$ rpki-client -vvf rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft File: 4856F1A3B30D5C7881DA87018005E5D420414FCA.mft (raw, json) Hash identifier: pwVvf7HKAiwicDsNclhUpRZMXD0bqoZAV2FWgg6Hbk0= Subject key identifier: 0C:B6:DD:67:F7:1C:8D:CD:16:87:72:BD:A3:90:23:44:5E:66:7D:3B Authority key identifier: 48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA Certificate issuer: /CN=4856F1A3B30D5C7881DA87018005E5D420414FCA Certificate serial: 4757F06008690E317FDE44CF4E19CD24EC1C82BC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer Subject info access: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft Manifest number: 012C Signing time: Tue 04 Nov 2025 23:58:09 +0000 Manifest this update: Tue 04 Nov 2025 23:53:09 +0000 Manifest next update: Thu 06 Nov 2025 01:34:09 +0000 Files and hashes: 1: 4856F1A3B30D5C7881DA87018005E5D420414FCA.crl (hash: XPAEhdK5jn6SG75OCLI09MqDC1gjKzbMf9exA6yQj+s=) 2: 3138372e33332e3230382e302f32302d3332203d3e203533303838.roa (hash: NBzUedd6ZxjbCTpvddwCofjpV/PLJrC91qO5bna3/S4=) 3: 323830343a3336303a3a2f33322d313238203d3e203533303838.roa (hash: VzHvYSqj1UpdHPrHiFGlX041xdryfjksMALlGnDnEN4=) 4: 3137372e32312e38302e302f32302d3332203d3e203533303838.roa (hash: wXf/RK8DqR/CjpwFvOAppiNi0Tr5aa7oPUSPTknLvSQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:57:f0:60:08:69:0e:31:7f:de:44:cf:4e:19:cd:24:ec:1c:82:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4856F1A3B30D5C7881DA87018005E5D420414FCA Validity Not Before: Nov 4 23:53:09 2025 GMT Not After : Nov 6 01:34:09 2025 GMT Subject: CN=0CB6DD67F71C8DCD168772BDA39023445E667D3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:54:48:e0:77:84:5b:ee:a2:5f:b8:40:28:3e: 44:5e:b1:44:cd:bd:e3:a8:46:4c:75:ab:80:31:4a: ac:86:1d:68:f1:c1:c9:90:e1:42:fd:51:3a:f7:99: 66:8a:c3:74:00:f4:18:1c:6c:22:06:85:2a:c0:e6: 9c:ea:34:20:66:b2:4f:bc:1a:1e:e2:b2:16:cd:89: 8f:27:10:44:0c:79:10:5f:a4:34:f7:7c:63:f6:f2: d4:11:e9:01:04:91:89:44:8b:8f:be:79:99:80:80: 45:5c:1f:26:77:98:d4:1d:1f:54:98:e5:2f:61:9b: b8:bd:9c:93:b9:8e:0d:a9:3f:1a:9a:c5:77:f2:21: c5:a8:ba:44:b9:2a:3b:31:d5:b5:80:56:52:8c:b5: 34:a3:c5:f0:c8:d6:a2:a3:0e:d9:92:46:c9:fd:12: ac:f2:0b:39:7e:56:93:ac:c7:6c:82:61:51:2d:d3: 08:c0:9b:7e:6c:61:39:83:43:1a:5d:d7:7c:aa:0b: 1d:85:c2:b9:22:74:2e:18:86:65:5e:49:74:a6:e5: da:dc:6b:7e:ff:9d:8d:6f:92:e9:93:1c:0f:b1:d4: 0a:f2:48:a0:20:6b:67:cf:df:f7:88:7c:d5:71:d0: f1:ae:93:22:e8:15:99:00:14:66:84:6c:0e:da:81: 74:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B6:DD:67:F7:1C:8D:CD:16:87:72:BD:A3:90:23:44:5E:66:7D:3B X509v3 Authority Key Identifier: keyid:48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:a1:ba:eb:3b:bd:f9:fc:70:16:cc:c5:40:1f:5d:df:e2:50: d0:e8:18:e6:50:7a:08:b8:01:ff:4c:4a:ad:8c:09:64:fd:c3: 56:9c:37:c7:b6:c8:3d:5d:ef:01:23:e1:14:88:8d:8c:f1:45: 97:ea:7d:92:bd:d0:f6:c5:17:1c:fe:e3:80:95:ac:7f:91:3d: 5b:1d:d8:72:d3:3c:50:c3:55:8a:58:3a:1e:d9:ee:0c:86:22: 52:5e:e7:22:5b:4e:79:77:70:71:89:26:ac:c0:5b:b1:3e:1c: e3:96:bc:4c:6d:02:69:26:29:56:a6:76:ed:3d:59:66:c9:97: 86:03:94:67:d3:e8:4b:f1:72:49:05:34:67:d1:e4:4f:91:39: 0f:d0:21:e9:ff:d1:14:9d:e9:35:46:b3:21:0f:cd:f4:ba:6e: a3:16:12:cf:00:f6:60:ea:fe:15:e2:5b:e3:97:b2:2e:ff:6d: 0d:92:98:4a:a3:be:05:c3:04:51:78:82:a5:71:2d:83:8d:49: 0b:77:38:54:f3:a9:c3:ad:6b:c2:56:af:cd:29:23:0e:3c:f6: 66:22:a4:b2:be:45:b4:78:1a:af:f3:02:94:f8:bb:4d:e3:55: c4:1a:07:7a:e6:d5:00:41:14:8d:0f:fe:86:08:94:1d:c3:6a: 60:a7:97:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR1fwYAhpDjF/3kTPThnNJOwcgrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NkYxQTNCMzBENUM3ODgxREE4NzAxODAwNUU1RDQy MDQxNEZDQTAeFw0yNTExMDQyMzUzMDlaFw0yNTExMDYwMTM0MDlaMDMxMTAvBgNV BAMTKDBDQjZERDY3RjcxQzhEQ0QxNjg3NzJCREEzOTAyMzQ0NUU2NjdEM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjVEjgd4Rb7qJfuEAoPkResUTN veOoRkx1q4AxSqyGHWjxwcmQ4UL9UTr3mWaKw3QA9BgcbCIGhSrA5pzqNCBmsk+8 Gh7ishbNiY8nEEQMeRBfpDT3fGP28tQR6QEEkYlEi4++eZmAgEVcHyZ3mNQdH1SY 5S9hm7i9nJO5jg2pPxqaxXfyIcWoukS5Kjsx1bWAVlKMtTSjxfDI1qKjDtmSRsn9 EqzyCzl+VpOsx2yCYVEt0wjAm35sYTmDQxpd13yqCx2FwrkidC4YhmVeSXSm5drc a37/nY1vkumTHA+x1ArySKAga2fP3/eIfNVx0PGukyLoFZkAFGaEbA7agXRxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDLbdZ/ccjc0Wh3K9o5AjRF5mfTswHwYDVR0j BBgwFoAUSFbxo7MNXHiB2ocBgAXl1CBBT8owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWNoZXl4VG5HRG52dXd6eE0zOEY0dG9ZQzczVUhaNlU2aXpVeW9Sckdz Z3QvMC80ODU2RjFBM0IzMEQ1Qzc4ODFEQTg3MDE4MDA1RTVENDIwNDE0RkNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4NTZGMUEzQjMwRDVDNzg4 MURBODcwMTgwMDVFNUQ0MjA0MTRGQ0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWNoZXl4VG5HRG52dXd6eE0zOEY0dG9ZQzczVUhaNlU2aXpVeW9SckdzZ3QvMC80 ODU2RjFBM0IzMEQ1Qzc4ODFEQTg3MDE4MDA1RTVENDIwNDE0RkNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANKG66zu9+fxwFszFQB9d3+JQ0OgY5lB6CLgB/0xKrYwJZP3DVpw3x7bIPV3v ASPhFIiNjPFFl+p9kr3Q9sUXHP7jgJWsf5E9Wx3YctM8UMNVilg6HtnuDIYiUl7n IltOeXdwcYkmrMBbsT4c45a8TG0CaSYpVqZ27T1ZZsmXhgOUZ9PoS/FySQU0Z9Hk T5E5D9Ah6f/RFJ3pNUazIQ/N9LpuoxYSzwD2YOr+FeJb45eyLv9tDZKYSqO+BcME UXiCpXEtg41JC3c4VPOpw61rwlavzSkjDjz2ZiKksr5FtHgar/MClPi7TeNVxBoH eubVAEEUjQ/+hgiUHcNqYKeXkA== -----END CERTIFICATE-----Generated at Wed Nov 5 05:15:58 2025 by rpki-client