$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.mft File: 4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.mft (raw, json) Hash identifier: 4YQNWdOjVQNdr1TZ+3JwC0/Oy2ocu+pKEWrm8SnH1Kc= Subject key identifier: F3:02:BB:FE:EB:04:A2:A6:96:61:A7:97:70:63:53:41:2C:E2:B6:A9 Authority key identifier: 4B:A0:BB:3B:0B:41:C1:99:EC:E0:C0:52:5E:C5:45:C2:9A:7E:72:5D Certificate issuer: /CN=4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D Certificate serial: 2DC40A72D6F756D9131C790EBBE66266B62F314C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.mft Manifest number: 03 Signing time: Wed 05 Nov 2025 06:44:02 +0000 Manifest this update: Wed 05 Nov 2025 06:39:02 +0000 Manifest next update: Thu 06 Nov 2025 07:32:02 +0000 Files and hashes: 1: 3133382e3235352e36372e302f32342d3234203d3e20323633393730.roa (hash: jJ7fDKdTUjf6ULIYlTuCQZNNpz+0h5bEVFWszk21/Kk=) 2: 4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.crl (hash: OIRQtrxkiTOpowoNhb1GwW9L2QR/BezL2zTcgJG+gUs=) 3: 323830343a323839633a3a2f33322d3332203d3e20323633393730.roa (hash: hanX1n7pZBfYj0MtzUDESDsAiHLpUk0WL8EIKdSOJRg=) 4: 3133382e3235352e36342e302f32342d3234203d3e20323633393730.roa (hash: HyIF1owTWhNZKbdL4j/tFy1XH29oqm2BMRIZjyYDS4c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.crl rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c4:0a:72:d6:f7:56:d9:13:1c:79:0e:bb:e6:62:66:b6:2f:31:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D Validity Not Before: Nov 5 06:39:02 2025 GMT Not After : Nov 6 07:32:02 2025 GMT Subject: CN=F302BBFEEB04A2A69661A797706353412CE2B6A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fc:36:8d:22:3f:69:49:72:aa:4e:ac:bc:6f: 36:7a:b1:34:bf:c6:34:c5:b1:83:7f:96:de:7b:8b: 5b:b3:b7:f1:c0:c7:ac:cf:41:14:08:95:18:b3:10: 5f:9d:8c:ae:1f:bb:36:d2:ae:2e:12:33:7f:a4:d5: 04:aa:52:39:67:08:3a:23:55:fb:08:38:b9:ef:f2: 59:3d:e6:db:0f:44:4d:31:b7:cf:8f:99:35:fb:c7: 69:32:4e:c1:28:5f:d9:b7:78:1a:ff:42:74:9f:5b: a5:cf:c5:4a:93:d4:e9:65:8d:19:c1:98:15:9b:64: 19:3c:d4:90:d3:04:00:33:87:84:af:8e:1a:7e:f8: ab:2b:ec:27:e5:94:cb:fe:08:c5:57:99:b8:31:57: 17:5c:3c:10:00:84:94:c2:e3:8b:71:2e:1b:24:58: 89:f4:e5:6e:ca:04:e8:f3:39:72:4a:3a:bc:18:f0: a0:13:02:1a:ff:f7:a5:d5:6f:ac:3e:4f:8f:ec:b7: c0:af:7e:18:7c:1b:93:17:79:c7:e6:07:5a:32:b3: 4b:49:3d:19:dc:f6:aa:ed:1a:30:c1:77:0b:87:93: c2:50:d3:61:ed:5a:82:b4:ba:aa:17:15:23:cb:ab: 36:65:57:c0:a5:09:0e:40:bd:c6:d6:6e:0f:f7:ad: 60:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:02:BB:FE:EB:04:A2:A6:96:61:A7:97:70:63:53:41:2C:E2:B6:A9 X509v3 Authority Key Identifier: keyid:4B:A0:BB:3B:0B:41:C1:99:EC:E0:C0:52:5E:C5:45:C2:9A:7E:72:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:df:14:09:2e:af:b8:9a:df:e0:ed:cc:9d:52:a7:cb:2b:9f: c7:99:d0:70:ca:7c:ff:7d:09:c8:06:0f:09:d9:1a:d7:46:23: d3:bf:29:44:3d:16:ce:1c:20:b8:99:58:2d:c7:6b:1e:37:0b: 7b:bf:67:4e:f2:b9:a3:c8:de:ca:e7:a1:9a:12:ee:0e:dc:0d: 35:46:98:f9:2c:d4:b9:ea:c1:d5:46:3b:29:ea:e2:d5:a5:f9: 2e:a4:45:f5:8d:90:57:2b:46:d6:7b:99:79:f0:d4:55:87:59: ec:0e:a1:97:bf:3a:42:17:99:80:bc:4e:4a:3d:0b:0b:5c:24: 75:c6:82:eb:e7:86:ef:3a:b9:cf:4e:1d:73:6b:3c:2b:89:b6: 96:3f:a0:4c:9c:0b:03:ba:82:14:eb:6a:f9:b8:11:bc:d2:48: 08:22:cf:45:c7:f0:ba:17:e2:0e:80:4e:57:b6:b9:3c:0c:de: 11:13:9e:b8:da:be:f9:ef:b3:f7:cf:01:1d:fd:56:14:23:fe: 6f:81:9f:7a:e8:d5:86:3c:4d:2f:0c:38:9c:6d:3d:94:00:21: 7a:a4:fd:f4:46:27:33:14:fa:52:64:a9:9f:e0:95:cc:ab:d9: 14:eb:bb:0b:49:95:55:95:1c:54:c3:a6:f1:75:77:cd:a5:05: 76:c1:82:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULcQKctb3VtkTHHkOu+ZiZrYvMUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBMEJCM0IwQjQxQzE5OUVDRTBDMDUyNUVDNTQ1QzI5 QTdFNzI1RDAeFw0yNTExMDUwNjM5MDJaFw0yNTExMDYwNzMyMDJaMDMxMTAvBgNV BAMTKEYzMDJCQkZFRUIwNEEyQTY5NjYxQTc5NzcwNjM1MzQxMkNFMkI2QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK/DaNIj9pSXKqTqy8bzZ6sTS/ xjTFsYN/lt57i1uzt/HAx6zPQRQIlRizEF+djK4fuzbSri4SM3+k1QSqUjlnCDoj VfsIOLnv8lk95tsPRE0xt8+PmTX7x2kyTsEoX9m3eBr/QnSfW6XPxUqT1OlljRnB mBWbZBk81JDTBAAzh4Svjhp++Ksr7CfllMv+CMVXmbgxVxdcPBAAhJTC44txLhsk WIn05W7KBOjzOXJKOrwY8KATAhr/96XVb6w+T4/st8Cvfhh8G5MXecfmB1oys0tJ PRnc9qrtGjDBdwuHk8JQ02HtWoK0uqoXFSPLqzZlV8ClCQ5AvcbWbg/3rWBvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8wK7/usEoqaWYaeXcGNTQSzitqkwHwYDVR0j BBgwFoAUS6C7OwtBwZns4MBSXsVFwpp+cl0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNn bWUvMC80QkEwQkIzQjBCNDFDMTk5RUNFMEMwNTI1RUM1NDVDMjlBN0U3MjVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCQTBCQjNCMEI0MUMxOTlF Q0UwQzA1MjVFQzU0NUMyOUE3RTcyNUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNnbWUvMC80 QkEwQkIzQjBCNDFDMTk5RUNFMEMwNTI1RUM1NDVDMjlBN0U3MjVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdN8UCS6vuJrf4O3MnVKnyyufx5nQcMp8/30JyAYPCdka10Yj078pRD0Wzhwg uJlYLcdrHjcLe79nTvK5o8jeyuehmhLuDtwNNUaY+SzUuerB1UY7Keri1aX5LqRF 9Y2QVytG1nuZefDUVYdZ7A6hl786QheZgLxOSj0LC1wkdcaC6+eG7zq5z04dc2s8 K4m2lj+gTJwLA7qCFOtq+bgRvNJICCLPRcfwuhfiDoBOV7a5PAzeEROeuNq++e+z 988BHf1WFCP+b4GfeujVhjxNLww4nG09lAAheqT99EYnMxT6UmSpn+CVzKvZFOu7 C0mVVZUcVMOm8XV3zaUFdsGCTA== -----END CERTIFICATE-----Generated at Wed Nov 5 16:05:27 2025 by rpki-client