$ rpki-client -vvf rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft File: 8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft (raw, json) Hash identifier: vMCXX3YxYHvwFyBhvECnXdmsJuYQjRY1RcBgf0QC3HI= Subject key identifier: 5B:1F:FD:DF:E1:6B:E2:63:4C:A7:A3:FB:12:D8:11:4D:44:D9:10:05 Authority key identifier: 8E:C7:D5:A9:01:6A:AE:FC:41:0E:D4:66:E0:0B:14:EB:DC:E6:EE:7F Certificate issuer: /CN=8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F Certificate serial: 748B86EB8FD1451721413B0A4CD41D3CCAC253AE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer Subject info access: rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft Manifest number: 02EF Signing time: Mon 20 Oct 2025 00:02:24 +0000 Manifest this update: Sun 19 Oct 2025 23:57:24 +0000 Manifest next update: Tue 21 Oct 2025 00:37:24 +0000 Files and hashes: 1: 3137302e37382e3130302e302f32322d3234203d3e20323636323737.roa (hash: EOg/hM1DxnfBQMJLRQ41kPRgUah10XE4r5WsOtjys1w=) 2: 8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl (hash: 0PQxZBLl1qEmUbqi4jCfeDFrsMgRp42lh6qeMIdHag0=) 3: 323830343a333534303a3a2f33322d3438203d3e20323636323737.roa (hash: P1a8+zNmPoNV87lU1gPo9XyXRrpLc9cUorv71O21VUA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 00:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:8b:86:eb:8f:d1:45:17:21:41:3b:0a:4c:d4:1d:3c:ca:c2:53:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F Validity Not Before: Oct 19 23:57:24 2025 GMT Not After : Oct 21 00:37:24 2025 GMT Subject: CN=5B1FFDDFE16BE2634CA7A3FB12D8114D44D91005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:f6:83:7a:15:78:d6:a2:65:b2:40:90:e1: ab:5d:53:ee:2d:91:de:5d:5a:93:12:b7:0a:55:47: 74:76:45:3a:c6:14:38:60:01:0d:67:a6:db:af:6a: ec:cf:d6:f4:78:79:03:d6:90:d3:98:3a:71:75:32: 7c:45:d6:82:1e:ed:47:57:d8:46:e9:0a:4f:7a:7d: 29:ab:d1:be:41:8c:c2:a7:d4:61:c3:d6:35:af:d6: 90:86:c7:5b:2b:cb:d2:7e:6b:78:ec:18:d4:1b:1b: 11:4a:c3:40:70:ee:e3:5e:eb:53:ec:5e:1e:41:95: c6:7f:c5:23:50:8e:0e:d7:a7:4a:b6:c1:18:a5:1a: 34:3b:be:95:4d:ee:b6:5a:7a:ad:a1:77:f8:4f:18: ba:31:8b:79:49:b6:76:27:1e:26:70:7e:b0:40:f8: fd:5a:80:72:8a:72:fc:62:d1:62:95:69:db:a3:e3: 03:32:3a:12:31:d5:f9:21:86:bc:ac:1e:a2:f4:92: 7e:74:37:26:0d:bc:5a:62:90:ca:9b:d0:ac:4b:97: 51:ef:17:84:54:94:39:84:63:54:95:a7:db:24:5f: 2c:ed:ae:54:ee:f4:a5:c5:16:5c:c3:38:29:b4:ee: d9:d9:82:47:ec:19:02:3c:67:38:1e:a1:82:71:81: 04:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1F:FD:DF:E1:6B:E2:63:4C:A7:A3:FB:12:D8:11:4D:44:D9:10:05 X509v3 Authority Key Identifier: keyid:8E:C7:D5:A9:01:6A:AE:FC:41:0E:D4:66:E0:0B:14:EB:DC:E6:EE:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:0d:fa:51:3e:67:48:84:1b:15:68:ff:8e:25:88:f4:d6:2f: c2:55:2b:90:a9:7b:f7:21:c8:8d:32:d3:ca:c5:af:92:e0:d8: ba:9d:e3:a9:fd:62:3b:1f:4f:93:46:80:bf:ed:dc:76:92:a0: 78:59:b1:96:d7:cd:27:bb:42:89:d5:19:cd:3a:44:04:77:ae: ef:67:1c:57:1b:57:42:49:b9:cb:e2:c4:ce:46:1e:4c:02:c4: fd:94:5f:77:61:57:fd:bf:41:27:42:c0:dc:25:e6:9e:9f:c3: de:b7:27:21:59:92:f8:4f:cf:fa:ca:ab:b8:3d:c0:90:5c:51: 5f:ba:b6:3b:f1:3d:e0:98:de:27:b6:4e:d9:e4:bc:55:d0:2e: 38:97:3a:94:d5:23:c0:cf:7d:d5:c2:28:9c:df:74:a4:6c:24: f1:1a:69:29:c4:86:9c:7d:95:9b:e2:2c:4d:7b:31:10:ae:10: 2e:0f:be:a4:37:fc:26:e3:70:64:27:b0:00:8d:22:45:ee:be: af:26:51:1e:9e:1d:cd:98:ae:05:cb:5e:7e:21:fb:b7:64:54: 43:e3:04:6c:0c:22:1b:69:9d:23:32:37:36:24:02:ce:7b:db: 67:ed:7e:ea:3b:44:fb:b2:25:91:63:94:53:2b:60:97:0d:6b: e9:b3:6a:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdIuG64/RRRchQTsKTNQdPMrCU64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVDN0Q1QTkwMTZBQUVGQzQxMEVENDY2RTAwQjE0RUJE Q0U2RUU3RjAeFw0yNTEwMTkyMzU3MjRaFw0yNTEwMjEwMDM3MjRaMDMxMTAvBgNV BAMTKDVCMUZGRERGRTE2QkUyNjM0Q0E3QTNGQjEyRDgxMTRENDREOTEwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5vaDehV41qJlskCQ4atdU+4t kd5dWpMStwpVR3R2RTrGFDhgAQ1nptuvauzP1vR4eQPWkNOYOnF1MnxF1oIe7UdX 2EbpCk96fSmr0b5BjMKn1GHD1jWv1pCGx1sry9J+a3jsGNQbGxFKw0Bw7uNe61Ps Xh5BlcZ/xSNQjg7Xp0q2wRilGjQ7vpVN7rZaeq2hd/hPGLoxi3lJtnYnHiZwfrBA +P1agHKKcvxi0WKVaduj4wMyOhIx1fkhhrysHqL0kn50NyYNvFpikMqb0KxLl1Hv F4RUlDmEY1SVp9skXyztrlTu9KXFFlzDOCm07tnZgkfsGQI8ZzgeoYJxgQRJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWx/93+Fr4mNMp6P7EtgRTUTZEAUwHwYDVR0j BBgwFoAUjsfVqQFqrvxBDtRm4AsU69zm7n8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlBwZUg0aFV3SFNtTlY5aHc3Y3g0Um1GOG90Sk5OOEhQZndrbUZuOTR1 aXMvMS84RUM3RDVBOTAxNkFBRUZDNDEwRUQ0NjZFMDBCMTRFQkRDRTZFRTdGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQzdENUE5MDE2QUFFRkM0 MTBFRDQ2NkUwMEIxNEVCRENFNkVFN0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlBwZUg0aFV3SFNtTlY5aHc3Y3g0Um1GOG90Sk5OOEhQZndrbUZuOTR1aXMvMS84 RUM3RDVBOTAxNkFBRUZDNDEwRUQ0NjZFMDBCMTRFQkRDRTZFRTdGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4w36UT5nSIQbFWj/jiWI9NYvwlUrkKl79yHIjTLTysWvkuDYup3jqf1iOx9P k0aAv+3cdpKgeFmxltfNJ7tCidUZzTpEBHeu72ccVxtXQkm5y+LEzkYeTALE/ZRf d2FX/b9BJ0LA3CXmnp/D3rcnIVmS+E/P+sqruD3AkFxRX7q2O/E94JjeJ7ZO2eS8 VdAuOJc6lNUjwM991cIonN90pGwk8RppKcSGnH2Vm+IsTXsxEK4QLg++pDf8JuNw ZCewAI0iRe6+ryZRHp4dzZiuBctefiH7t2RUQ+MEbAwiG2mdIzI3NiQCznvbZ+1+ 6jtE+7IlkWOUUytglw1r6bNqug== -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:09 2025 by rpki-client