$ rpki-client -vvf rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/4530D40A16BC19C8930B27067C400F5328018441.mft File: 4530D40A16BC19C8930B27067C400F5328018441.mft (raw, json) Hash identifier: 8PzI85DXZuy5aeHBGLSO5Oy5z1qCcodxsPw1rPhKDjA= Subject key identifier: BB:77:AC:A5:D2:BA:DB:32:BC:E8:B0:AA:67:A1:AF:D7:1E:E1:2B:15 Authority key identifier: 45:30:D4:0A:16:BC:19:C8:93:0B:27:06:7C:40:0F:53:28:01:84:41 Certificate issuer: /CN=4530D40A16BC19C8930B27067C400F5328018441 Certificate serial: 11A03312120C0EA639B62FBBACFD9955D97FA7BA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4530D40A16BC19C8930B27067C400F5328018441.cer Subject info access: rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/4530D40A16BC19C8930B27067C400F5328018441.mft Manifest number: 55 Signing time: Wed 05 Nov 2025 17:30:00 +0000 Manifest this update: Wed 05 Nov 2025 17:25:00 +0000 Manifest next update: Thu 06 Nov 2025 20:20:00 +0000 Files and hashes: 1: 4530D40A16BC19C8930B27067C400F5328018441.crl (hash: dvKK8O12pIJRIUu2LRjsvAtV40i0ZYZJb5tEahSGaFc=) 2: 323830343a393335633a3a2f33322d3336203d3e20323734373732.roa (hash: Ea8qGBPuP3Cd2o7wJzdnX6tVHHRMfnctp4KmiW2QKOY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/4530D40A16BC19C8930B27067C400F5328018441.crl rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/4530D40A16BC19C8930B27067C400F5328018441.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4530D40A16BC19C8930B27067C400F5328018441.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 17:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a0:33:12:12:0c:0e:a6:39:b6:2f:bb:ac:fd:99:55:d9:7f:a7:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4530D40A16BC19C8930B27067C400F5328018441 Validity Not Before: Nov 5 17:25:00 2025 GMT Not After : Nov 6 20:20:00 2025 GMT Subject: CN=BB77ACA5D2BADB32BCE8B0AA67A1AFD71EE12B15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:12:36:a7:46:34:40:b4:59:7a:7f:4e:ab:e7: c9:65:2f:c4:7b:ff:b2:4f:fb:26:01:0d:0f:76:dd: 2f:de:08:f2:77:6e:85:f0:fe:6b:00:1f:9e:ac:83: 9f:70:94:ea:f5:0b:16:b1:48:67:8b:d7:4b:b7:a0: 52:56:f8:fd:99:e7:06:b6:61:e2:11:4c:5b:3a:b0: 3f:fa:47:a3:18:46:94:41:64:e5:d1:60:d8:91:5b: d6:30:d2:65:a5:32:ca:8e:b2:59:4b:15:7c:9b:c7: 91:e2:11:44:e6:0a:8c:ce:f5:20:c5:75:1b:ef:91: 7a:bb:2d:8e:f6:d7:39:f3:8c:85:08:f4:59:ec:85: bc:f6:99:6d:c6:3e:21:bd:2f:29:11:a5:ec:4d:72: ed:e8:b6:e4:e8:aa:a5:a5:5f:76:56:ee:e4:a5:b3: ac:27:2e:21:60:53:25:d6:89:53:3a:ae:42:6b:ac: c2:54:8e:d0:f3:0a:25:d2:a6:8d:fd:af:16:4d:b6: 42:13:22:77:99:9c:39:3b:27:bf:f8:f8:a1:98:82: 9c:92:ed:5e:5a:41:9b:a6:7b:72:36:4b:95:62:39: 2d:24:8a:28:62:29:c3:54:55:c4:f4:c1:6d:33:9c: 64:88:e2:7d:f6:21:f8:3e:85:55:f6:d0:c0:d3:86: 63:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:77:AC:A5:D2:BA:DB:32:BC:E8:B0:AA:67:A1:AF:D7:1E:E1:2B:15 X509v3 Authority Key Identifier: keyid:45:30:D4:0A:16:BC:19:C8:93:0B:27:06:7C:40:0F:53:28:01:84:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/4530D40A16BC19C8930B27067C400F5328018441.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4530D40A16BC19C8930B27067C400F5328018441.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/4530D40A16BC19C8930B27067C400F5328018441.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:23:35:d2:ac:0d:bf:f0:31:70:e2:94:e3:da:75:3a:54:51: f8:34:79:0b:dd:da:69:96:b6:0f:ab:6d:a8:52:f8:2b:91:eb: ec:67:9b:4e:dc:4b:3e:de:07:ab:f6:54:df:0c:16:6e:d7:eb: 4b:32:a1:26:6d:aa:f9:23:e0:9e:47:f9:19:24:84:c0:1e:71: 21:d3:ec:92:bf:87:dc:0f:e2:57:b9:9c:31:eb:c4:7b:4d:f1: 54:34:9c:14:0f:a2:55:74:1a:77:1c:36:1f:2d:c2:2a:cd:16: a2:ae:0a:91:ed:49:d5:4b:7d:46:06:93:28:88:10:af:34:a5: 0f:db:8d:ed:07:24:3d:1e:9a:f2:e3:f2:ea:93:a2:3a:7b:e7: 1b:fb:5b:76:08:13:68:ec:69:7d:94:4f:73:ed:30:a8:e5:fb: ca:48:64:99:7a:62:fa:0f:ab:0e:c4:3d:bb:11:b8:7f:af:2a: e8:1b:d4:96:0c:12:de:0f:fd:11:0e:22:36:c0:91:50:4b:58: 21:23:ef:c2:cc:8e:75:58:92:09:f5:01:c5:5f:34:76:e1:c8: e1:27:b5:64:fa:61:96:5a:ca:de:a6:73:a6:c1:aa:51:b1:31: a7:de:49:3f:dd:98:ce:16:77:bf:54:9d:31:51:41:e3:bb:04: d8:26:e3:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEaAzEhIMDqY5ti+7rP2ZVdl/p7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzMEQ0MEExNkJDMTlDODkzMEIyNzA2N0M0MDBGNTMy ODAxODQ0MTAeFw0yNTExMDUxNzI1MDBaFw0yNTExMDYyMDIwMDBaMDMxMTAvBgNV BAMTKEJCNzdBQ0E1RDJCQURCMzJCQ0U4QjBBQTY3QTFBRkQ3MUVFMTJCMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVEjanRjRAtFl6f06r58llL8R7 /7JP+yYBDQ923S/eCPJ3boXw/msAH56sg59wlOr1CxaxSGeL10u3oFJW+P2Z5wa2 YeIRTFs6sD/6R6MYRpRBZOXRYNiRW9Yw0mWlMsqOsllLFXybx5HiEUTmCozO9SDF dRvvkXq7LY721znzjIUI9Fnshbz2mW3GPiG9LykRpexNcu3otuToqqWlX3ZW7uSl s6wnLiFgUyXWiVM6rkJrrMJUjtDzCiXSpo39rxZNtkITIneZnDk7J7/4+KGYgpyS 7V5aQZume3I2S5ViOS0kiihiKcNUVcT0wW0znGSI4n32Ifg+hVX20MDThmOhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUu3espdK62zK86LCqZ6Gv1x7hKxUwHwYDVR0j BBgwFoAURTDUCha8GciTCycGfEAPUygBhEEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNU1KZ0JNSEFvVWN0bzJOY2ttVk1YWFNBS3d5a1N6TFMxdTU2dlhWRzJV MngvMC80NTMwRDQwQTE2QkMxOUM4OTMwQjI3MDY3QzQwMEY1MzI4MDE4NDQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1MzBENDBBMTZCQzE5Qzg5 MzBCMjcwNjdDNDAwRjUzMjgwMTg0NDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NU1KZ0JNSEFvVWN0bzJOY2ttVk1YWFNBS3d5a1N6TFMxdTU2dlhWRzJVMngvMC80 NTMwRDQwQTE2QkMxOUM4OTMwQjI3MDY3QzQwMEY1MzI4MDE4NDQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdSM10qwNv/AxcOKU49p1OlRR+DR5C93aaZa2D6ttqFL4K5Hr7GebTtxLPt4H q/ZU3wwWbtfrSzKhJm2q+SPgnkf5GSSEwB5xIdPskr+H3A/iV7mcMevEe03xVDSc FA+iVXQadxw2Hy3CKs0Woq4Kke1J1Ut9RgaTKIgQrzSlD9uN7QckPR6a8uPy6pOi OnvnG/tbdggTaOxpfZRPc+0wqOX7ykhkmXpi+g+rDsQ9uxG4f68q6BvUlgwS3g/9 EQ4iNsCRUEtYISPvwsyOdViSCfUBxV80duHI4Se1ZPphllrK3qZzpsGqUbExp95J P92YzhZ3v1SdMVFB47sE2Cbjgw== -----END CERTIFICATE-----Generated at Wed Nov 5 19:04:37 2025 by rpki-client