$ rpki-client -vvf rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft File: 1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft (raw, json) Hash identifier: apre7WOVXCfXHloyaKTAwZ7fOi2mluWv6XUNc6RIVr4= Subject key identifier: AF:34:72:B9:E9:70:54:7B:E9:42:EB:1E:B8:65:74:58:CE:24:AC:67 Authority key identifier: 1C:40:67:D9:FC:88:80:CD:84:45:26:B4:C8:26:8B:52:5C:75:BA:EF Certificate issuer: /CN=1C4067D9FC8880CD844526B4C8268B525C75BAEF Certificate serial: 0F9CC96A37FFECF3BF7879A2B926640A2B1B7F47 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4067D9FC8880CD844526B4C8268B525C75BAEF.cer Subject info access: rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft Manifest number: 0254 Signing time: Tue 04 Nov 2025 18:48:10 +0000 Manifest this update: Tue 04 Nov 2025 18:43:10 +0000 Manifest next update: Wed 05 Nov 2025 19:47:10 +0000 Files and hashes: 1: 3137372e3230302e3232382e302f32322d3332203d3e20323730363035.roa (hash: IFEckCwoB8Z55hrB0cIzDmwXqQiVlP3FQFUuZEzRuyE=) 2: 1C4067D9FC8880CD844526B4C8268B525C75BAEF.crl (hash: 49A/RWPyCIFj/QuAhxY+n8Vg6WwchvsAs79OW8fUMvQ=) 3: 323830343a366539303a3a2f33322d3332203d3e20323730363035.roa (hash: zw6UCq4MOPS2SDzuqoD0dsraoU4SV05cUlyk16FJOes=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.crl rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4067D9FC8880CD844526B4C8268B525C75BAEF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:9c:c9:6a:37:ff:ec:f3:bf:78:79:a2:b9:26:64:0a:2b:1b:7f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C4067D9FC8880CD844526B4C8268B525C75BAEF Validity Not Before: Nov 4 18:43:10 2025 GMT Not After : Nov 5 19:47:10 2025 GMT Subject: CN=AF3472B9E970547BE942EB1EB8657458CE24AC67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:27:01:71:72:83:0b:2e:07:1b:f5:5b:91:67: fa:79:67:13:1a:90:f6:5b:47:7f:18:0e:82:d4:69: 80:49:02:bf:d9:81:69:0e:5c:04:67:97:15:fa:48: e0:23:fe:e1:d4:47:6c:1a:8c:5e:c2:ab:b8:39:d7: 45:51:09:4c:b1:67:2f:35:a9:0f:35:6d:26:7a:f0: 96:d3:82:e9:56:92:7f:8d:82:6a:aa:90:56:cc:64: a1:8b:39:27:13:ed:8d:ef:6d:c4:6f:80:b2:90:fc: 6f:eb:3c:72:ac:df:44:aa:d7:6e:dc:e7:bc:3a:de: 41:e6:e4:b0:04:14:b3:81:89:3a:48:cd:5a:fe:4a: 4b:a3:9e:60:13:e4:4a:1b:a6:09:37:ed:72:00:ad: 2e:29:79:d2:69:58:e4:b7:a2:d5:95:3a:aa:0d:d5: 85:76:52:5b:de:21:6d:9e:f9:e7:87:ea:20:17:5f: 60:a9:3b:e4:30:72:78:31:ae:bc:b3:2a:74:91:cf: a7:cc:fd:59:3b:79:b7:f2:92:9d:f0:56:d5:4c:81: 95:2e:3f:74:7a:ff:37:18:26:ee:7b:55:55:a9:dd: 63:09:77:be:9d:37:9f:53:e9:a8:1e:36:35:01:84: 99:8c:7b:64:6e:78:1d:d7:e5:e3:c7:dc:37:7e:32: cb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:34:72:B9:E9:70:54:7B:E9:42:EB:1E:B8:65:74:58:CE:24:AC:67 X509v3 Authority Key Identifier: keyid:1C:40:67:D9:FC:88:80:CD:84:45:26:B4:C8:26:8B:52:5C:75:BA:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4067D9FC8880CD844526B4C8268B525C75BAEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b4:d2:b3:0e:f6:0e:1f:ef:e3:9f:02:df:f4:e7:cc:8d:4f: 34:50:0e:d4:e9:64:cf:0d:4b:85:b8:a5:50:65:5b:9b:d4:d6: fc:6d:70:43:7f:e8:d9:61:da:2d:6e:1e:d3:16:85:44:c1:14: 73:86:7c:7e:16:bf:c4:b4:53:07:b0:a0:17:11:e6:e0:34:8f: 1c:8e:5e:c6:ef:11:d4:ab:d6:46:90:2c:e7:37:4e:d7:6e:f2: 4d:3a:44:b9:49:ae:cc:f5:17:c1:b8:55:de:10:e6:fb:ff:48: ca:2f:6d:39:30:54:a6:2e:13:ab:40:8b:7c:90:46:bd:85:bb: da:35:4a:be:f1:47:3a:a2:fb:74:35:8e:a0:61:28:f1:c7:bd: 62:80:be:a4:20:32:73:c5:38:78:86:c9:db:21:ca:f5:e8:2a: eb:2c:65:8c:f3:a9:4a:b9:3d:75:af:67:72:d7:1c:f4:31:e0: 6c:38:8c:14:4c:48:27:80:7e:ca:18:28:87:e0:b6:1a:f7:ea: 80:bb:e6:51:00:83:12:ae:ab:d1:9d:62:55:87:43:59:26:d3: 90:32:5c:a6:74:c2:15:df:6e:8e:68:ca:04:04:32:46:73:a4: d8:ef:dd:3f:ad:e1:12:2e:64:fd:c5:7d:ea:0a:3a:31:38:87: 86:55:47:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD5zJajf/7PO/eHmiuSZkCisbf0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0MDY3RDlGQzg4ODBDRDg0NDUyNkI0QzgyNjhCNTI1 Qzc1QkFFRjAeFw0yNTExMDQxODQzMTBaFw0yNTExMDUxOTQ3MTBaMDMxMTAvBgNV BAMTKEFGMzQ3MkI5RTk3MDU0N0JFOTQyRUIxRUI4NjU3NDU4Q0UyNEFDNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0JwFxcoMLLgcb9VuRZ/p5ZxMa kPZbR38YDoLUaYBJAr/ZgWkOXARnlxX6SOAj/uHUR2wajF7Cq7g510VRCUyxZy81 qQ81bSZ68JbTgulWkn+NgmqqkFbMZKGLOScT7Y3vbcRvgLKQ/G/rPHKs30Sq127c 57w63kHm5LAEFLOBiTpIzVr+SkujnmAT5Eobpgk37XIArS4pedJpWOS3otWVOqoN 1YV2UlveIW2e+eeH6iAXX2CpO+QwcngxrryzKnSRz6fM/Vk7ebfykp3wVtVMgZUu P3R6/zcYJu57VVWp3WMJd76dN59T6ageNjUBhJmMe2RueB3X5ePH3Dd+MsvhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrzRyuelwVHvpQuseuGV0WM4krGcwHwYDVR0j BBgwFoAUHEBn2fyIgM2ERSa0yCaLUlx1uu8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRVg5QWk0ZDdaY25zQlJaV1FNc2hxanVNaU0zZFdRU3JtSzROdExmcmFm RGovMC8xQzQwNjdEOUZDODg4MENEODQ0NTI2QjRDODI2OEI1MjVDNzVCQUVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDNDA2N0Q5RkM4ODgwQ0Q4 NDQ1MjZCNEM4MjY4QjUyNUM3NUJBRUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RVg5QWk0ZDdaY25zQlJaV1FNc2hxanVNaU0zZFdRU3JtSzROdExmcmFmRGovMC8x QzQwNjdEOUZDODg4MENEODQ0NTI2QjRDODI2OEI1MjVDNzVCQUVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfrTSsw72Dh/v458C3/TnzI1PNFAO1Olkzw1LhbilUGVbm9TW/G1wQ3/o2WHa LW4e0xaFRMEUc4Z8fha/xLRTB7CgFxHm4DSPHI5exu8R1KvWRpAs5zdO127yTTpE uUmuzPUXwbhV3hDm+/9Iyi9tOTBUpi4Tq0CLfJBGvYW72jVKvvFHOqL7dDWOoGEo 8ce9YoC+pCAyc8U4eIbJ2yHK9egq6yxljPOpSrk9da9nctcc9DHgbDiMFExIJ4B+ yhgoh+C2GvfqgLvmUQCDEq6r0Z1iVYdDWSbTkDJcpnTCFd9ujmjKBAQyRnOk2O/d P63hEi5k/cV96go6MTiHhlVH4Q== -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:43 2025 by rpki-client