$ rpki-client -vvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft File: D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft (raw, json) Hash identifier: o2CaGLjEnIDRRvraN2pdRCLArZd/Sx7PPWn+lApfKhk= Subject key identifier: 78:D4:0A:01:83:3A:F3:8D:8C:0C:DE:94:9F:85:04:82:99:D3:61:C5 Authority key identifier: D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05 Certificate issuer: /CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05 Certificate serial: 67183564BA41468CA727C87EF315A2765C3D9E98 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer Subject info access: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft Manifest number: 02EB Signing time: Sun 19 Oct 2025 13:11:54 +0000 Manifest this update: Sun 19 Oct 2025 13:06:54 +0000 Manifest next update: Mon 20 Oct 2025 15:55:54 +0000 Files and hashes: 1: 3136382e3230352e3232342e302f32322d3234203d3e20323634383637.roa (hash: 0HtIStJbMsMcPkb3Bpf/zwlv0P5p5WuHdoYgzHMGegQ=) 2: D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl (hash: 0v8jhDtB8NmJuj9R9LOjTRQWfUbOx1p7DWfLZWedp20=) 3: 323830343a326630383a3a2f33322d3332203d3e20323634383637.roa (hash: V7DnBsCJIuISkVSnruTXr9sSBfm6Q+BYBb5kdZYmrfc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 15:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:18:35:64:ba:41:46:8c:a7:27:c8:7e:f3:15:a2:76:5c:3d:9e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05 Validity Not Before: Oct 19 13:06:54 2025 GMT Not After : Oct 20 15:55:54 2025 GMT Subject: CN=78D40A01833AF38D8C0CDE949F85048299D361C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b1:7a:f6:be:da:fa:76:8c:01:8b:1e:13:6c: 50:db:48:38:ff:c8:51:2a:66:7e:07:7f:bb:04:77: b1:d0:80:35:a9:04:32:56:80:1f:fe:97:2f:ac:ef: 1e:b2:ab:bc:1b:cb:fe:e5:35:72:ef:95:b2:f9:8e: 64:71:45:6d:00:2b:ff:9f:24:fc:81:bd:ee:16:b7: eb:56:ad:ec:a5:43:9e:2f:5d:bd:52:d0:b7:86:9e: 42:46:a6:b3:a1:c2:1c:f9:99:87:9a:4a:b4:cb:72: d8:0f:9d:2f:fd:35:8f:e5:d9:4a:6e:64:d4:99:40: 15:82:27:c9:3e:d5:89:65:81:65:fe:c6:03:87:3a: b5:9f:a1:34:c3:0c:55:c2:84:be:50:f5:a0:33:d9: 41:00:29:20:5d:38:e6:dc:79:3f:9e:97:1d:8f:9b: c0:3e:a2:21:5b:12:e1:ce:d6:69:fd:9e:a2:8a:8a: 4c:62:e4:4d:b8:ab:16:f2:ab:84:97:84:42:e4:f1: db:8e:af:60:cf:23:29:47:ef:d2:c0:24:63:0b:2b: fd:cf:c6:d9:20:b7:a4:4b:59:a3:c7:6a:64:b7:ce: 0d:79:b8:b3:41:f7:c4:13:48:5f:57:a2:86:1a:aa: 30:41:7f:4f:4f:94:ea:28:02:9b:d7:6f:99:ba:01: ad:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D4:0A:01:83:3A:F3:8D:8C:0C:DE:94:9F:85:04:82:99:D3:61:C5 X509v3 Authority Key Identifier: keyid:D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:c1:2f:67:f1:90:b3:58:af:a5:65:59:c8:00:36:a2:6e:09: f0:16:56:a4:f7:ea:81:09:7d:b1:83:84:82:4b:a6:12:84:4f: cb:ff:95:0b:cc:a2:b2:20:43:e4:d5:39:b4:f2:f2:98:ea:6c: e1:a1:2e:b4:33:2c:ca:c5:7c:6c:6d:01:09:33:cf:d4:1d:82: 79:99:5a:1c:58:23:52:c0:93:06:88:24:ad:fd:17:19:fa:a7: 5e:af:5c:63:2a:f3:3e:8e:49:1b:66:2c:08:11:1e:5a:a9:68: 8c:0a:55:f1:2d:1f:14:28:8a:e3:47:3a:00:fe:62:26:f9:4a: 21:2e:30:e5:af:4f:07:ab:1d:7c:91:3a:ca:40:a7:d6:e9:a1: 72:65:8c:e6:4a:3c:60:1c:04:f7:82:83:87:cd:cd:bd:ba:ca: 4f:c4:13:e9:08:ec:29:07:c3:2c:86:3d:d9:8a:61:da:0a:0d: 2a:3f:9c:4c:52:01:9d:95:2a:fc:36:38:c3:07:54:4c:fb:d6: 17:d0:e6:20:f8:0b:41:ad:f0:1b:9c:22:0d:34:a2:7e:e2:72: 8f:98:88:98:df:e4:9c:f5:06:6c:ee:df:58:31:48:1f:25:1f: fb:f9:43:f8:b7:10:0c:cb:28:d9:bc:92:aa:55:be:62:d4:d5: 1a:c8:7f:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZxg1ZLpBRoynJ8h+8xWidlw9npgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEOUI4RTRBODM1QTJGRTBGOTA1Nzg2REVEOEI1MzBG N0YwQUQwNTAeFw0yNTEwMTkxMzA2NTRaFw0yNTEwMjAxNTU1NTRaMDMxMTAvBgNV BAMTKDc4RDQwQTAxODMzQUYzOEQ4QzBDREU5NDlGODUwNDgyOTlEMzYxQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvsXr2vtr6dowBix4TbFDbSDj/ yFEqZn4Hf7sEd7HQgDWpBDJWgB/+ly+s7x6yq7wby/7lNXLvlbL5jmRxRW0AK/+f JPyBve4Wt+tWreylQ54vXb1S0LeGnkJGprOhwhz5mYeaSrTLctgPnS/9NY/l2Upu ZNSZQBWCJ8k+1YllgWX+xgOHOrWfoTTDDFXChL5Q9aAz2UEAKSBdOObceT+elx2P m8A+oiFbEuHO1mn9nqKKikxi5E24qxbyq4SXhELk8duOr2DPIylH79LAJGMLK/3P xtkgt6RLWaPHamS3zg15uLNB98QTSF9XooYaqjBBf09PlOooApvXb5m6Aa07AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUeNQKAYM6842MDN6Un4UEgpnTYcUwHwYDVR0j BBgwFoAU2Nm45Kg1ov4PkFeG3ti1MPfwrQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0ZoSDNjcVphOHNHY1pBM21LWGtnNjZKb2FoUG05VlNYaUVaNHJpWVpD MTQvMS9EOEQ5QjhFNEE4MzVBMkZFMEY5MDU3ODZERUQ4QjUzMEY3RjBBRDA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4RDlCOEU0QTgzNUEyRkUw RjkwNTc4NkRFRDhCNTMwRjdGMEFEMDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0ZoSDNjcVphOHNHY1pBM21LWGtnNjZKb2FoUG05VlNYaUVaNHJpWVpDMTQvMS9E OEQ5QjhFNEE4MzVBMkZFMEY5MDU3ODZERUQ4QjUzMEY3RjBBRDA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqMEvZ/GQs1ivpWVZyAA2om4J8BZWpPfqgQl9sYOEgkumEoRPy/+VC8yisiBD 5NU5tPLymOps4aEutDMsysV8bG0BCTPP1B2CeZlaHFgjUsCTBogkrf0XGfqnXq9c YyrzPo5JG2YsCBEeWqlojApV8S0fFCiK40c6AP5iJvlKIS4w5a9PB6sdfJE6ykCn 1umhcmWM5ko8YBwE94KDh83NvbrKT8QT6QjsKQfDLIY92Yph2goNKj+cTFIBnZUq /DY4wwdUTPvWF9DmIPgLQa3wG5wiDTSifuJyj5iImN/knPUGbO7fWDFIHyUf+/lD +LcQDMso2bySqlW+YtTVGsh/hg== -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:27 2025 by rpki-client