$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft File: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft (raw, json) Hash identifier: djhqOptQ1ABdX+Mb6llp5KGFWuKOEfGAYGmNq4/q5M4= Subject key identifier: F9:A4:D8:65:A4:CB:DE:86:D1:A9:95:C5:DF:7A:D4:C2:55:CF:4B:5D Authority key identifier: CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA Certificate issuer: /CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA Certificate serial: 492B2F3680127AC3071CCEDE8583341C3CA54B62 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft Manifest number: 0307 Signing time: Tue 04 Nov 2025 16:31:37 +0000 Manifest this update: Tue 04 Nov 2025 16:26:37 +0000 Manifest next update: Wed 05 Nov 2025 18:53:37 +0000 Files and hashes: 1: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl (hash: hcJt0xsQah8hPb8R9vFVAgHMKwZU3/gLmoMsprPFryU=) 2: 323830343a333661303a3a2f33322d3335203d3e20323636333630.roa (hash: rXszqdwUvQGrhVWf0dQGexOPbYRtVFxMgBAZYV51XYo=) 3: 3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa (hash: N9HuU1W9ryFGU85A3ZfF+Ao4jsgW1hWTRMLA6XPYlk0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 18:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:2b:2f:36:80:12:7a:c3:07:1c:ce:de:85:83:34:1c:3c:a5:4b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA Validity Not Before: Nov 4 16:26:37 2025 GMT Not After : Nov 5 18:53:37 2025 GMT Subject: CN=F9A4D865A4CBDE86D1A995C5DF7AD4C255CF4B5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f2:2f:0b:b3:8d:20:24:4f:b0:26:e6:5e:2a: 62:34:07:0b:20:40:f5:c9:5b:6f:e3:45:41:c5:ba: 0a:ea:ce:19:91:7a:2e:8a:09:43:60:c9:fd:19:28: 52:54:ff:8e:9a:e6:24:f0:07:9e:cd:be:88:bc:48: 05:b2:36:b3:dc:8e:26:4c:59:37:39:10:0c:b0:f1: 30:64:d1:d6:de:81:07:76:41:07:56:89:9c:5e:05: 09:74:54:9b:c7:a7:db:d1:c8:c2:81:24:94:f3:fb: 88:89:57:80:e5:76:b7:7b:b6:53:70:aa:23:a1:07: 4b:9c:c9:a1:27:06:9f:3a:8c:04:a3:67:ac:61:dc: 03:73:7b:c9:e2:30:0d:f8:4e:f8:29:32:35:c7:00: 37:66:29:9e:8a:5e:70:13:38:e9:84:0d:ac:f3:c0: d4:14:f0:ee:8a:ed:98:f7:81:d4:73:64:51:70:7b: 1c:ad:06:38:5a:3a:3f:32:db:4b:7a:74:c2:b4:59: 36:fe:24:ed:6d:c1:e2:25:32:1d:96:5e:2a:9a:92: d3:59:c3:03:46:0c:2e:34:89:ad:66:17:6e:e8:e8: 6c:6f:c8:2f:7e:43:2a:e8:1d:09:52:23:2b:57:fb: ec:b3:81:a8:2d:eb:99:a7:b7:b8:11:54:fc:01:cb: 0a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A4:D8:65:A4:CB:DE:86:D1:A9:95:C5:DF:7A:D4:C2:55:CF:4B:5D X509v3 Authority Key Identifier: keyid:CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:0d:85:c8:ec:9a:91:d4:4e:7b:81:86:bc:a7:23:83:f5:bb: f3:db:50:7a:78:7d:6c:e7:32:48:d6:db:05:78:3b:8e:60:3c: 99:d8:af:b6:3f:1d:a7:41:07:8e:cb:15:3b:2f:33:c8:6b:24: c4:cb:dc:01:ca:7c:1e:6e:2b:65:3a:9a:6d:ef:03:3a:87:1f: a4:4e:fc:d4:58:00:b3:e7:fb:26:3e:38:23:15:9b:dd:57:05: c6:35:a5:23:87:59:d7:cf:55:4c:ca:38:c1:3d:6e:8b:f4:f1: 07:2e:96:18:6a:87:b5:6a:c1:45:33:bf:cf:1b:58:fa:94:7b: 12:7b:b4:70:2e:b7:6f:82:44:3d:68:a7:19:bc:b1:ac:d0:5c: 66:dc:91:a2:8c:ac:d5:41:8b:57:19:ef:94:9c:f0:7e:f5:8d: c0:5c:4c:51:bb:79:26:4a:00:c9:fa:f4:eb:a9:ee:04:e8:74: 77:4b:9c:d9:86:40:f8:1c:f0:8c:65:b8:3d:9b:84:5a:37:35: bd:cb:0e:af:bf:7b:f7:10:82:15:14:af:e3:7b:88:02:6e:59: 0c:b9:e0:43:24:12:05:46:92:c1:50:97:0b:50:3e:78:1f:35: 21:02:04:22:2e:5f:e2:e3:dc:70:77:f4:f7:88:63:c7:b6:9c: f1:3c:83:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSSsvNoASesMHHM7ehYM0HDylS2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExQzRCNTQ2MjIyRUUxNTZBMEQ0MzQ4RDJBQjAwNDNC REFCNEJFQTAeFw0yNTExMDQxNjI2MzdaFw0yNTExMDUxODUzMzdaMDMxMTAvBgNV BAMTKEY5QTREODY1QTRDQkRFODZEMUE5OTVDNURGN0FENEMyNTVDRjRCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA8i8Ls40gJE+wJuZeKmI0Bwsg QPXJW2/jRUHFugrqzhmRei6KCUNgyf0ZKFJU/46a5iTwB57Nvoi8SAWyNrPcjiZM WTc5EAyw8TBk0dbegQd2QQdWiZxeBQl0VJvHp9vRyMKBJJTz+4iJV4Dldrd7tlNw qiOhB0ucyaEnBp86jASjZ6xh3ANze8niMA34TvgpMjXHADdmKZ6KXnATOOmEDazz wNQU8O6K7Zj3gdRzZFFwexytBjhaOj8y20t6dMK0WTb+JO1tweIlMh2WXiqaktNZ wwNGDC40ia1mF27o6GxvyC9+QyroHQlSIytX++yzgagt65mnt7gRVPwBywo1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+aTYZaTL3obRqZXF33rUwlXPS10wHwYDVR0j BBgwFoAUyhxLVGIi7hVqDUNI0qsAQ72rS+owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBK U1MvMS9DQTFDNEI1NDYyMjJFRTE1NkEwRDQzNDhEMkFCMDA0M0JEQUI0QkVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMUM0QjU0NjIyMkVFMTU2 QTBENDM0OEQyQUIwMDQzQkRBQjRCRUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBKU1MvMS9D QTFDNEI1NDYyMjJFRTE1NkEwRDQzNDhEMkFCMDA0M0JEQUI0QkVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoA2FyOyakdROe4GGvKcjg/W789tQenh9bOcySNbbBXg7jmA8mdivtj8dp0EH jssVOy8zyGskxMvcAcp8Hm4rZTqabe8DOocfpE781FgAs+f7Jj44IxWb3VcFxjWl I4dZ189VTMo4wT1ui/TxBy6WGGqHtWrBRTO/zxtY+pR7Enu0cC63b4JEPWinGbyx rNBcZtyRooys1UGLVxnvlJzwfvWNwFxMUbt5JkoAyfr066nuBOh0d0uc2YZA+Bzw jGW4PZuEWjc1vcsOr7979xCCFRSv43uIAm5ZDLngQyQSBUaSwVCXC1A+eB81IQIE Ii5f4uPccHf094hjx7ac8TyDrQ== -----END CERTIFICATE-----Generated at Wed Nov 5 02:18:29 2025 by rpki-client