$ rpki-client -vvf rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.mft File: ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.mft (raw, json) Hash identifier: 4jIACcYfIV/l6mPA1zYX+Ehd2vv4TUmZISN4le1/jBY= Subject key identifier: 82:4B:25:50:0B:E4:77:DB:17:30:0F:AA:D7:38:03:2D:F5:15:8B:FD Authority key identifier: ED:9F:DB:85:BF:C8:0C:0A:4C:B9:4B:00:7E:75:C6:B4:27:9D:CB:02 Certificate issuer: /CN=ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02 Certificate serial: 2949C32BB1E7B1EFA455D10E0D09AE9AA067BDF5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.cer Subject info access: rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.mft Manifest number: 01A0 Signing time: Mon 20 Oct 2025 20:08:25 +0000 Manifest this update: Mon 20 Oct 2025 20:03:25 +0000 Manifest next update: Tue 21 Oct 2025 22:43:25 +0000 Files and hashes: 1: 3137302e3234342e302e302f32322d3234203d3e203532363939.roa (hash: ZqKeVZ6hHbOnBrdHN8iaccedq+Bbp+YW7IN+GawbyaY=) 2: ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.crl (hash: 1gVh+FF8mXxRvfxuluJj7z4ZJNAv8FDz0lqpSG+9nl4=) 3: 3137372e32332e3133362e302f32312d3234203d3e203532363939.roa (hash: BvpfivgXvTqJVCcu+N5ODFwBdrkqu7i/5EnGcosc36U=) 4: 3137372e3232332e302e302f32302d3234203d3e203532363939.roa (hash: wRD1fn60hC41g9kkaa/VEVlGMpLmfKEOJntzU9eGrqw=) 5: 323830343a6336343a3a2f33322d3438203d3e203532363939.roa (hash: C0K8ru5VhD4upelSRyeUb8FqhAS3//qcQpbl7RW1pa4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.crl rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 22:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:49:c3:2b:b1:e7:b1:ef:a4:55:d1:0e:0d:09:ae:9a:a0:67:bd:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02 Validity Not Before: Oct 20 20:03:25 2025 GMT Not After : Oct 21 22:43:25 2025 GMT Subject: CN=824B25500BE477DB17300FAAD738032DF5158BFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:72:ce:25:97:ce:cd:e7:b0:37:5d:42:b0:c2: 0d:a1:f2:51:23:c1:9e:3a:dc:5c:3a:20:8a:27:54: a8:29:b7:58:2a:b6:c2:15:52:5f:9d:e5:4f:51:1b: 32:d8:f4:23:a6:a2:97:b2:cc:b0:6e:b9:59:9c:9a: e7:17:cc:cc:fa:7a:29:ba:f4:1a:f1:0b:0a:dd:95: dc:85:bc:72:41:0d:b2:a0:58:2d:8d:13:92:a8:62: 82:f1:e0:d3:3f:b1:45:63:4d:37:34:e9:63:aa:18: 34:b9:92:f4:89:1b:70:b5:10:3b:99:d0:d5:9d:cb: cb:ff:ff:00:16:32:61:6f:20:b0:3f:74:91:0a:92: 2e:49:aa:65:bb:d0:26:7f:4e:d2:76:7a:ed:68:02: 54:d0:ca:46:2d:7f:02:51:43:00:14:00:d4:4f:ef: d0:50:5e:ea:88:97:f1:5c:63:09:51:83:43:e5:16: 3e:af:6b:58:8c:d6:9d:e0:bc:30:1a:50:87:62:72: a0:3c:db:e6:aa:09:5a:06:51:37:ed:2c:23:3f:81: f4:f5:c1:3c:d8:14:8a:71:80:e9:49:6b:e2:49:77: ee:74:8b:3f:0f:2d:75:ff:b6:be:0e:12:f4:db:fc: 9a:a2:8a:6c:d1:44:c2:5b:1e:c8:af:ba:6d:e5:f2: 18:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4B:25:50:0B:E4:77:DB:17:30:0F:AA:D7:38:03:2D:F5:15:8B:FD X509v3 Authority Key Identifier: keyid:ED:9F:DB:85:BF:C8:0C:0A:4C:B9:4B:00:7E:75:C6:B4:27:9D:CB:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:b8:6a:a4:c6:8b:ba:91:90:57:05:c2:23:a2:b3:f8:1f:c2: 40:ed:8b:85:3f:fd:79:de:ac:7e:44:31:27:48:1c:6c:3d:00: 29:dc:31:9b:2d:76:89:19:9b:65:09:c1:cf:17:9d:42:d7:87: d5:fc:60:7b:06:e9:4b:fa:66:0c:f1:3a:e5:8b:8b:32:4b:f9: d1:cd:fe:74:37:a6:f8:68:f0:dc:d1:82:93:03:c3:87:e0:3d: 99:f9:71:41:9e:b9:40:06:13:cb:db:6e:66:b5:70:75:2a:e3: 12:6f:da:74:82:0a:62:1a:fc:8f:2c:f1:7e:f2:d7:b0:39:43: 1c:91:ff:94:90:1e:4d:71:6e:9d:26:69:bf:42:14:44:b2:1d: 6e:17:68:3b:72:ad:8c:57:7c:ea:be:1f:10:25:8e:bf:44:38: 76:dc:37:89:fe:74:30:eb:15:2a:2e:5b:c0:40:df:a4:48:2f: d2:42:36:2e:bd:f3:41:1c:3b:da:f2:95:f6:90:b3:2f:c3:ce: 8e:46:8d:4e:f1:e4:65:86:95:cf:b9:8b:e1:c1:2e:85:47:c4: 2a:69:05:a5:87:98:f3:e5:59:a3:5f:bc:66:6c:d2:f5:c7:c3: b7:70:70:b0:c7:60:ab:a8:0d:9a:a5:e7:f7:92:fa:18:6e:2a: 89:64:9e:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKUnDK7Hnse+kVdEODQmumqBnvfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ5RkRCODVCRkM4MEMwQTRDQjk0QjAwN0U3NUM2QjQy NzlEQ0IwMjAeFw0yNTEwMjAyMDAzMjVaFw0yNTEwMjEyMjQzMjVaMDMxMTAvBgNV BAMTKDgyNEIyNTUwMEJFNDc3REIxNzMwMEZBQUQ3MzgwMzJERjUxNThCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGcs4ll87N57A3XUKwwg2h8lEj wZ463Fw6IIonVKgpt1gqtsIVUl+d5U9RGzLY9COmopeyzLBuuVmcmucXzMz6eim6 9BrxCwrdldyFvHJBDbKgWC2NE5KoYoLx4NM/sUVjTTc06WOqGDS5kvSJG3C1EDuZ 0NWdy8v//wAWMmFvILA/dJEKki5JqmW70CZ/TtJ2eu1oAlTQykYtfwJRQwAUANRP 79BQXuqIl/FcYwlRg0PlFj6va1iM1p3gvDAaUIdicqA82+aqCVoGUTftLCM/gfT1 wTzYFIpxgOlJa+JJd+50iz8PLXX/tr4OEvTb/JqiimzRRMJbHsivum3l8hjNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgkslUAvkd9sXMA+q1zgDLfUVi/0wHwYDVR0j BBgwFoAU7Z/bhb/IDApMuUsAfnXGtCedywIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzhwbWNIQUpaUENlU2NpOFVjRFhhU01adEtqTTlqejZ3c0t1dndwUGZn MVEvMC9FRDlGREI4NUJGQzgwQzBBNENCOTRCMDA3RTc1QzZCNDI3OURDQjAyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEOUZEQjg1QkZDODBDMEE0 Q0I5NEIwMDdFNzVDNkI0Mjc5RENCMDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzhwbWNIQUpaUENlU2NpOFVjRFhhU01adEtqTTlqejZ3c0t1dndwUGZnMVEvMC9F RDlGREI4NUJGQzgwQzBBNENCOTRCMDA3RTc1QzZCNDI3OURDQjAyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFLhqpMaLupGQVwXCI6Kz+B/CQO2LhT/9ed6sfkQxJ0gcbD0AKdwxmy12iRmb ZQnBzxedQteH1fxgewbpS/pmDPE65YuLMkv50c3+dDem+Gjw3NGCkwPDh+A9mflx QZ65QAYTy9tuZrVwdSrjEm/adIIKYhr8jyzxfvLXsDlDHJH/lJAeTXFunSZpv0IU RLIdbhdoO3KtjFd86r4fECWOv0Q4dtw3if50MOsVKi5bwEDfpEgv0kI2Lr3zQRw7 2vKV9pCzL8POjkaNTvHkZYaVz7mL4cEuhUfEKmkFpYeY8+VZo1+8ZmzS9cfDt3Bw sMdgq6gNmqXn95L6GG4qiWSeug== -----END CERTIFICATE-----Generated at Tue Oct 21 02:22:07 2025 by rpki-client