$ rpki-client -vvf rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft File: 8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft (raw, json) Hash identifier: 8k5LV5Txa9X6yBMDRBriSshEfyo83Zzl/1rPFfNlhfU= Subject key identifier: 96:86:3F:47:EA:1F:1E:A0:97:16:7C:20:D2:BA:3F:3C:11:AE:FE:1F Authority key identifier: 8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10 Certificate issuer: /CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810 Certificate serial: 07C13E2DF955C92A3AA28AAC3541E373715822A3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer Subject info access: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft Manifest number: 0270 Signing time: Mon 20 Oct 2025 09:08:08 +0000 Manifest this update: Mon 20 Oct 2025 09:03:08 +0000 Manifest next update: Tue 21 Oct 2025 13:04:08 +0000 Files and hashes: 1: 8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl (hash: NJt4QQajddHjZ1cyK40K3uFx4tD5P1dvjH6hW4QA3ew=) 2: 323830343a313735633a3a2f33322d313238203d3e20323633313430.roa (hash: LcxgBvhys26dh3eN+AkNblIZ169BBg5L/bmL0RHyz5I=) 3: 3139312e362e3134302e302f32322d3332203d3e20323633313430.roa (hash: YR3iwTv8fmQASNA9FOgQAa+ECLErkEz/btJcdJNxQ2k=) 4: 3136382e3230352e3134342e302f32322d3332203d3e20323633313430.roa (hash: bg8Dvb5gyNofKjWKDnAjbZaTOGuSl+Au6niFij0wNQI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c1:3e:2d:f9:55:c9:2a:3a:a2:8a:ac:35:41:e3:73:71:58:22:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810 Validity Not Before: Oct 20 09:03:08 2025 GMT Not After : Oct 21 13:04:08 2025 GMT Subject: CN=96863F47EA1F1EA097167C20D2BA3F3C11AEFE1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:aa:95:ca:2b:a6:65:af:26:06:bc:1d:65:2d: 77:dd:53:fc:43:b6:11:2f:ca:10:9c:d2:89:ab:6a: df:23:67:57:89:77:3a:4f:76:7b:78:61:5d:36:42: fb:8a:af:10:b5:29:55:be:5c:ff:34:f9:7c:15:91: 41:3f:b4:7b:ba:b8:c4:f3:f3:95:a0:77:90:1c:c8: 68:c3:39:a3:4a:f2:47:9d:e9:19:b0:1e:2f:fc:f6: af:59:c5:03:be:cb:8b:64:70:27:94:f6:21:8e:bb: 33:2a:24:4c:72:f1:d0:ba:af:3b:eb:80:4e:c7:af: 9b:20:cd:75:77:ec:d3:9a:fc:17:34:af:22:9a:d1: 80:83:44:7b:0b:de:da:a9:42:67:b0:c7:23:29:7d: 81:a6:ab:ee:ca:ff:ef:f4:85:18:d6:b8:fc:6e:41: 41:75:fd:fc:cd:d2:5f:2c:f9:67:a6:0d:f4:c4:3b: 26:a9:e3:7f:01:7a:ad:45:07:2e:fd:ec:ba:bc:81: 93:ad:95:8d:80:6f:7c:44:a4:ba:d4:91:b1:75:92: 01:1a:3b:05:d0:38:4a:12:81:30:91:65:9a:80:b4: 26:96:9d:51:1e:cf:80:f2:2e:6f:4d:fa:d7:4a:38: 23:c7:25:61:8d:24:25:8a:5b:36:ed:b9:ce:18:1d: ab:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:86:3F:47:EA:1F:1E:A0:97:16:7C:20:D2:BA:3F:3C:11:AE:FE:1F X509v3 Authority Key Identifier: keyid:8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:bc:d9:4d:bf:ad:eb:43:fa:c5:99:60:bd:65:06:08:1d:b0: 7c:54:bc:79:14:b6:1c:4e:22:de:5a:93:fe:78:99:9f:35:37: e4:3b:8f:e1:c1:fc:97:90:d0:25:3f:2e:da:f5:3d:47:7a:e6: 83:d1:02:af:cb:41:13:12:01:ce:c1:61:98:54:f4:1d:08:b1: 03:85:ae:56:58:d6:8d:f3:4c:90:87:43:e9:9c:57:72:67:73: 01:ab:53:18:75:a5:0b:4d:7c:ed:e6:3a:ce:b0:42:ae:2d:8e: 54:54:d6:26:1b:ed:2b:92:d1:42:c0:c9:f7:22:a4:25:22:3e: 66:84:7f:da:b6:fb:01:0a:7d:47:71:a3:aa:3d:67:15:d9:07: b8:d2:23:e6:0b:14:8e:c5:60:bc:69:74:e3:15:ea:09:ea:7e: 1f:9c:b8:b8:a6:47:f1:14:04:21:96:cf:2e:e0:24:8f:8e:a3: 6d:41:0c:3b:ca:f3:f3:33:20:c1:18:f3:27:ea:35:64:8a:02: 34:9e:2f:00:fd:2b:40:82:6b:1f:7e:4d:5d:70:cb:99:d5:be: cd:cb:b7:64:ab:69:56:37:20:46:cd:1e:37:13:f8:0e:3f:ad: 0a:a3:86:e7:a8:4a:fc:70:e8:f9:b3:27:46:73:d5:40:ed:66: 0b:a0:b5:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUB8E+LflVySo6ooqsNUHjc3FYIqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYzMjdGRUZBNEU4Nzg4RkZDRkRDRDdDNkQxOTA2NDBG OEE2MjgxMDAeFw0yNTEwMjAwOTAzMDhaFw0yNTEwMjExMzA0MDhaMDMxMTAvBgNV BAMTKDk2ODYzRjQ3RUExRjFFQTA5NzE2N0MyMEQyQkEzRjNDMTFBRUZFMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0qpXKK6ZlryYGvB1lLXfdU/xD thEvyhCc0omrat8jZ1eJdzpPdnt4YV02QvuKrxC1KVW+XP80+XwVkUE/tHu6uMTz 85Wgd5AcyGjDOaNK8ked6RmwHi/89q9ZxQO+y4tkcCeU9iGOuzMqJExy8dC6rzvr gE7Hr5sgzXV37NOa/Bc0ryKa0YCDRHsL3tqpQmewxyMpfYGmq+7K/+/0hRjWuPxu QUF1/fzN0l8s+WemDfTEOyap438Beq1FBy797Lq8gZOtlY2Ab3xEpLrUkbF1kgEa OwXQOEoSgTCRZZqAtCaWnVEez4DyLm9N+tdKOCPHJWGNJCWKWzbtuc4YHaubAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUloY/R+ofHqCXFnwg0ro/PBGu/h8wHwYDVR0j BBgwFoAUjzJ/76ToeI/8/c18bRkGQPimKBAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnpWUjI5bmhrRkFyam0zYm9HNnhySkNWUFEzNmI1RGFlVnN5bjQ0U1p0 QUIvMC84RjMyN0ZFRkE0RTg3ODhGRkNGRENEN0M2RDE5MDY0MEY4QTYyODEwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGMzI3RkVGQTRFODc4OEZG Q0ZEQ0Q3QzZEMTkwNjQwRjhBNjI4MTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnpWUjI5bmhrRkFyam0zYm9HNnhySkNWUFEzNmI1RGFlVnN5bjQ0U1p0QUIvMC84 RjMyN0ZFRkE0RTg3ODhGRkNGRENEN0M2RDE5MDY0MEY4QTYyODEwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACrzZTb+t60P6xZlgvWUGCB2wfFS8eRS2HE4i3lqT/niZnzU35DuP4cH8l5DQ JT8u2vU9R3rmg9ECr8tBExIBzsFhmFT0HQixA4WuVljWjfNMkIdD6ZxXcmdzAatT GHWlC0187eY6zrBCri2OVFTWJhvtK5LRQsDJ9yKkJSI+ZoR/2rb7AQp9R3Gjqj1n FdkHuNIj5gsUjsVgvGl04xXqCep+H5y4uKZH8RQEIZbPLuAkj46jbUEMO8rz8zMg wRjzJ+o1ZIoCNJ4vAP0rQIJrH35NXXDLmdW+zcu3ZKtpVjcgRs0eNxP4Dj+tCqOG 56hK/HDo+bMnRnPVQO1mC6C14Q== -----END CERTIFICATE-----Generated at Mon Oct 20 15:01:24 2025 by rpki-client