$ rpki-client -vvf rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.mft File: B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.mft (raw, json) Hash identifier: Jnfjg5Xh0KC5L7no9m7QG5TyBi5YwEEzXKvetteS7X4= Subject key identifier: A0:05:45:5E:9A:B7:D1:8B:3C:FD:15:A2:CA:9B:63:D0:20:78:24:79 Authority key identifier: B4:02:2F:9C:6A:00:6A:A6:CF:0F:6C:3A:F5:C0:A2:4B:BE:14:B0:A2 Certificate issuer: /CN=B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2 Certificate serial: 4437AB2DA84D789B5123822D81307EB544FB8F89 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.mft Manifest number: 0302 Signing time: Tue 04 Nov 2025 22:46:00 +0000 Manifest this update: Tue 04 Nov 2025 22:41:00 +0000 Manifest next update: Thu 06 Nov 2025 01:57:00 +0000 Files and hashes: 1: 3138362e3235312e3230362e302f32332d3332203d3e20323636313433.roa (hash: u0tPZ9yzR5yombDc/pmeMBai97VsuYa5H3q+ZbB9dfA=) 2: 323830343a336235383a3a2f33322d3438203d3e20323636313433.roa (hash: YrJVt/+CP945BO5Kr5+xUkFP3RBB6Iw2yWnCDr5yJEc=) 3: 3136302e32302e32302e302f32322d3234203d3e20323636313433.roa (hash: OomXrdPs8dELsiPSTDiVuKxLUJ9ztg6/tT72Pi346+g=) 4: B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.crl (hash: oi6LrWGL6zv4ngHsiVmGPFNjjOJYLahnepFEKhygvP4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.crl rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:37:ab:2d:a8:4d:78:9b:51:23:82:2d:81:30:7e:b5:44:fb:8f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2 Validity Not Before: Nov 4 22:41:00 2025 GMT Not After : Nov 6 01:57:00 2025 GMT Subject: CN=A005455E9AB7D18B3CFD15A2CA9B63D020782479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ba:ad:b5:2b:11:e1:d4:2b:ff:c9:28:77:97: bd:9f:33:94:b8:34:c7:be:40:1f:a6:9b:12:ad:02: e4:ce:24:24:8d:aa:be:f7:18:a1:54:9c:7b:69:9c: e1:0c:1a:ed:96:0d:f2:3d:4b:43:9a:61:b5:4e:3c: 59:5b:7f:8d:88:7a:0d:84:62:fd:c2:84:be:de:fb: eb:cf:86:5e:4e:72:36:20:b2:00:38:e8:61:4f:2b: 96:4c:d8:6a:07:20:0e:a0:77:fc:ba:14:01:b3:12: dd:b5:04:57:6b:53:0e:bb:a8:6c:84:3e:3b:c8:e5: 0e:ef:fc:6b:e2:29:33:bd:1a:13:c8:df:69:e4:4b: 06:02:9a:1d:ec:34:a3:2e:f1:05:f1:70:a3:44:41: f5:c3:15:f6:cb:aa:7f:ff:ae:af:5a:31:f7:f9:c4: 72:79:43:72:00:1e:45:3d:68:bc:e1:9b:ec:03:ca: 78:b0:b0:95:3c:e7:94:f0:15:a1:c1:61:0a:3e:68: 91:37:ee:4b:15:55:0a:61:44:bb:83:86:8a:c7:8a: 51:79:a3:91:ac:0d:31:6f:99:fd:82:ae:8e:c7:e0: 03:0a:f5:5c:14:94:13:e8:f2:2f:44:3e:1f:a7:6f: f3:6a:cc:a6:c4:0e:f9:d3:01:d5:0c:5a:dd:f6:96: 3e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:05:45:5E:9A:B7:D1:8B:3C:FD:15:A2:CA:9B:63:D0:20:78:24:79 X509v3 Authority Key Identifier: keyid:B4:02:2F:9C:6A:00:6A:A6:CF:0F:6C:3A:F5:C0:A2:4B:BE:14:B0:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f0:98:47:3b:78:b6:3e:f1:0a:db:81:b2:34:e2:03:4a:ce: 7f:2d:66:d6:00:ec:54:16:5f:b1:1a:b0:fc:dc:41:3d:59:7d: ca:16:94:8a:a2:ce:45:b7:d4:dc:b8:de:13:5a:e3:5d:d4:85: 59:8f:6e:ac:10:b1:37:54:2a:b8:a6:fa:e6:f9:d0:e1:85:c1: 1b:b5:22:5f:f7:4e:f0:5f:fd:6f:5b:1f:0e:36:8b:e0:40:31: c2:da:23:88:ed:32:6e:ff:3c:78:5c:1e:35:b2:41:ee:59:74: a6:d3:29:44:8c:c9:42:dd:13:0a:50:60:5d:75:fa:57:8d:c7: 19:dc:08:6c:98:03:f2:b4:18:61:4d:cf:1e:59:a7:c1:dd:fc: 9c:fc:d1:99:ce:ba:43:6f:c5:d8:c5:c8:de:dc:17:be:1f:85: a7:1f:9e:50:47:23:21:18:12:b4:86:12:20:1e:46:0e:e6:11: 05:47:5d:21:a4:99:af:39:c5:9d:da:05:5c:81:26:b7:79:93: a3:a8:aa:73:80:54:a6:aa:4a:cf:85:31:77:e5:80:5f:b3:c8: 66:1c:f1:52:04:49:79:cb:f7:26:90:c3:f1:b9:db:c6:dc:b2: 32:47:00:af:83:35:fb:89:82:ac:d4:06:2e:a8:7f:6c:77:69: e5:48:7b:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURDerLahNeJtRI4ItgTB+tUT7j4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQwMjJGOUM2QTAwNkFBNkNGMEY2QzNBRjVDMEEyNEJC RTE0QjBBMjAeFw0yNTExMDQyMjQxMDBaFw0yNTExMDYwMTU3MDBaMDMxMTAvBgNV BAMTKEEwMDU0NTVFOUFCN0QxOEIzQ0ZEMTVBMkNBOUI2M0QwMjA3ODI0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiuq21KxHh1Cv/ySh3l72fM5S4 NMe+QB+mmxKtAuTOJCSNqr73GKFUnHtpnOEMGu2WDfI9S0OaYbVOPFlbf42Ieg2E Yv3ChL7e++vPhl5OcjYgsgA46GFPK5ZM2GoHIA6gd/y6FAGzEt21BFdrUw67qGyE PjvI5Q7v/GviKTO9GhPI32nkSwYCmh3sNKMu8QXxcKNEQfXDFfbLqn//rq9aMff5 xHJ5Q3IAHkU9aLzhm+wDyniwsJU855TwFaHBYQo+aJE37ksVVQphRLuDhorHilF5 o5GsDTFvmf2Cro7H4AMK9VwUlBPo8i9EPh+nb/NqzKbEDvnTAdUMWt32lj47AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoAVFXpq30Ys8/RWiyptj0CB4JHkwHwYDVR0j BBgwFoAUtAIvnGoAaqbPD2w69cCiS74UsKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEw1bXBMak15NTNnUlBqOUFDbUxMNG1MUDEzdGJmNjROOUVlMThzVWpL VGQvMC9CNDAyMkY5QzZBMDA2QUE2Q0YwRjZDM0FGNUMwQTI0QkJFMTRCMEEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0MDIyRjlDNkEwMDZBQTZD RjBGNkMzQUY1QzBBMjRCQkUxNEIwQTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEw1bXBMak15NTNnUlBqOUFDbUxMNG1MUDEzdGJmNjROOUVlMThzVWpLVGQvMC9C NDAyMkY5QzZBMDA2QUE2Q0YwRjZDM0FGNUMwQTI0QkJFMTRCMEEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGfCYRzt4tj7xCtuBsjTiA0rOfy1m1gDsVBZfsRqw/NxBPVl9yhaUiqLORbfU 3LjeE1rjXdSFWY9urBCxN1QquKb65vnQ4YXBG7UiX/dO8F/9b1sfDjaL4EAxwtoj iO0ybv88eFweNbJB7ll0ptMpRIzJQt0TClBgXXX6V43HGdwIbJgD8rQYYU3PHlmn wd38nPzRmc66Q2/F2MXI3twXvh+Fpx+eUEcjIRgStIYSIB5GDuYRBUddIaSZrznF ndoFXIEmt3mTo6iqc4BUpqpKz4Uxd+WAX7PIZhzxUgRJecv3JpDD8bnbxtyyMkcA r4M1+4mCrNQGLqh/bHdp5Uh7mQ== -----END CERTIFICATE-----Generated at Wed Nov 5 11:10:49 2025 by rpki-client