$ rpki-client -vvf rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.mft File: 8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.mft (raw, json) Hash identifier: xOJs0JIWpINQhFzGihLd7fHJmR9IjYA+SrsPtI09SzE= Subject key identifier: A6:07:2A:30:10:74:D4:E0:5D:58:E2:EE:F4:43:2A:6D:E2:69:C4:FC Authority key identifier: 8B:E6:51:CB:0C:FD:9D:3B:1C:7B:C9:48:3B:51:70:67:2B:77:ED:4B Certificate issuer: /CN=8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B Certificate serial: 220EE94DABA367AD9A1699FA81AD9276F7133B08 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.mft Manifest number: 0238 Signing time: Mon 20 Oct 2025 02:52:50 +0000 Manifest this update: Mon 20 Oct 2025 02:47:50 +0000 Manifest next update: Tue 21 Oct 2025 03:00:50 +0000 Files and hashes: 1: 8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.crl (hash: Rkosj35q8bU7S9g0fnW3MezbWIetuC/k9Mq7RhlG4YA=) 2: 323830343a323563343a3a2f33322d3438203d3e20323634333031.roa (hash: AGb/N8ZPtoihV0bqDpsml/vTt3PMTKJp7EIpf44fJ3E=) 3: 3133382e3132312e3139362e302f32322d3234203d3e20323634333031.roa (hash: Lw3oXs27+kclpcAbki3gab/aEtoYxajf5Cmi//fS1As=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.crl rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:0e:e9:4d:ab:a3:67:ad:9a:16:99:fa:81:ad:92:76:f7:13:3b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B Validity Not Before: Oct 20 02:47:50 2025 GMT Not After : Oct 21 03:00:50 2025 GMT Subject: CN=A6072A301074D4E05D58E2EEF4432A6DE269C4FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:49:94:6e:cc:9d:2a:15:7e:b2:a7:e9:6b:2a: 95:b5:38:0f:ad:ec:db:da:0b:e0:e1:2f:be:2e:30: 81:82:a6:fd:b2:7c:0d:d3:10:ca:ae:74:3c:64:c2: 6e:85:f7:22:6f:98:34:31:fe:04:51:2d:f6:d5:c4: 12:68:92:70:94:5e:a3:10:9c:2d:79:87:61:fe:e6: 48:f5:34:d0:85:70:f4:8b:4a:ac:48:a1:b7:48:cb: db:e4:8f:5c:b1:b0:44:0b:79:cb:46:8a:c3:e0:18: ae:a2:49:a1:07:a3:8c:21:64:dd:83:9c:56:f7:91: fc:d0:4d:f4:60:d7:27:67:d0:05:0f:c5:15:9a:19: cc:9a:e5:1f:3b:b3:97:e3:a3:55:b0:0d:85:08:16: d1:d7:0c:ca:0b:79:ba:d8:fe:22:19:c0:d0:33:35: 9c:5a:32:f4:e4:13:0a:00:86:64:4c:b9:94:30:37: 55:a4:fc:be:90:79:a5:a1:70:e0:41:07:ba:cf:f2: 0d:6f:3a:df:e0:a6:85:78:c4:3c:6b:45:3b:f7:43: 3f:46:69:59:12:8f:70:66:a2:3e:62:b6:bd:c7:f1: 84:fb:c3:cf:57:be:a6:81:43:34:74:b7:1a:1b:5c: 18:ed:d6:c0:b0:c2:67:05:f6:41:d0:1f:aa:95:66: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:07:2A:30:10:74:D4:E0:5D:58:E2:EE:F4:43:2A:6D:E2:69:C4:FC X509v3 Authority Key Identifier: keyid:8B:E6:51:CB:0C:FD:9D:3B:1C:7B:C9:48:3B:51:70:67:2B:77:ED:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:54:28:cc:63:38:01:f5:e7:aa:31:b8:2b:cf:5e:cc:28:3c: a0:6b:c7:43:ce:20:0e:e6:09:6c:d7:3e:44:cb:5f:30:18:04: 4d:6c:f6:10:a1:33:76:5d:9a:3b:27:a9:f1:2a:8c:d4:cc:e3: 6f:14:cc:da:bf:ce:48:0a:1a:47:81:e6:0c:3b:ea:2f:76:72: f6:f2:d2:dc:57:53:a0:2b:a7:38:83:af:ed:e3:ff:0c:c9:7a: af:e1:54:28:8c:77:cd:8f:19:35:11:db:4e:f6:4f:d1:8b:ed: 31:f6:71:a5:cb:fc:2a:19:71:83:fd:d3:17:e5:15:35:71:41: 71:bd:37:2e:50:ca:e8:80:a1:8a:64:bd:18:82:57:9e:18:cd: 81:8a:d2:2c:b2:3d:01:bd:76:5e:54:90:4f:21:00:08:8d:68: 9e:56:96:c3:02:9a:81:a9:4f:ff:3d:c5:0b:ce:8a:10:49:6e: 96:85:24:ac:02:4a:72:d7:44:d0:ab:a7:02:62:28:15:a5:49: d6:9b:3a:ed:54:ac:f8:17:ed:db:bc:94:9c:a6:c7:ac:80:0e: c7:f4:25:54:f7:94:16:c0:ae:3c:b1:8e:76:4a:42:2a:81:4c: bc:ee:dd:42:7f:89:50:95:9d:99:1e:0d:ad:0d:cb:fb:a6:23: d1:b7:c3:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIg7pTaujZ62aFpn6ga2SdvcTOwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNjUxQ0IwQ0ZEOUQzQjFDN0JDOTQ4M0I1MTcwNjcy Qjc3RUQ0QjAeFw0yNTEwMjAwMjQ3NTBaFw0yNTEwMjEwMzAwNTBaMDMxMTAvBgNV BAMTKEE2MDcyQTMwMTA3NEQ0RTA1RDU4RTJFRUY0NDMyQTZERTI2OUM0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6SZRuzJ0qFX6yp+lrKpW1OA+t 7NvaC+DhL74uMIGCpv2yfA3TEMqudDxkwm6F9yJvmDQx/gRRLfbVxBJoknCUXqMQ nC15h2H+5kj1NNCFcPSLSqxIobdIy9vkj1yxsEQLectGisPgGK6iSaEHo4whZN2D nFb3kfzQTfRg1ydn0AUPxRWaGcya5R87s5fjo1WwDYUIFtHXDMoLebrY/iIZwNAz NZxaMvTkEwoAhmRMuZQwN1Wk/L6QeaWhcOBBB7rP8g1vOt/gpoV4xDxrRTv3Qz9G aVkSj3Bmoj5itr3H8YT7w89XvqaBQzR0txobXBjt1sCwwmcF9kHQH6qVZjinAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpgcqMBB01OBdWOLu9EMqbeJpxPwwHwYDVR0j BBgwFoAUi+ZRywz9nTsce8lIO1FwZyt37UswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkFINHQ0RmI5QkNodE5EeEh6V0pYWDl1dkpaZlBkd1FDZk5OV1h4aUx3 ZzgvMC84QkU2NTFDQjBDRkQ5RDNCMUM3QkM5NDgzQjUxNzA2NzJCNzdFRDRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCRTY1MUNCMENGRDlEM0Ix QzdCQzk0ODNCNTE3MDY3MkI3N0VENEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkFINHQ0RmI5QkNodE5EeEh6V0pYWDl1dkpaZlBkd1FDZk5OV1h4aUx3ZzgvMC84 QkU2NTFDQjBDRkQ5RDNCMUM3QkM5NDgzQjUxNzA2NzJCNzdFRDRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAblQozGM4AfXnqjG4K89ezCg8oGvHQ84gDuYJbNc+RMtfMBgETWz2EKEzdl2a Oyep8SqM1MzjbxTM2r/OSAoaR4HmDDvqL3Zy9vLS3FdToCunOIOv7eP/DMl6r+FU KIx3zY8ZNRHbTvZP0YvtMfZxpcv8Khlxg/3TF+UVNXFBcb03LlDK6IChimS9GIJX nhjNgYrSLLI9Ab12XlSQTyEACI1onlaWwwKagalP/z3FC86KEEluloUkrAJKctdE 0KunAmIoFaVJ1ps67VSs+Bft27yUnKbHrIAOx/QlVPeUFsCuPLGOdkpCKoFMvO7d Qn+JUJWdmR4NrQ3L+6Yj0bfDUg== -----END CERTIFICATE-----Generated at Mon Oct 20 10:15:36 2025 by rpki-client