$ rpki-client -vvf rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.mft File: 1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.mft (raw, json) Hash identifier: 5GMg+1i7Y6sT6BytGZai/yFslj33HTYGOHDXEpadXVY= Subject key identifier: 4F:59:7C:79:05:74:D6:9C:CF:C2:03:FB:77:48:22:83:4C:40:1E:EA Authority key identifier: 1F:B4:EC:E4:CB:57:9B:6C:A9:CD:1E:DC:FD:D7:1D:77:1A:EC:14:D2 Certificate issuer: /CN=1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2 Certificate serial: 6F8BF385E088078B95F5481E1DF08BD1B9A592D4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.cer Subject info access: rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.mft Manifest number: 0162 Signing time: Tue 04 Nov 2025 17:02:29 +0000 Manifest this update: Tue 04 Nov 2025 16:57:29 +0000 Manifest next update: Wed 05 Nov 2025 17:05:29 +0000 Files and hashes: 1: 1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.crl (hash: JkSxDYIs6YEFnPii/oo06gIG2F635bfHIA1vSnIs07c=) 2: 323830343a363832383a3a2f33322d3438203d3e20323639363732.roa (hash: bxNhRoXMfpn1FbPJKJVqvJapv+XDNUebyk31e+kAmKQ=) 3: 34352e3139312e3133322e302f32322d3234203d3e20323639363732.roa (hash: nfoNs+L6hUcu/vUUnZlOg7Dp+nNHqd5mGfOmJVxxHxk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.crl rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 17:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:8b:f3:85:e0:88:07:8b:95:f5:48:1e:1d:f0:8b:d1:b9:a5:92:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2 Validity Not Before: Nov 4 16:57:29 2025 GMT Not After : Nov 5 17:05:29 2025 GMT Subject: CN=4F597C790574D69CCFC203FB774822834C401EEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:40:5b:6a:e2:10:53:33:c8:fd:75:a4:b6:7e: 50:88:66:c0:b3:a9:1b:19:fa:a0:69:ee:fa:82:e4: 71:86:01:af:da:ae:14:9c:e9:23:56:03:10:6d:9f: 5c:b8:89:0c:d6:b1:a9:92:4e:3f:e1:a7:04:65:a8: fa:b8:9f:16:df:a7:69:e8:45:08:01:78:7e:9d:be: 17:1d:62:85:04:19:c9:31:b4:08:20:8a:bb:cc:71: 99:f6:b3:30:65:9c:dd:1b:0f:aa:be:0f:9a:5c:22: f6:70:d2:5c:3b:a1:b3:9a:50:cc:42:57:22:a9:e8: 5e:e9:fd:b9:73:1b:fe:ac:f3:81:47:25:f1:8c:fd: fc:b6:24:90:a1:b3:b9:12:f7:6c:f6:5d:b8:6b:c9: fd:75:5a:64:b2:19:89:69:40:a5:0a:e9:49:ed:d1: e3:99:f3:1f:b6:2d:64:66:1e:21:1d:b9:72:36:55: 50:67:d2:4c:a3:54:0d:90:eb:80:dd:91:0d:52:af: d7:ab:58:8f:f0:6f:42:e1:c3:a0:79:f6:7d:7e:e6: e8:02:a9:01:49:d4:3d:fb:27:18:9a:2f:0b:b5:b7: ae:ae:e9:ec:83:2d:db:fe:d3:95:f6:a7:98:e5:0b: 75:d5:e5:ce:e5:1f:46:a9:a0:4e:98:1a:21:a6:a8: c0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:59:7C:79:05:74:D6:9C:CF:C2:03:FB:77:48:22:83:4C:40:1E:EA X509v3 Authority Key Identifier: keyid:1F:B4:EC:E4:CB:57:9B:6C:A9:CD:1E:DC:FD:D7:1D:77:1A:EC:14:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/1FB4ECE4CB579B6CA9CD1EDCFDD71D771AEC14D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:86:9c:00:d5:39:12:5f:09:38:98:40:14:eb:22:ce:ba:ac: da:0e:99:42:29:3e:3f:80:8d:0e:8b:83:a2:9f:cb:a3:66:9e: a7:96:b5:41:4a:71:3c:c2:5b:74:43:7b:b1:3a:13:aa:dc:b1: ea:37:f7:04:ef:53:0b:b5:d2:6f:d5:e2:76:b8:cc:b8:99:28: 40:da:11:54:06:10:7d:03:b5:99:e1:ec:bd:f6:8e:22:2f:36: e0:a4:c8:5d:86:d8:63:f1:c9:6f:f5:09:46:c7:bf:e4:74:d6: a8:8a:f0:ec:52:2c:ab:5f:4a:3e:8d:67:ed:10:63:0d:c2:19: 49:1e:9b:50:0e:de:f3:8f:ce:22:ae:ef:c4:b1:5e:33:64:64: 2d:0d:4b:0e:c3:d3:cd:3d:7f:46:e8:2c:68:87:b9:f4:71:20: e3:c4:13:94:4e:e0:c8:8a:28:83:b8:75:51:02:09:c1:ec:9c: 93:0b:5b:20:1a:91:72:95:5d:60:e7:47:ba:d9:41:29:a0:10: d7:d4:0d:4d:e5:09:27:0b:8d:68:9c:eb:ad:d0:d3:2a:98:f5: 53:d9:42:69:72:cd:31:52:72:9f:c9:00:72:87:b2:f9:79:18: 43:84:b8:22:92:54:b4:27:a1:61:33:9f:8c:4d:3d:ba:6a:82: 0d:3a:12:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUb4vzheCIB4uV9UgeHfCL0bmlktQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZCNEVDRTRDQjU3OUI2Q0E5Q0QxRURDRkRENzFENzcx QUVDMTREMjAeFw0yNTExMDQxNjU3MjlaFw0yNTExMDUxNzA1MjlaMDMxMTAvBgNV BAMTKDRGNTk3Qzc5MDU3NEQ2OUNDRkMyMDNGQjc3NDgyMjgzNEM0MDFFRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtQFtq4hBTM8j9daS2flCIZsCz qRsZ+qBp7vqC5HGGAa/arhSc6SNWAxBtn1y4iQzWsamSTj/hpwRlqPq4nxbfp2no RQgBeH6dvhcdYoUEGckxtAggirvMcZn2szBlnN0bD6q+D5pcIvZw0lw7obOaUMxC VyKp6F7p/blzG/6s84FHJfGM/fy2JJChs7kS92z2Xbhryf11WmSyGYlpQKUK6Unt 0eOZ8x+2LWRmHiEduXI2VVBn0kyjVA2Q64DdkQ1Sr9erWI/wb0Lhw6B59n1+5ugC qQFJ1D37JxiaLwu1t66u6eyDLdv+05X2p5jlC3XV5c7lH0apoE6YGiGmqMDhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUT1l8eQV01pzPwgP7d0gig0xAHuowHwYDVR0j BBgwFoAUH7Ts5MtXm2ypzR7c/dcddxrsFNIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREU5WThIRG9SQ0NYRG1vcWtZdDJ6Mmp3OWNmdVZnenpCYzJ1WW9WOVBa TWEvMC8xRkI0RUNFNENCNTc5QjZDQTlDRDFFRENGREQ3MUQ3NzFBRUMxNEQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGQjRFQ0U0Q0I1NzlCNkNB OUNEMUVEQ0ZERDcxRDc3MUFFQzE0RDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REU5WThIRG9SQ0NYRG1vcWtZdDJ6Mmp3OWNmdVZnenpCYzJ1WW9WOVBaTWEvMC8x RkI0RUNFNENCNTc5QjZDQTlDRDFFRENGREQ3MUQ3NzFBRUMxNEQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdIacANU5El8JOJhAFOsizrqs2g6ZQik+P4CNDouDop/Lo2aep5a1QUpxPMJb dEN7sToTqtyx6jf3BO9TC7XSb9XidrjMuJkoQNoRVAYQfQO1meHsvfaOIi824KTI XYbYY/HJb/UJRse/5HTWqIrw7FIsq19KPo1n7RBjDcIZSR6bUA7e84/OIq7vxLFe M2RkLQ1LDsPTzT1/RugsaIe59HEg48QTlE7gyIoog7h1UQIJweyckwtbIBqRcpVd YOdHutlBKaAQ19QNTeUJJwuNaJzrrdDTKpj1U9lCaXLNMVJyn8kAcoey+XkYQ4S4 IpJUtCehYTOfjE09umqCDToSIg== -----END CERTIFICATE-----Generated at Wed Nov 5 09:42:22 2025 by rpki-client