$ rpki-client -vvf rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.mft File: 4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.mft (raw, json) Hash identifier: dNgIkIZ/0X80sh4uI9OIydQmJX81giEvChdWO/WwbRs= Subject key identifier: 74:23:48:A9:42:75:33:FD:BD:57:80:EB:D4:26:15:EF:A3:80:DC:E5 Authority key identifier: 4B:15:F5:37:3E:2C:29:8F:E4:B5:F0:EA:FC:99:1C:D5:C4:B3:57:BE Certificate issuer: /CN=4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE Certificate serial: 6D3A4D2D8FA62A670FF67FCBE90C59A5D0687919 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.mft Manifest number: 017B Signing time: Wed 05 Nov 2025 16:28:51 +0000 Manifest this update: Wed 05 Nov 2025 16:23:51 +0000 Manifest next update: Thu 06 Nov 2025 18:02:51 +0000 Files and hashes: 1: 323830343a333837633a3a2f33322d313238203d3e20323636343831.roa (hash: Ho+2vUEGhCgq0JNBj5HOo52FG07LfqOjJESEcA42tZg=) 2: 3137302e38332e38382e302f32322d3332203d3e20323636343831.roa (hash: VuTjYXuXQGCKV7rk/UGPVw0HM9z+bJImjB0NtenCF4o=) 3: 4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.crl (hash: /ACPpFExBXm4TkdSQKGNjVu6psN7AzxBFIKAX95zAD8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.crl rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 18:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:3a:4d:2d:8f:a6:2a:67:0f:f6:7f:cb:e9:0c:59:a5:d0:68:79:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE Validity Not Before: Nov 5 16:23:51 2025 GMT Not After : Nov 6 18:02:51 2025 GMT Subject: CN=742348A9427533FDBD5780EBD42615EFA380DCE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:af:bc:cc:0e:d2:b7:8f:e6:c6:0f:da:96:37: 17:04:b7:36:fb:7c:e5:0e:d0:2f:54:c6:2d:d6:32: 9c:eb:72:f8:3c:c8:21:9e:05:f8:f2:1c:9f:9a:ee: 79:40:6d:85:0e:70:59:85:68:6d:e6:37:77:e3:22: 0b:dc:59:b2:34:2e:98:79:ba:72:fb:ee:be:18:ef: 36:e0:9a:b3:ad:f5:1d:da:b1:92:9b:ed:14:9d:d0: 6d:66:d2:9d:6d:41:36:fe:c3:f9:f8:ce:79:df:88: 5c:ba:bc:0b:35:76:a1:08:73:e8:05:2e:14:fc:4c: 42:77:52:99:62:64:e6:cf:a6:6b:4f:7b:3f:b2:97: 78:42:db:34:9c:79:58:76:13:43:0f:b3:67:5a:86: 41:ae:63:e7:9f:0a:10:93:5c:e2:32:f1:70:7c:09: 07:9f:49:7a:99:b7:e4:73:54:03:9f:50:f9:a3:1d: 35:97:9a:0e:1b:92:da:2b:02:e8:38:81:25:3f:4b: a1:53:0e:30:9f:0b:00:70:be:42:18:01:14:95:0d: 09:75:c7:be:5e:88:e9:54:6c:e6:11:03:64:fa:03: 00:14:ad:73:7c:e5:d5:3d:62:ca:2a:ca:ae:bb:1a: 40:5d:0e:7a:e7:a9:0b:39:3b:cb:53:53:d3:39:2e: 61:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:23:48:A9:42:75:33:FD:BD:57:80:EB:D4:26:15:EF:A3:80:DC:E5 X509v3 Authority Key Identifier: keyid:4B:15:F5:37:3E:2C:29:8F:E4:B5:F0:EA:FC:99:1C:D5:C4:B3:57:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:79:c6:5f:f3:8d:8e:82:02:92:6f:ab:7e:ef:f2:26:f6:67: 4f:be:65:22:61:b7:9c:86:87:41:b9:cf:9d:9c:0a:98:42:97: c3:49:29:ff:e5:65:65:a6:9e:b6:ad:24:69:a8:72:90:eb:22: 45:19:d1:8f:70:6d:c9:76:c5:6c:32:dc:36:bb:7b:96:00:2f: 55:99:e0:53:49:06:4f:f8:55:3f:44:86:11:32:7e:29:99:cd: ee:6a:5f:f5:49:06:2a:19:f8:74:41:cd:26:2e:79:e6:17:3e: 96:a3:c9:c1:29:28:3f:fe:61:d5:1a:ed:9f:31:c4:85:86:8c: fe:a8:20:f7:5f:6d:30:0d:5f:d3:eb:b9:b8:2f:4e:41:bf:9d: 7f:b7:55:3d:da:78:57:1a:b4:16:08:cc:f8:eb:4c:1b:ce:55: 5b:fd:8a:fc:3b:10:60:5e:3e:76:2d:9b:91:c7:83:ed:35:5f: b8:b7:76:6f:d5:e5:69:3c:74:22:2f:e1:c0:bd:54:43:48:84: 40:d2:da:ba:10:f5:5b:25:d4:0b:20:52:db:76:a7:90:31:c3: a2:a6:6d:3b:58:2c:c3:dc:43:3a:e4:f6:63:1e:8f:33:44:6f: 7e:f1:5f:0d:23:d2:62:d7:3c:5a:11:ee:5d:ae:41:6c:f7:b9: 47:f2:3f:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbTpNLY+mKmcP9n/L6QxZpdBoeRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIxNUY1MzczRTJDMjk4RkU0QjVGMEVBRkM5OTFDRDVD NEIzNTdCRTAeFw0yNTExMDUxNjIzNTFaFw0yNTExMDYxODAyNTFaMDMxMTAvBgNV BAMTKDc0MjM0OEE5NDI3NTMzRkRCRDU3ODBFQkQ0MjYxNUVGQTM4MERDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBr7zMDtK3j+bGD9qWNxcEtzb7 fOUO0C9Uxi3WMpzrcvg8yCGeBfjyHJ+a7nlAbYUOcFmFaG3mN3fjIgvcWbI0Lph5 unL77r4Y7zbgmrOt9R3asZKb7RSd0G1m0p1tQTb+w/n4znnfiFy6vAs1dqEIc+gF LhT8TEJ3UpliZObPpmtPez+yl3hC2zSceVh2E0MPs2dahkGuY+efChCTXOIy8XB8 CQefSXqZt+RzVAOfUPmjHTWXmg4bktorAug4gSU/S6FTDjCfCwBwvkIYARSVDQl1 x75eiOlUbOYRA2T6AwAUrXN85dU9Ysoqyq67GkBdDnrnqQs5O8tTU9M5LmEXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdCNIqUJ1M/29V4Dr1CYV76OA3OUwHwYDVR0j BBgwFoAUSxX1Nz4sKY/ktfDq/Jkc1cSzV74wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUtBbTVycEE0RjU0akhSZHFQODljTWZ0ZlJWSmVRdVVUaUFkOTducHlt a1MvMC80QjE1RjUzNzNFMkMyOThGRTRCNUYwRUFGQzk5MUNENUM0QjM1N0JFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCMTVGNTM3M0UyQzI5OEZF NEI1RjBFQUZDOTkxQ0Q1QzRCMzU3QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUtBbTVycEE0RjU0akhSZHFQODljTWZ0ZlJWSmVRdVVUaUFkOTducHlta1MvMC80 QjE1RjUzNzNFMkMyOThGRTRCNUYwRUFGQzk5MUNENUM0QjM1N0JFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK3nGX/ONjoICkm+rfu/yJvZnT75lImG3nIaHQbnPnZwKmEKXw0kp/+VlZaae tq0kaahykOsiRRnRj3BtyXbFbDLcNrt7lgAvVZngU0kGT/hVP0SGETJ+KZnN7mpf 9UkGKhn4dEHNJi555hc+lqPJwSkoP/5h1RrtnzHEhYaM/qgg919tMA1f0+u5uC9O Qb+df7dVPdp4Vxq0FgjM+OtMG85VW/2K/DsQYF4+di2bkceD7TVfuLd2b9XlaTx0 Ii/hwL1UQ0iEQNLauhD1WyXUCyBS23ankDHDoqZtO1gsw9xDOuT2Yx6PM0RvfvFf DSPSYtc8WhHuXa5BbPe5R/I/Ug== -----END CERTIFICATE-----Generated at Wed Nov 5 20:58:18 2025 by rpki-client