$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft (raw, json) Hash identifier: Fl7fcv2l4nT0aaJyAr+Y7yohuKV2b8PKufdaLHz0siU= Subject key identifier: 5A:10:AF:B6:7F:7C:D3:D6:C2:E4:BF:C0:7A:ED:F8:BF:DF:9C:22:75 Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE Certificate issuer: /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Certificate serial: 7C540BA14113D22AF0E51C2AB5133AC45FDD9EF4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft Manifest number: 02E7 Signing time: Mon 20 Oct 2025 10:16:36 +0000 Manifest this update: Mon 20 Oct 2025 10:11:36 +0000 Manifest next update: Tue 21 Oct 2025 11:12:36 +0000 Files and hashes: 1: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (hash: o5soZhe+dlhemRC6K331qQOeiYKJedndqQuOLBx6nRk=) 2: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl (hash: K9rDgkkp4tbZCscJ3++RdXIwv4vjdWXEQFy13Vx+VSc=) 3: 3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (hash: 9lrgdFqXcmk1aveRypR0nwRoxN6RAu5lewGudgo7m5A=) 4: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (hash: daKi2XN6iI/5shlbC2ws+WpCE+eRSaaM95sbtBClTTE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:54:0b:a1:41:13:d2:2a:f0:e5:1c:2a:b5:13:3a:c4:5f:dd:9e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Validity Not Before: Oct 20 10:11:36 2025 GMT Not After : Oct 21 11:12:36 2025 GMT Subject: CN=5A10AFB67F7CD3D6C2E4BFC07AEDF8BFDF9C2275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:3e:f1:3c:bd:c9:bd:a8:9a:3a:e6:27:e3: ab:3a:c5:14:35:b3:19:40:a5:05:84:d1:e6:f0:0f: 5b:eb:f4:91:23:88:17:1a:f1:fc:ca:c2:a0:0f:96: 80:cf:67:12:fe:75:59:1b:83:5b:64:20:d0:6a:c7: 63:7e:c8:26:d7:61:08:bd:0c:d4:9f:8a:72:07:0e: aa:8b:de:48:a5:0b:89:49:ab:7e:0c:61:54:49:74: d0:b8:b7:3d:1c:f6:95:1a:a1:b7:52:55:fd:24:9f: 6f:38:28:39:34:eb:b0:bf:5a:00:d3:49:2a:a7:0d: 86:ab:09:60:66:89:36:f0:f0:d2:a2:90:16:cf:d2: 08:b5:9e:c7:15:2a:2e:3f:af:06:2f:4d:47:8e:b1: 0e:be:a6:7b:dc:4c:50:01:4f:47:52:76:89:44:64: e8:37:df:eb:b9:8c:f7:40:d8:53:55:2a:a9:e2:e6: 03:c1:ef:b7:3f:77:5b:42:91:d1:83:54:d6:ee:51: b3:12:c7:a3:4a:0c:de:63:58:ed:96:ca:85:fc:19: b5:c6:6a:12:b8:c3:86:ab:41:33:d8:3d:62:97:17: 40:23:c2:95:6c:04:73:cf:e3:c4:16:5d:ae:35:6a: 3d:8d:88:44:b6:56:9a:17:70:84:9f:52:8b:74:a5: 04:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:10:AF:B6:7F:7C:D3:D6:C2:E4:BF:C0:7A:ED:F8:BF:DF:9C:22:75 X509v3 Authority Key Identifier: keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:84:d4:66:82:47:14:27:9e:98:48:4a:d0:73:32:31:90:ba: c9:b5:1b:4f:ce:61:28:e7:1b:db:d3:a9:99:de:2c:3c:df:f4: 53:ba:f4:e1:55:d0:fe:ad:e3:e1:e4:f8:90:9a:88:55:1f:15: 15:65:af:c3:fb:93:b2:59:8e:5c:a9:0a:fd:84:9c:4b:d8:d1: e1:6b:e7:83:e4:98:65:e0:92:0b:df:b5:c9:f3:37:ba:bd:24: e9:99:87:f3:5b:38:48:e2:b2:c1:2f:e1:57:c0:e1:e3:31:9c: 7e:3f:f7:ed:ac:b1:12:04:ce:9e:40:40:f6:23:7f:79:b9:94: 51:35:0e:61:7f:0d:5a:b0:f6:e0:b1:14:3b:05:ab:c5:ba:77: 8c:93:43:eb:30:c9:82:90:09:15:34:12:03:6e:d9:23:aa:73: 75:56:1d:7b:b9:5c:a5:e7:ce:c0:1a:97:1d:c9:54:55:5c:74: 1e:50:ce:1a:aa:17:5b:d7:ef:3c:53:b6:b1:bb:79:15:30:8e: 45:da:9e:31:81:b7:85:fc:80:0a:fb:b5:1a:55:f5:29:3b:36: 50:b2:8a:28:a4:67:36:17:3c:af:5e:d6:5f:16:ed:c3:ef:f1: 98:87:11:40:88:6b:1a:0f:ea:c9:0b:c2:f9:91:43:10:ec:3c: ff:84:39:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfFQLoUET0irw5RwqtRM6xF/dnvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRTlDOTBFQkM1MDgyRjgwMjA1NUVGQUE2MzYwQzY2 MUJGODVDRTAeFw0yNTEwMjAxMDExMzZaFw0yNTEwMjExMTEyMzZaMDMxMTAvBgNV BAMTKDVBMTBBRkI2N0Y3Q0QzRDZDMkU0QkZDMDdBRURGOEJGREY5QzIyNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1hD7xPL3JvaiaOuYn46s6xRQ1 sxlApQWE0ebwD1vr9JEjiBca8fzKwqAPloDPZxL+dVkbg1tkINBqx2N+yCbXYQi9 DNSfinIHDqqL3kilC4lJq34MYVRJdNC4tz0c9pUaobdSVf0kn284KDk067C/WgDT SSqnDYarCWBmiTbw8NKikBbP0gi1nscVKi4/rwYvTUeOsQ6+pnvcTFABT0dSdolE ZOg33+u5jPdA2FNVKqni5gPB77c/d1tCkdGDVNbuUbMSx6NKDN5jWO2WyoX8GbXG ahK4w4arQTPYPWKXF0AjwpVsBHPP48QWXa41aj2NiES2VpoXcISfUot0pQStAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWhCvtn9809bC5L/Aeu34v9+cInUwHwYDVR0j BBgwFoAUi66ckOvFCC+AIFXvqmNgxmG/hc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNL ODUvMS84QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQUU5QzkwRUJDNTA4MkY4 MDIwNTVFRkFBNjM2MEM2NjFCRjg1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNLODUvMS84 QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmoTUZoJHFCeemEhK0HMyMZC6ybUbT85hKOcb29Opmd4sPN/0U7r04VXQ/q3j 4eT4kJqIVR8VFWWvw/uTslmOXKkK/YScS9jR4Wvng+SYZeCSC9+1yfM3ur0k6ZmH 81s4SOKywS/hV8Dh4zGcfj/37ayxEgTOnkBA9iN/ebmUUTUOYX8NWrD24LEUOwWr xbp3jJND6zDJgpAJFTQSA27ZI6pzdVYde7lcpefOwBqXHclUVVx0HlDOGqoXW9fv PFO2sbt5FTCORdqeMYG3hfyACvu1GlX1KTs2ULKKKKRnNhc8r17WXxbtw+/xmIcR QIhrGg/qyQvC+ZFDEOw8/4Q50A== -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:24 2025 by rpki-client