$ rpki-client -vvf rpki-repo.registro.br/repo/2vYbnxhumD7SfG7rez4FJDpTsHdSQZhbhcFfsecD1N5x/0/8DC5703AD0324D7A377BEF20819C04406FA9A81F.mft File: 8DC5703AD0324D7A377BEF20819C04406FA9A81F.mft (raw, json) Hash identifier: Bys+2XxXAeBJVe2TI9zq88RY/08a5bMOaw+HKXvtsKA= Subject key identifier: A1:A7:4E:44:56:E8:45:C4:C2:37:BF:47:F9:87:10:34:85:9C:AF:76 Authority key identifier: 8D:C5:70:3A:D0:32:4D:7A:37:7B:EF:20:81:9C:04:40:6F:A9:A8:1F Certificate issuer: /CN=8DC5703AD0324D7A377BEF20819C04406FA9A81F Certificate serial: 49E257F134FC2FBD3849EB609D7839D7DEED2025 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5703AD0324D7A377BEF20819C04406FA9A81F.cer Subject info access: rsync://rpki-repo.registro.br/repo/2vYbnxhumD7SfG7rez4FJDpTsHdSQZhbhcFfsecD1N5x/0/8DC5703AD0324D7A377BEF20819C04406FA9A81F.mft Manifest number: C3 Signing time: Mon 20 Oct 2025 04:18:46 +0000 Manifest this update: Mon 20 Oct 2025 04:13:46 +0000 Manifest next update: Tue 21 Oct 2025 05:40:46 +0000 Files and hashes: 1: 8DC5703AD0324D7A377BEF20819C04406FA9A81F.crl (hash: GqlsmgRi2QS/qlqChoI1uaSrGL+vmSN5BofyelKh6Us=) 2: 323830343a383764383a3a2f33322d3333203d3e20323732373335.roa (hash: 0duWc6C36Y5WjHtRgB6dYok6/WWps+FWhLzYYTLcuMo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2vYbnxhumD7SfG7rez4FJDpTsHdSQZhbhcFfsecD1N5x/0/8DC5703AD0324D7A377BEF20819C04406FA9A81F.crl rsync://rpki-repo.registro.br/repo/2vYbnxhumD7SfG7rez4FJDpTsHdSQZhbhcFfsecD1N5x/0/8DC5703AD0324D7A377BEF20819C04406FA9A81F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5703AD0324D7A377BEF20819C04406FA9A81F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 05:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:e2:57:f1:34:fc:2f:bd:38:49:eb:60:9d:78:39:d7:de:ed:20:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC5703AD0324D7A377BEF20819C04406FA9A81F Validity Not Before: Oct 20 04:13:46 2025 GMT Not After : Oct 21 05:40:46 2025 GMT Subject: CN=A1A74E4456E845C4C237BF47F9871034859CAF76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:51:88:b5:8f:54:f6:96:48:7d:ad:f9:e0:09: b5:29:34:6e:1a:17:25:87:4c:d6:af:29:b3:24:29: aa:79:4f:90:f0:3e:eb:0c:d1:9a:13:dc:2c:3e:12: 6a:4a:ab:4c:7f:7e:92:7d:c1:66:27:fa:a6:71:dd: 32:7c:4f:38:72:fc:09:9d:ec:d4:07:a7:94:df:59: 6f:7f:48:8d:15:8f:b6:4b:ad:02:53:4e:89:b4:a4: ce:e1:d1:5d:37:6b:d7:5f:74:9d:53:cd:98:39:79: 95:66:ef:17:70:7f:d7:f7:59:e7:8b:59:ba:34:16: 44:aa:80:16:a9:5e:b4:e3:0f:04:d2:6f:ed:7c:e3: d2:a0:15:26:d5:53:2c:ce:d3:f7:f9:9a:eb:ce:1a: 47:71:90:33:54:a0:f5:56:9f:37:9a:61:bd:a7:01: e5:37:d4:48:86:a4:37:87:a9:68:d1:cb:3b:81:69: 4a:72:5b:b9:0c:f8:2e:6c:47:db:b0:30:cb:00:a6: bf:62:43:5c:28:91:6a:57:6c:56:dd:f2:cf:34:d9: d1:34:9a:4d:18:cd:fa:a6:c1:d4:08:d3:7f:2a:2c: 69:a1:6d:46:89:27:eb:dc:07:29:9c:b3:4e:ef:e2: 73:2b:70:ee:e2:30:e6:f3:48:89:4f:73:64:86:56: 66:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A7:4E:44:56:E8:45:C4:C2:37:BF:47:F9:87:10:34:85:9C:AF:76 X509v3 Authority Key Identifier: keyid:8D:C5:70:3A:D0:32:4D:7A:37:7B:EF:20:81:9C:04:40:6F:A9:A8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2vYbnxhumD7SfG7rez4FJDpTsHdSQZhbhcFfsecD1N5x/0/8DC5703AD0324D7A377BEF20819C04406FA9A81F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5703AD0324D7A377BEF20819C04406FA9A81F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vYbnxhumD7SfG7rez4FJDpTsHdSQZhbhcFfsecD1N5x/0/8DC5703AD0324D7A377BEF20819C04406FA9A81F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e9:5d:93:95:3b:1f:9d:3f:7a:aa:77:20:f5:45:9a:50:4b: da:a8:67:0c:ec:6f:e0:5e:33:0d:55:a2:fb:eb:5d:ba:a9:48: 1d:97:0e:91:c4:7f:ba:f9:1c:96:10:53:a0:e1:d4:6f:22:f3: c6:bc:c1:4d:71:8c:67:b5:4c:df:05:fc:16:af:b5:64:46:b4: e7:67:25:55:4b:06:8b:42:3e:e3:41:cf:1b:bb:75:cc:e7:34: 87:e6:87:75:3d:24:f5:b1:a7:6b:14:e3:94:ea:ea:c0:cc:56: 57:01:20:fb:89:d3:a4:06:02:63:6f:ed:61:1d:23:8b:71:5c: 1d:cc:8a:20:c2:bb:18:91:7b:ab:f5:97:91:55:76:3b:08:e0: 6d:33:86:3c:91:5b:7e:52:1b:f6:dd:b7:d0:3d:ff:52:94:a9: 1c:e7:3c:2d:7d:03:36:b6:d9:77:91:b3:80:f2:fe:e5:ba:40: d8:5b:46:33:69:93:e9:47:91:17:5b:7c:4a:a1:5a:f7:db:f9: fa:6a:fe:58:47:bb:71:ed:06:d9:9b:62:34:6c:ae:ec:24:64: 8c:e2:7e:6d:f6:9f:21:4a:9b:24:81:e0:91:06:00:3e:37:67: 53:05:50:5b:68:43:3a:83:3f:4e:29:b7:46:f5:e2:7c:e1:78: a9:d9:c1:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSeJX8TT8L704SetgnXg5197tICUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDNTcwM0FEMDMyNEQ3QTM3N0JFRjIwODE5QzA0NDA2 RkE5QTgxRjAeFw0yNTEwMjAwNDEzNDZaFw0yNTEwMjEwNTQwNDZaMDMxMTAvBgNV BAMTKEExQTc0RTQ0NTZFODQ1QzRDMjM3QkY0N0Y5ODcxMDM0ODU5Q0FGNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvUYi1j1T2lkh9rfngCbUpNG4a FyWHTNavKbMkKap5T5DwPusM0ZoT3Cw+EmpKq0x/fpJ9wWYn+qZx3TJ8Tzhy/Amd 7NQHp5TfWW9/SI0Vj7ZLrQJTTom0pM7h0V03a9dfdJ1TzZg5eZVm7xdwf9f3WeeL Wbo0FkSqgBapXrTjDwTSb+1849KgFSbVUyzO0/f5muvOGkdxkDNUoPVWnzeaYb2n AeU31EiGpDeHqWjRyzuBaUpyW7kM+C5sR9uwMMsApr9iQ1wokWpXbFbd8s802dE0 mk0YzfqmwdQI038qLGmhbUaJJ+vcBymcs07v4nMrcO7iMObzSIlPc2SGVmaJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoadORFboRcTCN79H+YcQNIWcr3YwHwYDVR0j BBgwFoAUjcVwOtAyTXo3e+8ggZwEQG+pqB8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnZZYm54aHVtRDdTZkc3cmV6NEZKRHBUc0hkU1FaaGJoY0Zmc2VjRDFO NXgvMC84REM1NzAzQUQwMzI0RDdBMzc3QkVGMjA4MTlDMDQ0MDZGQTlBODFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEQzU3MDNBRDAzMjREN0Ez NzdCRUYyMDgxOUMwNDQwNkZBOUE4MUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnZZYm54aHVtRDdTZkc3cmV6NEZKRHBUc0hkU1FaaGJoY0Zmc2VjRDFONXgvMC84 REM1NzAzQUQwMzI0RDdBMzc3QkVGMjA4MTlDMDQ0MDZGQTlBODFGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADuldk5U7H50/eqp3IPVFmlBL2qhnDOxv4F4zDVWi++tduqlIHZcOkcR/uvkc lhBToOHUbyLzxrzBTXGMZ7VM3wX8Fq+1ZEa052clVUsGi0I+40HPG7t1zOc0h+aH dT0k9bGnaxTjlOrqwMxWVwEg+4nTpAYCY2/tYR0ji3FcHcyKIMK7GJF7q/WXkVV2 OwjgbTOGPJFbflIb9t230D3/UpSpHOc8LX0DNrbZd5GzgPL+5bpA2FtGM2mT6UeR F1t8SqFa99v5+mr+WEe7ce0G2ZtiNGyu7CRkjOJ+bfafIUqbJIHgkQYAPjdnUwVQ W2hDOoM/Tim3RvXifOF4qdnBfA== -----END CERTIFICATE-----Generated at Mon Oct 20 16:13:15 2025 by rpki-client