$ rpki-client -vvf rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft File: 295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft (raw, json) Hash identifier: ndg2hJylmGH8YCPkB+tcVGBN9NcZ1trhgm3xCuRkUnE= Subject key identifier: 49:44:4A:11:96:BF:BA:C7:B7:18:C6:FE:1D:DC:5B:56:32:93:1B:65 Authority key identifier: 29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20 Certificate issuer: /CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520 Certificate serial: 3989A8AE63762749672247C6F57E25A49AECE239 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer Subject info access: rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft Manifest number: 0294 Signing time: Wed 05 Nov 2025 01:18:51 +0000 Manifest this update: Wed 05 Nov 2025 01:13:51 +0000 Manifest next update: Thu 06 Nov 2025 02:37:51 +0000 Files and hashes: 1: 295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl (hash: KyZWhiSxYqgMc3ssgRxMdBwVirazG/pWSVgcduB1lzI=) 2: 323830343a356665383a3a2f33322d313238203d3e20323639313331.roa (hash: Knl+wwRgdmDvowjQ9JACRJfXXqw4YrTkY1L1JgQ1SZk=) 3: 34352e3138302e35362e302f32322d3332203d3e20323639313331.roa (hash: If21jOcvMUFkh16cxpcGthCoNkKvfyC5oUDpgsyZRvQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 02:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:89:a8:ae:63:76:27:49:67:22:47:c6:f5:7e:25:a4:9a:ec:e2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520 Validity Not Before: Nov 5 01:13:51 2025 GMT Not After : Nov 6 02:37:51 2025 GMT Subject: CN=49444A1196BFBAC7B718C6FE1DDC5B5632931B65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f7:91:fc:79:ef:0e:7b:98:f0:55:8f:e1:17: 7f:02:e1:b1:02:b0:1d:33:8e:f8:4f:04:5f:b7:69: 9c:b5:a7:c5:b7:42:d3:1e:fa:13:6b:a1:00:e8:0b: fc:e8:2c:e9:00:b3:0c:79:aa:9a:ae:2d:58:88:00: 82:86:51:c2:c9:79:19:06:ed:a3:39:f8:5b:76:ff: 21:4f:80:a0:5d:45:17:d7:40:dc:6f:03:6c:e6:62: b2:96:87:fc:ee:14:32:6d:c8:20:ba:40:f8:3f:51: 39:31:6c:8a:6d:94:85:ad:2f:09:a2:ae:b4:a6:1f: 4c:4c:26:23:01:86:53:bd:8a:86:10:b6:5f:c6:26: b1:87:90:83:36:e6:52:ef:0a:b9:b7:03:54:73:27: 99:a3:25:90:8b:e2:8b:11:98:09:7a:92:2f:5c:c5: 02:7c:e5:11:07:9d:c5:f4:c6:99:b7:6c:03:ab:e0: ee:1b:cf:4d:01:28:49:bc:8a:8d:d5:d7:20:34:89: 91:c2:c4:0b:e1:ca:21:25:ff:de:a1:8f:64:b2:38: 69:3d:3e:21:72:df:27:e5:78:7d:97:65:cc:2d:81: 0c:e4:5e:84:76:71:de:5c:e4:5c:89:4c:9d:7e:e8: 66:60:8c:d0:df:e4:81:ed:18:1e:8a:ac:0f:61:bb: 98:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:44:4A:11:96:BF:BA:C7:B7:18:C6:FE:1D:DC:5B:56:32:93:1B:65 X509v3 Authority Key Identifier: keyid:29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:bf:7a:93:20:75:4f:c3:87:21:57:f1:bf:8a:8c:ef:c3:1b: 3a:e3:a0:15:6f:6e:32:47:c8:25:72:b1:50:60:97:26:f4:48: dd:77:dc:ce:62:16:76:63:7b:d9:93:42:54:f2:ee:92:05:18: dc:3b:4a:48:97:bf:e1:66:1c:e4:80:4c:15:90:42:e9:23:94: b6:ef:16:9f:19:fa:11:83:ec:a2:70:f0:19:1b:b7:05:ad:b8: 1d:fd:0d:7b:67:8f:a1:98:a2:27:56:99:1e:cc:ac:ce:6e:77: aa:e2:46:a7:49:6a:34:1d:d4:ca:a3:ad:06:ee:ec:73:d3:fc: 1b:6b:40:7a:1f:97:19:ee:d2:f1:f1:ef:7c:22:9a:e1:04:db: be:25:80:58:7d:ea:a6:c9:72:69:46:bb:c6:2f:d1:db:f4:a5: 36:32:7f:1f:b1:5d:5a:a4:e6:25:24:4e:af:e0:29:aa:cc:a0: 42:fc:ac:c4:d4:4a:d3:23:f1:2d:ac:c1:87:57:23:cd:5b:64: 5a:59:2c:04:50:5d:7d:f0:ed:d8:2f:65:b5:60:0f:f1:98:71: 38:f7:16:22:98:db:59:da:1f:61:c1:9f:c7:95:0f:4f:39:c8: 18:17:58:e6:27:61:2b:8e:86:6d:fb:5f:a4:26:eb:d3:e8:a6: 37:dd:69:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOYmormN2J0lnIkfG9X4lpJrs4jkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1QjlEMzY0QkQ3NkE4MUREMzRBQTVENUM5NjVCQjFG QzI3QTUyMDAeFw0yNTExMDUwMTEzNTFaFw0yNTExMDYwMjM3NTFaMDMxMTAvBgNV BAMTKDQ5NDQ0QTExOTZCRkJBQzdCNzE4QzZGRTFEREM1QjU2MzI5MzFCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh95H8ee8Oe5jwVY/hF38C4bEC sB0zjvhPBF+3aZy1p8W3QtMe+hNroQDoC/zoLOkAswx5qpquLViIAIKGUcLJeRkG 7aM5+Ft2/yFPgKBdRRfXQNxvA2zmYrKWh/zuFDJtyCC6QPg/UTkxbIptlIWtLwmi rrSmH0xMJiMBhlO9ioYQtl/GJrGHkIM25lLvCrm3A1RzJ5mjJZCL4osRmAl6ki9c xQJ85REHncX0xpm3bAOr4O4bz00BKEm8io3V1yA0iZHCxAvhyiEl/96hj2SyOGk9 PiFy3yfleH2XZcwtgQzkXoR2cd5c5FyJTJ1+6GZgjNDf5IHtGB6KrA9hu5gTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSURKEZa/use3GMb+HdxbVjKTG2UwHwYDVR0j BBgwFoAUKVudNkvXaoHdNKpdXJZbsfwnpSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGJOVmhqeXZzRTZUQXpreFRaV0dHajZSMWJidnlZMWNKcTNUeXA4Ujg1 OVEvMS8yOTVCOUQzNjRCRDc2QTgxREQzNEFBNUQ1Qzk2NUJCMUZDMjdBNTIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NUI5RDM2NEJENzZBODFE RDM0QUE1RDVDOTY1QkIxRkMyN0E1MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGJOVmhqeXZzRTZUQXpreFRaV0dHajZSMWJidnlZMWNKcTNUeXA4Ujg1OVEvMS8y OTVCOUQzNjRCRDc2QTgxREQzNEFBNUQ1Qzk2NUJCMUZDMjdBNTIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU796kyB1T8OHIVfxv4qM78MbOuOgFW9uMkfIJXKxUGCXJvRI3XfczmIWdmN7 2ZNCVPLukgUY3DtKSJe/4WYc5IBMFZBC6SOUtu8Wnxn6EYPsonDwGRu3Ba24Hf0N e2ePoZiiJ1aZHsyszm53quJGp0lqNB3UyqOtBu7sc9P8G2tAeh+XGe7S8fHvfCKa 4QTbviWAWH3qpslyaUa7xi/R2/SlNjJ/H7FdWqTmJSROr+ApqsygQvysxNRK0yPx LazBh1cjzVtkWlksBFBdffDt2C9ltWAP8ZhxOPcWIpjbWdofYcGfx5UPTznIGBdY 5idhK46GbftfpCbr0+imN91p2Q== -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:06 2025 by rpki-client