$ rpki-client -vvf rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft File: D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft (raw, json) Hash identifier: 3ccHmuARuG14aNtUQQB4O0XsUD+nqQphyEcAjlmHZeA= Subject key identifier: BF:85:E0:17:D5:1E:00:48:42:A2:A4:1E:04:50:95:16:04:9C:20:98 Authority key identifier: D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11 Certificate issuer: /CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211 Certificate serial: 3C81F7491E76B70338DF23E2C443C086DA06D163 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer Subject info access: rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft Manifest number: B8 Signing time: Sun 19 Oct 2025 19:06:09 +0000 Manifest this update: Sun 19 Oct 2025 19:01:09 +0000 Manifest next update: Mon 20 Oct 2025 22:10:09 +0000 Files and hashes: 1: D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl (hash: Djip1c53wyHAu0Zk/Bnk1OWDwv7g6CCfYHtrXylGsl0=) 2: 323830343a386262633a3a2f33322d313238203d3e20323733373535.roa (hash: 3uQTnhhz7H1wtPzniSKTigXw3gRffdvQaJmnZ+hmrrA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 22:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:81:f7:49:1e:76:b7:03:38:df:23:e2:c4:43:c0:86:da:06:d1:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211 Validity Not Before: Oct 19 19:01:09 2025 GMT Not After : Oct 20 22:10:09 2025 GMT Subject: CN=BF85E017D51E004842A2A41E04509516049C2098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c8:c2:a7:e5:f9:87:ae:75:91:36:2f:29:3f: 58:ba:ad:f5:a7:2c:82:bf:3c:7d:08:dc:7e:df:6f: 87:e1:f3:ee:01:82:fa:23:80:53:18:b4:42:39:75: 21:b1:0e:f7:fa:bb:ce:4c:76:10:61:39:44:7a:30: c0:c7:87:eb:8d:5b:ea:e2:dd:92:59:d5:e1:92:ac: 16:76:3e:3a:e0:51:48:41:36:9d:4b:12:7b:c6:d7: 84:6f:c4:ca:62:74:c4:bb:a5:fb:34:33:78:70:5a: 00:91:93:3b:36:eb:ce:26:1e:d5:19:67:c9:4c:1a: 0a:b5:66:39:c8:e0:9b:51:71:fe:66:5a:8a:57:6e: 53:98:20:c2:9a:a5:13:12:eb:d9:90:3f:bd:62:7a: 27:50:ee:90:08:96:5b:db:00:93:9b:b2:b5:e6:a4: 7b:35:8e:80:bd:de:49:fb:e6:75:3d:2f:93:37:fb: 9e:f8:ec:ed:0c:32:86:29:85:49:61:b1:6f:93:73: d7:66:1e:21:df:14:17:fe:45:8a:b6:15:64:e6:39: ec:dd:03:37:b4:79:de:e6:89:bc:90:ba:e7:24:6d: 29:1a:95:94:e0:d9:ac:bd:fc:e5:84:37:77:79:93: b6:d8:70:d4:c5:73:02:2f:b8:d0:0e:2a:c3:b7:72: 37:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:85:E0:17:D5:1E:00:48:42:A2:A4:1E:04:50:95:16:04:9C:20:98 X509v3 Authority Key Identifier: keyid:D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:52:04:f9:2a:a4:4e:da:71:2f:e1:e5:5b:03:71:82:d7:ec: 57:ef:1e:42:24:17:dc:ea:49:4e:7b:a0:23:1f:26:39:bf:c3: d5:ff:10:de:da:ba:47:1d:03:b9:d7:8d:d2:d3:22:79:7f:47: eb:59:2f:93:b0:a3:97:61:1d:db:06:d1:5e:e3:2b:d9:4e:26: 56:31:c6:a6:49:0c:42:c9:a8:6c:72:81:10:a8:33:02:e5:c5: 19:34:94:b7:d4:21:0d:f8:ea:ce:98:d3:cc:a0:41:26:1a:8c: 2b:f5:99:61:74:82:7d:41:07:64:d6:cf:4c:22:b6:b9:a1:69: 45:fa:85:a9:96:e3:a5:89:b4:36:05:74:84:3e:fd:03:c0:65: 29:5a:8d:51:76:f5:99:d5:71:ab:bd:2f:04:cd:ed:c0:1b:cd: 96:32:01:af:89:cb:76:ff:80:07:8c:f4:b1:1f:fc:9e:08:8c: b4:4f:0e:8d:ee:aa:be:fd:97:88:b7:3f:40:08:8a:a8:4a:43: ac:16:da:ef:65:3d:7c:25:62:46:77:c8:72:ea:12:af:0f:57: 10:93:55:d1:e1:6c:77:40:e8:c9:8f:d7:e9:2c:3b:54:00:31: c7:19:df:7b:85:37:90:2d:bd:8d:44:89:1d:dc:75:ac:72:f2: d8:ed:d4:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPIH3SR52twM43yPixEPAhtoG0WMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3RDNFQUM3RDYwQ0FCN0JFODQxQUY1MkZFNUJEM0JF NzhEQjIxMTAeFw0yNTEwMTkxOTAxMDlaFw0yNTEwMjAyMjEwMDlaMDMxMTAvBgNV BAMTKEJGODVFMDE3RDUxRTAwNDg0MkEyQTQxRTA0NTA5NTE2MDQ5QzIwOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3yMKn5fmHrnWRNi8pP1i6rfWn LIK/PH0I3H7fb4fh8+4BgvojgFMYtEI5dSGxDvf6u85MdhBhOUR6MMDHh+uNW+ri 3ZJZ1eGSrBZ2PjrgUUhBNp1LEnvG14RvxMpidMS7pfs0M3hwWgCRkzs2684mHtUZ Z8lMGgq1ZjnI4JtRcf5mWopXblOYIMKapRMS69mQP71ieidQ7pAIllvbAJObsrXm pHs1joC93kn75nU9L5M3+5747O0MMoYphUlhsW+Tc9dmHiHfFBf+RYq2FWTmOezd Aze0ed7mibyQuuckbSkalZTg2ay9/OWEN3d5k7bYcNTFcwIvuNAOKsO3cjdPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUv4XgF9UeAEhCoqQeBFCVFgScIJgwHwYDVR0j BBgwFoAU0H0+rH1gyre+hBr1L+W9O+eNshEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODZoa2llbWhEd2VQMUwxcGtQNzhMdUIyVVRUWWZFNnIzRVpQTGJ3M2ZR eDMvMC9EMDdEM0VBQzdENjBDQUI3QkU4NDFBRjUyRkU1QkQzQkU3OERCMjExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwN0QzRUFDN0Q2MENBQjdC RTg0MUFGNTJGRTVCRDNCRTc4REIyMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODZoa2llbWhEd2VQMUwxcGtQNzhMdUIyVVRUWWZFNnIzRVpQTGJ3M2ZReDMvMC9E MDdEM0VBQzdENjBDQUI3QkU4NDFBRjUyRkU1QkQzQkU3OERCMjExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAFIE+SqkTtpxL+HlWwNxgtfsV+8eQiQX3OpJTnugIx8mOb/D1f8Q3tq6Rx0D udeN0tMieX9H61kvk7Cjl2Ed2wbRXuMr2U4mVjHGpkkMQsmobHKBEKgzAuXFGTSU t9QhDfjqzpjTzKBBJhqMK/WZYXSCfUEHZNbPTCK2uaFpRfqFqZbjpYm0NgV0hD79 A8BlKVqNUXb1mdVxq70vBM3twBvNljIBr4nLdv+AB4z0sR/8ngiMtE8Oje6qvv2X iLc/QAiKqEpDrBba72U9fCViRnfIcuoSrw9XEJNV0eFsd0DoyY/X6Sw7VAAxxxnf e4U3kC29jUSJHdx1rHLy2O3UvQ== -----END CERTIFICATE-----Generated at Mon Oct 20 09:20:26 2025 by rpki-client