$ rpki-client -vvf rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76.mft File: B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76.mft (raw, json) Hash identifier: NzL/Aoe3s0ZgXDyV/OKjOVYbs5bHnPyv7kivJ9BNl0E= Subject key identifier: 28:90:03:74:AE:33:BC:B9:E9:54:E4:66:2F:B6:20:E2:26:91:42:90 Authority key identifier: B8:3A:6A:E8:DE:82:CF:A4:4A:83:D4:A5:3B:11:D9:A6:FC:3E:8E:76 Certificate issuer: /CN=B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76 Certificate serial: 206FD8ABB6FCE07B7DAC979C188516B1F0DA860B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76.cer Subject info access: rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76.mft Manifest number: 32 Signing time: Mon 20 Oct 2025 06:19:06 +0000 Manifest this update: Mon 20 Oct 2025 06:14:06 +0000 Manifest next update: Tue 21 Oct 2025 08:35:06 +0000 Files and hashes: 1: 323830343a6261303a3a2f33322d3438203d3e203532383031.roa (hash: PoW5kZWAwa219unWmSAj0scMofhqtN0ffsTVO1+L5o4=) 2: B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76.crl (hash: ypKIcXP88+KkRZG40JsL0mDeqPHU7Ib2RbM7ClNss0U=) 3: 3137372e35322e38382e302f32312d3234203d3e203532383031.roa (hash: x4cLKPY6sZa5jDBPH2tf2xfMFTtHmnSbyAA8zcPaDtM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76.crl rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:6f:d8:ab:b6:fc:e0:7b:7d:ac:97:9c:18:85:16:b1:f0:da:86:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76 Validity Not Before: Oct 20 06:14:06 2025 GMT Not After : Oct 21 08:35:06 2025 GMT Subject: CN=28900374AE33BCB9E954E4662FB620E226914290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0c:ea:25:36:4d:79:cf:2a:cb:2a:b4:e6:32: 4b:5a:b0:14:23:c7:03:fd:ba:93:ac:53:a4:0e:51: ff:3f:41:1f:ce:2b:2d:2e:f3:d8:d0:87:e8:59:d2: 04:af:56:6d:da:c5:2e:eb:da:ef:fc:04:9e:f5:07: df:06:cd:00:a4:04:90:2e:90:93:b2:3e:0c:bb:41: c2:1a:27:4f:d6:c7:a7:97:d3:34:60:42:7d:da:45: 23:7d:0a:94:b4:21:51:db:01:1b:e1:01:97:29:ea: cd:bc:4d:6b:f9:92:8e:d7:a7:85:0d:40:db:72:ba: c5:a9:52:56:44:1a:4a:15:7a:ec:57:d5:8a:87:07: 68:f8:54:0b:74:5a:a6:13:32:a5:7a:e0:db:18:7f: be:05:a6:66:a5:3d:22:f3:9d:0b:78:e0:c1:a1:07: 06:c3:54:c5:13:dc:e4:f1:2a:2c:15:ca:56:e8:86: b9:1e:e7:86:0e:30:97:51:db:98:6a:e0:50:23:ed: db:3f:9a:e3:33:2c:78:7c:c9:6f:97:5f:cf:ac:65: 23:b4:67:de:51:e8:c9:34:6f:bd:9a:a7:9c:f6:1b: 37:ef:6c:a7:b1:f6:ad:a7:6b:79:f9:fb:2b:6d:b7: 70:ed:d3:91:d8:89:f0:d1:82:6a:7c:72:42:90:02: d3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:90:03:74:AE:33:BC:B9:E9:54:E4:66:2F:B6:20:E2:26:91:42:90 X509v3 Authority Key Identifier: keyid:B8:3A:6A:E8:DE:82:CF:A4:4A:83:D4:A5:3B:11:D9:A6:FC:3E:8E:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:1a:3d:3f:c2:47:88:84:18:23:0c:56:1b:11:77:e6:ff:80: c6:05:17:9a:c2:cc:b6:2e:7c:8f:7b:09:2e:75:4b:e3:2f:a9: 3e:cc:de:28:1a:f3:c6:17:2b:7a:79:c1:fa:53:62:4d:98:36: 40:91:dd:48:49:75:0e:ff:50:57:7f:21:b3:82:60:b0:8d:0e: 39:17:f3:29:a3:8c:d3:41:0a:1a:00:a3:1f:1b:56:42:e3:af: 15:c5:c7:44:81:eb:30:5f:5b:6b:f4:06:51:29:69:b3:15:77: 21:05:63:02:55:16:6e:b5:a6:23:6e:6e:2e:1a:33:df:b5:ea: 74:d6:cc:6c:5d:52:90:8a:6e:fb:5a:88:57:43:4e:b8:37:ab: 8a:19:81:38:7a:39:e6:a6:38:6d:64:7b:fa:a6:86:e6:33:7a: ff:82:57:a2:54:b2:95:76:13:81:99:4d:6f:88:89:43:21:cf: ad:d7:08:d2:8d:50:70:a1:2c:ec:9c:fc:c1:01:32:70:34:6a: 3c:b7:6f:a9:46:5b:d7:72:2a:79:5c:1b:12:bb:3d:01:b2:b6: 54:eb:13:b2:22:40:1b:5a:7c:51:36:82:a0:68:59:6e:57:b4: c2:79:c8:e3:57:66:af:9c:95:e0:54:fd:76:f5:38:e4:7d:8a: c1:c9:9f:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIG/Yq7b84Ht9rJecGIUWsfDahgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgzQTZBRThERTgyQ0ZBNDRBODNENEE1M0IxMUQ5QTZG QzNFOEU3NjAeFw0yNTEwMjAwNjE0MDZaFw0yNTEwMjEwODM1MDZaMDMxMTAvBgNV BAMTKDI4OTAwMzc0QUUzM0JDQjlFOTU0RTQ2NjJGQjYyMEUyMjY5MTQyOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPDOolNk15zyrLKrTmMktasBQj xwP9upOsU6QOUf8/QR/OKy0u89jQh+hZ0gSvVm3axS7r2u/8BJ71B98GzQCkBJAu kJOyPgy7QcIaJ0/Wx6eX0zRgQn3aRSN9CpS0IVHbARvhAZcp6s28TWv5ko7Xp4UN QNtyusWpUlZEGkoVeuxX1YqHB2j4VAt0WqYTMqV64NsYf74FpmalPSLznQt44MGh BwbDVMUT3OTxKiwVylbohrke54YOMJdR25hq4FAj7ds/muMzLHh8yW+XX8+sZSO0 Z95R6Mk0b72ap5z2GzfvbKex9q2na3n5+yttt3Dt05HYifDRgmp8ckKQAtPTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKJADdK4zvLnpVORmL7Yg4iaRQpAwHwYDVR0j BBgwFoAUuDpq6N6Cz6RKg9SlOxHZpvw+jnYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMldCTUtla1IyaDM5S0RHeDZjdllhQmhSVzlUeG1QdDRtZTJWTDY4M0NV YVcvMC9CODNBNkFFOERFODJDRkE0NEE4M0Q0QTUzQjExRDlBNkZDM0U4RTc2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4M0E2QUU4REU4MkNGQTQ0 QTgzRDRBNTNCMTFEOUE2RkMzRThFNzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MldCTUtla1IyaDM5S0RHeDZjdllhQmhSVzlUeG1QdDRtZTJWTDY4M0NVYVcvMC9C ODNBNkFFOERFODJDRkE0NEE4M0Q0QTUzQjExRDlBNkZDM0U4RTc2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIxo9P8JHiIQYIwxWGxF35v+AxgUXmsLMti58j3sJLnVL4y+pPszeKBrzxhcr ennB+lNiTZg2QJHdSEl1Dv9QV38hs4JgsI0OORfzKaOM00EKGgCjHxtWQuOvFcXH RIHrMF9ba/QGUSlpsxV3IQVjAlUWbrWmI25uLhoz37XqdNbMbF1SkIpu+1qIV0NO uDerihmBOHo55qY4bWR7+qaG5jN6/4JXolSylXYTgZlNb4iJQyHPrdcI0o1QcKEs 7Jz8wQEycDRqPLdvqUZb13IqeVwbErs9AbK2VOsTsiJAG1p8UTaCoGhZble0wnnI 41dmr5yV4FT9dvU45H2Kwcmf+g== -----END CERTIFICATE-----Generated at Mon Oct 20 11:58:14 2025 by rpki-client