$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft File: ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft (raw, json) Hash identifier: hnoZYccClquOXy2wkabX6wznlud5wLFLUKV5llyIK4M= Subject key identifier: 56:00:A2:DA:05:C9:E7:68:A1:99:CB:B9:FA:EF:04:A1:D3:6C:D9:36 Authority key identifier: AC:E8:E0:81:BB:25:25:CD:B1:FC:85:C9:CE:1C:36:67:C8:3E:AC:1F Certificate issuer: /CN=ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F Certificate serial: 322BA3831B4038174E21CDD16A78E4819D586197 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.cer Subject info access: rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft Manifest number: 9C Signing time: Mon 20 Oct 2025 00:53:43 +0000 Manifest this update: Mon 20 Oct 2025 00:48:43 +0000 Manifest next update: Tue 21 Oct 2025 02:29:43 +0000 Files and hashes: 1: 3134332e302e3133362e302f32332d3233203d3e20323634303131.roa (hash: oCCbozumKWHZNHnsrflEH8CMEBxq5kK+7kdgsxrCOpk=) 2: 3134332e302e3133382e302f32332d3233203d3e20323634303131.roa (hash: a5waSVlquwcNa0Nsm6dZUKIcH/5Vp01v3948d0ByAhc=) 3: 323830343a323936303a3a2f33322d3332203d3e20323634303131.roa (hash: uwtntgDhZ8NLwZsO5HmD9mt3dlpHQTwDXJ+5+Ywo8ss=) 4: 3134332e302e3133362e302f32322d3232203d3e20323634303131.roa (hash: yLdeTcnv1NdbuM/lnH5oQE82RG04eOyAcuE+WQNkhJc=) 5: AS264011.asa (hash: aKti5PO3+eKPGpfYq1y92FXs+uyIvP6QJNFiJe6BX4M=) 6: ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.crl (hash: pzD2BGZijBIRPG9A59j97oU0VYWNgNPZei7zxxxYn4w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.crl rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2b:a3:83:1b:40:38:17:4e:21:cd:d1:6a:78:e4:81:9d:58:61:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F Validity Not Before: Oct 20 00:48:43 2025 GMT Not After : Oct 21 02:29:43 2025 GMT Subject: CN=5600A2DA05C9E768A199CBB9FAEF04A1D36CD936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f1:6f:7f:da:0c:e9:58:47:ad:8e:5b:f9:96: 62:e9:d2:c2:15:94:af:63:bd:6e:00:ad:84:3c:ef: cb:a2:66:5c:77:bf:87:10:a8:16:36:20:d5:bd:b4: 1a:54:1f:df:d1:62:50:9a:0e:59:68:05:af:07:0b: 42:a8:75:ef:51:e6:9f:54:f9:d8:b2:0c:94:6d:e7: ff:44:35:89:5c:99:f6:6a:2d:d8:ca:2f:68:3e:1c: fd:dd:40:62:f0:ee:0e:e9:c3:89:04:a5:e7:e4:bd: e5:1d:c4:a9:af:30:d5:e3:31:9f:b2:1c:c2:fa:22: dd:8b:c2:65:19:f3:dd:c5:60:28:3a:88:79:01:2e: 2c:d3:83:5e:ee:c3:6c:08:c7:c6:40:14:ba:e1:de: 69:5f:ed:3a:fd:35:93:c8:25:65:fd:fa:28:3d:d8: 5b:c2:e7:ef:48:90:a5:e2:7d:d2:f5:13:52:b9:20: 7d:b7:d3:93:c4:81:94:62:f3:2b:c5:dc:dd:98:50: d2:dd:16:0f:bb:e0:fe:9d:69:4b:85:98:68:7d:47: 51:ab:4c:b0:b2:5f:b7:fb:fd:41:1f:95:d0:2e:b4: 59:c6:8a:ff:d6:0c:bd:0d:b2:99:a3:b3:21:78:eb: d8:50:8f:c1:b0:2f:ed:54:9b:e8:cc:6b:dc:14:db: 15:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:00:A2:DA:05:C9:E7:68:A1:99:CB:B9:FA:EF:04:A1:D3:6C:D9:36 X509v3 Authority Key Identifier: keyid:AC:E8:E0:81:BB:25:25:CD:B1:FC:85:C9:CE:1C:36:67:C8:3E:AC:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:49:fd:1f:7b:17:13:f6:d0:a7:a5:90:4f:dd:a9:c9:9d:9c: 48:32:ac:bc:51:d2:4a:74:a4:b0:62:b7:95:72:72:4c:fb:05: ef:9b:3e:3e:3d:a8:1b:c5:a6:0c:ce:74:17:f3:34:24:a6:5c: 87:83:51:6b:e5:47:e7:0c:7a:ce:23:cb:28:e2:dc:8e:7d:a8: f3:58:c1:62:e7:df:37:ea:e9:19:8e:a9:a1:e6:45:fd:c3:9e: 59:90:fc:7d:dc:97:7b:da:4a:b4:ec:68:1d:27:97:ab:14:95: 34:62:f5:89:26:4c:7b:53:e6:87:d5:26:bd:d6:cc:67:da:38: 51:6b:d0:93:db:e6:30:c7:8f:fc:8a:6b:43:5b:7c:9c:9a:4c: c1:13:9c:aa:8b:85:ca:5d:63:44:a7:c3:e4:ed:9c:c4:46:a1: f1:cf:f5:ea:90:bc:26:a5:bf:c8:d0:8b:e0:09:16:de:d2:a0: 44:20:1b:ef:50:13:dc:2d:48:5c:5d:64:d6:a7:dd:7e:6b:58: 7a:78:95:e5:3c:c2:3b:06:ac:66:04:22:fc:65:86:4d:25:13: 87:07:2d:57:7a:da:4b:72:28:f3:47:84:1a:ae:da:d1:80:67: e9:93:2c:b8:29:1f:8b:3e:68:d3:b1:3f:89:d9:3e:f1:b5:4c: e6:dd:68:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMiujgxtAOBdOIc3RanjkgZ1YYZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNFOEUwODFCQjI1MjVDREIxRkM4NUM5Q0UxQzM2NjdD ODNFQUMxRjAeFw0yNTEwMjAwMDQ4NDNaFw0yNTEwMjEwMjI5NDNaMDMxMTAvBgNV BAMTKDU2MDBBMkRBMDVDOUU3NjhBMTk5Q0JCOUZBRUYwNEExRDM2Q0Q5MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi8W9/2gzpWEetjlv5lmLp0sIV lK9jvW4ArYQ878uiZlx3v4cQqBY2INW9tBpUH9/RYlCaDlloBa8HC0Kode9R5p9U +diyDJRt5/9ENYlcmfZqLdjKL2g+HP3dQGLw7g7pw4kEpefkveUdxKmvMNXjMZ+y HML6It2LwmUZ893FYCg6iHkBLizTg17uw2wIx8ZAFLrh3mlf7Tr9NZPIJWX9+ig9 2FvC5+9IkKXifdL1E1K5IH2305PEgZRi8yvF3N2YUNLdFg+74P6daUuFmGh9R1Gr TLCyX7f7/UEfldAutFnGiv/WDL0NspmjsyF469hQj8GwL+1Um+jMa9wU2xXvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVgCi2gXJ52ihmcu5+u8EodNs2TYwHwYDVR0j BBgwFoAUrOjggbslJc2x/IXJzhw2Z8g+rB8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGlNbXBKQWEyOXV6c2tpbmdONDJuanY1TWQ3VVpCM3JTaW1BMmtZckY0 UlYvMC9BQ0U4RTA4MUJCMjUyNUNEQjFGQzg1QzlDRTFDMzY2N0M4M0VBQzFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDRThFMDgxQkIyNTI1Q0RC MUZDODVDOUNFMUMzNjY3QzgzRUFDMUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGlNbXBKQWEyOXV6c2tpbmdONDJuanY1TWQ3VVpCM3JTaW1BMmtZckY0UlYvMC9B Q0U4RTA4MUJCMjUyNUNEQjFGQzg1QzlDRTFDMzY2N0M4M0VBQzFGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgkn9H3sXE/bQp6WQT92pyZ2cSDKsvFHSSnSksGK3lXJyTPsF75s+Pj2oG8Wm DM50F/M0JKZch4NRa+VH5wx6ziPLKOLcjn2o81jBYuffN+rpGY6poeZF/cOeWZD8 fdyXe9pKtOxoHSeXqxSVNGL1iSZMe1Pmh9UmvdbMZ9o4UWvQk9vmMMeP/IprQ1t8 nJpMwROcqouFyl1jRKfD5O2cxEah8c/16pC8JqW/yNCL4AkW3tKgRCAb71AT3C1I XF1k1qfdfmtYeniV5TzCOwasZgQi/GWGTSUThwctV3raS3Io80eEGq7a0YBn6ZMs uCkfiz5o07E/idk+8bVM5t1odg== -----END CERTIFICATE-----Generated at Mon Oct 20 10:15:35 2025 by rpki-client