$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft File: 1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft (raw, json) Hash identifier: cdP481iVgP/2Va5wriED9RQNQ0sNI35nMGj5jxJorBk= Subject key identifier: 73:8A:6B:40:0C:B5:31:05:CB:BD:F9:27:FA:89:D2:8F:15:82:69:A6 Authority key identifier: 14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE Certificate issuer: /CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE Certificate serial: 26E4A21262878AEFE4C0DB614C7D8CC50EF71E21 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft Manifest number: 0314 Signing time: Tue 04 Nov 2025 18:19:56 +0000 Manifest this update: Tue 04 Nov 2025 18:14:56 +0000 Manifest next update: Wed 05 Nov 2025 20:36:56 +0000 Files and hashes: 1: 323830343a363538303a3a2f33322d313238203d3e20323639343935.roa (hash: 58fbosYwJlPoxzdFWTlydzCcBZDcp02f7aWo5YcMLgY=) 2: 34352e3138372e3134342e302f32322d3332203d3e20323639343935.roa (hash: c9pmOSd5YgM4yOIr8wl2MJW/OxqiWWAnV/YQNyWCK1Q=) 3: 1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl (hash: LNkC58c6D9P90P0wgPh3HE0H+qlFVsu3R/BE0Pj6DN0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e4:a2:12:62:87:8a:ef:e4:c0:db:61:4c:7d:8c:c5:0e:f7:1e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE Validity Not Before: Nov 4 18:14:56 2025 GMT Not After : Nov 5 20:36:56 2025 GMT Subject: CN=738A6B400CB53105CBBDF927FA89D28F158269A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:79:72:db:de:6d:03:4d:27:cf:bc:a4:34:ba: 57:d7:0d:2d:4e:53:7e:d5:de:b3:a2:20:04:59:2e: 38:6f:b8:f3:c7:d4:fd:67:e8:3a:45:70:81:66:5f: ed:0e:71:68:c7:3b:ec:be:98:e1:dc:9a:66:cd:8a: 65:9b:52:73:3c:42:e5:70:ff:6a:eb:cc:99:f9:5b: 7f:97:84:2e:e5:13:a3:78:a0:07:16:ae:73:e0:f9: 68:cc:42:1a:96:74:dd:43:ab:54:85:af:09:db:62: 75:e6:89:db:bc:91:55:61:29:4d:5e:91:0d:02:b2: fd:2a:65:c4:f7:6b:9c:17:6a:bc:e9:d3:68:bd:32: 93:bc:d2:6d:98:fb:70:d8:96:29:c7:17:89:d9:5f: 95:a0:db:ed:17:96:73:05:5a:1b:b9:08:14:50:0c: a3:b9:39:18:3c:7b:e5:a8:ce:4a:47:a3:07:2c:ec: 1c:bf:ff:c3:94:de:93:78:2e:d2:33:b9:c7:61:15: 84:5b:78:72:6f:18:fb:d6:5f:0d:82:ca:db:24:2a: 37:ce:cd:54:f3:9d:44:af:1d:55:2b:1c:11:99:5b: d5:c5:71:10:48:93:29:ff:49:58:6f:80:7b:5a:b1: 9b:bb:ac:c9:fe:aa:bd:b7:00:b2:b9:08:26:bd:14: e6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8A:6B:40:0C:B5:31:05:CB:BD:F9:27:FA:89:D2:8F:15:82:69:A6 X509v3 Authority Key Identifier: keyid:14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:83:8a:a8:c6:fc:42:df:54:33:f8:9b:e8:7f:87:63:08:37: 0b:14:35:95:5f:d2:18:01:7f:da:f8:a0:50:e6:6f:db:19:cb: 4d:6c:8b:4a:80:f8:65:36:ca:34:ca:f5:57:0e:85:6a:bc:fe: 85:16:cf:b1:86:c4:07:fe:e6:d5:32:c6:c7:64:4b:29:5d:ae: 16:d7:07:2e:03:d2:96:0c:7d:4b:1d:7d:02:cf:29:ae:a5:ce: ec:de:e4:de:c8:7e:1b:79:ba:ef:68:f2:1c:af:83:d6:c8:81: 6f:b2:58:b3:91:cb:f5:11:4a:20:b2:fe:d2:89:04:e4:ae:7f: 61:66:1b:44:3b:70:7a:44:1d:c1:dc:32:6e:42:94:64:f0:5a: 1b:2f:a4:8d:53:de:75:45:2c:06:8b:a8:bf:90:f8:54:b7:8c: b6:a3:80:e5:f8:62:ea:47:e3:86:6d:09:c0:7d:e6:a5:12:36: 75:bb:81:65:6b:c7:fb:6b:33:9e:72:03:90:5c:49:66:63:d5: 36:3e:5d:cb:e5:7d:f6:b5:77:ca:61:b4:1e:14:44:46:69:1b: a7:5e:76:c5:1b:00:99:39:02:6c:82:a8:38:14:53:fa:22:d7: 42:e8:e2:ae:dd:95:aa:d8:0a:12:93:37:22:9d:7e:c1:0f:25: bc:b4:ac:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJuSiEmKHiu/kwNthTH2MxQ73HiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ3OEE0NUQ1QTAzQkJFNDlDN0IzNkM1MzA3QTVDOUJE QjM5RjhFRTAeFw0yNTExMDQxODE0NTZaFw0yNTExMDUyMDM2NTZaMDMxMTAvBgNV BAMTKDczOEE2QjQwMENCNTMxMDVDQkJERjkyN0ZBODlEMjhGMTU4MjY5QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4eXLb3m0DTSfPvKQ0ulfXDS1O U37V3rOiIARZLjhvuPPH1P1n6DpFcIFmX+0OcWjHO+y+mOHcmmbNimWbUnM8QuVw /2rrzJn5W3+XhC7lE6N4oAcWrnPg+WjMQhqWdN1Dq1SFrwnbYnXmidu8kVVhKU1e kQ0Csv0qZcT3a5wXarzp02i9MpO80m2Y+3DYlinHF4nZX5Wg2+0XlnMFWhu5CBRQ DKO5ORg8e+WozkpHowcs7By//8OU3pN4LtIzucdhFYRbeHJvGPvWXw2CytskKjfO zVTznUSvHVUrHBGZW9XFcRBIkyn/SVhvgHtasZu7rMn+qr23ALK5CCa9FObPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUc4prQAy1MQXLvfkn+onSjxWCaaYwHwYDVR0j BBgwFoAUFHikXVoDu+ScezbFMHpcm9s5+O4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG5KUWtuNUFQdDJnSzJaS1QxRlhWTU4yYXhqdWpxUHJBZzhxWHM1dFJq aHIvMS8xNDc4QTQ1RDVBMDNCQkU0OUM3QjM2QzUzMDdBNUM5QkRCMzlGOEVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0NzhBNDVENUEwM0JCRTQ5 QzdCMzZDNTMwN0E1QzlCREIzOUY4RUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG5KUWtuNUFQdDJnSzJaS1QxRlhWTU4yYXhqdWpxUHJBZzhxWHM1dFJqaHIvMS8x NDc4QTQ1RDVBMDNCQkU0OUM3QjM2QzUzMDdBNUM5QkRCMzlGOEVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV4OKqMb8Qt9UM/ib6H+HYwg3CxQ1lV/SGAF/2vigUOZv2xnLTWyLSoD4ZTbK NMr1Vw6Farz+hRbPsYbEB/7m1TLGx2RLKV2uFtcHLgPSlgx9Sx19As8prqXO7N7k 3sh+G3m672jyHK+D1siBb7JYs5HL9RFKILL+0okE5K5/YWYbRDtwekQdwdwybkKU ZPBaGy+kjVPedUUsBouov5D4VLeMtqOA5fhi6kfjhm0JwH3mpRI2dbuBZWvH+2sz nnIDkFxJZmPVNj5dy+V99rV3ymG0HhRERmkbp152xRsAmTkCbIKoOBRT+iLXQuji rt2VqtgKEpM3Ip1+wQ8lvLSsjg== -----END CERTIFICATE-----Generated at Wed Nov 5 04:25:55 2025 by rpki-client