$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft File: 4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft (raw, json) Hash identifier: QW1pSC3JlOEHR9oIwi47C6SWDhl4XvKbbgf4zz3UznY= Subject key identifier: 2E:8F:6D:68:3F:AE:AB:48:70:DF:40:AC:D7:2E:40:C6:03:3A:89:46 Authority key identifier: 4E:8B:36:1B:95:AC:54:F0:1D:2E:E4:C1:60:49:02:6E:50:FE:80:7A Certificate issuer: /CN=4E8B361B95AC54F01D2EE4C16049026E50FE807A Certificate serial: 5098E880B2658A9BD0E36292E96D3C382F9C963F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E8B361B95AC54F01D2EE4C16049026E50FE807A.cer Subject info access: rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft Manifest number: 0138 Signing time: Wed 05 Nov 2025 12:14:43 +0000 Manifest this update: Wed 05 Nov 2025 12:09:43 +0000 Manifest next update: Thu 06 Nov 2025 12:15:43 +0000 Files and hashes: 1: 4E8B361B95AC54F01D2EE4C16049026E50FE807A.crl (hash: eiCZAB6UYDLiz8JWS3O5Tvz7iWWh/btDBI49SlElBRw=) 2: 34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa (hash: 6mJx3EaI4/kttTI8C0WH5cCMzbqxSNFG1eJeT7sazOM=) 3: 323830343a363832343a3a2f33322d313238203d3e20323639363731.roa (hash: 1czHTBydR1SpVEjHKNZV5kiq0fVW2I30z+urcSyjKbY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.crl rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E8B361B95AC54F01D2EE4C16049026E50FE807A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 12:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:98:e8:80:b2:65:8a:9b:d0:e3:62:92:e9:6d:3c:38:2f:9c:96:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E8B361B95AC54F01D2EE4C16049026E50FE807A Validity Not Before: Nov 5 12:09:43 2025 GMT Not After : Nov 6 12:15:43 2025 GMT Subject: CN=2E8F6D683FAEAB4870DF40ACD72E40C6033A8946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:37:4e:9e:88:97:bd:bb:bf:cb:f1:3d:b4:9e: b5:07:49:7a:9f:12:09:b4:77:14:c4:48:7a:5c:ea: 76:47:72:06:ca:36:6c:4f:3f:4a:1d:0b:e5:a1:8d: 79:fd:1f:0f:34:78:47:53:e8:92:c9:b4:2e:b0:04: 70:bf:c8:07:79:f6:17:5a:ec:9f:ac:1a:be:b9:fb: e4:59:e0:67:c8:bb:85:82:b3:7f:73:94:78:67:51: 43:4c:bb:0c:d0:fd:1c:4b:4f:40:9a:ba:fa:a6:43: 54:29:f9:74:bb:e4:6a:1b:11:3b:16:86:d4:3b:f0: 0b:95:bd:14:db:c2:d8:ff:cd:0f:7d:e3:62:18:a9: 37:64:c5:e2:42:85:c7:76:d3:57:9f:27:4e:e4:dc: 8a:1e:fa:d9:18:5b:8a:a2:9f:da:b7:4c:b1:6b:b1: 30:dd:e0:5b:21:57:6c:e2:29:e5:5d:1d:dd:c6:e9: c8:24:45:59:57:cb:e9:70:3c:71:79:de:67:e1:cc: b5:45:98:c5:51:d0:74:0d:5a:28:a0:2f:55:2a:35: c5:86:e1:fa:1e:8d:51:9f:a2:a6:ff:78:1a:d4:f4: e4:4a:39:70:f5:54:80:42:77:dd:98:c3:93:d1:e9: 47:19:d0:24:e1:d1:0b:b0:27:b1:39:51:28:af:02: a1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8F:6D:68:3F:AE:AB:48:70:DF:40:AC:D7:2E:40:C6:03:3A:89:46 X509v3 Authority Key Identifier: keyid:4E:8B:36:1B:95:AC:54:F0:1D:2E:E4:C1:60:49:02:6E:50:FE:80:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E8B361B95AC54F01D2EE4C16049026E50FE807A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:2e:98:d8:ed:99:e6:64:8b:f9:f6:83:5d:ee:2b:23:c8:8a: ac:21:b0:15:0e:cf:a1:0e:dd:e3:1e:a9:8c:30:7b:eb:3f:65: 6d:c9:c4:7c:fc:40:75:6f:69:6d:69:c1:19:a6:d4:3c:57:0f: 68:e1:46:4f:5d:ec:50:39:4d:e8:dc:0c:55:cc:9d:6b:df:51: 6c:82:51:d0:9f:33:96:80:a5:c7:70:15:64:d9:cf:71:78:d5: 5d:58:14:1d:75:71:ae:67:29:58:5d:dd:74:0d:ed:a8:e8:1e: 0a:b6:2e:0a:42:bc:a4:88:42:69:b7:80:10:d4:3b:74:4e:72: 6b:b2:f0:e0:1f:82:aa:34:0f:e4:ca:8b:2f:47:fe:25:92:c0: 77:47:df:66:47:72:eb:70:d6:4a:05:7a:0e:a0:b3:51:ad:41: 7f:f0:b7:6a:33:4a:2a:58:7b:41:05:b8:c1:39:bd:76:97:10: b7:28:4c:fc:52:1f:77:0b:32:4e:16:1b:6b:01:5b:ed:02:97: aa:3c:20:05:41:cb:cc:ff:a1:04:e4:63:22:31:5b:38:21:95: ca:63:39:ce:68:ac:5c:b9:ff:69:d7:ec:3b:85:ec:c0:34:d3: df:9c:47:90:6f:a0:73:06:f3:40:24:b8:7d:35:de:12:c7:fa: 4b:32:15:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUJjogLJlipvQ42KS6W08OC+clj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU4QjM2MUI5NUFDNTRGMDFEMkVFNEMxNjA0OTAyNkU1 MEZFODA3QTAeFw0yNTExMDUxMjA5NDNaFw0yNTExMDYxMjE1NDNaMDMxMTAvBgNV BAMTKDJFOEY2RDY4M0ZBRUFCNDg3MERGNDBBQ0Q3MkU0MEM2MDMzQTg5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3N06eiJe9u7/L8T20nrUHSXqf Egm0dxTESHpc6nZHcgbKNmxPP0odC+WhjXn9Hw80eEdT6JLJtC6wBHC/yAd59hda 7J+sGr65++RZ4GfIu4WCs39zlHhnUUNMuwzQ/RxLT0CauvqmQ1Qp+XS75GobETsW htQ78AuVvRTbwtj/zQ9942IYqTdkxeJChcd201efJ07k3Ioe+tkYW4qin9q3TLFr sTDd4FshV2ziKeVdHd3G6cgkRVlXy+lwPHF53mfhzLVFmMVR0HQNWiigL1UqNcWG 4foejVGfoqb/eBrU9ORKOXD1VIBCd92Yw5PR6UcZ0CTh0QuwJ7E5USivAqElAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULo9taD+uq0hw30Cs1y5AxgM6iUYwHwYDVR0j BBgwFoAUTos2G5WsVPAdLuTBYEkCblD+gHowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVlKWVJjUlRrY05CaUNEakE0Mk5uU1RnNDNucEVyVzRoV0Jaa29waWlD TFkvMC80RThCMzYxQjk1QUM1NEYwMUQyRUU0QzE2MDQ5MDI2RTUwRkU4MDdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFOEIzNjFCOTVBQzU0RjAx RDJFRTRDMTYwNDkwMjZFNTBGRTgwN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVlKWVJjUlRrY05CaUNEakE0Mk5uU1RnNDNucEVyVzRoV0Jaa29waWlDTFkvMC80 RThCMzYxQjk1QUM1NEYwMUQyRUU0QzE2MDQ5MDI2RTUwRkU4MDdBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhi6Y2O2Z5mSL+faDXe4rI8iKrCGwFQ7PoQ7d4x6pjDB76z9lbcnEfPxAdW9p bWnBGabUPFcPaOFGT13sUDlN6NwMVcyda99RbIJR0J8zloClx3AVZNnPcXjVXVgU HXVxrmcpWF3ddA3tqOgeCrYuCkK8pIhCabeAENQ7dE5ya7Lw4B+CqjQP5MqLL0f+ JZLAd0ffZkdy63DWSgV6DqCzUa1Bf/C3ajNKKlh7QQW4wTm9dpcQtyhM/FIfdwsy ThYbawFb7QKXqjwgBUHLzP+hBORjIjFbOCGVymM5zmisXLn/adfsO4XswDTT35xH kG+gcwbzQCS4fTXeEsf6SzIVOA== -----END CERTIFICATE-----Generated at Wed Nov 5 15:33:01 2025 by rpki-client