6: 9c:1e:c0:ff:ff:d7:b9:62:07:04:fc:2b:ea:c6:5d:3d:09:bf: 6e:50:db:9b:e2:4f:b8:70:7f:96:81:f7:28:58:28:fd:95:45: 39:1e:a0:62:bc:28:1f:54:6d:5c:6e:b6:53:d8:a4:f6:9b:aa: 85:60:ca:8f:67:94:d7:eb:36:62:6a:3d:b9:ca:e3:0b:a9:14: cf:77:38:02:21:ec:16:e8:bc:35:28:24:33:de:43:5e:6c:b5: 7f:a2:f6:08:9a:68:a9:f4:57:c1:46:16:09:b7:75:f5:d9:68: 3a:25:ab:cc:9e:da:19:be:65:bd:af:83:34:07:3e:45:8e:93: 2f:49:3e:db:15:ed:c2:3f:2f:68:20:49:06:f3:3b:c5:ba:74: 29:62:31:23:85:dc:d1:80:85:f3:a0:e3:d3:99:45:70:bb:b2: 68:9a:18:63:c5:93:fa:b7:2a:a2:e9:a8:70:58:74:a3:53:ee: 0c:44:19:e6:49:47:8b:3e:89:7e:5f:a7:be:7b:72:2a:04:3a: fa:af:0f:85:d8:b6:ae:2e:74:92:f2:15:b1:3d:e3:e2:0d:51: d2:3c:6f:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHuneBjizxc77Xo04ZLR+eFZ1ZewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQTVCODU3N0MwNjk3Qzg0NDM3NUQ0RUY0NDAwQTM3 RkE3RkExODAeFw0yNTExMDQwODE3MDJaFw0yNTExMDUwOTMwMDJaMDMxMTAvBgNV BAMTKEI0NTU5RTExQUU2QUQyOTNFNERGNEUxQzA3Qjk5NjU3ODcwRjYzOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuAcY2Yznmriajt1MDsm6DledV b0cw8NuvicZpn2X0drhiD4g3t9I53JhbmuAtaqtiBDsXMIWRBn95f9kKymQ0agQX g7d/RSSw9Gf0+0y/y7s/vlFDPRFxsMqNVX+WGwiY7wE1RlhlAabR+FqUkHMjf1+O zajgL9fYtq4rfe/cJDimTAj1SqnoaXkz7hKNBBwv2K7wOzenMmNA0IPmwDMd2FQ9 ZkxlRktmibWp9Zw4kuxWwsXXXW2btfjlaBbu7V+Zsql3ALobzSAsGz7Z5xbdbN2L zNL5wtVNGRJvs+uAIn0GwUbk3V4aevZl1ySn+HrLV4hf2APor/3/71KfTXgnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtFWeEa5q0pPk304cB7mWV4cPY40wHwYDVR0j BBgwFoAUAKpbhXfAaXyEQ3XU70QAo3+n+hgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz UDIvMC8wMEFBNUI4NTc3QzA2OTdDODQ0Mzc1RDRFRjQ0MDBBMzdGQTdGQTE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwQUE1Qjg1NzdDMDY5N0M4 NDQzNzVENEVGNDQwMEEzN0ZBN0ZBMTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkozUDIvMC8w MEFBNUI4NTc3QzA2OTdDODQ0Mzc1RDRFRjQ0MDBBMzdGQTdGQTE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD5vQM9wKoaYvrBnajYf+qzFiL/+3Jdmvgv6U3sTpn3uZ4g7mnB7A///XuWIH BPwr6sZdPQm/blDbm+JPuHB/loH3KFgo/ZVFOR6gYrwoH1RtXG62U9ik9puqhWDK j2eU1+s2Ymo9ucrjC6kUz3c4AiHsFui8NSgkM95DXmy1f6L2CJpoqfRXwUYWCbd1 9dloOiWrzJ7aGb5lva+DNAc+RY6TL0k+2xXtwj8vaCBJBvM7xbp0KWIxI4Xc0YCF 86Dj05lFcLuyaJoYY8WT+rcqoumocFh0o1PuDEQZ5klHiz6Jfl+nvntyKgQ6+q8P hdi2ri50kvIVsT3j4g1R0jxvAw== -----END CERTIFICATE-----Generated at Wed Nov 5 00:49:11 2025 by rpki-client