$ rpki-client -vvf rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.mft File: B937F473A95655C5D7B945095573D217C3A1DC11.mft (raw, json) Hash identifier: MoObBwDTulRx9GUqLMTFcYjC0o95NxYHtmTf3TlmBF4= Subject key identifier: 5D:4A:93:7A:BA:93:0F:2B:03:B8:EA:BF:58:A5:85:DA:A0:51:EB:7A Authority key identifier: B9:37:F4:73:A9:56:55:C5:D7:B9:45:09:55:73:D2:17:C3:A1:DC:11 Certificate issuer: /CN=B937F473A95655C5D7B945095573D217C3A1DC11 Certificate serial: 3D87FCC136ECC794A0C22B0A259A72EBD32E7D2B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B937F473A95655C5D7B945095573D217C3A1DC11.cer Subject info access: rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.mft Manifest number: 1E Signing time: Tue 04 Nov 2025 10:04:36 +0000 Manifest this update: Tue 04 Nov 2025 09:59:36 +0000 Manifest next update: Wed 05 Nov 2025 12:55:36 +0000 Files and hashes: 1: 323830343a386135303a3a2f33322d3332203d3e20323733363631.roa (hash: BWs9FP6BDbDsmDYZV2W+M4MdNXrw7Vl+hgPyWv3lw5U=) 2: B937F473A95655C5D7B945095573D217C3A1DC11.crl (hash: DsnY+OvAsd/SkLU6Huu5YsTRXAoWKkG9vnHf5HoNr4Q=) 3: 323830343a386135303a383030303a3a2f33332d3333203d3e20323733363631.roa (hash: np0pht6I6awyJtH3iD71bahJNTBootED1EaKcxVVUr0=) 4: 323830343a386135303a3a2f33332d3333203d3e20323733363631.roa (hash: qrca0D1TlUJdIVAjeSy6LF0A6MRtQNdKCGanqjUJNXM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.crl rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B937F473A95655C5D7B945095573D217C3A1DC11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 12:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:87:fc:c1:36:ec:c7:94:a0:c2:2b:0a:25:9a:72:eb:d3:2e:7d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B937F473A95655C5D7B945095573D217C3A1DC11 Validity Not Before: Nov 4 09:59:36 2025 GMT Not After : Nov 5 12:55:36 2025 GMT Subject: CN=5D4A937ABA930F2B03B8EABF58A585DAA051EB7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ac:3b:37:94:17:36:e2:6d:9a:2c:86:b4:12: a7:7f:1c:c7:22:7c:b9:52:a2:f4:e0:c4:50:dc:67: c8:ad:3c:f6:b7:31:78:f0:2c:b1:e3:61:4e:dc:07: 2a:d9:ce:8b:f4:e9:69:70:5f:1a:34:46:d4:03:3f: d0:31:5f:7a:79:58:b1:38:e1:3f:2e:87:2c:61:23: bc:00:1f:64:9f:94:fb:84:fb:be:5d:21:f7:84:e1: d6:9c:bf:2c:26:39:dc:3a:f7:03:23:80:95:ec:31: df:1a:3e:5d:1b:59:dd:5d:ce:65:c8:61:53:19:e0: 62:6c:60:29:b3:a6:88:56:ec:2f:69:95:52:14:3f: 41:c4:36:72:b9:f5:1b:5f:94:fe:29:44:5a:76:e7: 22:eb:9b:39:01:66:c0:5d:c2:c1:6d:c3:e9:0a:da: d5:85:17:fe:48:90:a3:a1:7b:5a:36:af:68:88:26: af:57:41:fd:6c:ae:26:a0:1d:8a:c7:e9:f7:63:72: 28:d9:75:98:a7:7b:b3:1a:13:e2:90:72:6e:06:e2: df:72:1a:8e:cc:2c:77:a6:98:7b:4d:4e:5a:ba:64: 7b:44:5a:cb:04:c7:e1:25:6e:91:84:25:21:17:79: 00:ed:9b:97:18:9d:8a:ef:89:8a:59:4c:77:77:97: 45:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4A:93:7A:BA:93:0F:2B:03:B8:EA:BF:58:A5:85:DA:A0:51:EB:7A X509v3 Authority Key Identifier: keyid:B9:37:F4:73:A9:56:55:C5:D7:B9:45:09:55:73:D2:17:C3:A1:DC:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B937F473A95655C5D7B945095573D217C3A1DC11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f0:55:17:cb:d3:b0:35:33:d1:c8:b5:8c:77:3f:92:5c:10:d3: da:f9:14:6a:28:42:de:c9:ca:bd:0c:f7:08:22:1d:d9:f8:96: 87:9f:67:12:ce:06:f6:31:9f:44:49:5c:9f:02:18:f4:9a:11: 6a:9d:5a:90:81:00:47:a7:c5:ff:83:4b:28:3c:45:bf:51:e2: 73:d8:c8:04:f1:d7:cf:5c:b3:7f:18:98:a9:28:ed:f6:c3:06: c3:1a:3d:fa:f4:bc:de:40:75:c7:3a:1d:d5:7a:09:a5:1f:26: da:dc:67:1c:0c:9a:6e:d5:fc:1f:b8:af:84:df:37:26:20:97: 82:91:a0:a1:ac:a8:8a:88:f6:46:05:ba:f2:f6:0c:35:38:a7: 6d:4d:1e:9b:e1:e6:05:5d:13:aa:64:a5:01:75:79:53:d6:36: 9b:42:6f:76:1f:ca:82:b9:d9:26:6f:18:30:f3:b1:4a:04:a9: d2:4c:c0:02:cb:2a:ed:c5:5d:2e:95:6a:7d:91:57:89:7c:fa: 65:16:c6:06:58:a0:28:b1:7e:46:d2:71:9c:25:df:17:9e:8a: 2b:d1:f0:e8:18:f5:52:a6:4f:e8:1d:47:d0:03:10:ac:94:1a: 02:58:a0:64:3f:b5:58:ae:09:2e:dd:c6:87:d7:ea:72:5b:ee: b1:de:64:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPYf8wTbsx5SgwisKJZpy69MufSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkzN0Y0NzNBOTU2NTVDNUQ3Qjk0NTA5NTU3M0QyMTdD M0ExREMxMTAeFw0yNTExMDQwOTU5MzZaFw0yNTExMDUxMjU1MzZaMDMxMTAvBgNV BAMTKDVENEE5MzdBQkE5MzBGMkIwM0I4RUFCRjU4QTU4NURBQTA1MUVCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrDs3lBc24m2aLIa0Eqd/HMci fLlSovTgxFDcZ8itPPa3MXjwLLHjYU7cByrZzov06WlwXxo0RtQDP9AxX3p5WLE4 4T8uhyxhI7wAH2SflPuE+75dIfeE4dacvywmOdw69wMjgJXsMd8aPl0bWd1dzmXI YVMZ4GJsYCmzpohW7C9plVIUP0HENnK59RtflP4pRFp25yLrmzkBZsBdwsFtw+kK 2tWFF/5IkKOhe1o2r2iIJq9XQf1sriagHYrH6fdjcijZdZine7MaE+KQcm4G4t9y Go7MLHemmHtNTlq6ZHtEWssEx+ElbpGEJSEXeQDtm5cYnYrviYpZTHd3l0VDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXUqTerqTDysDuOq/WKWF2qBR63owHwYDVR0j BBgwFoAUuTf0c6lWVcXXuUUJVXPSF8Oh3BEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHZSNjVpRThzZmp3N3RVYmZnUlh3eUJkTFB4TTdydGFGNDRla2R3U3Rz MzMvMC9COTM3RjQ3M0E5NTY1NUM1RDdCOTQ1MDk1NTczRDIxN0MzQTFEQzExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5MzdGNDczQTk1NjU1QzVE N0I5NDUwOTU1NzNEMjE3QzNBMURDMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHZSNjVpRThzZmp3N3RVYmZnUlh3eUJkTFB4TTdydGFGNDRla2R3U3RzMzMvMC9C OTM3RjQ3M0E5NTY1NUM1RDdCOTQ1MDk1NTczRDIxN0MzQTFEQzExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA8FUXy9OwNTPRyLWMdz+SXBDT2vkUaihC3snKvQz3CCId2fiWh59nEs4G9jGf RElcnwIY9JoRap1akIEAR6fF/4NLKDxFv1Hic9jIBPHXz1yzfxiYqSjt9sMGwxo9 +vS83kB1xzod1XoJpR8m2txnHAyabtX8H7ivhN83JiCXgpGgoayoioj2RgW68vYM NTinbU0em+HmBV0TqmSlAXV5U9Y2m0Jvdh/KgrnZJm8YMPOxSgSp0kzAAssq7cVd LpVqfZFXiXz6ZRbGBligKLF+RtJxnCXfF56KK9Hw6Bj1UqZP6B1H0AMQrJQaAlig ZD+1WK4JLt3Gh9fqclvusd5kDg== -----END CERTIFICATE-----Generated at Wed Nov 5 03:37:47 2025 by rpki-client