$ rpki-client -vvf rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft File: D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft (raw, json) Hash identifier: VpLDyATJT+awavjylMJPA4ud6PdUo4ue4EPGsxbR4EI= Subject key identifier: 3B:E1:56:4B:D8:77:CB:9A:E6:CC:E7:DF:5B:9B:E6:E9:37:36:C2:F2 Authority key identifier: D7:8B:D4:9F:16:98:DE:94:8F:47:13:6B:6B:8D:24:84:F5:3C:56:D5 Certificate issuer: /CN=D78BD49F1698DE948F47136B6B8D2484F53C56D5 Certificate serial: 16E8CC0C84CFA4BE48620F982D5E4DD66C1DD0E8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft Manifest number: 010C Signing time: Tue 04 Nov 2025 12:50:27 +0000 Manifest this update: Tue 04 Nov 2025 12:45:27 +0000 Manifest next update: Wed 05 Nov 2025 13:04:27 +0000 Files and hashes: 1: 3137372e3132382e3232382e302f32322d3332203d3e203238353932.roa (hash: ZuDr+uoivnY73ETayT+plzAx38hIjwRMmlYEOg/XzDw=) 2: D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl (hash: LlQl4aTZTtGYEdRuQ1lMw1/rQ1QOZuobjAqCOnDnNss=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 13:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e8:cc:0c:84:cf:a4:be:48:62:0f:98:2d:5e:4d:d6:6c:1d:d0:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D78BD49F1698DE948F47136B6B8D2484F53C56D5 Validity Not Before: Nov 4 12:45:27 2025 GMT Not After : Nov 5 13:04:27 2025 GMT Subject: CN=3BE1564BD877CB9AE6CCE7DF5B9BE6E93736C2F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:aa:1b:b4:7b:43:5d:3e:36:ac:97:e8:f8:d1: 61:cb:9e:7a:e8:c2:14:ca:9b:ad:ac:71:64:84:d0: ed:24:e3:37:51:14:2f:bc:8a:06:86:f3:d5:11:6c: d9:33:84:c8:3a:24:d3:d5:77:48:23:01:59:fd:6d: ca:84:8e:3c:12:71:9b:47:cf:d0:97:df:4b:7f:e0: 49:8a:92:58:ed:8c:31:fc:a1:b9:61:2c:86:2f:d4: 62:dd:3e:b1:0a:ea:9d:ec:93:9a:90:86:67:d6:9b: 15:d6:72:1d:eb:29:7e:d8:f5:c4:68:e5:7d:02:5b: 01:6e:95:77:b0:1a:29:57:fa:75:d0:ea:b6:c0:74: 29:f7:47:58:59:f8:07:6b:29:af:b7:f0:c4:e8:81: 31:ef:a0:16:7b:59:59:31:e7:c5:31:06:42:4f:55: e6:42:54:0c:79:13:1c:55:bb:cc:0f:33:cd:69:60: 82:50:4b:35:43:cc:05:c4:83:9a:e4:bc:ef:57:d4: 12:6a:b3:d5:cd:d7:70:78:9b:a2:ec:c3:04:2c:7b: 35:cd:1e:b9:13:2b:84:6a:d5:37:a3:cb:aa:8c:40: 74:63:a4:fa:e1:1c:9c:f8:f5:97:b3:5e:08:91:94: b5:07:49:39:dc:40:5f:20:1d:12:a8:a7:be:9a:5b: 65:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E1:56:4B:D8:77:CB:9A:E6:CC:E7:DF:5B:9B:E6:E9:37:36:C2:F2 X509v3 Authority Key Identifier: keyid:D7:8B:D4:9F:16:98:DE:94:8F:47:13:6B:6B:8D:24:84:F5:3C:56:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ba:6d:84:07:25:7a:54:48:05:36:5a:a9:88:0e:46:52:73: ab:f1:0e:76:6c:3d:87:e3:28:df:5c:ce:f8:15:b9:39:90:cf: 23:79:a1:44:91:89:f9:b6:ec:fe:3c:a4:2e:92:a4:df:0b:64: 61:3e:46:05:fe:9e:4d:c6:83:d7:68:d0:56:6c:2f:74:ab:df: d2:61:55:cc:a1:03:67:be:3b:da:39:a1:1b:48:97:67:7b:e5: e4:4a:37:9c:6e:c6:1c:1b:b6:27:c4:fb:93:4e:21:f1:14:88: f0:cd:b1:74:55:8b:c8:3e:9b:bf:5a:26:98:82:fd:62:5a:82: d4:9f:00:c5:3a:e8:90:5f:bd:27:43:cd:db:c1:4c:a4:f8:c4: 69:21:eb:49:4d:a8:d2:2e:67:27:c2:16:99:65:8d:35:fd:16: a5:e1:e7:63:d0:04:f5:53:ce:f1:2d:76:d2:c7:48:34:66:dd: 9c:a8:42:eb:22:9f:de:03:20:65:42:79:c2:e5:b2:3a:61:bc: 25:84:96:ac:33:38:1f:c5:b0:32:60:19:13:fc:f1:d0:e5:6d: ab:94:28:5f:5a:1a:7f:82:fe:94:bb:80:c2:0f:77:68:d0:d9: 72:e4:c1:6b:25:22:90:16:c6:b3:f7:e9:79:2f:30:25:3d:46: 38:fc:b9:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFujMDITPpL5IYg+YLV5N1mwd0OgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4QkQ0OUYxNjk4REU5NDhGNDcxMzZCNkI4RDI0ODRG NTNDNTZENTAeFw0yNTExMDQxMjQ1MjdaFw0yNTExMDUxMzA0MjdaMDMxMTAvBgNV BAMTKDNCRTE1NjRCRDg3N0NCOUFFNkNDRTdERjVCOUJFNkU5MzczNkMyRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOqhu0e0NdPjasl+j40WHLnnro whTKm62scWSE0O0k4zdRFC+8igaG89URbNkzhMg6JNPVd0gjAVn9bcqEjjwScZtH z9CX30t/4EmKkljtjDH8oblhLIYv1GLdPrEK6p3sk5qQhmfWmxXWch3rKX7Y9cRo 5X0CWwFulXewGilX+nXQ6rbAdCn3R1hZ+AdrKa+38MTogTHvoBZ7WVkx58UxBkJP VeZCVAx5ExxVu8wPM81pYIJQSzVDzAXEg5rkvO9X1BJqs9XN13B4m6LswwQsezXN HrkTK4Rq1Tejy6qMQHRjpPrhHJz49ZezXgiRlLUHSTncQF8gHRKop76aW2XFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUO+FWS9h3y5rmzOffW5vm6Tc2wvIwHwYDVR0j BBgwFoAU14vUnxaY3pSPRxNra40khPU8VtUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEtXdVh4SkhNVGJ4VlJvaGRYaThoYjlNOUhNUWt5cUVqSGhTVnNuTG5E MzMvMC9ENzhCRDQ5RjE2OThERTk0OEY0NzEzNkI2QjhEMjQ4NEY1M0M1NkQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OEJENDlGMTY5OERFOTQ4 RjQ3MTM2QjZCOEQyNDg0RjUzQzU2RDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEtXdVh4SkhNVGJ4VlJvaGRYaThoYjlNOUhNUWt5cUVqSGhTVnNuTG5EMzMvMC9E NzhCRDQ5RjE2OThERTk0OEY0NzEzNkI2QjhEMjQ4NEY1M0M1NkQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOrpthAclelRIBTZaqYgORlJzq/EOdmw9h+Mo31zO+BW5OZDPI3mhRJGJ+bbs /jykLpKk3wtkYT5GBf6eTcaD12jQVmwvdKvf0mFVzKEDZ7472jmhG0iXZ3vl5Eo3 nG7GHBu2J8T7k04h8RSI8M2xdFWLyD6bv1ommIL9YlqC1J8AxTrokF+9J0PN28FM pPjEaSHrSU2o0i5nJ8IWmWWNNf0WpeHnY9AE9VPO8S120sdINGbdnKhC6yKf3gMg ZUJ5wuWyOmG8JYSWrDM4H8WwMmAZE/zx0OVtq5QoX1oaf4L+lLuAwg93aNDZcuTB ayUikBbGs/fpeS8wJT1GOPy5gw== -----END CERTIFICATE-----Generated at Wed Nov 5 05:24:26 2025 by rpki-client