$ rpki-client -vvf rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.mft File: 1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.mft (raw, json) Hash identifier: z3TEgJadB4egEy/l3ji4NPZniMrbPVbzCpkL0eKDlUM= Subject key identifier: CE:25:C9:1D:51:CD:B2:13:98:08:2E:8D:CF:FC:35:FE:BD:77:BF:85 Authority key identifier: 1E:C1:90:95:7A:BC:0E:C0:43:2E:F4:8C:9B:CB:45:C8:19:82:D3:E7 Certificate issuer: /CN=1EC190957ABC0EC0432EF48C9BCB45C81982D3E7 Certificate serial: 635F0130F4F1680AA211F7736A37F41BEE199BA6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.cer Subject info access: rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.mft Manifest number: 0159 Signing time: Mon 20 Oct 2025 06:31:20 +0000 Manifest this update: Mon 20 Oct 2025 06:26:20 +0000 Manifest next update: Tue 21 Oct 2025 08:09:20 +0000 Files and hashes: 1: 34352e37302e35322e302f32322d3234203d3e20323634313632.roa (hash: jDgX7ey1tSeSvn7u4WrWFWIU2pgt/MxdfFgRvLrl1WM=) 2: 3133382e39372e3131362e302f32322d3234203d3e20323634313632.roa (hash: YCZYJk7BIYIWi+Bj9zrw8S66GD21rmq819KeTapTsa4=) 3: 323830343a323337303a343064633a3a2f34382d3438203d3e203331383938.roa (hash: mMbKWiiMDxJchHW4YWlYkF4S0Qq7DKB4UwwyPn8hwSg=) 4: 323830343a323337303a3a2f33322d3334203d3e20323634313632.roa (hash: ecDtDpZC4vW7DC+YArnFNgNDw/pQ0nwszHC5mFDNElw=) 5: 1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.crl (hash: CY6LUAehCQcQdxJe3H2cIAXnbo+BUVzJs01C6btig/E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.crl rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:5f:01:30:f4:f1:68:0a:a2:11:f7:73:6a:37:f4:1b:ee:19:9b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EC190957ABC0EC0432EF48C9BCB45C81982D3E7 Validity Not Before: Oct 20 06:26:20 2025 GMT Not After : Oct 21 08:09:20 2025 GMT Subject: CN=CE25C91D51CDB21398082E8DCFFC35FEBD77BF85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d2:52:04:44:d2:33:f3:dd:76:ca:cc:09:59: f4:74:58:e5:d4:37:cd:8d:09:03:c9:e6:03:f3:e9: 0c:53:7f:67:44:b0:82:23:4b:d0:d4:42:f4:94:10: c6:e7:76:80:1c:05:69:ec:65:ac:c2:fa:da:28:78: b4:3d:1f:5c:2f:83:88:ee:8e:db:bf:ad:9a:70:a6: ad:0d:98:c2:96:7a:0b:55:63:19:5c:6f:07:1c:36: 5e:15:b3:92:54:0d:65:e3:6b:91:10:6f:43:e6:60: ed:b6:ce:ca:25:fc:63:79:2c:1d:d5:6e:93:6e:12: 73:c4:64:33:c1:1f:32:7f:27:49:26:f3:fe:0d:ad: c7:a8:92:5d:5e:34:91:1c:d8:c2:41:85:4c:7c:57: f8:92:ae:c5:20:4d:13:ed:9e:37:ea:13:43:e4:a5: 54:1e:38:6d:27:84:88:37:2d:56:4f:6f:21:54:b9: 92:85:50:a4:fb:2a:1e:64:fe:8a:2b:ee:e8:f9:68: f1:0e:1f:0e:d2:a0:a3:e1:36:2d:54:aa:ae:b1:40: 34:d2:7c:14:7d:a5:d6:a2:e4:bf:b4:45:65:e8:6d: 83:93:da:bf:6c:07:61:2d:00:30:04:4c:5f:8f:f3: d1:d9:1f:c6:56:90:f0:a6:fa:58:c1:98:f4:38:7d: b3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:25:C9:1D:51:CD:B2:13:98:08:2E:8D:CF:FC:35:FE:BD:77:BF:85 X509v3 Authority Key Identifier: keyid:1E:C1:90:95:7A:BC:0E:C0:43:2E:F4:8C:9B:CB:45:C8:19:82:D3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:c4:22:e3:d6:27:35:bc:99:72:1f:ff:07:16:95:76:b4:52: ac:b4:53:91:04:dd:02:b2:f3:46:92:4a:80:d5:3e:2c:f8:9a: f3:db:89:01:6e:b2:12:29:f6:b6:69:7a:ff:8c:14:a2:7f:f5: d2:47:a2:a8:5a:27:4e:ec:23:64:c6:c2:13:58:1e:36:54:97: 26:ba:d6:e9:f8:8a:bd:b3:57:b3:92:54:57:1d:d7:d3:12:cb: a7:bf:86:d7:87:09:e6:ad:38:e2:73:6d:50:c1:c4:5d:a7:6f: 39:06:84:d6:27:8b:e4:09:c4:61:04:14:1c:a8:ed:bc:01:8b: 32:88:50:a6:2c:54:ee:17:d2:4f:92:07:d8:6e:c3:b0:44:d9: 36:f7:b3:13:17:0b:02:86:95:29:aa:88:c5:02:f5:aa:d4:85: bb:6b:20:fb:da:d6:d4:4c:11:cc:c3:00:67:b6:f3:c5:5e:63: 70:94:25:c2:e3:ca:4c:76:5b:77:2c:83:66:fb:f1:a7:ed:66: c4:04:3c:c4:ec:ca:df:c0:36:fc:54:d5:d1:ef:24:f5:b2:f1: 47:d2:32:4e:c2:d7:bf:6d:78:1f:4a:e9:1a:b9:04:df:66:1c: e9:c4:48:63:65:d0:b0:7a:d9:d0:cf:b5:89:a0:d8:3a:b5:a3: 91:ac:cc:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY18BMPTxaAqiEfdzajf0G+4Zm6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVDMTkwOTU3QUJDMEVDMDQzMkVGNDhDOUJDQjQ1Qzgx OTgyRDNFNzAeFw0yNTEwMjAwNjI2MjBaFw0yNTEwMjEwODA5MjBaMDMxMTAvBgNV BAMTKENFMjVDOTFENTFDREIyMTM5ODA4MkU4RENGRkMzNUZFQkQ3N0JGODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC60lIERNIz8912yswJWfR0WOXU N82NCQPJ5gPz6QxTf2dEsIIjS9DUQvSUEMbndoAcBWnsZazC+tooeLQ9H1wvg4ju jtu/rZpwpq0NmMKWegtVYxlcbwccNl4Vs5JUDWXja5EQb0PmYO22zsol/GN5LB3V bpNuEnPEZDPBHzJ/J0km8/4Nrceokl1eNJEc2MJBhUx8V/iSrsUgTRPtnjfqE0Pk pVQeOG0nhIg3LVZPbyFUuZKFUKT7Kh5k/oor7uj5aPEOHw7SoKPhNi1Uqq6xQDTS fBR9pdai5L+0RWXobYOT2r9sB2EtADAETF+P89HZH8ZWkPCm+ljBmPQ4fbNpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUziXJHVHNshOYCC6Nz/w1/r13v4UwHwYDVR0j BBgwFoAUHsGQlXq8DsBDLvSMm8tFyBmC0+cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmRybXAyZHBqMlZLenZHOWZlZGdDeGs3Vm5KcmlmZ0xxQTFCOGJyNmdD U1IvMC8xRUMxOTA5NTdBQkMwRUMwNDMyRUY0OEM5QkNCNDVDODE5ODJEM0U3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFQzE5MDk1N0FCQzBFQzA0 MzJFRjQ4QzlCQ0I0NUM4MTk4MkQzRTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmRybXAyZHBqMlZLenZHOWZlZGdDeGs3Vm5KcmlmZ0xxQTFCOGJyNmdDU1IvMC8x RUMxOTA5NTdBQkMwRUMwNDMyRUY0OEM5QkNCNDVDODE5ODJEM0U3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA08Qi49YnNbyZch//BxaVdrRSrLRTkQTdArLzRpJKgNU+LPia89uJAW6yEin2 tml6/4wUon/10keiqFonTuwjZMbCE1geNlSXJrrW6fiKvbNXs5JUVx3X0xLLp7+G 14cJ5q044nNtUMHEXadvOQaE1ieL5AnEYQQUHKjtvAGLMohQpixU7hfST5IH2G7D sETZNvezExcLAoaVKaqIxQL1qtSFu2sg+9rW1EwRzMMAZ7bzxV5jcJQlwuPKTHZb dyyDZvvxp+1mxAQ8xOzK38A2/FTV0e8k9bLxR9IyTsLXv214H0rpGrkE32Yc6cRI Y2XQsHrZ0M+1iaDYOrWjkazM6g== -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:44 2025 by rpki-client