$ rpki-client -vvf rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft File: 4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft (raw, json) Hash identifier: V5hbVdiZZWeMVciUEZstOskgUGHmkYcg1bbV6j/y6N8= Subject key identifier: FF:F0:CE:0F:2C:E2:1D:C3:90:44:72:56:90:07:68:FD:E9:39:33:15 Authority key identifier: 4B:2D:30:8A:10:AC:42:64:B7:DC:7D:90:3F:FE:47:8F:2A:40:0E:1D Certificate issuer: /CN=4B2D308A10AC4264B7DC7D903FFE478F2A400E1D Certificate serial: 3C5F302B7EDA8B0B158F3DD9D20EAF27B2C444E8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer Subject info access: rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft Manifest number: 8E Signing time: Wed 05 Nov 2025 05:36:56 +0000 Manifest this update: Wed 05 Nov 2025 05:31:56 +0000 Manifest next update: Thu 06 Nov 2025 06:47:56 +0000 Files and hashes: 1: 3137302e3234352e3131362e302f32322d3332203d3e20323634343239.roa (hash: bdYqLTrmyZVtnX3hQzjggcKDrPInm/SX7ouRHDPAjqE=) 2: 323830343a316537303a3a2f33322d313238203d3e20323634343239.roa (hash: 6ObJH/Yn0OhNlenVZChDhjf8OzouFK3QjeWFSU2/I54=) 3: 3133312e3232312e3133322e302f32322d3332203d3e20323634343239.roa (hash: 4kjU7jzExWeoE5Ul09K/8oKzzSaEzcW2EMczGqlS9Wk=) 4: 4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl (hash: qaUY5Eu0a7UFWgX5rig81eb3jghT8biGCBEC7wUnHVU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:5f:30:2b:7e:da:8b:0b:15:8f:3d:d9:d2:0e:af:27:b2:c4:44:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2D308A10AC4264B7DC7D903FFE478F2A400E1D Validity Not Before: Nov 5 05:31:56 2025 GMT Not After : Nov 6 06:47:56 2025 GMT Subject: CN=FFF0CE0F2CE21DC390447256900768FDE9393315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:44:3b:cf:91:50:8c:22:79:3c:ba:35:a5:ba: 60:bc:db:ed:52:80:b4:56:ee:08:43:b8:d4:46:8a: 20:4f:84:eb:47:4e:8d:d1:e2:e3:ad:37:fa:9e:0f: d9:6d:13:32:18:e7:61:1e:c6:a8:91:f9:c0:8f:66: 67:d9:d5:17:c7:15:62:38:0f:46:ec:33:34:c1:28: 17:cc:58:1b:00:1c:6b:03:4e:8f:0a:db:e6:9b:10: 70:88:d6:d9:9d:7f:7d:29:c1:0d:95:07:1a:2b:7e: 08:0a:08:af:b7:eb:2d:8a:c2:b8:af:38:a3:fa:a2: 34:74:2d:e1:12:d4:8e:04:77:db:3e:27:ca:15:e6: 55:f0:27:36:89:bd:1e:41:e8:9d:a8:8a:8b:88:cb: a2:c9:03:c1:1a:bd:95:2a:3a:82:52:99:25:b0:21: 5c:fe:74:8b:f2:1d:ea:8c:02:23:f0:c3:5b:b4:62: 5e:81:c8:38:be:eb:b8:43:91:2c:9b:c9:d0:85:46: fe:cd:87:d9:25:73:63:38:f7:7b:ad:73:64:71:03: 35:ca:06:31:bf:5c:95:5c:17:98:af:71:80:fc:a3: 03:01:3e:8b:00:61:8a:d6:b3:6b:04:56:03:f4:f3: 47:71:fd:23:60:8b:03:46:dc:b8:af:91:cd:65:8e: 7e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F0:CE:0F:2C:E2:1D:C3:90:44:72:56:90:07:68:FD:E9:39:33:15 X509v3 Authority Key Identifier: keyid:4B:2D:30:8A:10:AC:42:64:B7:DC:7D:90:3F:FE:47:8F:2A:40:0E:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f7:2a:a0:a1:06:74:35:96:b0:26:cf:7e:fe:e8:5f:a7:28: 07:85:9d:65:62:95:f2:f0:73:a1:1d:90:13:7f:46:da:18:77: 19:fe:cf:3c:7f:da:52:f7:c5:08:41:04:2c:c9:f4:ba:12:81: a1:58:bc:fc:fd:cc:12:96:83:45:1e:d1:4e:f9:b5:da:bd:a0: 23:55:cc:cc:83:90:2e:3d:ac:74:30:73:aa:d9:f4:8e:2b:98: 50:fa:03:a2:ca:a3:f5:53:b9:1b:e2:90:b2:1f:c6:36:fb:a5: 70:a1:34:4d:67:74:f7:f1:ab:a6:f5:9c:27:a0:d4:7a:ea:12: a7:a3:b2:16:d3:3f:53:d3:71:f4:90:f9:f0:fb:75:ab:d3:3a: 06:78:be:0e:eb:4b:70:93:e5:cd:9e:fd:ab:e2:a3:ec:47:81: 41:12:90:23:a1:d5:6f:84:6c:25:63:1f:db:a8:d5:49:5c:bf: 67:f2:44:a9:91:c1:f5:87:dd:48:97:bd:39:48:2f:87:6e:36: 05:c1:8e:96:ee:8e:e4:5b:f2:89:e4:f7:c8:e9:d8:3e:25:a5: 03:70:ad:b7:72:14:c3:86:6f:9a:f0:5c:66:a8:cb:0d:af:57: 4f:8f:fb:c2:c6:c3:b9:f3:10:bd:cd:1d:63:06:83:e2:29:99: b6:ff:c0:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPF8wK37aiwsVjz3Z0g6vJ7LEROgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyRDMwOEExMEFDNDI2NEI3REM3RDkwM0ZGRTQ3OEYy QTQwMEUxRDAeFw0yNTExMDUwNTMxNTZaFw0yNTExMDYwNjQ3NTZaMDMxMTAvBgNV BAMTKEZGRjBDRTBGMkNFMjFEQzM5MDQ0NzI1NjkwMDc2OEZERTkzOTMzMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJRDvPkVCMInk8ujWlumC82+1S gLRW7ghDuNRGiiBPhOtHTo3R4uOtN/qeD9ltEzIY52EexqiR+cCPZmfZ1RfHFWI4 D0bsMzTBKBfMWBsAHGsDTo8K2+abEHCI1tmdf30pwQ2VBxorfggKCK+36y2Kwriv OKP6ojR0LeES1I4Ed9s+J8oV5lXwJzaJvR5B6J2oiouIy6LJA8EavZUqOoJSmSWw IVz+dIvyHeqMAiPww1u0Yl6ByDi+67hDkSybydCFRv7Nh9klc2M493utc2RxAzXK BjG/XJVcF5ivcYD8owMBPosAYYrWs2sEVgP080dx/SNgiwNG3Livkc1ljn7zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU//DODyziHcOQRHJWkAdo/ek5MxUwHwYDVR0j BBgwFoAUSy0wihCsQmS33H2QP/5HjypADh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXNRRTg3cHZMbzJCMllHUFNZSHpWa2g2QWpLdGE3cjVmZkFCTlk1RmpG TlEvMC80QjJEMzA4QTEwQUM0MjY0QjdEQzdEOTAzRkZFNDc4RjJBNDAwRTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCMkQzMDhBMTBBQzQyNjRC N0RDN0Q5MDNGRkU0NzhGMkE0MDBFMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXNRRTg3cHZMbzJCMllHUFNZSHpWa2g2QWpLdGE3cjVmZkFCTlk1RmpGTlEvMC80 QjJEMzA4QTEwQUM0MjY0QjdEQzdEOTAzRkZFNDc4RjJBNDAwRTFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUvcqoKEGdDWWsCbPfv7oX6coB4WdZWKV8vBzoR2QE39G2hh3Gf7PPH/aUvfF CEEELMn0uhKBoVi8/P3MEpaDRR7RTvm12r2gI1XMzIOQLj2sdDBzqtn0jiuYUPoD osqj9VO5G+KQsh/GNvulcKE0TWd09/GrpvWcJ6DUeuoSp6OyFtM/U9Nx9JD58Pt1 q9M6Bni+DutLcJPlzZ79q+Kj7EeBQRKQI6HVb4RsJWMf26jVSVy/Z/JEqZHB9Yfd SJe9OUgvh242BcGOlu6O5FvyieT3yOnYPiWlA3Ctt3IUw4ZvmvBcZqjLDa9XT4/7 wsbDufMQvc0dYwaD4imZtv/ApA== -----END CERTIFICATE-----Generated at Wed Nov 5 20:50:39 2025 by rpki-client