$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft File: 4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft (raw, json) Hash identifier: gW+Rf11cxHj61dvbcFpdSinOS65WymUQzGeCf3rbynM= Subject key identifier: 80:DB:7C:BC:E3:66:DB:D5:3B:C0:CC:C5:55:52:43:5D:27:86:8B:9D Authority key identifier: 41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87 Certificate issuer: /CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87 Certificate serial: 79C4C320A953EBE3732246A246D8D3452ACC6662 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer Subject info access: rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft Manifest number: C7 Signing time: Tue 04 Nov 2025 17:47:14 +0000 Manifest this update: Tue 04 Nov 2025 17:42:14 +0000 Manifest next update: Wed 05 Nov 2025 20:37:14 +0000 Files and hashes: 1: 3136382e3139372e37362e302f32322d3234203d3e20323633363536.roa (hash: LFEgWICXHnee4/bGPrqW2v3LYv3dbDv2jg2lbR5xrCI=) 2: 4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl (hash: 51Um5YhuJsNAUv/RQKQl+Pp1qQZHIFVND91sOe44vDc=) 3: 3230312e3133392e38342e302f32322d3234203d3e20323633363536.roa (hash: R7MIKUFJ61JnpNcf/kEfY1SDTgaGtaQruSRJo+oewXw=) 4: 3137372e36362e32382e302f32322d3234203d3e20323633363536.roa (hash: AByqAu5aFAKkVdIxOZPc9IFOefmyvDsFDw/jy1fUyFk=) 5: 323830343a313066633a3a2f33322d3438203d3e20323633363536.roa (hash: CNvb3KkAA8j3AXGUz/JU+MGKpekSazqUKaqrLKdRZTg=) 6: 3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa (hash: q/AvzbSaNaOyUM2kP8iTR4vF99TrI5L54LVhzTBdHSE=) 7: 3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa (hash: DW/B5dATBRcxOk64vZZlom9Nt7hZJEF1qo3K9/Df50s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c4:c3:20:a9:53:eb:e3:73:22:46:a2:46:d8:d3:45:2a:cc:66:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87 Validity Not Before: Nov 4 17:42:14 2025 GMT Not After : Nov 5 20:37:14 2025 GMT Subject: CN=80DB7CBCE366DBD53BC0CCC55552435D27868B9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cb:fc:ff:33:d2:f9:e3:08:20:40:b0:92:f5: 48:57:63:89:fa:34:a4:4d:c8:6a:f4:df:d0:c8:3c: 79:79:5d:84:b4:82:3c:3e:20:f6:c4:e2:3c:11:c7: 45:36:04:8c:4e:a8:2c:c4:e2:7a:e6:4e:aa:8d:c8: 56:5b:9e:9c:1f:dd:b1:8f:34:b2:22:ac:23:ee:a1: b9:2b:0f:be:cb:55:3d:25:a2:f2:cf:ae:4d:5b:09: f0:40:9a:66:b2:1d:08:2c:00:c9:b6:5c:6d:a6:70: 63:8d:1f:fe:92:f0:cf:d6:a7:2b:a3:78:45:01:81: 18:83:4d:dd:b1:38:7c:87:8c:15:68:36:eb:55:b1: fb:ad:93:94:53:be:f0:5b:5d:8c:0f:f4:34:7b:14: 1d:b3:6c:94:f8:5d:a3:66:4c:ef:0e:c6:39:74:6f: f3:82:90:7d:93:66:94:4d:3f:a0:88:90:5e:6a:03: d9:f0:08:8b:c5:1d:62:59:05:da:e5:63:6f:c4:c7: 7d:fc:00:11:33:9b:97:d2:47:d3:42:cc:74:be:9c: 46:3b:6a:f4:80:fd:16:d6:70:06:59:d6:12:0f:2e: ed:f5:2b:2f:ab:1a:e4:1a:f6:aa:4d:3b:a8:06:1c: 6d:57:80:d9:cb:69:c5:20:77:87:b7:3d:fc:39:57: 06:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DB:7C:BC:E3:66:DB:D5:3B:C0:CC:C5:55:52:43:5D:27:86:8B:9D X509v3 Authority Key Identifier: keyid:41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:b6:f9:59:2e:59:d9:21:88:7f:8f:f1:46:b6:8b:60:1f:dc: 20:d4:e4:79:de:1b:a5:ac:17:a3:58:de:6a:80:42:3a:e8:68: 41:bd:dc:48:c1:30:dd:ac:ba:e6:22:ea:f2:f5:86:20:38:6a: a9:c7:3b:e4:cc:c4:62:5e:0c:9c:66:d6:1f:60:db:71:13:ca: 0c:b7:76:cf:72:52:3f:e0:ba:01:67:10:f4:06:30:ac:ef:00: bc:97:47:db:46:60:08:2a:98:95:f2:c8:8e:eb:ba:77:e9:1d: e5:d9:1f:a6:20:ed:d8:44:0c:3a:cd:db:ed:f0:70:3e:23:3c: e2:f7:10:2b:c8:61:b9:a1:18:ba:a0:ad:41:74:07:31:c9:3c: 87:df:25:42:73:0b:e4:4d:44:4a:c0:57:a5:d6:33:d7:4e:b3: 7a:72:76:99:5a:dd:7a:80:f9:57:0f:ed:a0:74:83:79:68:d5: 8f:50:91:c5:d1:2c:00:6e:bc:c0:b0:95:49:c8:9c:88:b1:4f: 15:cd:b1:26:17:db:32:25:7f:2b:c2:a7:64:d7:a4:ce:c9:0a: 22:b4:ff:a9:d7:11:8e:c1:79:04:6f:5c:93:f5:d8:83:93:e8: 75:05:98:1d:b2:87:78:49:54:84:26:76:bb:22:ac:17:aa:ca: 19:8b:f5:b0 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUecTDIKlT6+NzIkaiRtjTRSrMZmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE4N0U4RjlGQjNDQzNEMjQ4NTQ2NzFDNUE4QzA4MzA2 M0Q3QkM4NzAeFw0yNTExMDQxNzQyMTRaFw0yNTExMDUyMDM3MTRaMDMxMTAvBgNV BAMTKDgwREI3Q0JDRTM2NkRCRDUzQkMwQ0NDNTU1NTI0MzVEMjc4NjhCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQy/z/M9L54wggQLCS9UhXY4n6 NKRNyGr039DIPHl5XYS0gjw+IPbE4jwRx0U2BIxOqCzE4nrmTqqNyFZbnpwf3bGP NLIirCPuobkrD77LVT0lovLPrk1bCfBAmmayHQgsAMm2XG2mcGONH/6S8M/Wpyuj eEUBgRiDTd2xOHyHjBVoNutVsfutk5RTvvBbXYwP9DR7FB2zbJT4XaNmTO8Oxjl0 b/OCkH2TZpRNP6CIkF5qA9nwCIvFHWJZBdrlY2/Ex338ABEzm5fSR9NCzHS+nEY7 avSA/RbWcAZZ1hIPLu31Ky+rGuQa9qpNO6gGHG1XgNnLacUgd4e3Pfw5VwaZAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUgNt8vONm29U7wMzFVVJDXSeGi50wHwYDVR0j BBgwFoAUQYfo+fs8w9JIVGccWowIMGPXvIcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9LaUVrUDV6eTJkbnZ4cDNaZUdkRzFhUEFoQTZzNVpZeGp1SlloOHZDVkJ4 LzAvNDE4N0U4RjlGQjNDQzNEMjQ4NTQ2NzFDNUE4QzA4MzA2M0Q3QkM4Ny5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80MTg3RThGOUZCM0NDM0QyNDg1 NDY3MUM1QThDMDgzMDYzRDdCQzg3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0tp RWtQNXp5MmRudnhwM1plR2RHMWFQQWhBNnM1Wll4anVKWWg4dkNWQngvMC80MTg3 RThGOUZCM0NDM0QyNDg1NDY3MUM1QThDMDgzMDYzRDdCQzg3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA sLb5WS5Z2SGIf4/xRraLYB/cINTked4bpawXo1jeaoBCOuhoQb3cSMEw3ay65iLq 8vWGIDhqqcc75MzEYl4MnGbWH2DbcRPKDLd2z3JSP+C6AWcQ9AYwrO8AvJdH20Zg CCqYlfLIjuu6d+kd5dkfpiDt2EQMOs3b7fBwPiM84vcQK8hhuaEYuqCtQXQHMck8 h98lQnML5E1ESsBXpdYz106zenJ2mVrdeoD5Vw/toHSDeWjVj1CRxdEsAG68wLCV SciciLFPFc2xJhfbMiV/K8KnZNekzskKIrT/qdcRjsF5BG9ck/XYg5PodQWYHbKH eElUhCZ2uyKsF6rKGYv1sA== -----END CERTIFICATE-----Generated at Wed Nov 5 12:44:36 2025 by rpki-client