$ rpki-client -vvf rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft File: 4959F557EDB40C3E3B7D450A5F4FE57884600618.mft (raw, json) Hash identifier: tnhjDUjQMcUKzVM9dzzjK4Oud+ulu3Wwyxmg6UO56yw= Subject key identifier: 12:03:E2:B3:67:63:A2:4F:FB:DD:31:FC:A8:A0:B7:A8:E1:64:F6:6A Authority key identifier: 49:59:F5:57:ED:B4:0C:3E:3B:7D:45:0A:5F:4F:E5:78:84:60:06:18 Certificate issuer: /CN=4959F557EDB40C3E3B7D450A5F4FE57884600618 Certificate serial: 65CAB4253037E4113078DE47F116947BDB9863CC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4959F557EDB40C3E3B7D450A5F4FE57884600618.cer Subject info access: rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft Manifest number: 0250 Signing time: Wed 05 Nov 2025 14:58:42 +0000 Manifest this update: Wed 05 Nov 2025 14:53:42 +0000 Manifest next update: Thu 06 Nov 2025 16:40:42 +0000 Files and hashes: 1: 323830343a313836383a3a2f33322d313238203d3e203631393330.roa (hash: womes7nW6j6cJzPaigMdTVDQyMe9VIOJq6T7IXcSnzo=) 2: 3230302e31302e35362e302f32322d3234203d3e203631393330.roa (hash: IeXUMqTD+Japny11NJhGMFTRJW0pIY9flSE1LpaOesQ=) 3: 4959F557EDB40C3E3B7D450A5F4FE57884600618.crl (hash: Cd14MGH7SuC4T5EwPG6egZVlKU23xPS/zlwwPg1t4yM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.crl rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4959F557EDB40C3E3B7D450A5F4FE57884600618.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 16:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ca:b4:25:30:37:e4:11:30:78:de:47:f1:16:94:7b:db:98:63:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4959F557EDB40C3E3B7D450A5F4FE57884600618 Validity Not Before: Nov 5 14:53:42 2025 GMT Not After : Nov 6 16:40:42 2025 GMT Subject: CN=1203E2B36763A24FFBDD31FCA8A0B7A8E164F66A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c5:36:27:8e:b0:39:13:73:01:a0:f5:94:1a: ba:14:93:e5:02:1f:32:bb:ff:4a:cd:5d:fc:b0:73: 68:19:e3:ca:44:4a:c2:f6:5a:9b:43:7b:bc:b9:ea: 38:60:b5:9d:1d:dc:4f:32:c2:cc:47:e2:6d:03:21: bb:a2:e7:7b:3e:85:76:11:9d:55:95:5d:97:1c:26: 3b:a1:18:84:01:ba:1a:84:52:f6:62:81:35:03:72: 3e:e9:53:d2:f9:b6:c2:40:bc:01:eb:bc:b5:64:d7: e0:d5:c3:eb:63:32:c7:3d:c8:33:1d:45:05:65:11: 34:d1:c6:09:5e:8a:65:96:29:f0:d6:c0:6b:d3:2f: 3b:ea:97:d0:23:a1:67:e9:33:51:5d:55:e0:fb:ae: 79:2f:18:65:75:8a:96:66:39:0c:e3:cc:e5:11:cd: 41:e2:44:1e:74:6c:8a:0a:1d:65:f8:ec:ef:51:12: 1c:45:38:80:a4:cf:e7:c0:73:31:3f:3d:56:ae:f0: 1b:b4:31:81:46:3a:25:60:53:fb:aa:8e:1a:c3:5f: c3:a5:24:27:bb:d2:bd:28:ee:22:9f:e6:7a:a0:04: 04:16:a8:28:8a:94:82:76:c4:51:fc:ca:30:ae:6d: 45:5f:71:e0:6f:18:f0:79:c9:40:e1:60:93:85:7f: 9e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:03:E2:B3:67:63:A2:4F:FB:DD:31:FC:A8:A0:B7:A8:E1:64:F6:6A X509v3 Authority Key Identifier: keyid:49:59:F5:57:ED:B4:0C:3E:3B:7D:45:0A:5F:4F:E5:78:84:60:06:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4959F557EDB40C3E3B7D450A5F4FE57884600618.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:c8:9f:57:eb:1f:3d:e0:9a:2b:7f:b9:cf:2b:4a:48:97:8c: 40:4b:1e:1a:74:5e:67:d1:16:9c:55:d7:fe:2d:8c:b9:d2:e3: 01:d6:47:2d:58:10:de:9c:53:aa:8e:57:29:ff:d9:95:d3:68: 4a:b0:b9:57:01:35:61:d8:65:5c:e5:74:42:24:c6:f3:1d:78: 53:06:4a:e2:93:bd:63:e9:68:7e:b9:1b:c7:48:ad:b9:8c:8d: 2a:de:4d:d9:d9:1f:a1:d2:93:9d:a0:86:d6:97:2d:14:69:a3: d2:7a:2d:9b:06:ac:eb:85:12:3d:da:62:be:ff:64:0f:90:9b: 93:45:22:7d:60:15:53:6d:fe:aa:75:22:f7:72:d1:55:a5:69: 22:ff:e6:ad:ec:70:e4:20:69:6a:57:cc:54:b1:44:d0:a7:d9: 6e:3a:75:b4:a2:c8:6f:2c:9f:52:6b:88:0c:31:1d:49:43:6a: af:64:75:ab:70:2c:47:ea:35:87:d0:4c:75:9f:c9:1a:7e:e5: 9b:0a:d1:55:ed:0d:30:d5:9a:fa:f5:9b:5d:4b:8f:4f:15:7f: a5:09:77:78:6f:c1:2a:e3:58:2d:9f:a1:dc:63:45:e9:5a:2a: f6:3a:12:ca:41:21:3d:96:b7:47:39:3b:0a:df:cc:fe:e2:72: 0a:48:26:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZcq0JTA35BEweN5H8RaUe9uYY8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1OUY1NTdFREI0MEMzRTNCN0Q0NTBBNUY0RkU1Nzg4 NDYwMDYxODAeFw0yNTExMDUxNDUzNDJaFw0yNTExMDYxNjQwNDJaMDMxMTAvBgNV BAMTKDEyMDNFMkIzNjc2M0EyNEZGQkREMzFGQ0E4QTBCN0E4RTE2NEY2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIxTYnjrA5E3MBoPWUGroUk+UC HzK7/0rNXfywc2gZ48pESsL2WptDe7y56jhgtZ0d3E8ywsxH4m0DIbui53s+hXYR nVWVXZccJjuhGIQBuhqEUvZigTUDcj7pU9L5tsJAvAHrvLVk1+DVw+tjMsc9yDMd RQVlETTRxgleimWWKfDWwGvTLzvql9AjoWfpM1FdVeD7rnkvGGV1ipZmOQzjzOUR zUHiRB50bIoKHWX47O9REhxFOICkz+fAczE/PVau8Bu0MYFGOiVgU/uqjhrDX8Ol JCe70r0o7iKf5nqgBAQWqCiKlIJ2xFH8yjCubUVfceBvGPB5yUDhYJOFf55pAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEgPis2djok/73TH8qKC3qOFk9mowHwYDVR0j BBgwFoAUSVn1V+20DD47fUUKX0/leIRgBhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXZyWWoxWDNQZ0hiY1g5R2VKeDdyQW5BNjZlOEtLN2dNUmQ5eEVpVjdi SnUvMC80OTU5RjU1N0VEQjQwQzNFM0I3RDQ1MEE1RjRGRTU3ODg0NjAwNjE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5NTlGNTU3RURCNDBDM0Uz QjdENDUwQTVGNEZFNTc4ODQ2MDA2MTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXZyWWoxWDNQZ0hiY1g5R2VKeDdyQW5BNjZlOEtLN2dNUmQ5eEVpVjdiSnUvMC80 OTU5RjU1N0VEQjQwQzNFM0I3RDQ1MEE1RjRGRTU3ODg0NjAwNjE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQMifV+sfPeCaK3+5zytKSJeMQEseGnReZ9EWnFXX/i2MudLjAdZHLVgQ3pxT qo5XKf/ZldNoSrC5VwE1YdhlXOV0QiTG8x14UwZK4pO9Y+lofrkbx0ituYyNKt5N 2dkfodKTnaCG1pctFGmj0notmwas64USPdpivv9kD5Cbk0UifWAVU23+qnUi93LR VaVpIv/mrexw5CBpalfMVLFE0KfZbjp1tKLIbyyfUmuIDDEdSUNqr2R1q3AsR+o1 h9BMdZ/JGn7lmwrRVe0NMNWa+vWbXUuPTxV/pQl3eG/BKuNYLZ+h3GNF6Voq9joS ykEhPZa3Rzk7Ct/M/uJyCkgmNw== -----END CERTIFICATE-----Generated at Wed Nov 5 22:44:38 2025 by rpki-client