$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft File: 8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft (raw, json) Hash identifier: 9KdgWuNB0zjwP0D5er4zK5q8g0pcQxcnf+7/lJQhUKs= Subject key identifier: 50:C0:20:43:BD:40:49:23:8B:35:35:E8:EB:8E:B9:91:5C:94:23:F2 Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05 Certificate issuer: /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505 Certificate serial: 1F8F3E3F460B42999651E49DBC9FE758AA48FF91 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer Subject info access: rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft Manifest number: 02F4 Signing time: Mon 20 Oct 2025 11:56:19 +0000 Manifest this update: Mon 20 Oct 2025 11:51:19 +0000 Manifest next update: Tue 21 Oct 2025 12:18:19 +0000 Files and hashes: 1: 3230302e3138372e3130322e302f32342d3234203d3e20323730363833.roa (hash: +Z0ru9BsWPOHlK8tWb0IGKgXDXi0PyLC2vV8M76GVfU=) 2: 3230302e3138372e3130332e302f32342d3234203d3e20323730363833.roa (hash: KActml71cD6wjVfmrA4DV2SdMETPMc7+yZI29YEKnmM=) 3: 323830343a366663343a3a2f33322d3438203d3e20323730363833.roa (hash: 9XM9sCu/TTNlq6V0+SeS3wOQF44MqPp8oXHMdR1O5SQ=) 4: 3230302e3138372e3130302e302f32342d3234203d3e20323730363833.roa (hash: nskPvpUAon2GR7geuGsQF/wkm/R59aEnIpAp4kUkmdg=) 5: 3230302e3138372e3130302e302f32322d3232203d3e20323730363833.roa (hash: vzsfIDw2oqflztrjwgdkWaCyFMfSI1wnTfFDvenx+5k=) 6: 3230302e3138372e3130322e302f32332d3233203d3e20323730363833.roa (hash: o0hcy/9RDOTJR5RMuj3MyjZzVFgfCkfY0wQiAz+xBIc=) 7: 3230302e3138372e3130302e302f32332d3233203d3e20323730363833.roa (hash: BxB6GE4kHFzE5wUoGDmDFcb0CWCHJJOVcEpZmmtAjxI=) 8: 3230302e3138372e3130312e302f32342d3234203d3e20323730363833.roa (hash: rbaOKt87D3c/UdScnRw1BNEUloJVfu1i1+4xUlIseJA=) 9: 8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl (hash: cb9owJu8KDCXWhV9UXKDqqbV+I4iKI9qsEVnxEqrZRE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8f:3e:3f:46:0b:42:99:96:51:e4:9d:bc:9f:e7:58:aa:48:ff:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505 Validity Not Before: Oct 20 11:51:19 2025 GMT Not After : Oct 21 12:18:19 2025 GMT Subject: CN=50C02043BD4049238B3535E8EB8EB9915C9423F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ea:4c:12:65:ad:34:3b:0b:aa:89:be:a2:9b: 07:8b:3d:7a:36:db:34:6a:69:80:cb:04:d6:62:7b: be:76:d1:7b:84:de:c1:e0:cf:6f:51:c0:b0:28:f4: dc:75:2c:ac:e0:e6:7b:a8:78:43:28:b1:e7:b8:7b: af:48:0d:26:13:9a:b3:77:42:ca:25:8e:b8:94:42: 93:b9:1a:bd:94:92:f0:d7:f0:75:66:5e:df:d3:94: 77:d0:8b:00:d4:9c:33:15:ad:8e:0a:f7:98:39:43: 4a:60:37:7e:00:86:26:55:36:27:0e:cd:97:0d:0d: 2b:fb:40:61:43:ce:d6:93:76:2b:6b:3b:09:60:b1: b7:96:47:96:ba:c4:50:5b:b8:47:36:3e:1d:50:58: 8a:42:22:68:c2:8e:4d:37:68:2e:5a:22:80:c0:df: 14:48:00:dd:68:45:0c:4f:a5:e9:3e:2c:8c:e6:00: a4:2c:4e:bb:63:3c:7f:11:5d:42:ed:f4:6d:09:c3: 4b:80:93:5b:ce:2f:90:60:28:67:cb:ae:e0:b7:a9: 29:17:97:13:f4:74:f4:f6:62:24:22:c5:8a:96:18: 40:85:1c:e3:4c:a2:61:e4:db:e3:15:ac:72:45:79: eb:09:82:a2:c7:60:2c:ca:c0:7f:92:83:56:11:25: 44:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C0:20:43:BD:40:49:23:8B:35:35:E8:EB:8E:B9:91:5C:94:23:F2 X509v3 Authority Key Identifier: keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:c3:19:13:6b:fa:3e:7b:43:e4:3b:29:68:b8:87:a4:f6:04: 45:49:c8:15:93:c5:c0:14:10:55:a9:3c:1a:33:1f:ef:3d:27: 1b:be:3b:65:83:d9:61:2d:76:d9:79:72:d5:15:9b:dd:d9:b7: 3a:f8:17:b9:ee:4f:69:f1:57:f4:5b:51:75:4a:bc:27:33:c3: 8c:96:f6:e6:69:c2:88:f4:9e:19:26:68:8e:78:cb:d8:b5:4d: 20:b4:b2:1b:84:0d:ea:f1:d7:9c:f7:17:98:07:d3:7a:a2:dd: 94:ad:74:20:5c:03:62:5c:fe:6c:43:90:f4:d1:ff:d8:e9:54: e0:e7:85:8b:39:1a:97:07:79:81:5b:af:52:e1:a3:a3:b2:74: f4:e6:10:56:6a:39:8a:2f:aa:72:1e:35:23:22:c7:4c:42:2f: 21:04:b1:9a:84:83:81:e6:b7:94:5b:3b:1d:66:7c:ba:d5:74: 13:a3:06:5c:59:b7:96:0b:e1:f9:31:5c:40:85:57:4f:4c:08: ce:9f:ad:0d:c0:a3:4d:75:a9:c9:35:43:ce:02:d3:d3:3c:16: 5a:78:91:2c:87:88:ee:45:3d:4e:84:d4:2c:7f:e9:7a:25:23: 07:60:59:71:12:9b:57:54:53:4f:c2:87:07:6c:31:f9:f6:56: c8:ab:c1:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUH48+P0YLQpmWUeSdvJ/nWKpI/5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVBMjE0OTlEOUY3NkRBODVFRUM4RDhCMUE4RTNCMDY5 RDRDNzUwNTAeFw0yNTEwMjAxMTUxMTlaFw0yNTEwMjExMjE4MTlaMDMxMTAvBgNV BAMTKDUwQzAyMDQzQkQ0MDQ5MjM4QjM1MzVFOEVCOEVCOTkxNUM5NDIzRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36kwSZa00Owuqib6imweLPXo2 2zRqaYDLBNZie7520XuE3sHgz29RwLAo9Nx1LKzg5nuoeEMosee4e69IDSYTmrN3 QsoljriUQpO5Gr2UkvDX8HVmXt/TlHfQiwDUnDMVrY4K95g5Q0pgN34AhiZVNicO zZcNDSv7QGFDztaTditrOwlgsbeWR5a6xFBbuEc2Ph1QWIpCImjCjk03aC5aIoDA 3xRIAN1oRQxPpek+LIzmAKQsTrtjPH8RXULt9G0Jw0uAk1vOL5BgKGfLruC3qSkX lxP0dPT2YiQixYqWGECFHONMomHk2+MVrHJFeesJgqLHYCzKwH+Sg1YRJURXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUMAgQ71ASSOLNTXo6465kVyUI/IwHwYDVR0j BBgwFoAUjqIUmdn3bahe7I2LGo47Bp1MdQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkN4dEtnVk5qMlRQZ0cyOHJOUXp6VnI0bjIxNXRWUUV4TWdnSkF1TnJI UHkvMS84RUEyMTQ5OUQ5Rjc2REE4NUVFQzhEOEIxQThFM0IwNjlENEM3NTA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQTIxNDk5RDlGNzZEQTg1 RUVDOEQ4QjFBOEUzQjA2OUQ0Qzc1MDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkN4dEtnVk5qMlRQZ0cyOHJOUXp6VnI0bjIxNXRWUUV4TWdnSkF1TnJIUHkvMS84 RUEyMTQ5OUQ5Rjc2REE4NUVFQzhEOEIxQThFM0IwNjlENEM3NTA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvMMZE2v6PntD5DspaLiHpPYERUnIFZPFwBQQVak8GjMf7z0nG747ZYPZYS12 2Xly1RWb3dm3OvgXue5PafFX9FtRdUq8JzPDjJb25mnCiPSeGSZojnjL2LVNILSy G4QN6vHXnPcXmAfTeqLdlK10IFwDYlz+bEOQ9NH/2OlU4OeFizkalwd5gVuvUuGj o7J09OYQVmo5ii+qch41IyLHTEIvIQSxmoSDgea3lFs7HWZ8utV0E6MGXFm3lgvh +TFcQIVXT0wIzp+tDcCjTXWpyTVDzgLT0zwWWniRLIeI7kU9ToTULH/peiUjB2BZ cRKbV1RTT8KHB2wx+fZWyKvBFQ== -----END CERTIFICATE-----Generated at Mon Oct 20 16:27:15 2025 by rpki-client