$ rpki-client -vvf rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft File: 4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft (raw, json) Hash identifier: sq9vvhSe5QlQDSybfFkmTHccdMDLXwWVrMjKK2KLY3M= Subject key identifier: 95:4D:F4:C5:93:7D:BA:09:50:6E:35:70:52:8B:57:F8:0E:25:84:5E Authority key identifier: 4A:72:67:5E:0C:B9:92:AE:4B:9D:50:A4:4F:F4:38:7F:A7:80:D7:CF Certificate issuer: /CN=4A72675E0CB992AE4B9D50A44FF4387FA780D7CF Certificate serial: 26C05AFFA4BEC2C7DDE39B89A714E6823370021C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.cer Subject info access: rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft Manifest number: 0122 Signing time: Tue 04 Nov 2025 09:20:10 +0000 Manifest this update: Tue 04 Nov 2025 09:15:10 +0000 Manifest next update: Wed 05 Nov 2025 12:40:10 +0000 Files and hashes: 1: 4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.crl (hash: n43r8074Kyw/0JftyAw+mIMvGuPKwuSg9PsjIpzoh5E=) 2: 323830343a366533343a3a2f33322d3438203d3e20323730353832.roa (hash: 77sf5PFcSpII+KrrS4nSPlOkVTpoGT3FycBU93oqWsg=) 3: 3137372e382e3133362e302f32322d3234203d3e20323730353832.roa (hash: krULwq9Rhl+VvAB64k7HqwFs18gauIlz8FGNJJMo8fQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.crl rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 12:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c0:5a:ff:a4:be:c2:c7:dd:e3:9b:89:a7:14:e6:82:33:70:02:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A72675E0CB992AE4B9D50A44FF4387FA780D7CF Validity Not Before: Nov 4 09:15:10 2025 GMT Not After : Nov 5 12:40:10 2025 GMT Subject: CN=954DF4C5937DBA09506E3570528B57F80E25845E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9e:d4:59:46:55:c5:87:3c:ab:a5:f7:b6:74: ad:c3:d1:08:0a:d1:30:ce:8d:18:49:04:fc:e1:86: d7:ce:84:e8:27:54:25:f6:61:e4:b7:69:28:9b:0f: b6:16:ca:5b:f5:ec:26:f6:e6:a4:03:7e:56:c1:43: 11:68:56:5b:63:2e:6d:c4:28:e7:5b:b1:22:2e:d1: 9f:a9:6d:a3:6b:68:78:a8:1f:6f:df:d2:8e:16:0a: 0e:78:1a:47:60:53:4a:0d:8e:72:64:09:54:df:e3: 47:6d:a0:e1:08:45:5a:29:51:08:40:89:09:6b:e6: e7:f5:50:3a:fa:b9:fc:c2:ee:18:2b:74:b1:79:8d: b3:42:18:48:80:83:a1:d4:f0:7c:1a:06:53:70:8c: f9:45:90:21:f8:14:30:c2:cf:e5:54:d3:5f:79:08: 01:2f:19:e4:16:ef:0f:d3:86:ae:78:21:4c:b9:83: ad:c9:48:6b:95:d6:68:9b:c2:c5:21:19:30:b0:02: 4c:26:3e:f1:b5:fc:c9:20:d7:27:f1:a5:cc:35:e8: 5d:ff:e8:79:9e:12:b6:80:fd:d8:69:85:30:2d:f1: 6a:ad:db:15:c0:cb:2e:3e:e7:89:b8:c7:c2:51:d3: e9:63:35:7b:40:91:a9:d8:ee:30:43:5d:11:2b:49: 13:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4D:F4:C5:93:7D:BA:09:50:6E:35:70:52:8B:57:F8:0E:25:84:5E X509v3 Authority Key Identifier: keyid:4A:72:67:5E:0C:B9:92:AE:4B:9D:50:A4:4F:F4:38:7F:A7:80:D7:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:89:1f:ce:f3:c2:92:91:dd:33:3b:d3:88:17:aa:91:78:cd: 4f:8d:9f:c6:be:e7:96:71:45:62:df:20:6e:2b:dd:cb:7d:fa: 0f:39:53:2a:4a:8f:0d:c3:fe:01:6c:b5:17:8e:6f:a9:1f:5e: c2:04:ac:8f:92:d6:d1:cb:60:f2:0a:1f:16:f1:db:3e:6c:11: 54:20:d6:f5:83:79:8e:1a:9a:e3:6f:e8:b2:d9:08:7e:e7:e2: db:8c:3f:9c:b8:7a:a4:69:fd:95:9d:4a:7a:8e:70:80:b5:4c: 30:94:2b:76:96:f8:e3:bc:19:da:ee:16:89:60:e3:13:e2:0e: 2b:48:a8:65:c2:f6:32:69:b1:06:a6:16:00:1a:03:78:50:7e: b5:16:4f:ce:97:e5:80:56:c4:89:2b:44:60:25:e9:9b:67:16: 22:63:86:94:11:fa:ed:28:4f:c9:55:ce:47:fd:f7:bf:0b:f1: 04:c3:39:9e:51:56:65:34:fb:c6:12:0a:fd:05:38:87:8c:65: 74:fe:a6:50:24:d5:cf:4f:5d:74:5d:36:b7:b3:3b:26:2c:e7: 5a:8d:aa:ab:e3:c3:73:58:ee:18:39:d2:cb:8b:a6:47:a6:b6: 70:86:e8:dd:42:6c:d1:38:6b:e5:29:cc:09:bc:51:98:ba:18: e3:3d:98:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJsBa/6S+wsfd45uJpxTmgjNwAhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE3MjY3NUUwQ0I5OTJBRTRCOUQ1MEE0NEZGNDM4N0ZB NzgwRDdDRjAeFw0yNTExMDQwOTE1MTBaFw0yNTExMDUxMjQwMTBaMDMxMTAvBgNV BAMTKDk1NERGNEM1OTM3REJBMDk1MDZFMzU3MDUyOEI1N0Y4MEUyNTg0NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrntRZRlXFhzyrpfe2dK3D0QgK 0TDOjRhJBPzhhtfOhOgnVCX2YeS3aSibD7YWylv17Cb25qQDflbBQxFoVltjLm3E KOdbsSIu0Z+pbaNraHioH2/f0o4WCg54GkdgU0oNjnJkCVTf40dtoOEIRVopUQhA iQlr5uf1UDr6ufzC7hgrdLF5jbNCGEiAg6HU8HwaBlNwjPlFkCH4FDDCz+VU0195 CAEvGeQW7w/Thq54IUy5g63JSGuV1mibwsUhGTCwAkwmPvG1/Mkg1yfxpcw16F3/ 6HmeEraA/dhphTAt8Wqt2xXAyy4+54m4x8JR0+ljNXtAkanY7jBDXRErSRNXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlU30xZN9uglQbjVwUotX+A4lhF4wHwYDVR0j BBgwFoAUSnJnXgy5kq5LnVCkT/Q4f6eA188wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3BacTRwRnFqcEJ1WEp5SngyMlhHMzFvb0cxZllDNjlDNXlvcGQxOHo0 dzIvMC80QTcyNjc1RTBDQjk5MkFFNEI5RDUwQTQ0RkY0Mzg3RkE3ODBEN0NGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBNzI2NzVFMENCOTkyQUU0 QjlENTBBNDRGRjQzODdGQTc4MEQ3Q0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3BacTRwRnFqcEJ1WEp5SngyMlhHMzFvb0cxZllDNjlDNXlvcGQxOHo0dzIvMC80 QTcyNjc1RTBDQjk5MkFFNEI5RDUwQTQ0RkY0Mzg3RkE3ODBEN0NGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUYkfzvPCkpHdMzvTiBeqkXjNT42fxr7nlnFFYt8gbivdy336DzlTKkqPDcP+ AWy1F45vqR9ewgSsj5LW0ctg8gofFvHbPmwRVCDW9YN5jhqa42/ostkIfufi24w/ nLh6pGn9lZ1Keo5wgLVMMJQrdpb447wZ2u4WiWDjE+IOK0ioZcL2MmmxBqYWABoD eFB+tRZPzpflgFbEiStEYCXpm2cWImOGlBH67ShPyVXOR/33vwvxBMM5nlFWZTT7 xhIK/QU4h4xldP6mUCTVz09ddF02t7M7JiznWo2qq+PDc1juGDnSy4umR6a2cIbo 3UJs0Thr5SnMCbxRmLoY4z2YLw== -----END CERTIFICATE-----Generated at Wed Nov 5 02:02:11 2025 by rpki-client