$ rpki-client -vvf rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft File: 488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft (raw, json) Hash identifier: VXl7Ha1mqTBXyt19PtSDr7v2Gkc1PVtdRnULW+NjQgY= Subject key identifier: D6:5A:94:C0:B5:1A:72:E5:CA:3E:E5:45:09:9B:38:01:33:36:73:53 Authority key identifier: 48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71 Certificate issuer: /CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71 Certificate serial: 01F21C8F7EBED6B71F8B5D48FDBB6C9ED84ADD4F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer Subject info access: rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft Manifest number: 02F5 Signing time: Wed 05 Nov 2025 00:06:38 +0000 Manifest this update: Wed 05 Nov 2025 00:01:38 +0000 Manifest next update: Thu 06 Nov 2025 03:07:38 +0000 Files and hashes: 1: 3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa (hash: I9G3ex2XveORcAEqGBwplD5mNPbZvqU6abd1zjBCLKY=) 2: 488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl (hash: hyPc76B2+9sYF33AIZ14CYSHzuLoRGDZwbooqc+jkHE=) 3: 323830343a373836303a3a2f33322d3332203d3e20323731323338.roa (hash: ob/Dwvax52q+vhxyPcSWE0mkKcMCWrMtLj4d7yXoKhY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f2:1c:8f:7e:be:d6:b7:1f:8b:5d:48:fd:bb:6c:9e:d8:4a:dd:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71 Validity Not Before: Nov 5 00:01:38 2025 GMT Not After : Nov 6 03:07:38 2025 GMT Subject: CN=D65A94C0B51A72E5CA3EE545099B380133367353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:e4:16:50:2f:00:8b:79:fd:e7:a8:83:a4: 80:c2:3a:fe:e1:86:81:76:d6:cb:ba:24:f8:8a:cf: 77:cc:0b:72:b4:64:de:0d:87:75:55:95:cb:7c:57: ae:6c:b6:47:5e:b1:b9:3b:c4:dd:aa:18:fe:e2:0b: 01:c7:80:dc:e6:fe:df:31:16:b5:a8:27:43:de:09: a6:15:db:d4:d9:70:e4:8b:b6:da:d6:60:10:cc:0a: dc:92:ff:ef:34:bf:c4:12:48:69:1c:ed:6a:73:0d: 08:91:5e:7f:f9:07:41:1d:a1:a2:a0:bf:8b:a5:15: b1:22:52:b1:e6:06:83:22:d9:d7:b9:4a:72:19:d6: 9a:66:eb:75:73:93:26:c5:3a:d7:b4:85:6c:4c:08: d2:c1:b9:91:28:86:80:cb:20:fb:d9:c4:fd:66:2c: 3a:38:e9:fe:8b:e2:63:a8:96:75:42:65:56:e8:a9: cf:56:4e:5b:c4:85:83:45:32:2b:a1:e3:dd:55:e9: 30:3c:64:34:f7:01:6c:44:be:fd:d3:a5:d7:4c:29: 89:3a:f6:46:cc:21:3d:26:e6:4e:77:68:1a:e0:9f: 96:8e:54:05:03:ae:ea:7e:6c:54:78:c5:e8:46:32: da:c6:d8:f1:45:58:a9:84:8a:f4:dc:fa:4a:13:ee: de:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5A:94:C0:B5:1A:72:E5:CA:3E:E5:45:09:9B:38:01:33:36:73:53 X509v3 Authority Key Identifier: keyid:48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:7e:a0:db:f7:9d:0d:90:bf:47:63:1e:42:9e:0b:2e:e7:cf: fd:e9:7e:ff:41:ea:77:ec:5f:c7:53:d8:6e:20:00:c7:b4:47: d5:d6:52:bf:04:11:d6:e0:19:e0:95:4e:4a:54:dd:34:a6:3d: c8:18:4c:dd:a9:c5:2a:b6:40:2a:9b:e8:7e:70:a7:cc:0f:bb: db:aa:70:c0:d1:79:79:c6:34:b9:f3:21:39:a7:a3:95:4a:8e: e5:a7:d2:ca:b8:f2:9d:f7:89:3c:90:54:ce:76:79:8a:47:b7: f4:7f:f6:45:47:96:92:ee:3e:5e:3a:cd:57:54:04:32:7a:41: fb:c3:48:b9:8a:ad:73:4b:99:fb:49:ec:21:43:1c:3c:3f:04: 4f:37:ae:d0:37:47:b1:4f:3f:bf:25:c4:41:d3:03:84:b0:0d: 27:7a:97:a5:49:7a:88:34:a8:85:72:6d:d3:4f:70:3e:1e:f8: f8:ec:5f:9e:66:6d:3d:43:96:d2:6f:08:78:0b:a4:e6:de:af: 81:bf:86:91:55:6f:ce:91:ab:d1:e6:c6:2c:ea:80:00:a4:9e: 6d:26:fb:e0:6d:32:d0:ca:79:35:fc:59:dc:ec:77:2f:45:2f: 25:5a:0c:6e:51:6c:32:8a:18:d1:8d:c6:74:64:30:a9:da:96: 9b:00:72:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAfIcj36+1rcfi11I/btsnthK3U8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4RDYxMzY3RjRDNDJFMDNBRTVDNUFFOEJFMDA3NkU0 OTYxQkU3MTAeFw0yNTExMDUwMDAxMzhaFw0yNTExMDYwMzA3MzhaMDMxMTAvBgNV BAMTKEQ2NUE5NEMwQjUxQTcyRTVDQTNFRTU0NTA5OUIzODAxMzMzNjczNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGceQWUC8Ai3n956iDpIDCOv7h hoF21su6JPiKz3fMC3K0ZN4Nh3VVlct8V65stkdesbk7xN2qGP7iCwHHgNzm/t8x FrWoJ0PeCaYV29TZcOSLttrWYBDMCtyS/+80v8QSSGkc7WpzDQiRXn/5B0EdoaKg v4ulFbEiUrHmBoMi2de5SnIZ1ppm63VzkybFOte0hWxMCNLBuZEohoDLIPvZxP1m LDo46f6L4mOolnVCZVboqc9WTlvEhYNFMiuh491V6TA8ZDT3AWxEvv3TpddMKYk6 9kbMIT0m5k53aBrgn5aOVAUDrup+bFR4xehGMtrG2PFFWKmEivTc+koT7t67AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1lqUwLUacuXKPuVFCZs4ATM2c1MwHwYDVR0j BBgwFoAUSI1hNn9MQuA65cWui+AHbklhvnEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0dZTnFlUVhHQ3VyV2Qxd3ZTYUFoaDFpTTNFeUNFdG12WkREUzhWdDRQ c2cvMC80ODhENjEzNjdGNEM0MkUwM0FFNUM1QUU4QkUwMDc2RTQ5NjFCRTcxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4OEQ2MTM2N0Y0QzQyRTAz QUU1QzVBRThCRTAwNzZFNDk2MUJFNzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0dZTnFlUVhHQ3VyV2Qxd3ZTYUFoaDFpTTNFeUNFdG12WkREUzhWdDRQc2cvMC80 ODhENjEzNjdGNEM0MkUwM0FFNUM1QUU4QkUwMDc2RTQ5NjFCRTcxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAH6g2/edDZC/R2MeQp4LLufP/el+/0Hqd+xfx1PYbiAAx7RH1dZSvwQR1uAZ 4JVOSlTdNKY9yBhM3anFKrZAKpvofnCnzA+726pwwNF5ecY0ufMhOaejlUqO5afS yrjynfeJPJBUznZ5ike39H/2RUeWku4+XjrNV1QEMnpB+8NIuYqtc0uZ+0nsIUMc PD8ETzeu0DdHsU8/vyXEQdMDhLANJ3qXpUl6iDSohXJt009wPh74+OxfnmZtPUOW 0m8IeAuk5t6vgb+GkVVvzpGr0ebGLOqAAKSebSb74G0y0Mp5NfxZ3Ox3L0UvJVoM blFsMooY0Y3GdGQwqdqWmwByUQ== -----END CERTIFICATE-----Generated at Wed Nov 5 05:17:25 2025 by rpki-client