$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.mft File: 474B51CEB662EF010C6B1DDD845BC89A81122C37.mft (raw, json) Hash identifier: qgEI23gjnra3/Z02+dQmiVXSJ5uXLMI+61S1MOnTrpg= Subject key identifier: 06:FD:CB:9E:36:9B:03:A0:BC:A0:2F:2F:C9:4B:09:AD:7E:1D:E9:1F Authority key identifier: 47:4B:51:CE:B6:62:EF:01:0C:6B:1D:DD:84:5B:C8:9A:81:12:2C:37 Certificate issuer: /CN=474B51CEB662EF010C6B1DDD845BC89A81122C37 Certificate serial: 62F2A79950D2210AD0B652EBFED8CA0504E340C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474B51CEB662EF010C6B1DDD845BC89A81122C37.cer Subject info access: rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.mft Manifest number: 0149 Signing time: Tue 04 Nov 2025 20:03:20 +0000 Manifest this update: Tue 04 Nov 2025 19:58:20 +0000 Manifest next update: Wed 05 Nov 2025 23:32:20 +0000 Files and hashes: 1: 323830343a343135303a3a2f33322d3334203d3e20323637343236.roa (hash: tWCtjiEj4ZjexnMdccG45BAZqM0g81RR2poxSzeciIY=) 2: 474B51CEB662EF010C6B1DDD845BC89A81122C37.crl (hash: +RWt76KTrIbAmoBE90OG218tKTMVzbm5C/cNMaetYbU=) 3: 3138312e3139312e3136302e302f32322d3234203d3e20323637343236.roa (hash: e/S/UAp5dEIapXuMmc48DkI8hCcgJYR+xfAzKvtfdrA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.crl rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474B51CEB662EF010C6B1DDD845BC89A81122C37.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 23:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f2:a7:99:50:d2:21:0a:d0:b6:52:eb:fe:d8:ca:05:04:e3:40:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=474B51CEB662EF010C6B1DDD845BC89A81122C37 Validity Not Before: Nov 4 19:58:20 2025 GMT Not After : Nov 5 23:32:20 2025 GMT Subject: CN=06FDCB9E369B03A0BCA02F2FC94B09AD7E1DE91F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:35:29:47:34:5b:ac:f0:fd:85:16:88:91: e5:94:39:b9:44:e9:35:11:82:30:71:da:38:d1:c9: 74:5a:69:d6:ce:48:80:69:cc:37:a2:9a:a6:32:b3: a0:90:94:0e:a6:c5:07:92:44:02:a4:36:c5:e0:db: 70:8c:cc:18:5b:17:23:eb:4c:26:c0:8c:10:90:f5: b7:f7:5e:17:f0:d0:06:59:ed:56:44:8b:5d:97:7d: 1c:b0:45:45:eb:1d:14:a1:bd:07:60:8f:42:01:9b: 8c:18:24:52:4a:09:38:e5:60:9c:e1:8d:bf:39:33: 61:c7:72:b0:f5:1b:f3:c9:02:ee:48:f4:53:c9:d7: e3:c6:42:b7:9d:b0:40:4e:71:d6:79:b9:fc:73:b6: 48:25:de:85:62:bc:e2:dc:5b:f3:85:41:5c:9e:71: ce:d3:db:ef:f1:38:3d:5f:bc:03:aa:c0:52:a0:7a: 62:99:3f:88:bb:f0:e0:04:bf:bf:ab:e9:ee:82:7d: 1d:d5:9a:9d:05:15:63:aa:79:90:fa:bc:ae:16:62: 84:34:f8:7d:4c:99:df:ea:a0:04:73:08:d0:9e:ca: 6a:1c:23:e2:74:2b:2a:c2:cd:2a:31:01:9c:27:87: e7:a6:4d:ed:f5:92:27:ed:26:fa:29:45:64:ce:41: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FD:CB:9E:36:9B:03:A0:BC:A0:2F:2F:C9:4B:09:AD:7E:1D:E9:1F X509v3 Authority Key Identifier: keyid:47:4B:51:CE:B6:62:EF:01:0C:6B:1D:DD:84:5B:C8:9A:81:12:2C:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474B51CEB662EF010C6B1DDD845BC89A81122C37.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e5:14:ee:dd:8a:66:30:f8:04:68:8d:c8:82:44:04:ae:45: 6e:fa:60:22:d6:31:90:ad:8f:da:43:50:e9:b9:db:02:1a:f6: a2:81:17:ec:56:a2:16:d1:9f:47:f2:e1:f4:e4:c3:92:30:eb: 4e:29:cc:72:9b:a3:fb:8f:f4:ca:cb:cb:6b:24:55:70:55:07: 4f:f2:a3:95:8c:1e:b5:92:e3:25:fa:3d:8b:cc:b7:7a:6e:7e: 66:ac:49:34:c3:e8:bf:60:51:99:6d:12:48:aa:7e:b3:70:a3: 2b:5e:4a:a2:91:49:6f:c7:bf:a8:fc:cd:23:5d:b1:4c:13:8e: 93:f6:9a:c9:f1:c9:1c:db:b0:d0:d8:56:f7:af:c4:3b:69:ca: 6a:ac:ce:6b:6c:08:18:12:ec:ad:87:ac:b1:d7:89:38:25:38: 3c:2a:48:43:bd:c5:c3:1d:72:61:53:66:53:b6:f7:fb:6d:26: 38:89:e2:13:73:12:91:b1:ed:78:8e:26:2c:f4:9e:39:82:be: 98:9f:19:79:78:c1:be:cf:4e:22:49:47:eb:7d:6c:6d:c7:6b: 1a:b8:c9:ef:14:4e:85:5a:36:02:9b:b8:e9:38:92:35:23:83: 58:b5:4f:65:a2:d8:81:15:2b:bc:cd:26:dc:f3:9b:1c:c3:55: f9:9a:83:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYvKnmVDSIQrQtlLr/tjKBQTjQMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc0QjUxQ0VCNjYyRUYwMTBDNkIxREREODQ1QkM4OUE4 MTEyMkMzNzAeFw0yNTExMDQxOTU4MjBaFw0yNTExMDUyMzMyMjBaMDMxMTAvBgNV BAMTKDA2RkRDQjlFMzY5QjAzQTBCQ0EwMkYyRkM5NEIwOUFEN0UxREU5MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGczUpRzRbrPD9hRaIkeWUOblE 6TURgjBx2jjRyXRaadbOSIBpzDeimqYys6CQlA6mxQeSRAKkNsXg23CMzBhbFyPr TCbAjBCQ9bf3Xhfw0AZZ7VZEi12XfRywRUXrHRShvQdgj0IBm4wYJFJKCTjlYJzh jb85M2HHcrD1G/PJAu5I9FPJ1+PGQredsEBOcdZ5ufxztkgl3oVivOLcW/OFQVye cc7T2+/xOD1fvAOqwFKgemKZP4i78OAEv7+r6e6CfR3Vmp0FFWOqeZD6vK4WYoQ0 +H1Mmd/qoARzCNCeymocI+J0KyrCzSoxAZwnh+emTe31kiftJvopRWTOQb0pAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBv3LnjabA6C8oC8vyUsJrX4d6R8wHwYDVR0j BBgwFoAUR0tRzrZi7wEMax3dhFvImoESLDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXdZeWtndFFXRUZxajdGdTN4WlRoTjJEclg5amR2Q2FWbjJ3TVhGYjZV NTIvMC80NzRCNTFDRUI2NjJFRjAxMEM2QjFEREQ4NDVCQzg5QTgxMTIyQzM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3NEI1MUNFQjY2MkVGMDEw QzZCMURERDg0NUJDODlBODExMjJDMzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXdZeWtndFFXRUZxajdGdTN4WlRoTjJEclg5amR2Q2FWbjJ3TVhGYjZVNTIvMC80 NzRCNTFDRUI2NjJFRjAxMEM2QjFEREQ4NDVCQzg5QTgxMTIyQzM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJOUU7t2KZjD4BGiNyIJEBK5FbvpgItYxkK2P2kNQ6bnbAhr2ooEX7FaiFtGf R/Lh9OTDkjDrTinMcpuj+4/0ysvLayRVcFUHT/KjlYwetZLjJfo9i8y3em5+ZqxJ NMPov2BRmW0SSKp+s3CjK15KopFJb8e/qPzNI12xTBOOk/aayfHJHNuw0NhW96/E O2nKaqzOa2wIGBLsrYessdeJOCU4PCpIQ73Fwx1yYVNmU7b3+20mOIniE3MSkbHt eI4mLPSeOYK+mJ8ZeXjBvs9OIklH631sbcdrGrjJ7xROhVo2Apu46TiSNSODWLVP ZaLYgRUrvM0m3PObHMNV+ZqDew== -----END CERTIFICATE-----Generated at Wed Nov 5 12:26:25 2025 by rpki-client