$ rpki-client -vvf rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft File: 4E4DCA5E9F4558BA38892642829692F839F2A231.mft (raw, json) Hash identifier: aPU2n0nBmMTPEu+sMZD2aCfReqlhoMUS5CjkzgemBWQ= Subject key identifier: 24:81:95:F1:34:80:2A:F8:67:02:8F:48:1C:46:7E:28:CD:1C:B5:67 Authority key identifier: 4E:4D:CA:5E:9F:45:58:BA:38:89:26:42:82:96:92:F8:39:F2:A2:31 Certificate issuer: /CN=4E4DCA5E9F4558BA38892642829692F839F2A231 Certificate serial: 433A5FA5AC172317272BEEA6B08BB30A5185B484 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4DCA5E9F4558BA38892642829692F839F2A231.cer Subject info access: rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft Manifest number: 0305 Signing time: Tue 04 Nov 2025 17:38:33 +0000 Manifest this update: Tue 04 Nov 2025 17:33:33 +0000 Manifest next update: Wed 05 Nov 2025 21:35:33 +0000 Files and hashes: 1: 4E4DCA5E9F4558BA38892642829692F839F2A231.crl (hash: 0xBYHMQzLrOy7wWYqkvozwf7tAYOLzwPT0k5EaT1gWE=) 2: 323830343a356365633a3a2f33322d3438203d3e20323638393339.roa (hash: s3h95eMKxmkXSGki4ZHcCoW2ELo66lgT49Z+vc4H8Xk=) 3: 34352e3137362e32342e302f32322d3234203d3e20323638393339.roa (hash: 7owOvjKt8S5yyPckdQ+ocfHLQ1Lqtvr5DkC6evVNYxw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.crl rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4DCA5E9F4558BA38892642829692F839F2A231.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 21:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:3a:5f:a5:ac:17:23:17:27:2b:ee:a6:b0:8b:b3:0a:51:85:b4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E4DCA5E9F4558BA38892642829692F839F2A231 Validity Not Before: Nov 4 17:33:33 2025 GMT Not After : Nov 5 21:35:33 2025 GMT Subject: CN=248195F134802AF867028F481C467E28CD1CB567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c0:56:cc:dc:e4:09:3b:27:00:08:8b:18:5b: 13:05:1d:e9:76:0f:58:ae:29:42:7d:11:70:d1:f1: 02:02:76:ca:11:8b:67:56:e0:ba:70:95:a9:ec:d0: 39:68:52:14:bc:e5:73:3e:97:fd:5f:3c:f7:45:fd: 19:56:75:fc:7c:c9:47:2e:12:bd:6a:d4:cc:01:c0: 55:12:9c:fb:30:37:35:eb:57:7e:74:d4:2d:2c:9c: 8e:de:ed:15:19:d9:da:a7:37:c1:09:e6:c4:fa:4c: 7c:9e:eb:13:4e:3b:d2:e7:62:df:66:e7:40:3b:76: c1:8b:ff:eb:9d:c6:85:ea:f8:e0:b7:15:13:75:59: a3:3c:e6:2f:28:d7:bc:46:ae:d4:15:25:ec:e8:46: b7:30:4a:38:01:c1:6b:6b:cf:db:f9:d2:35:f8:a1: be:e5:d5:df:ca:84:d9:25:76:43:03:5f:df:03:af: 06:c3:83:d0:a6:9d:6b:b2:f8:fd:bb:02:c9:b6:c4: 6f:30:cb:77:4c:37:f1:86:9c:68:0f:9d:35:36:07: 3e:d0:3e:7c:f8:ff:11:f2:5d:3f:45:70:d1:d2:81: ae:91:3f:cf:4b:2e:68:6b:2b:b3:19:b0:49:9e:65: bd:ab:24:eb:7c:65:4c:12:ea:38:6b:23:c9:a6:97: 62:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:81:95:F1:34:80:2A:F8:67:02:8F:48:1C:46:7E:28:CD:1C:B5:67 X509v3 Authority Key Identifier: keyid:4E:4D:CA:5E:9F:45:58:BA:38:89:26:42:82:96:92:F8:39:F2:A2:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4DCA5E9F4558BA38892642829692F839F2A231.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b8:af:8f:cb:58:86:3e:44:c2:b7:d5:7a:e0:3e:44:29:92: 4f:f9:1c:99:a5:04:dc:cf:77:e7:98:2c:9d:23:9f:bd:16:42: e5:ae:48:c9:33:ef:bb:cd:eb:82:69:ef:5b:7e:48:66:c2:3e: 40:96:a6:72:8d:4f:b0:75:0a:41:07:32:f6:c5:92:61:bf:b4: e9:1f:35:8a:0c:00:a2:80:35:b0:ea:70:19:70:e3:34:e3:df: 72:1a:af:60:e1:95:51:85:61:e2:78:98:f9:e5:7b:51:16:dc: 17:7a:b7:53:1b:1e:06:a7:51:be:38:84:e3:e1:2d:cd:a9:9b: 95:87:f5:e2:51:c5:d0:7c:a3:bf:e9:f8:d6:9a:34:85:1e:98: cc:18:4a:e9:8c:f9:ab:d3:49:1c:ca:98:70:f3:0e:3b:6b:a4: 16:25:93:e2:98:50:3e:5d:4a:07:6a:3c:0f:f2:c3:9a:2b:fb: 02:db:2c:19:2f:57:81:a1:d7:7d:fc:bf:76:7b:6c:e9:c2:a6: 35:55:4f:64:2f:92:fe:96:fa:47:40:7c:4d:1f:ee:05:ce:34: 18:3e:1d:21:87:c6:ca:e7:70:4f:24:73:54:63:3b:af:af:42: 39:64:1f:eb:8a:3d:1e:56:93:ba:4c:35:ed:a9:70:86:ce:33: 10:b1:85:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQzpfpawXIxcnK+6msIuzClGFtIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU0RENBNUU5RjQ1NThCQTM4ODkyNjQyODI5NjkyRjgz OUYyQTIzMTAeFw0yNTExMDQxNzMzMzNaFw0yNTExMDUyMTM1MzNaMDMxMTAvBgNV BAMTKDI0ODE5NUYxMzQ4MDJBRjg2NzAyOEY0ODFDNDY3RTI4Q0QxQ0I1NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJwFbM3OQJOycACIsYWxMFHel2 D1iuKUJ9EXDR8QICdsoRi2dW4Lpwlans0DloUhS85XM+l/1fPPdF/RlWdfx8yUcu Er1q1MwBwFUSnPswNzXrV3501C0snI7e7RUZ2dqnN8EJ5sT6THye6xNOO9LnYt9m 50A7dsGL/+udxoXq+OC3FRN1WaM85i8o17xGrtQVJezoRrcwSjgBwWtrz9v50jX4 ob7l1d/KhNkldkMDX98DrwbDg9CmnWuy+P27Asm2xG8wy3dMN/GGnGgPnTU2Bz7Q Pnz4/xHyXT9FcNHSga6RP89LLmhrK7MZsEmeZb2rJOt8ZUwS6jhrI8mml2IXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJIGV8TSAKvhnAo9IHEZ+KM0ctWcwHwYDVR0j BBgwFoAUTk3KXp9FWLo4iSZCgpaS+DnyojEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEpjS3hCZEo1Tlg5ZTh5blRaQ3Z2VUtpdlg3UDhocWFUQXc2aEtpa1BM N3MvMS80RTREQ0E1RTlGNDU1OEJBMzg4OTI2NDI4Mjk2OTJGODM5RjJBMjMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFNERDQTVFOUY0NTU4QkEz ODg5MjY0MjgyOTY5MkY4MzlGMkEyMzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OEpjS3hCZEo1Tlg5ZTh5blRaQ3Z2VUtpdlg3UDhocWFUQXc2aEtpa1BMN3MvMS80 RTREQ0E1RTlGNDU1OEJBMzg4OTI2NDI4Mjk2OTJGODM5RjJBMjMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANbivj8tYhj5EwrfVeuA+RCmST/kcmaUE3M9355gsnSOfvRZC5a5IyTPvu83r gmnvW35IZsI+QJamco1PsHUKQQcy9sWSYb+06R81igwAooA1sOpwGXDjNOPfchqv YOGVUYVh4niY+eV7URbcF3q3UxseBqdRvjiE4+EtzamblYf14lHF0Hyjv+n41po0 hR6YzBhK6Yz5q9NJHMqYcPMOO2ukFiWT4phQPl1KB2o8D/LDmiv7AtssGS9XgaHX ffy/dnts6cKmNVVPZC+S/pb6R0B8TR/uBc40GD4dIYfGyudwTyRzVGM7r69COWQf 64o9HlaTukw17alwhs4zELGFLQ== -----END CERTIFICATE-----Generated at Wed Nov 5 01:02:34 2025 by rpki-client