$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.mft File: 1A57F0046A898E6B7D56895412B21D8FB1DEF705.mft (raw, json) Hash identifier: GIAl11eElOjPRyVSnpFKZyypd5onLdGq3PnRm9/Vl24= Subject key identifier: 8A:50:D3:CE:E2:55:6E:EC:E1:13:2D:8C:45:0F:B6:4E:C5:25:CF:2D Authority key identifier: 1A:57:F0:04:6A:89:8E:6B:7D:56:89:54:12:B2:1D:8F:B1:DE:F7:05 Certificate issuer: /CN=1A57F0046A898E6B7D56895412B21D8FB1DEF705 Certificate serial: 46FE076EAE3B707B53916973DC71F0849D78E768 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A57F0046A898E6B7D56895412B21D8FB1DEF705.cer Subject info access: rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.mft Manifest number: 0106 Signing time: Wed 05 Nov 2025 04:21:47 +0000 Manifest this update: Wed 05 Nov 2025 04:16:47 +0000 Manifest next update: Thu 06 Nov 2025 08:03:47 +0000 Files and hashes: 1: 1A57F0046A898E6B7D56895412B21D8FB1DEF705.crl (hash: o3KwsUC1srpyU04rZvUdoASm8zn2b9W0PbU3k4rSxG8=) 2: 323830343a326162633a3a2f33322d3333203d3e20323634303931.roa (hash: bd1myaX9qsRuhiThNa0t26+D3I4D+6iNl0U2rAFWNoA=) 3: 3134332e3230382e3132382e302f32322d3332203d3e20323634303931.roa (hash: CRqkkf2w5VjzwQgAR4y5rNFUkhYqHkxPd+dK1wg49MU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.crl rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A57F0046A898E6B7D56895412B21D8FB1DEF705.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 08:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:fe:07:6e:ae:3b:70:7b:53:91:69:73:dc:71:f0:84:9d:78:e7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A57F0046A898E6B7D56895412B21D8FB1DEF705 Validity Not Before: Nov 5 04:16:47 2025 GMT Not After : Nov 6 08:03:47 2025 GMT Subject: CN=8A50D3CEE2556EECE1132D8C450FB64EC525CF2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e7:89:2f:3c:7f:17:ea:51:0c:48:39:3d:05: dd:f2:92:0f:69:81:5d:cd:71:2c:be:91:35:36:ea: 63:f2:5e:ae:df:35:77:7e:45:94:62:c7:f0:a3:d8: cc:65:18:ea:45:7e:a0:46:8c:9f:04:14:d1:05:07: 2c:fe:9d:be:25:79:f1:91:09:49:46:82:d1:26:2d: 39:d4:fc:29:eb:61:de:0e:3c:87:b8:89:a1:d3:1f: 97:f8:2a:aa:c5:5b:e2:58:18:51:c9:c2:48:22:10: 12:71:09:58:16:82:43:a2:f9:f7:0f:32:e6:b0:65: 20:7f:ba:57:62:c1:33:a1:22:52:24:83:7c:94:5c: 18:2f:3a:f9:b0:af:70:e2:80:3a:75:06:61:e7:d0: b3:fe:f8:07:bb:43:15:81:50:84:25:7b:93:67:5e: 9c:25:df:3c:67:64:79:8a:fb:09:93:70:0d:ea:2f: 31:c7:3c:5b:72:5d:b1:4c:47:1e:b0:c1:37:33:fb: 85:50:75:d6:f9:fa:02:bc:02:d8:e4:26:9d:57:96: f0:46:d4:8f:57:d9:35:06:7a:0e:cd:05:ca:8d:94: 6b:e7:1f:22:ba:a6:c0:c3:7b:8a:46:fa:9a:55:91: af:f3:ee:b6:32:cd:ba:2d:78:0e:5e:c6:cd:92:a9: ad:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:50:D3:CE:E2:55:6E:EC:E1:13:2D:8C:45:0F:B6:4E:C5:25:CF:2D X509v3 Authority Key Identifier: keyid:1A:57:F0:04:6A:89:8E:6B:7D:56:89:54:12:B2:1D:8F:B1:DE:F7:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A57F0046A898E6B7D56895412B21D8FB1DEF705.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:58:d2:2c:aa:03:53:0f:16:56:6f:8d:25:32:80:80:80:a2: e6:92:cc:8d:78:2a:75:12:c0:a1:9a:fa:4a:0e:69:c8:60:3d: 2b:d5:0f:8f:47:83:b5:de:49:87:9a:c3:0d:9b:51:62:44:d3: e8:b7:cd:7e:b3:c0:fa:2f:d9:e5:49:20:6c:29:0d:b2:84:26: 1a:4a:39:4b:4c:83:27:36:4f:24:91:c7:cd:9e:44:8c:f4:36: 00:35:a5:d5:fd:be:21:88:a5:85:97:77:17:54:10:15:9b:10: 4d:59:cb:2a:cf:45:70:7c:fb:c2:05:bd:19:f3:85:01:1f:b1: 2b:7d:54:9c:01:8e:50:54:ec:aa:f1:49:2e:86:4a:5d:83:2c: c6:76:2d:d5:b1:63:2c:23:97:94:fc:fd:6f:ea:c5:9e:72:b2: b0:e3:4c:1b:c5:e4:90:08:fc:02:b4:b2:a8:5a:0d:c4:47:83: f9:59:f8:4d:8f:bf:4c:31:6b:e1:23:f9:4f:b4:b3:12:79:81: c6:ac:64:ff:bb:e0:16:83:76:a8:ad:50:e3:72:97:48:4c:5b: 68:76:4f:ed:38:69:ca:87:af:e4:3e:53:85:5d:7b:34:a5:ec: 22:cd:bb:e6:e6:df:cb:ee:7a:bc:07:86:94:8d:ac:f8:aa:74: 2f:6a:3c:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURv4Hbq47cHtTkWlz3HHwhJ1452gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE1N0YwMDQ2QTg5OEU2QjdENTY4OTU0MTJCMjFEOEZC MURFRjcwNTAeFw0yNTExMDUwNDE2NDdaFw0yNTExMDYwODAzNDdaMDMxMTAvBgNV BAMTKDhBNTBEM0NFRTI1NTZFRUNFMTEzMkQ4QzQ1MEZCNjRFQzUyNUNGMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC854kvPH8X6lEMSDk9Bd3ykg9p gV3NcSy+kTU26mPyXq7fNXd+RZRix/Cj2MxlGOpFfqBGjJ8EFNEFByz+nb4lefGR CUlGgtEmLTnU/CnrYd4OPIe4iaHTH5f4KqrFW+JYGFHJwkgiEBJxCVgWgkOi+fcP MuawZSB/uldiwTOhIlIkg3yUXBgvOvmwr3DigDp1BmHn0LP++Ae7QxWBUIQle5Nn Xpwl3zxnZHmK+wmTcA3qLzHHPFtyXbFMRx6wwTcz+4VQddb5+gK8AtjkJp1XlvBG 1I9X2TUGeg7NBcqNlGvnHyK6psDDe4pG+ppVka/z7rYyzboteA5exs2Sqa3HAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUilDTzuJVbuzhEy2MRQ+2TsUlzy0wHwYDVR0j BBgwFoAUGlfwBGqJjmt9VolUErIdj7He9wUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQktIRnEzM0VqdFVwRXJHTlBYWXhaV1RYQWp5QmFlNk1VVG5zaTdVbjdw YTUvMC8xQTU3RjAwNDZBODk4RTZCN0Q1Njg5NTQxMkIyMUQ4RkIxREVGNzA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNTdGMDA0NkE4OThFNkI3 RDU2ODk1NDEyQjIxRDhGQjFERUY3MDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QktIRnEzM0VqdFVwRXJHTlBYWXhaV1RYQWp5QmFlNk1VVG5zaTdVbjdwYTUvMC8x QTU3RjAwNDZBODk4RTZCN0Q1Njg5NTQxMkIyMUQ4RkIxREVGNzA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASljSLKoDUw8WVm+NJTKAgICi5pLMjXgqdRLAoZr6Sg5pyGA9K9UPj0eDtd5J h5rDDZtRYkTT6LfNfrPA+i/Z5UkgbCkNsoQmGko5S0yDJzZPJJHHzZ5EjPQ2ADWl 1f2+IYilhZd3F1QQFZsQTVnLKs9FcHz7wgW9GfOFAR+xK31UnAGOUFTsqvFJLoZK XYMsxnYt1bFjLCOXlPz9b+rFnnKysONMG8XkkAj8ArSyqFoNxEeD+Vn4TY+/TDFr 4SP5T7SzEnmBxqxk/7vgFoN2qK1Q43KXSExbaHZP7Thpyoev5D5ThV17NKXsIs27 5ubfy+56vAeGlI2s+Kp0L2o8Aw== -----END CERTIFICATE-----Generated at Wed Nov 5 13:31:10 2025 by rpki-client