$ rpki-client -vvf rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.mft File: 8132D5957E193240246C2622115FA8F1706B3CE2.mft (raw, json) Hash identifier: tdf/sVTQw3rUcHS2at+fWs/vb4+zr9Z7WG5VDaHEHLc= Subject key identifier: C2:3F:E7:E3:C3:F5:8E:28:1E:85:6C:AE:FB:9F:3B:37:5D:28:BA:3F Authority key identifier: 81:32:D5:95:7E:19:32:40:24:6C:26:22:11:5F:A8:F1:70:6B:3C:E2 Certificate issuer: /CN=8132D5957E193240246C2622115FA8F1706B3CE2 Certificate serial: 7877113E7567F9DA121B62D5636F0F0DFBE0FE87 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer Subject info access: rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.mft Manifest number: 02C1 Signing time: Mon 20 Oct 2025 06:00:00 +0000 Manifest this update: Mon 20 Oct 2025 05:55:00 +0000 Manifest next update: Tue 21 Oct 2025 06:00:00 +0000 Files and hashes: 1: 8132D5957E193240246C2622115FA8F1706B3CE2.crl (hash: 7hyiZBEnYLvolob0g3DQi/ANs/MFdoWUsIzaU07Exbw=) 2: 323830343a3964303a3a2f33322d3438203d3e20323632393935.roa (hash: tMsMFYZcDGgxLlAz93XzzIggQ8A+5Kkr/FmAstWbKmc=) 3: 3138362e3231392e3137362e302f32312d3234203d3e20323632393935.roa (hash: wgzu3oQYqqS+ij1OmA+LYi4+3pGKNzrfme9W6XcEX6Y=) 4: 3134332e302e3131322e302f32322d3234203d3e20323632393935.roa (hash: pwu/iHNpAXXJjTDXQxoptOawxovjCQYxUguuWsM1i3I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.crl rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:77:11:3e:75:67:f9:da:12:1b:62:d5:63:6f:0f:0d:fb:e0:fe:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8132D5957E193240246C2622115FA8F1706B3CE2 Validity Not Before: Oct 20 05:55:00 2025 GMT Not After : Oct 27 06:00:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ef:69:6f:bf:40:a4:89:fd:f2:a3:3b:e5:ca: d9:ec:b8:77:12:19:36:78:ce:92:77:48:4a:48:81: 33:b4:ec:0e:4a:c6:b6:e9:1c:c1:87:22:75:9a:1b: bf:1a:9d:cc:dd:fb:28:01:f9:65:39:85:23:e7:df: 4b:a0:70:ec:a5:2a:3a:11:03:6a:d7:fe:19:6f:d5: e6:7e:d3:81:d3:c7:ba:53:7f:e7:21:b3:2c:63:82: 1f:a8:b4:4c:c1:84:3a:ba:3d:6e:1e:ba:22:24:b0: 94:7d:b9:17:96:6b:02:74:26:2c:ef:eb:83:01:d7: 93:8e:fa:d0:09:8e:a7:1b:b9:f2:d4:cf:2f:86:48: 88:de:f6:b6:fc:48:6f:c5:94:c4:91:49:0a:dd:44: 98:2a:67:cb:d7:16:86:99:72:88:eb:2e:e6:a7:fa: 3d:fe:af:5d:86:3f:39:bf:69:c8:9a:9b:f4:0f:a8: 0d:43:a5:f7:2b:36:61:b7:f9:62:f2:7e:4e:cf:34: 38:80:41:bf:cf:9a:b3:4c:b9:6f:81:51:b6:60:52: 0c:dc:79:cc:4e:85:29:08:d3:7e:02:5d:95:4f:92: e8:30:44:6c:84:2c:98:21:a7:81:58:ec:1d:3a:c9: d8:0c:35:4b:ca:ec:9c:da:81:2f:aa:3d:d6:2a:93: 51:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3F:E7:E3:C3:F5:8E:28:1E:85:6C:AE:FB:9F:3B:37:5D:28:BA:3F X509v3 Authority Key Identifier: keyid:81:32:D5:95:7E:19:32:40:24:6C:26:22:11:5F:A8:F1:70:6B:3C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:4b:34:08:84:07:2f:2b:21:e7:33:d9:c0:0b:b4:a3:1e:3f: cf:a9:e4:03:21:93:84:fa:01:a1:9d:35:99:61:16:f1:e0:80: 6b:f8:6c:56:5f:c0:a9:13:08:91:84:70:9f:d9:69:bc:5d:86: d6:8d:1d:55:28:a8:34:1b:59:d0:33:11:6b:72:4b:7d:da:f0: 61:e6:5d:59:53:18:ee:70:65:43:c0:67:f2:c8:e1:17:d8:b4: af:e8:37:ae:6e:bb:93:18:a8:72:c6:14:0a:b5:49:51:bd:3c: b9:b8:24:a0:bc:ef:23:d5:d2:a0:e4:c5:ab:68:e8:85:08:8a: 8a:9d:ca:12:1d:6e:4f:6c:ba:80:ed:f7:25:a5:2c:63:3b:61: cb:f9:64:6d:89:aa:75:06:b5:06:c7:b1:71:93:d7:0e:7f:a9: 97:42:40:68:1e:47:60:3f:65:01:09:6c:c8:c9:6a:de:e1:5e: 0f:fc:62:14:20:35:69:d3:e0:70:1e:30:ba:5d:59:a7:62:b2: 54:fe:6a:b3:55:db:18:d8:b4:3d:4a:b6:7d:61:11:0f:d1:a3: 29:c9:c7:9f:0a:ff:bc:b8:d9:8c:c2:e9:9c:eb:09:ca:b3:59: 3a:26:e1:02:0d:64:22:0a:bc:2a:6b:43:d2:7c:8a:ae:32:5e: d2:13:6b:24 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUeHcRPnVn+doSG2LVY28PDfvg/ocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEzMkQ1OTU3RTE5MzI0MDI0NkMyNjIyMTE1RkE4RjE3 MDZCM0NFMjAeFw0yNTEwMjAwNTU1MDBaFw0yNTEwMjcwNjAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzFFRjY5NkZCRjQwQTQ4OUZE RjJBMzNCRTVDQUQ5RUNCODc3MTIxOTM2NzhDRTkyNzc0ODRBNDg4MTMzQjRFQzBF NEFDNkI2RTkxQ0MxODcyMjc1OUExQkJGMUE5RENDRERGQjI4MDFGOTY1Mzk4NTIz RTdERjRCQTA3MEVDQTUyQTNBMTEwMzZBRDdGRTE5NkZENUU2N0VEMzgxRDNDN0JB NTM3RkU3MjFCMzJDNjM4MjFGQThCNDRDQzE4NDNBQkEzRDZFMUVCQTIyMjRCMDk0 N0RCOTE3OTY2QjAyNzQyNjJDRUZFQjgzMDFENzkzOEVGQUQwMDk4RUE3MUJCOUYy RDRDRjJGODY0ODg4REVGNkI2RkM0ODZGQzU5NEM0OTE0OTBBREQ0NDk4MkE2N0NC RDcxNjg2OTk3Mjg4RUIyRUU2QTdGQTNERkVBRjVEODYzRjM5QkY2OUM4OUE5QkY0 MEZBODBENDNBNUY3MkIzNjYxQjdGOTYyRjI3RTRFQ0YzNDM4ODA0MUJGQ0Y5QUIz NENCOTZGODE1MUI2NjA1MjBDREM3OUNDNEU4NTI5MDhEMzdFMDI1RDk1NEY5MkU4 MzA0NDZDODQyQzk4MjFBNzgxNThFQzFEM0FDOUQ4MEMzNTRCQ0FFQzlDREE4MTJG QUEzREQ2MkE5MzUxRTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAwe9pb79ApIn98qM75crZ7Lh3Ehk2eM6Sd0hKSIEztOwOSsa26RzB hyJ1mhu/Gp3M3fsoAfllOYUj599LoHDspSo6EQNq1/4Zb9XmftOB08e6U3/nIbMs Y4IfqLRMwYQ6uj1uHroiJLCUfbkXlmsCdCYs7+uDAdeTjvrQCY6nG7ny1M8vhkiI 3va2/EhvxZTEkUkK3USYKmfL1xaGmXKI6y7mp/o9/q9dhj85v2nImpv0D6gNQ6X3 KzZht/li8n5OzzQ4gEG/z5qzTLlvgVG2YFIM3HnMToUpCNN+Al2VT5LoMERshCyY IaeBWOwdOsnYDDVLyuyc2oEvqj3WKpNR4wIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FMI/5+PD9Y4oHoVsrvufOzddKLo/MB8GA1UdIwQYMBaAFIEy1ZV+GTJAJGwmIhFf qPFwazziMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJwTFc0Qk13bkhuUDli V0VVMkc5MllveWFLQmRqVFp6RlFNNnloSFQ5bko0LzEvODEzMkQ1OTU3RTE5MzI0 MDI0NkMyNjIyMTE1RkE4RjE3MDZCM0NFMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS84MTMyRDU5NTdFMTkzMjQwMjQ2QzI2MjIxMTVGQThGMTcwNkIz Q0UyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJwTFc0Qk13bkhuUDliV0VVMkc5 MllveWFLQmRqVFp6RlFNNnloSFQ5bko0LzEvODEzMkQ1OTU3RTE5MzI0MDI0NkMy NjIyMTE1RkE4RjE3MDZCM0NFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAANLNAiEBy8rIecz2cALtKMe P8+p5AMhk4T6AaGdNZlhFvHggGv4bFZfwKkTCJGEcJ/ZabxdhtaNHVUoqDQbWdAz EWtyS33a8GHmXVlTGO5wZUPAZ/LI4RfYtK/oN65uu5MYqHLGFAq1SVG9PLm4JKC8 7yPV0qDkxato6IUIioqdyhIdbk9suoDt9yWlLGM7Ycv5ZG2JqnUGtQbHsXGT1w5/ qZdCQGgeR2A/ZQEJbMjJat7hXg/8YhQgNWnT4HAeMLpdWadislT+arNV2xjYtD1K tn1hEQ/RoynJx58K/7y42YzC6ZzrCcqzWTom4QINZCIKvCprQ9J8iq4yXtITayQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:56:52 2025 by rpki-client