$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft File: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft (raw, json) Hash identifier: whR85GnyOQKYRtz7uvIV9Kcg/h8U9Ofir/Elp/Z1bpA= Subject key identifier: 6F:46:EC:E3:8D:25:0B:0D:E5:7F:1B:EF:31:4C:A6:C2:20:7A:52:BF Authority key identifier: 4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E Certificate issuer: /CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E Certificate serial: 1155A2A94A0A95181FC6622C54110D0AB871AB8A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer Subject info access: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft Manifest number: 02D9 Signing time: Tue 04 Nov 2025 16:15:23 +0000 Manifest this update: Tue 04 Nov 2025 16:10:23 +0000 Manifest next update: Wed 05 Nov 2025 19:12:23 +0000 Files and hashes: 1: 3137372e39312e3136342e302f32322d3235203d3e20323633343435.roa (hash: scT74f9+IGXquXgeiznfoCCJYP7gQXwCIwX0K3d7sQY=) 2: 323830343a313165303a3a2f33322d3535203d3e20323633343435.roa (hash: JY9NjnQ88soBYNRVthMyseU4hIC042l72p6YiSE2yyU=) 3: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl (hash: F5u69zdMTRASqYw75m7imA0OjLvCH+mb9T3kzmcnseA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:55:a2:a9:4a:0a:95:18:1f:c6:62:2c:54:11:0d:0a:b8:71:ab:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E Validity Not Before: Nov 4 16:10:23 2025 GMT Not After : Nov 5 19:12:23 2025 GMT Subject: CN=6F46ECE38D250B0DE57F1BEF314CA6C2207A52BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c4:01:78:fc:a8:a9:12:19:be:ed:a8:45:5f: 28:42:3a:ff:f6:3a:ae:85:82:32:71:db:31:8b:b9: 83:7c:4c:41:41:a3:be:1b:7b:be:c1:96:35:aa:ba: f3:ee:b2:73:35:b2:0b:93:db:c1:a1:a3:66:5b:40: 78:e7:be:e0:4c:54:7e:94:b5:c2:e5:e6:4d:28:6d: ef:d1:2a:ef:d9:fa:56:e5:0a:94:a8:df:e1:89:37: 60:e0:9e:16:0e:0b:ea:0e:44:8b:04:aa:02:81:4a: c5:47:53:3d:c1:25:cc:f9:e4:7e:06:49:a4:8f:b8: 4b:07:ea:9c:c3:16:51:08:de:be:46:e3:75:b9:a3: c2:cf:c8:10:3b:0c:85:92:9d:ba:7c:0b:a2:00:b0: 8a:f9:3a:d5:e1:75:c9:9c:54:18:43:26:68:0a:c1: e1:ad:2d:02:bb:55:6b:36:81:64:4d:cf:c8:dd:ec: 62:96:18:cd:21:d7:b3:94:cd:34:6b:77:b7:82:30: 0b:57:f8:b5:46:1c:9b:67:9b:05:2b:4c:7e:d6:e2: 38:1d:f6:1e:37:da:8b:8b:ab:14:57:b8:1a:31:52: 29:c7:fc:9a:cf:b5:d9:2b:1d:51:31:ac:77:94:a7: bb:a3:4e:20:1b:a7:f4:9a:3c:cf:75:0a:a4:da:df: 41:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:46:EC:E3:8D:25:0B:0D:E5:7F:1B:EF:31:4C:A6:C2:20:7A:52:BF X509v3 Authority Key Identifier: keyid:4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:99:b4:0c:1d:83:5a:ce:ed:3b:2d:36:26:0d:48:b0:28:97: 3d:c2:23:7f:6b:67:e5:85:f5:c7:60:28:b2:d3:0e:ae:13:8b: 07:1f:b2:58:9b:86:52:b9:4c:f6:ba:84:08:c5:29:37:e4:93: a7:02:c6:f4:06:90:25:b5:89:93:a4:70:ad:34:3c:07:dd:09: 8c:9f:c0:d0:09:03:50:f6:7b:68:17:24:1d:df:c7:35:fb:a8: d7:d5:c3:6d:61:60:d0:93:25:2d:c1:af:7e:22:4d:78:e5:89: 16:73:6e:cb:3b:ac:c0:16:64:04:37:e2:46:2b:75:84:cd:5c: d0:a5:9a:ef:96:21:f7:56:41:4a:4a:2b:ea:0c:88:94:e9:9b: c3:4f:b6:a8:ff:08:46:c5:94:46:ba:62:9b:da:b9:ba:d9:31: 68:fd:6f:60:e0:71:67:66:12:ed:ed:a6:60:81:53:03:dd:b9: 3b:7c:7f:52:10:c0:ca:56:9b:82:a1:4f:e2:d7:fd:e3:6f:e0: e8:2a:f8:9b:97:7c:a3:41:1f:93:45:4a:65:87:1e:75:c5:d9: b4:5a:75:e2:d6:1d:28:93:66:59:e5:48:ca:29:7d:48:83:d9: c6:45:9b:c2:a3:88:98:11:19:53:1c:b1:c0:07:7e:47:17:a3: 8a:d3:df:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEVWiqUoKlRgfxmIsVBENCrhxq4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzRTlDRDA5RTNGNEE2OUI0MEI0NEM4QzgxNjFFMUYw MEJFMEY1RTAeFw0yNTExMDQxNjEwMjNaFw0yNTExMDUxOTEyMjNaMDMxMTAvBgNV BAMTKDZGNDZFQ0UzOEQyNTBCMERFNTdGMUJFRjMxNENBNkMyMjA3QTUyQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2xAF4/KipEhm+7ahFXyhCOv/2 Oq6FgjJx2zGLuYN8TEFBo74be77BljWquvPusnM1sguT28Gho2ZbQHjnvuBMVH6U tcLl5k0obe/RKu/Z+lblCpSo3+GJN2DgnhYOC+oORIsEqgKBSsVHUz3BJcz55H4G SaSPuEsH6pzDFlEI3r5G43W5o8LPyBA7DIWSnbp8C6IAsIr5OtXhdcmcVBhDJmgK weGtLQK7VWs2gWRNz8jd7GKWGM0h17OUzTRrd7eCMAtX+LVGHJtnmwUrTH7W4jgd 9h432ouLqxRXuBoxUinH/JrPtdkrHVExrHeUp7ujTiAbp/SaPM91CqTa30GxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUb0bs440lCw3lfxvvMUymwiB6Ur8wHwYDVR0j BBgwFoAUSz6c0J4/Smm0C0TIyBYeHwC+D14wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZE bXgvMC80QjNFOUNEMDlFM0Y0QTY5QjQwQjQ0QzhDODE2MUUxRjAwQkUwRjVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCM0U5Q0QwOUUzRjRBNjlC NDBCNDRDOEM4MTYxRTFGMDBCRTBGNUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Sjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZEbXgvMC80 QjNFOUNEMDlFM0Y0QTY5QjQwQjQ0QzhDODE2MUUxRjAwQkUwRjVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK5m0DB2DWs7tOy02Jg1IsCiXPcIjf2tn5YX1x2AostMOrhOLBx+yWJuGUrlM 9rqECMUpN+STpwLG9AaQJbWJk6RwrTQ8B90JjJ/A0AkDUPZ7aBckHd/HNfuo19XD bWFg0JMlLcGvfiJNeOWJFnNuyzuswBZkBDfiRit1hM1c0KWa75Yh91ZBSkor6gyI lOmbw0+2qP8IRsWURrpim9q5utkxaP1vYOBxZ2YS7e2mYIFTA925O3x/UhDAylab gqFP4tf942/g6Cr4m5d8o0Efk0VKZYcedcXZtFp14tYdKJNmWeVIyil9SIPZxkWb wqOImBEZUxyxwAd+RxejitPfNQ== -----END CERTIFICATE-----Generated at Wed Nov 5 11:00:45 2025 by rpki-client