$ rpki-client -vvf rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft File: A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft (raw, json) Hash identifier: Ek0QEY1CtJ9lHcQJyxUBYAP5CJpgDcW8/9l1ynLqlSo= Subject key identifier: AA:AD:F6:7B:FC:43:A4:47:AF:27:0C:AD:89:A9:70:98:50:ED:F5:DC Authority key identifier: A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41 Certificate issuer: /CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341 Certificate serial: 2D06117151EA82DC520778234405974D59C124E6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer Subject info access: rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft Manifest number: 02EF Signing time: Mon 20 Oct 2025 02:48:48 +0000 Manifest this update: Mon 20 Oct 2025 02:43:48 +0000 Manifest next update: Tue 21 Oct 2025 03:45:48 +0000 Files and hashes: 1: A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl (hash: U1rV4RbCr+++7ganbngvl+SYHiBw0eXc2XcLf4qkR78=) 2: 323830343a383134343a3a2f33322d3332203d3e20323732343433.roa (hash: hPkw1ttlYJ42cUc0Dp0zOZqoQc0JKu0HxxZ15u/LszY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:06:11:71:51:ea:82:dc:52:07:78:23:44:05:97:4d:59:c1:24:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341 Validity Not Before: Oct 20 02:43:48 2025 GMT Not After : Oct 21 03:45:48 2025 GMT Subject: CN=AAADF67BFC43A447AF270CAD89A9709850EDF5DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f1:5b:c5:bf:55:54:79:a3:27:3a:a1:56:b0: 32:98:0e:11:99:f6:75:f1:d0:ca:b7:72:7d:18:16: 25:a0:0e:29:4e:39:26:32:02:99:11:18:ea:ea:0f: a7:cb:28:e9:12:93:a2:d8:05:bb:b0:a7:71:5d:e9: d5:a6:84:68:06:84:17:0b:7e:79:3a:de:46:3a:08: b2:ab:b9:40:a3:4c:54:be:68:cb:11:f3:4e:3f:db: 85:0b:85:1a:48:06:cc:cd:b4:ca:67:e0:9a:35:cd: 03:ac:21:42:65:80:ef:22:58:de:d6:5c:d0:d8:1a: 5a:97:99:f1:ea:47:99:9e:de:7c:eb:88:99:98:83: 39:2c:87:ba:35:94:0f:bb:37:35:d9:5f:88:b4:70: f5:58:89:d3:0a:49:c9:2a:51:ac:20:59:ad:a5:50: f4:0a:20:03:29:6c:f4:d2:30:d3:0f:6b:29:ff:73: d4:b9:d7:f6:a4:27:a3:92:18:82:ab:ec:bb:a6:99: 24:43:15:8c:a3:7c:35:56:a5:30:3f:3d:b6:c7:96: 18:2e:0c:9d:76:f0:c7:04:d9:0d:3f:66:ac:86:b1: a2:10:06:68:ce:39:8a:50:c5:72:12:af:31:a9:04: 65:86:96:43:c2:f9:98:78:18:86:ec:68:b3:47:02: 6f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AD:F6:7B:FC:43:A4:47:AF:27:0C:AD:89:A9:70:98:50:ED:F5:DC X509v3 Authority Key Identifier: keyid:A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:2e:16:21:c7:56:10:ba:af:b2:5e:9a:5a:ff:b1:fd:a6:11: b7:c8:f2:e2:63:ce:58:d0:47:70:de:a4:f0:c1:d3:e1:73:26: e5:1f:8e:5c:34:0f:7a:b2:e7:12:c1:a0:ac:0b:c4:0b:b6:b4: e0:32:ce:cb:4d:8e:b4:fa:d0:ae:36:db:25:15:20:32:47:33: 9e:f9:79:6c:1d:e4:03:0e:06:3e:9e:f5:ab:e9:fd:45:cf:93: ee:66:2d:a2:00:89:be:05:87:68:72:8d:8a:4e:33:f1:ed:17: 03:d2:bc:5f:d7:b9:36:bd:cd:06:14:e8:a7:35:3e:c3:1e:8c: a0:8d:ed:4c:94:0a:48:18:6b:4e:78:d7:82:9f:ae:13:eb:18: e7:58:d8:90:57:b1:3b:d1:c6:cb:35:1a:f3:92:b1:88:3b:c9: 0f:a0:06:89:e5:a2:90:27:e8:cf:7e:5a:77:1f:64:60:82:0a: 82:14:fe:8a:7e:30:15:90:68:f3:78:ae:97:f1:b9:4c:0c:9b: cf:99:37:0b:06:00:e9:ce:eb:16:54:e2:a3:02:5d:32:72:d5: 90:02:83:b5:13:32:47:33:2a:b4:8b:1e:05:20:5b:4d:58:a5: b8:73:1a:20:03:15:2a:c7:62:45:29:c8:1f:6f:70:06:2a:f4: 24:2d:45:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULQYRcVHqgtxSB3gjRAWXTVnBJOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgwRjkyMzBEQTI0MEVGOTg3QkNBMkIyOUU0NjQ5QTFB QjFDRjM0MTAeFw0yNTEwMjAwMjQzNDhaFw0yNTEwMjEwMzQ1NDhaMDMxMTAvBgNV BAMTKEFBQURGNjdCRkM0M0E0NDdBRjI3MENBRDg5QTk3MDk4NTBFREY1REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd8VvFv1VUeaMnOqFWsDKYDhGZ 9nXx0Mq3cn0YFiWgDilOOSYyApkRGOrqD6fLKOkSk6LYBbuwp3Fd6dWmhGgGhBcL fnk63kY6CLKruUCjTFS+aMsR804/24ULhRpIBszNtMpn4Jo1zQOsIUJlgO8iWN7W XNDYGlqXmfHqR5me3nzriJmYgzksh7o1lA+7NzXZX4i0cPVYidMKSckqUawgWa2l UPQKIAMpbPTSMNMPayn/c9S51/akJ6OSGIKr7LummSRDFYyjfDVWpTA/PbbHlhgu DJ128McE2Q0/ZqyGsaIQBmjOOYpQxXISrzGpBGWGlkPC+Zh4GIbsaLNHAm9bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqq32e/xDpEevJwytialwmFDt9dwwHwYDVR0j BBgwFoAUqA+SMNokDvmHvKKynkZJoasc80EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlNYNXRrQ1BIc1M3N05aNE1EV0s1SHpUR3Myd2hOYlhwbUVlczlZUXZp WEcvMS9BODBGOTIzMERBMjQwRUY5ODdCQ0EyQjI5RTQ2NDlBMUFCMUNGMzQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4MEY5MjMwREEyNDBFRjk4 N0JDQTJCMjlFNDY0OUExQUIxQ0YzNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlNYNXRrQ1BIc1M3N05aNE1EV0s1SHpUR3Myd2hOYlhwbUVlczlZUXZpWEcvMS9B ODBGOTIzMERBMjQwRUY5ODdCQ0EyQjI5RTQ2NDlBMUFCMUNGMzQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZC4WIcdWELqvsl6aWv+x/aYRt8jy4mPOWNBHcN6k8MHT4XMm5R+OXDQPerLn EsGgrAvEC7a04DLOy02OtPrQrjbbJRUgMkcznvl5bB3kAw4GPp71q+n9Rc+T7mYt ogCJvgWHaHKNik4z8e0XA9K8X9e5Nr3NBhTopzU+wx6MoI3tTJQKSBhrTnjXgp+u E+sY51jYkFexO9HGyzUa85KxiDvJD6AGieWikCfoz35adx9kYIIKghT+in4wFZBo 83iul/G5TAybz5k3CwYA6c7rFlTiowJdMnLVkAKDtRMyRzMqtIseBSBbTViluHMa IAMVKsdiRSnIH29wBir0JC1Fig== -----END CERTIFICATE-----Generated at Mon Oct 20 13:10:40 2025 by rpki-client