$ rpki-client -vvf rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft File: 484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft (raw, json) Hash identifier: qlhtNg0z9Jx48FScCSf1Ax85NPHVITWjpov1RR/ETxc= Subject key identifier: 23:24:3A:DF:1A:28:99:63:4C:16:3B:78:62:62:54:14:5D:41:2D:F3 Authority key identifier: 48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3 Certificate issuer: /CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3 Certificate serial: 412025911202B12F4DA6E2710333102D37AAC66A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer Subject info access: rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft Manifest number: 0300 Signing time: Tue 04 Nov 2025 15:11:37 +0000 Manifest this update: Tue 04 Nov 2025 15:06:37 +0000 Manifest next update: Wed 05 Nov 2025 15:18:37 +0000 Files and hashes: 1: 484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl (hash: HAWVYjyI+sfceB1fa/Ytarh67qGH67r2+ZQufoWYhlk=) 2: 323830343a383034303a3a2f33322d3332203d3e20323731373339.roa (hash: k8/Tw+SgoiL84ZsrYLWHWBEWIwVDj1v9BVLZaSH4bik=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 15:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:20:25:91:12:02:b1:2f:4d:a6:e2:71:03:33:10:2d:37:aa:c6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3 Validity Not Before: Nov 4 15:06:37 2025 GMT Not After : Nov 5 15:18:37 2025 GMT Subject: CN=23243ADF1A2899634C163B78626254145D412DF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2c:6a:9a:22:04:d7:ea:b3:15:6c:cc:9a:97: 2e:b5:81:51:2a:5a:c1:89:2c:01:92:5b:ab:13:34: 75:f4:8b:d4:a5:9f:46:e9:46:a3:f3:bc:91:ae:d2: 3b:64:02:a2:aa:88:8f:f2:87:4e:29:ea:cb:4b:48: 24:04:1a:9e:0d:71:a7:53:18:f6:6f:90:49:4e:ce: c1:e9:aa:61:2d:85:d7:4e:57:82:78:20:53:57:7b: 54:5c:a7:28:e2:dd:ea:81:c3:85:74:95:79:61:b9: 48:42:9b:36:97:55:94:5d:7a:dc:2a:7a:2a:63:4f: 21:3d:d1:d7:69:c4:6c:52:16:8b:31:6b:d1:f7:37: c3:22:46:9b:ee:33:fe:48:e7:b3:fb:17:f1:0f:30: 54:1a:82:47:04:1f:a9:3d:e5:ee:3a:8a:22:77:61: 06:44:d8:02:1b:71:3c:15:dc:c5:fc:66:5b:3e:54: e7:b5:5e:1e:e2:e9:60:4c:ec:e7:37:a8:54:7e:b3: 60:a7:33:15:26:80:ba:c4:57:cd:0c:39:d9:48:07: 6a:d6:48:3b:c1:2f:92:16:2e:b3:f0:95:43:8f:85: 51:6f:06:48:cb:b3:e9:94:fc:ef:4f:ea:24:e5:2d: 10:fd:e7:fc:6f:84:f6:f3:f8:e7:6c:34:f0:9b:58: c1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:24:3A:DF:1A:28:99:63:4C:16:3B:78:62:62:54:14:5D:41:2D:F3 X509v3 Authority Key Identifier: keyid:48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:b7:5c:1c:40:41:7a:c2:bb:8f:1f:67:8f:50:28:04:5e:fb: 1e:cb:23:a2:e2:2b:99:6e:41:65:92:9e:74:11:60:da:4f:2d: 9a:97:6f:69:6c:03:1f:06:6c:f2:d8:62:cd:55:fa:79:52:59: 91:01:69:e3:51:73:5a:7a:81:28:6f:f5:aa:94:56:2a:0b:83: 27:c2:4f:69:3a:f0:81:e4:3d:4b:da:34:5b:05:1a:f2:7d:2d: a2:c9:2a:f3:df:22:a7:ad:e4:0d:ab:90:09:dc:cf:9d:8c:b4: 0c:69:19:3b:9f:23:38:10:50:24:83:2b:b7:16:ca:f1:10:20: 67:d9:56:f4:05:c1:9d:03:3f:94:6b:1c:31:19:05:0b:81:85: 41:14:97:f0:ea:0c:45:c3:dd:ac:36:90:6e:b3:72:9f:12:fd: 1b:04:4e:5b:3b:fe:d6:b2:23:a4:23:24:9d:1d:a5:d7:b0:29: 03:d9:e7:66:7c:65:e8:62:61:c2:77:69:c8:08:25:53:2e:a1: c8:0b:a5:83:9a:84:3d:2f:1f:d7:4a:6d:53:9e:88:b3:26:32: c7:c5:02:b5:9a:7f:5a:04:72:45:83:df:e1:3a:32:bc:e4:15: d7:d9:10:17:a8:f9:c6:26:51:53:3e:58:69:7c:22:05:7a:6b: 79:ec:47:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQSAlkRICsS9NpuJxAzMQLTeqxmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg0Q0FGRUQxN0QwMkM0NTU1RTVENDU4NjlGMzBFQ0FB N0UxRTVFMzAeFw0yNTExMDQxNTA2MzdaFw0yNTExMDUxNTE4MzdaMDMxMTAvBgNV BAMTKDIzMjQzQURGMUEyODk5NjM0QzE2M0I3ODYyNjI1NDE0NUQ0MTJERjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSLGqaIgTX6rMVbMyaly61gVEq WsGJLAGSW6sTNHX0i9Sln0bpRqPzvJGu0jtkAqKqiI/yh04p6stLSCQEGp4NcadT GPZvkElOzsHpqmEthddOV4J4IFNXe1Rcpyji3eqBw4V0lXlhuUhCmzaXVZRdetwq eipjTyE90ddpxGxSFosxa9H3N8MiRpvuM/5I57P7F/EPMFQagkcEH6k95e46iiJ3 YQZE2AIbcTwV3MX8Zls+VOe1Xh7i6WBM7Oc3qFR+s2CnMxUmgLrEV80MOdlIB2rW SDvBL5IWLrPwlUOPhVFvBkjLs+mU/O9P6iTlLRD95/xvhPbz+OdsNPCbWMGpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIyQ63xoomWNMFjt4YmJUFF1BLfMwHwYDVR0j BBgwFoAUSEyv7RfQLEVV5dRYafMOyqfh5eMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGhUeVptaE1CcEN2TUJ1REhOVmZzSldvUnR5dE5aUjhQWUNQUU52Zktv S0cvMS80ODRDQUZFRDE3RDAyQzQ1NTVFNUQ0NTg2OUYzMEVDQUE3RTFFNUUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4NENBRkVEMTdEMDJDNDU1 NUU1RDQ1ODY5RjMwRUNBQTdFMUU1RTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGhUeVptaE1CcEN2TUJ1REhOVmZzSldvUnR5dE5aUjhQWUNQUU52ZktvS0cvMS80 ODRDQUZFRDE3RDAyQzQ1NTVFNUQ0NTg2OUYzMEVDQUE3RTFFNUUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtLdcHEBBesK7jx9nj1AoBF77HssjouIrmW5BZZKedBFg2k8tmpdvaWwDHwZs 8thizVX6eVJZkQFp41FzWnqBKG/1qpRWKguDJ8JPaTrwgeQ9S9o0WwUa8n0toskq 898ip63kDauQCdzPnYy0DGkZO58jOBBQJIMrtxbK8RAgZ9lW9AXBnQM/lGscMRkF C4GFQRSX8OoMRcPdrDaQbrNynxL9GwROWzv+1rIjpCMknR2l17ApA9nnZnxl6GJh wndpyAglUy6hyAulg5qEPS8f10ptU56IsyYyx8UCtZp/WgRyRYPf4ToyvOQV19kQ F6j5xiZRUz5YaXwiBXpreexHUQ== -----END CERTIFICATE-----Generated at Wed Nov 5 04:19:13 2025 by rpki-client