$ rpki-client -vvf rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft File: 4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft (raw, json) Hash identifier: 3l+kQlF/WS+pcGK9BHI5w/+GzF53lJ9/aOxzHFZJj9A= Subject key identifier: 29:AF:D1:5B:71:96:11:94:9B:34:8B:A9:11:B7:A4:13:F5:47:CD:82 Authority key identifier: 4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33 Certificate issuer: /CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133 Certificate serial: 4C5329C8745A10F717CD3A4C11AF983D2A88ED Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer Subject info access: rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft Manifest number: 01AF Signing time: Wed 05 Nov 2025 06:42:15 +0000 Manifest this update: Wed 05 Nov 2025 06:37:15 +0000 Manifest next update: Thu 06 Nov 2025 07:33:15 +0000 Files and hashes: 1: 323830343a383732633a3a2f33322d3438203d3e20323732363932.roa (hash: kHLoRmafAK4uIGoyJ2MIAaX2srnBBGsfGchJnwrFwCA=) 2: 4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl (hash: DLYvwfSn9gUJ9C7M6EAxfREljlhBhK6g0LSj2UBOaJ8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:53:29:c8:74:5a:10:f7:17:cd:3a:4c:11:af:98:3d:2a:88:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133 Validity Not Before: Nov 5 06:37:15 2025 GMT Not After : Nov 6 07:33:15 2025 GMT Subject: CN=29AFD15B719611949B348BA911B7A413F547CD82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:43:c5:74:d5:08:79:e1:c7:04:aa:e9:1d:43: 5a:23:28:5a:69:8b:8c:6f:ba:0a:ff:72:50:f1:1c: c6:55:76:d6:9e:9c:88:45:6e:27:65:22:6c:04:e5: 94:0c:cc:5f:6f:ed:9d:c8:32:5a:15:b6:5c:87:e4: 9f:6e:ef:34:a8:97:d4:89:93:4d:eb:97:7e:4f:35: fe:bc:48:a0:10:d3:1e:fc:9d:7e:79:6c:ec:3e:e7: fa:a8:55:a0:7c:f0:a4:4a:3f:81:00:c1:31:4e:10: c4:05:31:4e:e7:b7:7b:99:4f:15:60:62:be:ed:fe: 14:af:0b:b3:45:52:8a:a6:26:30:6c:65:b8:15:67: 3d:40:5a:d2:18:04:9e:a6:0c:6e:2b:0e:ee:e0:1d: f8:75:b8:76:53:25:d5:40:b2:d2:e7:e5:42:fc:fc: 46:12:db:38:4d:00:b8:fa:0a:27:bf:c1:7b:4b:ce: 6f:c7:44:ea:4c:68:3d:a4:63:57:4b:9a:29:6c:e4: 64:58:cc:2b:4c:2d:53:95:9f:f0:fc:4e:26:c1:af: b8:ea:21:f3:f7:d4:c9:fa:08:e5:6b:da:09:b6:78: 55:87:e8:59:6f:8d:2d:b2:f8:70:66:42:19:11:bf: 1f:bd:68:8b:d5:2b:37:dd:18:26:c8:f8:97:ac:e6: fa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AF:D1:5B:71:96:11:94:9B:34:8B:A9:11:B7:A4:13:F5:47:CD:82 X509v3 Authority Key Identifier: keyid:4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:0c:c8:92:7f:0c:da:a3:27:5c:60:ef:a4:ea:a4:ff:57:da: 67:a7:08:76:97:fd:81:0d:d1:b1:8b:d3:e7:5e:ea:1b:89:a7: 7e:8d:8a:77:59:b2:23:bc:e0:26:33:64:3a:42:cc:95:06:b2: c5:55:f1:fe:8b:ed:a4:4d:61:29:b0:5b:c6:fd:a5:f2:bb:cd: dd:fc:31:e6:70:62:8c:e9:f6:08:c2:e8:89:7c:e0:4e:89:28: e9:75:b5:48:72:1c:4b:f5:c4:d1:3f:6e:a3:77:d8:c5:6e:f2: f7:65:7d:fc:d2:06:06:82:8b:cd:ec:f0:41:79:58:89:8e:e6: 71:c8:40:85:c3:cf:03:ed:d1:d5:5a:c3:59:76:f6:f1:8d:17: 24:85:c7:9c:a3:e3:c2:d0:bf:e6:8e:64:c6:32:3f:38:b2:42: 0c:67:2e:9e:ed:be:e7:6b:00:9c:30:d4:20:42:ca:d3:8e:f2: 31:df:6f:02:5d:e9:c4:27:0a:16:88:da:cf:3b:a0:68:de:a8: 85:15:bb:cb:14:fe:f2:68:38:2a:98:6a:cf:37:8c:63:e8:3b: fa:13:a0:e5:b2:0a:dd:7c:08:20:64:89:40:1f:e5:33:21:a4: 15:c1:41:3f:0a:33:b6:0b:ed:c5:ac:70:e6:e2:fd:07:01:38: 36:99:b0:1e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgITTFMpyHRaEPcXzTpMEa+YPSqI7TANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg0QjdEMDA5MEE2RjRDN0IyRkJERjlERDVCREJFNzhCMTQ1 OEQxMTMzMB4XDTI1MTEwNTA2MzcxNVoXDTI1MTEwNjA3MzMxNVowMzExMC8GA1UE AxMoMjlBRkQxNUI3MTk2MTE5NDlCMzQ4QkE5MTFCN0E0MTNGNTQ3Q0Q4MjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALpDxXTVCHnhxwSq6R1DWiMoWmmL jG+6Cv9yUPEcxlV21p6ciEVuJ2UibATllAzMX2/tncgyWhW2XIfkn27vNKiX1ImT TeuXfk81/rxIoBDTHvydfnls7D7n+qhVoHzwpEo/gQDBMU4QxAUxTue3e5lPFWBi vu3+FK8Ls0VSiqYmMGxluBVnPUBa0hgEnqYMbisO7uAd+HW4dlMl1UCy0uflQvz8 RhLbOE0AuPoKJ7/Be0vOb8dE6kxoPaRjV0uaKWzkZFjMK0wtU5Wf8PxOJsGvuOoh 8/fUyfoI5WvaCbZ4VYfoWW+NLbL4cGZCGRG/H71oi9UrN90YJsj4l6zm+hkCAwEA AaOCAlkwggJVMB0GA1UdDgQWBBQpr9FbcZYRlJs0i6kRt6QT9UfNgjAfBgNVHSME GDAWgBRLfQCQpvTHsvvfndW9vnixRY0RMzAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9GN0tKVVB1ekhGSGZqcGttZjJHMU1pZ29aOEY3amFDMzNHZDJLYVh3REtM US8wLzRCN0QwMDkwQTZGNEM3QjJGQkRGOURENUJEQkU3OEIxNDU4RDExMzMuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNEI3RDAwOTBBNkY0QzdCMkZC REY5REQ1QkRCRTc4QjE0NThEMTEzMy5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9G N0tKVVB1ekhGSGZqcGttZjJHMU1pZ29aOEY3amFDMzNHZDJLYVh3REtMUS8wLzRC N0QwMDkwQTZGNEM3QjJGQkRGOURENUJEQkU3OEIxNDU4RDExMzMubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA5DMiSfwzaoydcYO+k6qT/V9pnpwh2l/2BDdGxi9PnXuobiad+jYp3WbIjvOAm M2Q6QsyVBrLFVfH+i+2kTWEpsFvG/aXyu83d/DHmcGKM6fYIwuiJfOBOiSjpdbVI chxL9cTRP26jd9jFbvL3ZX380gYGgovN7PBBeViJjuZxyECFw88D7dHVWsNZdvbx jRckhceco+PC0L/mjmTGMj84skIMZy6e7b7nawCcMNQgQsrTjvIx328CXenEJwoW iNrPO6Bo3qiFFbvLFP7yaDgqmGrPN4xj6Dv6E6DlsgrdfAggZIlAH+UzIaQVwUE/ CjO2C+3FrHDm4v0HATg2mbAe -----END CERTIFICATE-----Generated at Wed Nov 5 11:13:17 2025 by rpki-client