$ rpki-client -vvf rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.mft File: 8CA6945320EBC94436672D14C02A85C8DD0ACCB1.mft (raw, json) Hash identifier: 3LkPdjN24IneRHwq2u/0mFMSPuacytiBhftobMIDRTI= Subject key identifier: 31:E7:E1:B4:27:8D:5F:62:6E:08:4E:06:EC:82:7F:C4:DD:04:93:90 Authority key identifier: 8C:A6:94:53:20:EB:C9:44:36:67:2D:14:C0:2A:85:C8:DD:0A:CC:B1 Certificate issuer: /CN=8CA6945320EBC94436672D14C02A85C8DD0ACCB1 Certificate serial: 02C633DF8A4906C5E3A60C8A474F4BAFC8A41D4B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer Subject info access: rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.mft Manifest number: 02D5 Signing time: Sun 19 Oct 2025 17:27:45 +0000 Manifest this update: Sun 19 Oct 2025 17:22:45 +0000 Manifest next update: Mon 20 Oct 2025 21:03:45 +0000 Files and hashes: 1: 8CA6945320EBC94436672D14C02A85C8DD0ACCB1.crl (hash: AB17EzCzjmDTdhgwmohc1IBqxchz54YS2g8H1ue4bo4=) 2: 3137302e3233312e3232342e302f32322d3234203d3e20323731363737.roa (hash: SW2sQ/RINSWBrdVpMGeV1zg1Udv6KWn8cLqjo1tLUhM=) 3: 323830343a376634343a3a2f33322d3434203d3e20323731363737.roa (hash: /i6qmhwh6J5CDx5qORW83a05N5dVBAB19l70pLYFJpw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.crl rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 21:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:c6:33:df:8a:49:06:c5:e3:a6:0c:8a:47:4f:4b:af:c8:a4:1d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CA6945320EBC94436672D14C02A85C8DD0ACCB1 Validity Not Before: Oct 19 17:22:45 2025 GMT Not After : Oct 20 21:03:45 2025 GMT Subject: CN=31E7E1B4278D5F626E084E06EC827FC4DD049390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:80:d9:df:4b:36:25:0c:89:9b:e0:5a:4e:6f: 6d:b4:28:1f:40:d2:3f:05:fb:54:34:d3:3e:17:04: 67:26:49:c7:98:bf:cd:51:e7:37:46:a5:89:63:45: ac:14:fb:37:96:5e:92:57:bb:01:92:fb:73:6f:66: 6a:71:c3:6c:ae:4d:47:3b:f7:86:e7:83:94:58:4f: 75:7e:98:e4:43:2c:f7:12:85:d2:0d:98:3f:0f:96: 24:78:4c:16:30:d3:e3:87:f0:8b:14:57:fc:08:43: ec:3c:d7:6e:45:a3:40:bb:aa:a4:84:a6:99:9c:19: 89:fe:f4:82:a5:25:cb:22:ce:4a:34:45:9b:d2:5e: 97:f9:78:2c:13:d0:db:e8:4a:0a:90:fd:94:a4:2f: 7a:80:2a:f2:a7:85:78:fa:e4:ea:c2:2a:69:60:86: 1e:42:a2:d5:72:30:6c:2c:c0:56:3e:87:52:1f:70: d5:76:c0:3b:f5:61:c3:ca:84:38:b0:8e:4b:0b:24: 94:0e:1d:1b:d6:f0:e3:8e:a0:4d:da:d1:2e:bd:67: 96:5d:4a:14:6e:7c:41:1b:b6:fa:88:0b:78:a6:24: e4:fc:b4:6d:2f:30:f1:04:f8:2a:01:85:04:3c:db: cc:95:76:3a:bd:c5:49:c9:e2:d0:a5:95:d7:30:7b: 4f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E7:E1:B4:27:8D:5F:62:6E:08:4E:06:EC:82:7F:C4:DD:04:93:90 X509v3 Authority Key Identifier: keyid:8C:A6:94:53:20:EB:C9:44:36:67:2D:14:C0:2A:85:C8:DD:0A:CC:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:27:ee:3e:0f:91:dc:3d:b4:15:7a:dd:e4:ef:8b:43:5b:d6: d2:4d:cb:f7:be:d9:70:ed:f9:a9:c6:e1:62:f5:b6:59:70:1f: b4:be:ad:87:85:4b:0e:68:67:d3:2e:fc:bc:d6:b4:7d:24:b3: 2d:29:94:f7:61:58:05:86:58:0f:fb:1a:70:8b:5e:39:ba:a1: dd:ce:65:33:81:f9:79:39:60:36:7c:fa:00:36:3c:71:eb:ad: 4f:1d:a9:80:e3:3c:7c:3f:ea:65:8c:2e:ee:ef:4b:41:c0:93: e9:6e:cb:a6:63:ee:b5:65:5c:d5:ca:4a:3c:77:ff:ff:7e:94: 8f:ca:4d:ed:86:09:91:89:5d:1f:19:42:dc:a4:4c:7e:74:4c: dd:1f:d1:f5:a1:eb:f0:53:08:86:1f:df:dd:8c:7b:59:3d:bf: 8b:cb:d4:f5:d3:fe:be:71:da:41:28:27:03:4c:3a:83:30:b7: 6b:37:e9:9e:78:d1:62:d3:d8:19:b6:b8:5c:20:fe:bf:e4:b8: b9:88:dc:29:c5:0e:21:64:ec:8d:6d:e5:2d:37:00:dc:73:31: 9c:8b:a4:b7:04:d3:3b:c7:22:c4:7f:38:49:bc:af:cb:95:b0: b8:04:93:3f:7f:a2:ab:0f:19:a0:cf:29:37:b9:fb:32:c5:5d: 64:b3:5e:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAsYz34pJBsXjpgyKR09Lr8ikHUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENBNjk0NTMyMEVCQzk0NDM2NjcyRDE0QzAyQTg1QzhE RDBBQ0NCMTAeFw0yNTEwMTkxNzIyNDVaFw0yNTEwMjAyMTAzNDVaMDMxMTAvBgNV BAMTKDMxRTdFMUI0Mjc4RDVGNjI2RTA4NEUwNkVDODI3RkM0REQwNDkzOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/gNnfSzYlDImb4FpOb220KB9A 0j8F+1Q00z4XBGcmSceYv81R5zdGpYljRawU+zeWXpJXuwGS+3NvZmpxw2yuTUc7 94bng5RYT3V+mORDLPcShdINmD8PliR4TBYw0+OH8IsUV/wIQ+w8125Fo0C7qqSE ppmcGYn+9IKlJcsizko0RZvSXpf5eCwT0NvoSgqQ/ZSkL3qAKvKnhXj65OrCKmlg hh5CotVyMGwswFY+h1IfcNV2wDv1YcPKhDiwjksLJJQOHRvW8OOOoE3a0S69Z5Zd ShRufEEbtvqIC3imJOT8tG0vMPEE+CoBhQQ828yVdjq9xUnJ4tClldcwe0+ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMefhtCeNX2JuCE4G7IJ/xN0Ek5AwHwYDVR0j BBgwFoAUjKaUUyDryUQ2Zy0UwCqFyN0KzLEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkdnZWtteVBxRjNZc1F3ck5rdVRmTjZ4Q1g4ZXlWRDVYNXZNTXI3VFVS SEMvMC84Q0E2OTQ1MzIwRUJDOTQ0MzY2NzJEMTRDMDJBODVDOEREMEFDQ0IxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQTY5NDUzMjBFQkM5NDQz NjY3MkQxNEMwMkE4NUM4REQwQUNDQjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkdnZWtteVBxRjNZc1F3ck5rdVRmTjZ4Q1g4ZXlWRDVYNXZNTXI3VFVSSEMvMC84 Q0E2OTQ1MzIwRUJDOTQ0MzY2NzJEMTRDMDJBODVDOEREMEFDQ0IxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiCfuPg+R3D20FXrd5O+LQ1vW0k3L977ZcO35qcbhYvW2WXAftL6th4VLDmhn 0y78vNa0fSSzLSmU92FYBYZYD/sacIteObqh3c5lM4H5eTlgNnz6ADY8ceutTx2p gOM8fD/qZYwu7u9LQcCT6W7LpmPutWVc1cpKPHf//36Uj8pN7YYJkYldHxlC3KRM fnRM3R/R9aHr8FMIhh/f3Yx7WT2/i8vU9dP+vnHaQSgnA0w6gzC3azfpnnjRYtPY Gba4XCD+v+S4uYjcKcUOIWTsjW3lLTcA3HMxnIuktwTTO8cixH84Sbyvy5WwuAST P3+iqw8ZoM8pN7n7MsVdZLNegQ== -----END CERTIFICATE-----Generated at Mon Oct 20 12:44:51 2025 by rpki-client