$ rpki-client -vvf rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.mft File: 1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.mft (raw, json) Hash identifier: fUdci6ehfQ2OnvUd8RzwKPxWQNUbwy2EhmuhaSha4Vs= Subject key identifier: 70:F6:61:8A:5B:F3:77:E6:E3:2E:76:A8:EB:FB:58:2F:86:65:71:67 Authority key identifier: 1B:10:04:FC:54:CD:C4:0D:C5:66:7B:1D:6B:18:3C:CE:A2:DA:4F:FD Certificate issuer: /CN=1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD Certificate serial: 4951D0E934BB350E2D5954DA6DC9197DF1E723B6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.mft Manifest number: 0305 Signing time: Wed 05 Nov 2025 12:28:39 +0000 Manifest this update: Wed 05 Nov 2025 12:23:39 +0000 Manifest next update: Thu 06 Nov 2025 12:31:39 +0000 Files and hashes: 1: 3139302e38392e36302e302f32322d3332203d3e20323730333632.roa (hash: fPEm+NpCAcAsprkPLhJ4egK5AQYpLpE+TEJKErpEX0k=) 2: 323830343a366164633a3a2f33322d313238203d3e20323730333632.roa (hash: upt5TT8FOe5QeiqNDsn3IDhYY1D4DQPiIPI86XKa+co=) 3: 1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.crl (hash: wffCDVyBSq2D4Ej7jBnFdkLWR5AWBWxBSekf3WK94jA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.crl rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 12:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:51:d0:e9:34:bb:35:0e:2d:59:54:da:6d:c9:19:7d:f1:e7:23:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD Validity Not Before: Nov 5 12:23:39 2025 GMT Not After : Nov 6 12:31:39 2025 GMT Subject: CN=70F6618A5BF377E6E32E76A8EBFB582F86657167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6d:91:c1:59:15:94:86:22:a6:89:9f:48:4e: 21:ba:9e:ab:00:25:b5:8b:b3:37:a6:48:cb:2f:59: 02:ed:2f:12:80:01:8d:2d:b9:4d:a8:70:7b:db:b0: f9:97:ee:4e:cd:0a:d6:47:c6:a2:f4:5c:71:a7:7a: 56:f3:68:5d:e5:65:b7:6d:28:1e:1c:f2:7a:fb:da: e6:38:1b:56:b5:e1:c2:64:30:d2:a0:79:2e:77:68: ab:b7:7e:e5:f6:74:15:a4:05:fd:b1:01:b0:ab:56: 8d:b0:70:f9:7b:21:52:a9:cb:dd:08:3a:e2:45:45: bd:12:d9:24:f9:8b:1b:86:3c:42:6e:ce:af:f7:81: 7e:df:a3:5f:b8:20:2d:ed:a7:e7:c4:5a:3b:11:2e: a7:cb:5d:83:20:87:b4:98:b7:ec:75:f7:20:60:b1: ba:2f:16:a6:ff:ee:85:39:8c:9e:6c:d2:57:32:58: a4:d5:d0:d4:5d:7b:13:b6:f3:23:b9:bb:69:b6:c8: ea:a4:19:cb:fb:9f:d7:57:61:29:33:b0:1b:ba:4e: ab:8d:36:da:39:85:99:4a:a0:2a:c7:e7:ef:20:e8: 1f:15:77:05:f6:0e:97:21:58:35:07:c2:90:a0:a5: 95:d9:5b:10:03:5e:d9:7d:7f:52:87:c2:e7:d9:35: 33:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F6:61:8A:5B:F3:77:E6:E3:2E:76:A8:EB:FB:58:2F:86:65:71:67 X509v3 Authority Key Identifier: keyid:1B:10:04:FC:54:CD:C4:0D:C5:66:7B:1D:6B:18:3C:CE:A2:DA:4F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:52:b3:08:98:98:27:5e:09:b0:12:f4:53:e3:b6:dd:33:54: 5f:3b:c3:39:8f:98:51:dd:06:ee:78:9d:5e:87:ea:88:13:19: fb:03:e7:a3:e8:ce:11:d8:fb:c9:d2:4a:43:60:30:c3:34:23: e6:fc:7f:7b:0a:4b:14:f5:12:b1:28:ba:78:e0:1c:af:8f:0f: 58:6d:76:62:b8:ef:60:55:40:78:90:fe:92:92:39:0e:8d:7a: 3e:d3:e7:c4:b9:66:d6:3f:c2:31:12:aa:3f:10:09:eb:bd:dd: 37:bb:7a:7b:ef:f1:64:13:ee:b4:e5:19:48:f6:cb:a1:08:98: da:6c:e3:f5:b4:3a:2a:29:67:1c:62:b3:73:57:47:22:8c:cb: 85:cf:79:e2:9f:ee:76:d9:cc:e9:c4:a5:2a:b2:75:81:6f:10: 7c:00:19:48:4d:12:cd:74:c2:0e:a6:da:8d:36:01:46:14:4f: 92:78:b5:61:fa:4b:59:c6:bc:91:77:df:2b:a5:b4:70:69:d4: 22:f7:98:93:c6:32:9c:2b:05:49:34:e0:b2:bf:57:a3:93:7a: 05:c1:c9:cc:15:97:08:d7:82:18:22:bd:dd:5e:d4:a2:9b:53: 46:1a:dc:a7:8f:42:15:32:33:88:42:55:90:0c:f7:b5:93:97: c5:44:0f:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSVHQ6TS7NQ4tWVTabckZffHnI7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIxMDA0RkM1NENEQzQwREM1NjY3QjFENkIxODNDQ0VB MkRBNEZGRDAeFw0yNTExMDUxMjIzMzlaFw0yNTExMDYxMjMxMzlaMDMxMTAvBgNV BAMTKDcwRjY2MThBNUJGMzc3RTZFMzJFNzZBOEVCRkI1ODJGODY2NTcxNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bZHBWRWUhiKmiZ9ITiG6nqsA JbWLszemSMsvWQLtLxKAAY0tuU2ocHvbsPmX7k7NCtZHxqL0XHGnelbzaF3lZbdt KB4c8nr72uY4G1a14cJkMNKgeS53aKu3fuX2dBWkBf2xAbCrVo2wcPl7IVKpy90I OuJFRb0S2ST5ixuGPEJuzq/3gX7fo1+4IC3tp+fEWjsRLqfLXYMgh7SYt+x19yBg sbovFqb/7oU5jJ5s0lcyWKTV0NRdexO28yO5u2m2yOqkGcv7n9dXYSkzsBu6TquN Nto5hZlKoCrH5+8g6B8VdwX2DpchWDUHwpCgpZXZWxADXtl9f1KHwufZNTPNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcPZhilvzd+bjLnao6/tYL4ZlcWcwHwYDVR0j BBgwFoAUGxAE/FTNxA3FZnsdaxg8zqLaT/0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHY5bzR2REtGaHk0UHgzaHczUENGaVN6c250cGUybldzR3A3MjVFbkJ2 ZzUvMi8xQjEwMDRGQzU0Q0RDNDBEQzU2NjdCMUQ2QjE4M0NDRUEyREE0RkZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCMTAwNEZDNTRDREM0MERD NTY2N0IxRDZCMTgzQ0NFQTJEQTRGRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHY5bzR2REtGaHk0UHgzaHczUENGaVN6c250cGUybldzR3A3MjVFbkJ2ZzUvMi8x QjEwMDRGQzU0Q0RDNDBEQzU2NjdCMUQ2QjE4M0NDRUEyREE0RkZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANVKzCJiYJ14JsBL0U+O23TNUXzvDOY+YUd0G7nidXofqiBMZ+wPno+jOEdj7 ydJKQ2AwwzQj5vx/ewpLFPUSsSi6eOAcr48PWG12YrjvYFVAeJD+kpI5Do16PtPn xLlm1j/CMRKqPxAJ673dN7t6e+/xZBPutOUZSPbLoQiY2mzj9bQ6KilnHGKzc1dH IozLhc954p/udtnM6cSlKrJ1gW8QfAAZSE0SzXTCDqbajTYBRhRPkni1YfpLWca8 kXffK6W0cGnUIveYk8YynCsFSTTgsr9Xo5N6BcHJzBWXCNeCGCK93V7UoptTRhrc p49CFTIziEJVkAz3tZOXxUQPJA== -----END CERTIFICATE-----Generated at Wed Nov 5 17:51:07 2025 by rpki-client