$ rpki-client -vvf rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft File: 1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft (raw, json) Hash identifier: Y4rr7NwltocZya2vfEA9kXm4J4g3iaXpGBC03xJ3KrE= Subject key identifier: 94:7F:1A:60:0A:D5:A2:84:84:C5:2D:8B:71:24:FA:44:DD:B1:D2:69 Authority key identifier: 1B:E0:04:C8:8C:DE:B7:36:10:FC:82:75:8B:90:B1:30:EB:9F:7D:38 Certificate issuer: /CN=1BE004C88CDEB73610FC82758B90B130EB9F7D38 Certificate serial: 43D5B87EE20B9345DFB71D2FFB8FBA40F230F824 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer Subject info access: rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft Manifest number: 02E8 Signing time: Wed 05 Nov 2025 16:04:17 +0000 Manifest this update: Wed 05 Nov 2025 15:59:17 +0000 Manifest next update: Thu 06 Nov 2025 19:55:17 +0000 Files and hashes: 1: 1BE004C88CDEB73610FC82758B90B130EB9F7D38.crl (hash: Fxq+e7fbp72IVT/jJB462genanqx9OPw0nhbu8NHZhg=) 2: 34352e37302e3135362e302f32322d3234203d3e20323637363534.roa (hash: 0qU6G+XnOCeyrCosGPKXLhVn+QRuLcy3dI4+NhMHtKA=) 3: 323830343a343463633a3a2f33322d3430203d3e20323637363534.roa (hash: 5EOPo2+Gu7jRpWQ23GA0NFFlzySjFOtoTh+IjuXIpdY=) 4: 3133312e3232312e3130302e302f32322d3234203d3e20323637363534.roa (hash: oF9u1/oCkGwo1UBS2Ntc4XCaeUf1mcRHEF1FbP5ncxs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.crl rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 17:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d5:b8:7e:e2:0b:93:45:df:b7:1d:2f:fb:8f:ba:40:f2:30:f8:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BE004C88CDEB73610FC82758B90B130EB9F7D38 Validity Not Before: Nov 5 15:59:17 2025 GMT Not After : Nov 6 19:55:17 2025 GMT Subject: CN=947F1A600AD5A28484C52D8B7124FA44DDB1D269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c2:ef:10:07:0e:3c:2b:22:ca:4a:d6:46:da: dc:a6:d7:b6:b3:c5:9d:d1:2c:11:84:d0:95:4e:dd: 9c:da:7c:21:e8:df:7d:6a:1f:5a:21:14:8e:7f:60: 2a:80:60:2d:29:8a:07:1c:d4:b7:03:6d:55:e5:95: 5a:9f:d4:0e:63:7a:4d:6f:43:14:46:fe:06:c0:a1: 8a:07:ae:1e:fd:51:93:9e:7d:bb:10:6b:be:5c:75: cf:d4:d8:2f:2c:6c:7f:bb:26:33:93:3b:68:8d:af: 72:3c:08:c5:21:1d:b0:f5:a7:63:26:d8:10:ab:60: 99:b0:b1:bd:e6:ed:9c:89:3a:91:ba:12:e2:63:e3: 22:df:ed:8f:d9:77:ea:09:32:d5:74:93:86:0f:c0: 04:e3:3b:f2:8d:1a:c9:a4:ca:25:37:3c:78:c2:0e: a9:6d:2c:c6:34:34:76:af:c7:90:79:11:88:5c:32: d3:23:0f:c3:75:55:74:34:af:73:b9:1d:88:5b:c0: 77:3a:0b:4f:a9:98:33:2b:cd:70:3c:72:bc:90:62: fc:8f:38:f2:f3:e9:7d:d4:15:34:b4:b9:6b:c9:34: d6:db:b9:9b:52:79:ea:f4:70:83:76:41:b7:34:ae: c7:c0:55:32:73:cf:1f:a0:39:ed:53:c4:c3:0a:64: 0a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7F:1A:60:0A:D5:A2:84:84:C5:2D:8B:71:24:FA:44:DD:B1:D2:69 X509v3 Authority Key Identifier: keyid:1B:E0:04:C8:8C:DE:B7:36:10:FC:82:75:8B:90:B1:30:EB:9F:7D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a3:5e:70:59:eb:66:90:f8:f4:99:f3:c1:f1:02:7a:77:75: 8f:c1:fd:60:d0:ae:8e:66:14:8f:5c:09:4f:65:a4:56:ac:a8: e9:a7:80:81:69:5a:d9:b9:64:aa:03:71:ff:29:5b:67:1d:92: 6c:33:47:0d:1d:81:19:2c:0a:05:18:85:7b:bd:5f:f6:37:91: 04:c9:47:b5:a3:72:67:59:94:c0:90:da:e5:ba:26:ba:9c:0f: c6:27:5b:69:cf:87:74:00:c3:d6:18:aa:28:38:7b:3a:df:da: 32:ff:52:e5:19:ec:82:61:d2:1d:01:a5:32:8a:9b:a0:6a:36: 19:1f:de:42:d2:2b:22:3c:60:95:8d:8f:e9:bf:bc:3c:a5:ff: 84:6b:bf:ed:4a:e8:33:31:02:66:64:4e:e2:d0:2d:f9:2b:5e: b7:7b:6b:d4:2f:95:50:21:d2:2f:45:41:4b:94:6f:f6:38:fe: 96:f4:d5:68:6a:74:0a:22:51:45:1e:45:26:e3:ff:ac:dd:3b: d7:9e:f5:32:1a:c0:0f:97:4a:72:7c:53:f0:e7:b1:76:0a:89: b2:16:8b:79:02:09:df:67:e9:df:b8:4f:bc:b0:80:04:d8:5a: ed:24:b4:94:4f:1b:f2:f7:d5:f5:f1:0c:62:f7:ea:cb:ea:ea: 1d:bf:6b:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ9W4fuILk0Xftx0v+4+6QPIw+CQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJFMDA0Qzg4Q0RFQjczNjEwRkM4Mjc1OEI5MEIxMzBF QjlGN0QzODAeFw0yNTExMDUxNTU5MTdaFw0yNTExMDYxOTU1MTdaMDMxMTAvBgNV BAMTKDk0N0YxQTYwMEFENUEyODQ4NEM1MkQ4QjcxMjRGQTQ0RERCMUQyNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPwu8QBw48KyLKStZG2tym17az xZ3RLBGE0JVO3ZzafCHo331qH1ohFI5/YCqAYC0pigcc1LcDbVXllVqf1A5jek1v QxRG/gbAoYoHrh79UZOefbsQa75cdc/U2C8sbH+7JjOTO2iNr3I8CMUhHbD1p2Mm 2BCrYJmwsb3m7ZyJOpG6EuJj4yLf7Y/Zd+oJMtV0k4YPwATjO/KNGsmkyiU3PHjC DqltLMY0NHavx5B5EYhcMtMjD8N1VXQ0r3O5HYhbwHc6C0+pmDMrzXA8cryQYvyP OPLz6X3UFTS0uWvJNNbbuZtSeer0cIN2Qbc0rsfAVTJzzx+gOe1TxMMKZAqlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlH8aYArVooSExS2LcST6RN2x0mkwHwYDVR0j BBgwFoAUG+AEyIzetzYQ/IJ1i5CxMOuffTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHFCQjVEdndtUkRKWjZ6azhLQlA1TmZOM3R0V2lhakhoS3Q4aEpxWW1h cWUvMC8xQkUwMDRDODhDREVCNzM2MTBGQzgyNzU4QjkwQjEzMEVCOUY3RDM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCRTAwNEM4OENERUI3MzYx MEZDODI3NThCOTBCMTMwRUI5RjdEMzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHFCQjVEdndtUkRKWjZ6azhLQlA1TmZOM3R0V2lhakhoS3Q4aEpxWW1hcWUvMC8x QkUwMDRDODhDREVCNzM2MTBGQzgyNzU4QjkwQjEzMEVCOUY3RDM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbaNecFnrZpD49JnzwfECend1j8H9YNCujmYUj1wJT2WkVqyo6aeAgWla2blk qgNx/ylbZx2SbDNHDR2BGSwKBRiFe71f9jeRBMlHtaNyZ1mUwJDa5bomupwPxidb ac+HdADD1hiqKDh7Ot/aMv9S5RnsgmHSHQGlMoqboGo2GR/eQtIrIjxglY2P6b+8 PKX/hGu/7UroMzECZmRO4tAt+Stet3tr1C+VUCHSL0VBS5Rv9jj+lvTVaGp0CiJR RR5FJuP/rN071571MhrAD5dKcnxT8OexdgqJshaLeQIJ32fp37hPvLCABNha7SS0 lE8b8vfV9fEMYvfqy+rqHb9rDw== -----END CERTIFICATE-----Generated at Wed Nov 5 19:47:18 2025 by rpki-client