$ rpki-client -vvf rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft File: 8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft (raw, json) Hash identifier: 47scv3awkU5pWIantba+iW67v24F4IqaQRWlqn1ohec= Subject key identifier: 0C:6C:5D:74:68:AE:82:E5:91:D9:48:BE:45:FD:03:B8:E1:34:C6:B2 Authority key identifier: 8D:C5:D5:ED:AA:F3:3C:70:66:24:4D:28:E5:34:CF:D5:D6:69:13:53 Certificate issuer: /CN=8DC5D5EDAAF33C7066244D28E534CFD5D6691353 Certificate serial: 0F5AFC74A994F93A0A9BB728E3070EB112276FD5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer Subject info access: rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft Manifest number: 01CE Signing time: Mon 20 Oct 2025 08:35:52 +0000 Manifest this update: Mon 20 Oct 2025 08:30:52 +0000 Manifest next update: Tue 21 Oct 2025 11:40:52 +0000 Files and hashes: 1: 323830343a353461383a3a2f33322d3438203d3e20323638363633.roa (hash: m7+hgmJslk8ghgjHVc6HPco/IHPiW92CG2MNjN+UFQs=) 2: 34352e3136352e31322e302f32322d3234203d3e20323638363633.roa (hash: jDkzEu3dfEoW/TK85s2VDg93/wRMdxQYYXsBqd5++Ao=) 3: 8DC5D5EDAAF33C7066244D28E534CFD5D6691353.crl (hash: j/qSD+xQBPzU1ORsgwQ9c/60xDF7K2BDn/GG3aFAAL4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.crl rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:5a:fc:74:a9:94:f9:3a:0a:9b:b7:28:e3:07:0e:b1:12:27:6f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC5D5EDAAF33C7066244D28E534CFD5D6691353 Validity Not Before: Oct 20 08:30:52 2025 GMT Not After : Oct 21 11:40:52 2025 GMT Subject: CN=0C6C5D7468AE82E591D948BE45FD03B8E134C6B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d2:5a:f6:6a:bf:f5:81:82:93:5c:5c:68:17: c5:94:ff:98:da:15:f3:21:03:9b:2e:8f:5c:85:c4: c0:02:a9:c7:49:ba:fb:5d:6c:61:56:72:fc:98:fa: e2:72:96:21:f3:16:68:59:c9:96:63:f7:96:30:87: 3b:7c:b0:5e:df:7d:ad:db:47:58:92:47:77:ab:32: dc:91:f2:5d:d2:15:75:c8:84:a0:12:20:d4:dd:f2: b2:fe:2a:c1:e3:ee:d4:0e:17:e6:83:83:9e:41:43: bc:75:71:ea:0c:71:e3:35:9d:e1:5b:5f:ae:40:8e: 0a:d9:27:a6:e2:2d:8a:01:30:99:7c:8d:b0:fc:6d: e9:28:ab:a5:c3:8f:a0:55:63:5f:db:38:d7:20:d0: 07:ad:a1:09:ea:a9:ea:ff:e3:6a:02:ba:2b:0e:e1: f8:87:39:c7:ef:44:75:4e:ae:5e:58:98:0f:2d:ca: 4e:07:bd:c8:a6:ca:21:e1:75:6e:91:b5:8b:cd:f7: 8f:8c:73:a1:3c:48:21:7c:13:72:71:72:70:ac:53: 64:f3:ac:1f:d4:ad:38:07:79:21:a2:d0:d5:42:e2: 38:4a:bf:ff:95:c1:69:4a:9d:63:3f:c9:c1:8a:fd: 20:96:16:5c:80:89:42:2b:b4:36:f4:98:36:6d:ee: 63:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6C:5D:74:68:AE:82:E5:91:D9:48:BE:45:FD:03:B8:E1:34:C6:B2 X509v3 Authority Key Identifier: keyid:8D:C5:D5:ED:AA:F3:3C:70:66:24:4D:28:E5:34:CF:D5:D6:69:13:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:98:d2:e9:fb:5f:b5:56:98:6a:41:75:f9:5f:a2:02:80:c8: 19:0e:51:60:d6:13:23:e1:ef:65:7b:b4:0a:d7:1f:9c:50:fc: 39:29:9f:07:50:24:b6:c7:f8:7f:4d:dc:d7:38:2f:cb:26:f4: 9f:90:e8:e3:35:3d:89:52:ab:e3:51:3f:d7:84:a0:f5:8a:6f: e2:97:8a:b4:7e:af:ac:6d:39:db:bc:ba:4d:e9:2c:ea:53:d7: 6a:83:b3:b9:fe:44:3d:d8:06:cc:e3:15:a2:83:2e:11:14:d0: ff:3d:a8:a4:5b:d8:4c:7d:0d:17:b5:f7:c7:65:38:62:d5:71: 6a:14:b8:9d:64:4b:14:79:78:fb:4c:07:b4:c2:8c:40:2b:25: 18:f7:67:ae:66:5f:67:9c:af:61:90:7a:7f:33:30:20:96:af: 04:33:91:08:fd:3c:e3:4b:b6:0a:f1:5a:f3:f6:28:27:b9:7d: 84:88:46:5d:82:a3:a5:12:fc:b6:ef:9c:88:d8:cc:14:ea:80: 13:0e:a8:d7:ba:b5:95:02:59:1b:89:26:a7:8b:c6:de:5e:ec: a9:2b:7f:63:92:11:20:16:9b:a4:75:66:b1:a3:7e:3e:b7:71: 2d:8e:d4:5a:74:87:51:60:ee:73:0f:33:87:43:03:7d:84:54: ad:a8:38:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD1r8dKmU+ToKm7co4wcOsRInb9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDNUQ1RURBQUYzM0M3MDY2MjQ0RDI4RTUzNENGRDVE NjY5MTM1MzAeFw0yNTEwMjAwODMwNTJaFw0yNTEwMjExMTQwNTJaMDMxMTAvBgNV BAMTKDBDNkM1RDc0NjhBRTgyRTU5MUQ5NDhCRTQ1RkQwM0I4RTEzNEM2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI0lr2ar/1gYKTXFxoF8WU/5ja FfMhA5suj1yFxMACqcdJuvtdbGFWcvyY+uJyliHzFmhZyZZj95Ywhzt8sF7ffa3b R1iSR3erMtyR8l3SFXXIhKASINTd8rL+KsHj7tQOF+aDg55BQ7x1ceoMceM1neFb X65AjgrZJ6biLYoBMJl8jbD8bekoq6XDj6BVY1/bONcg0AetoQnqqer/42oCuisO 4fiHOcfvRHVOrl5YmA8tyk4HvcimyiHhdW6RtYvN94+Mc6E8SCF8E3JxcnCsU2Tz rB/UrTgHeSGi0NVC4jhKv/+VwWlKnWM/ycGK/SCWFlyAiUIrtDb0mDZt7mNPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDGxddGiuguWR2Ui+Rf0DuOE0xrIwHwYDVR0j BBgwFoAUjcXV7arzPHBmJE0o5TTP1dZpE1MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNnRHaHJpOUdtcFduV3dva2lTRUttd2tSTWRhSENrOHpNeHREakxjR2tQ ZlovMC84REM1RDVFREFBRjMzQzcwNjYyNDREMjhFNTM0Q0ZENUQ2NjkxMzUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEQzVENUVEQUFGMzNDNzA2 NjI0NEQyOEU1MzRDRkQ1RDY2OTEzNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NnRHaHJpOUdtcFduV3dva2lTRUttd2tSTWRhSENrOHpNeHREakxjR2tQZlovMC84 REM1RDVFREFBRjMzQzcwNjYyNDREMjhFNTM0Q0ZENUQ2NjkxMzUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdZjS6ftftVaYakF1+V+iAoDIGQ5RYNYTI+HvZXu0CtcfnFD8OSmfB1Aktsf4 f03c1zgvyyb0n5Do4zU9iVKr41E/14Sg9Ypv4peKtH6vrG0527y6Teks6lPXaoOz uf5EPdgGzOMVooMuERTQ/z2opFvYTH0NF7X3x2U4YtVxahS4nWRLFHl4+0wHtMKM QCslGPdnrmZfZ5yvYZB6fzMwIJavBDORCP0840u2CvFa8/YoJ7l9hIhGXYKjpRL8 tu+ciNjMFOqAEw6o17q1lQJZG4kmp4vG3l7sqSt/Y5IRIBabpHVmsaN+PrdxLY7U WnSHUWDucw8zh0MDfYRUrag4gg== -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:22 2025 by rpki-client