$ rpki-client -vvf rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft File: 8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft (raw, json) Hash identifier: jnkTgR6fbIZIv81n2I+1jawBuTSex39QfKkyFycLqxE= Subject key identifier: 9B:21:78:B7:DE:0B:E6:A0:79:40:78:06:E8:18:02:AB:19:51:77:F8 Authority key identifier: 8A:11:41:64:BB:A9:BC:4B:3A:50:A7:29:11:6B:C7:57:4D:2C:D6:EF Certificate issuer: /CN=8A114164BBA9BC4B3A50A729116BC7574D2CD6EF Certificate serial: 44291C0A71132FD9CC325129823B823C95C0C88A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer Subject info access: rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft Manifest number: 02F0 Signing time: Mon 20 Oct 2025 09:06:53 +0000 Manifest this update: Mon 20 Oct 2025 09:01:53 +0000 Manifest next update: Tue 21 Oct 2025 12:13:53 +0000 Files and hashes: 1: 323830343a366162383a3a2f33322d3438203d3e20323730333535.roa (hash: mZN4AszSQT36UMwFtHkIGpU8mMiqKNrNGykEzvf6hdU=) 2: 8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl (hash: T2/13oNE5coeed/ozQD2Y1KxjcUhO3DK6Zmjj3w+fhU=) 3: 3139302e38392e34382e302f32322d3234203d3e20323730333535.roa (hash: SLEHFECRXQmMYbYlcQhzLdJpI1AWkv5FBYpLZmL4zfY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:29:1c:0a:71:13:2f:d9:cc:32:51:29:82:3b:82:3c:95:c0:c8:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A114164BBA9BC4B3A50A729116BC7574D2CD6EF Validity Not Before: Oct 20 09:01:53 2025 GMT Not After : Oct 21 12:13:53 2025 GMT Subject: CN=9B2178B7DE0BE6A079407806E81802AB195177F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:aa:9c:dc:f4:71:ef:14:cd:59:a7:e6:35:61: 77:be:de:38:84:d9:dd:ad:e1:d0:34:24:81:69:00: ed:e3:ba:58:bf:1c:c3:7a:65:7b:4c:48:87:2f:de: 83:6a:64:f1:16:c8:e9:ee:3e:3c:6c:e8:68:3c:f8: ed:cf:4d:bf:99:b5:2c:cf:62:e3:3f:a7:59:b7:07: bb:29:7e:51:46:d8:f8:7b:39:35:36:73:48:2e:16: 96:29:3e:9c:e5:5e:a0:25:ee:3e:f9:7b:5e:ac:b5: eb:fc:5c:6d:51:eb:8a:25:a3:c2:90:f3:34:a2:8d: 55:92:66:a9:c3:da:cf:da:95:ee:74:1b:10:d6:ca: 5b:55:71:d8:35:6f:45:15:61:d9:30:bb:ca:59:d9: dd:9d:7c:7a:6c:b8:b7:be:97:df:6d:38:50:ff:4d: b1:97:eb:2b:52:23:bd:55:7c:5e:ef:a0:0d:fb:27: fc:5e:c8:fb:18:40:d2:11:b3:8e:cc:5d:b5:2b:e7: 98:3e:7a:e1:63:29:db:0b:c2:c4:33:36:70:6e:bd: 9d:4b:1f:c6:09:04:4c:84:c1:90:f7:c3:24:fe:f3: cb:70:c6:07:1d:89:10:00:f5:8d:92:20:1e:f9:ec: 5b:cf:45:1c:1f:4c:f1:a3:20:6a:0b:5a:69:7b:51: 40:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:21:78:B7:DE:0B:E6:A0:79:40:78:06:E8:18:02:AB:19:51:77:F8 X509v3 Authority Key Identifier: keyid:8A:11:41:64:BB:A9:BC:4B:3A:50:A7:29:11:6B:C7:57:4D:2C:D6:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:01:30:bb:a9:2a:a4:f4:24:47:c6:ee:8e:09:c6:9a:d4:46: 3e:1c:b3:0f:e2:c8:19:52:a3:a2:cb:bc:c9:68:35:a6:84:00: ea:ac:1b:2f:b0:7f:50:ea:cb:41:33:7c:7b:7b:cc:77:3a:80: ac:2e:68:86:09:f1:9e:21:db:fc:3a:e1:13:52:7c:88:01:08: 01:63:1b:89:d5:8d:69:15:95:03:d6:fb:32:ef:69:d6:38:f6: f9:a6:01:20:39:55:b2:f7:51:e7:c4:63:92:9f:53:0a:ce:b9: 84:8a:a9:31:5c:78:d0:e7:4d:9a:cb:e2:a6:df:a2:b7:34:3c: 0d:81:7c:2b:03:c2:65:00:ee:df:a3:a4:bd:1e:c2:c8:8d:e4: d1:b0:8d:91:80:50:16:78:94:92:eb:78:f2:52:c6:f1:10:0b: 6d:d6:7b:70:54:18:0d:cf:81:b0:ff:99:99:1a:ab:7f:23:d9: 83:5a:f0:f6:05:1f:e0:3f:9d:14:18:73:9e:ac:ad:38:da:14: 34:aa:59:7f:f5:82:7b:a0:b6:d0:79:b2:f4:d8:7d:50:7b:04: 99:b0:56:6b:9e:3e:89:fc:95:05:73:4f:ce:99:44:04:9e:22: 32:4e:47:a2:ff:5d:5a:eb:4d:a6:de:1b:f2:99:b5:91:3f:75: 38:43:18:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURCkcCnETL9nMMlEpgjuCPJXAyIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEExMTQxNjRCQkE5QkM0QjNBNTBBNzI5MTE2QkM3NTc0 RDJDRDZFRjAeFw0yNTEwMjAwOTAxNTNaFw0yNTEwMjExMjEzNTNaMDMxMTAvBgNV BAMTKDlCMjE3OEI3REUwQkU2QTA3OTQwNzgwNkU4MTgwMkFCMTk1MTc3RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoqpzc9HHvFM1Zp+Y1YXe+3jiE 2d2t4dA0JIFpAO3juli/HMN6ZXtMSIcv3oNqZPEWyOnuPjxs6Gg8+O3PTb+ZtSzP YuM/p1m3B7spflFG2Ph7OTU2c0guFpYpPpzlXqAl7j75e16stev8XG1R64olo8KQ 8zSijVWSZqnD2s/ale50GxDWyltVcdg1b0UVYdkwu8pZ2d2dfHpsuLe+l99tOFD/ TbGX6ytSI71VfF7voA37J/xeyPsYQNIRs47MXbUr55g+euFjKdsLwsQzNnBuvZ1L H8YJBEyEwZD3wyT+88twxgcdiRAA9Y2SIB757FvPRRwfTPGjIGoLWml7UUAPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmyF4t94L5qB5QHgG6BgCqxlRd/gwHwYDVR0j BBgwFoAUihFBZLupvEs6UKcpEWvHV00s1u8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkdRY2pTYjNQeDZNMW1wM3pSbkhhaDl6TVFBYllNQ2FRVktpdHFqc290 YVEvMS84QTExNDE2NEJCQTlCQzRCM0E1MEE3MjkxMTZCQzc1NzREMkNENkVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBMTE0MTY0QkJBOUJDNEIz QTUwQTcyOTExNkJDNzU3NEQyQ0Q2RUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkdRY2pTYjNQeDZNMW1wM3pSbkhhaDl6TVFBYllNQ2FRVktpdHFqc290YVEvMS84 QTExNDE2NEJCQTlCQzRCM0E1MEE3MjkxMTZCQzc1NzREMkNENkVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnAEwu6kqpPQkR8bujgnGmtRGPhyzD+LIGVKjosu8yWg1poQA6qwbL7B/UOrL QTN8e3vMdzqArC5ohgnxniHb/DrhE1J8iAEIAWMbidWNaRWVA9b7Mu9p1jj2+aYB IDlVsvdR58Rjkp9TCs65hIqpMVx40OdNmsvipt+itzQ8DYF8KwPCZQDu36OkvR7C yI3k0bCNkYBQFniUkut48lLG8RALbdZ7cFQYDc+BsP+ZmRqrfyPZg1rw9gUf4D+d FBhznqytONoUNKpZf/WCe6C20Hmy9Nh9UHsEmbBWa54+ifyVBXNPzplEBJ4iMk5H ov9dWutNpt4b8pm1kT91OEMY0A== -----END CERTIFICATE-----Generated at Mon Oct 20 14:08:38 2025 by rpki-client