$ rpki-client -vvf rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft File: 2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft (raw, json) Hash identifier: rNsCnYZHnfMaweMHmKGhb4hk0psk6xtYhROcyo1fBuQ= Subject key identifier: BD:3B:99:2D:52:66:9E:01:BB:A7:41:57:D9:C8:AF:17:4C:25:F8:CC Authority key identifier: 22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0 Certificate issuer: /CN=2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0 Certificate serial: 5B371D49B870FBF5ED9D842AACF12A00F5607983 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer Subject info access: rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft Manifest number: 019A Signing time: Mon 20 Oct 2025 02:23:17 +0000 Manifest this update: Mon 20 Oct 2025 02:18:17 +0000 Manifest next update: Tue 21 Oct 2025 05:34:17 +0000 Files and hashes: 1: 323830343a333964633a3a2f33322d3438203d3e20323636303535.roa (hash: lVjQzNWaA6sgin+JcE6yIGp5pKVWTu71HlqWbMqLcRA=) 2: 34352e342e34342e302f32322d3234203d3e20323636303535.roa (hash: M1VFgYTrOUFDbP0quSBm77YUIyLqayRU7rDUKkoVyBM=) 3: 2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.crl (hash: J3iUkoVFexfw/s1OyoGXYANi+lHFlogcHP/L8G5R8VM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.crl rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 05:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:37:1d:49:b8:70:fb:f5:ed:9d:84:2a:ac:f1:2a:00:f5:60:79:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0 Validity Not Before: Oct 20 02:18:17 2025 GMT Not After : Oct 21 05:34:17 2025 GMT Subject: CN=BD3B992D52669E01BBA74157D9C8AF174C25F8CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e5:10:aa:be:f4:3b:e2:ac:18:9f:0e:0f:79: 54:27:80:57:25:14:0a:37:40:79:1f:dd:a6:a2:3f: 4a:e3:4d:91:1f:d1:67:ab:48:38:c1:e7:d5:a1:77: cb:a9:ab:cc:b7:fa:15:4a:10:20:12:55:0c:cc:b9: f0:39:79:f2:83:57:22:80:b8:0e:42:71:f0:f8:ce: 15:1c:87:a0:36:2c:e5:97:47:1f:09:be:e3:67:11: ba:ff:3e:cf:b2:d6:39:90:13:e2:7b:73:cf:7b:a1: 4b:0f:a8:64:86:9c:cf:33:a4:77:51:de:b4:bf:c2: dd:18:eb:22:6f:5e:ae:db:ea:f2:b1:83:48:e4:1d: 49:ba:3a:bb:77:56:71:95:60:81:4c:00:f9:5b:79: 2e:a5:22:a6:a4:95:a6:2e:ac:99:d9:e8:d1:32:77: 38:a6:72:5f:4f:56:b8:db:8e:f6:c4:ba:8e:d0:b4: 5d:12:7c:c5:32:c8:0a:cf:17:01:a7:31:84:17:67: 08:96:b7:71:41:61:a5:cf:84:a6:19:b5:67:6a:fb: d3:eb:5d:ec:bd:55:3f:0b:3f:1f:2d:25:90:d0:eb: 0c:47:48:80:4a:f9:5c:e5:24:d7:eb:5f:cb:81:c0: cb:a3:32:a1:75:68:36:78:b9:75:b2:dc:e6:e4:f8: 34:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3B:99:2D:52:66:9E:01:BB:A7:41:57:D9:C8:AF:17:4C:25:F8:CC X509v3 Authority Key Identifier: keyid:22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:3c:1d:21:88:f1:f9:ad:67:54:97:7c:65:14:20:b9:21:59: 5c:ea:b0:e5:87:f1:87:db:ad:29:da:46:68:15:d3:87:27:e4: d4:07:58:4f:8b:e3:68:e6:13:93:01:4a:0d:42:66:4d:93:4d: 4c:c0:11:fd:7e:f8:02:e2:9e:64:38:f7:2a:51:47:ac:9c:fb: 33:0a:04:74:27:a2:64:6c:70:1e:7b:c7:6d:75:39:ee:bc:5a: bf:ac:5d:58:96:e5:e1:96:21:b1:2e:fc:db:4f:b5:25:d4:f0: b0:96:47:15:68:41:b5:df:5b:c9:40:a7:f2:45:0c:51:ac:51: c1:75:74:9a:b0:ab:d6:e8:aa:ac:f2:ea:73:76:c2:f4:63:85: 91:59:36:3b:20:82:e6:53:31:81:93:8f:20:c9:86:21:63:82: 9e:98:10:ba:a2:65:6e:0d:80:32:1b:f7:22:31:43:fe:81:bd: 72:87:e8:1c:e6:62:0e:73:e6:5d:4f:74:63:27:f4:4f:7f:45: c9:38:df:49:48:5a:34:31:51:5a:68:77:7f:59:83:08:8f:fc: 35:0b:c0:e1:f4:89:8b:99:e2:ad:9a:61:76:3d:96:b1:2c:a4: 5d:ce:de:0e:0c:fc:3d:3e:65:45:2e:5c:bc:89:52:c5:a4:e5: e9:a6:9c:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWzcdSbhw+/XtnYQqrPEqAPVgeYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2NEQxN0ExREU2NThGMjVGQTBFQjc3NzNEQTdGNkI0 MUU1MkZEMDAeFw0yNTEwMjAwMjE4MTdaFw0yNTEwMjEwNTM0MTdaMDMxMTAvBgNV BAMTKEJEM0I5OTJENTI2NjlFMDFCQkE3NDE1N0Q5QzhBRjE3NEMyNUY4Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF5RCqvvQ74qwYnw4PeVQngFcl FAo3QHkf3aaiP0rjTZEf0WerSDjB59Whd8upq8y3+hVKECASVQzMufA5efKDVyKA uA5CcfD4zhUch6A2LOWXRx8JvuNnEbr/Ps+y1jmQE+J7c897oUsPqGSGnM8zpHdR 3rS/wt0Y6yJvXq7b6vKxg0jkHUm6Ort3VnGVYIFMAPlbeS6lIqaklaYurJnZ6NEy dzimcl9PVrjbjvbEuo7QtF0SfMUyyArPFwGnMYQXZwiWt3FBYaXPhKYZtWdq+9Pr Xey9VT8LPx8tJZDQ6wxHSIBK+VzlJNfrX8uBwMujMqF1aDZ4uXWy3Obk+DRHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvTuZLVJmngG7p0FX2civF0wl+MwwHwYDVR0j BBgwFoAUImTReh3mWPJfoOt3c9p/a0HlL9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFB3MjQ5M1pHM2ExN1BtZFdXYVNDdTFHNjJ3SjM2TGZ6VnpZS3haVVJi dEovMC8yMjY0RDE3QTFERTY1OEYyNUZBMEVCNzc3M0RBN0Y2QjQxRTUyRkQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyNjREMTdBMURFNjU4RjI1 RkEwRUI3NzczREE3RjZCNDFFNTJGRDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFB3MjQ5M1pHM2ExN1BtZFdXYVNDdTFHNjJ3SjM2TGZ6VnpZS3haVVJidEovMC8y MjY0RDE3QTFERTY1OEYyNUZBMEVCNzc3M0RBN0Y2QjQxRTUyRkQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKDwdIYjx+a1nVJd8ZRQguSFZXOqw5Yfxh9utKdpGaBXThyfk1AdYT4vjaOYT kwFKDUJmTZNNTMAR/X74AuKeZDj3KlFHrJz7MwoEdCeiZGxwHnvHbXU57rxav6xd WJbl4ZYhsS7820+1JdTwsJZHFWhBtd9byUCn8kUMUaxRwXV0mrCr1uiqrPLqc3bC 9GOFkVk2OyCC5lMxgZOPIMmGIWOCnpgQuqJlbg2AMhv3IjFD/oG9cofoHOZiDnPm XU90Yyf0T39FyTjfSUhaNDFRWmh3f1mDCI/8NQvA4fSJi5nirZphdj2WsSykXc7e Dgz8PT5lRS5cvIlSxaTl6aac0A== -----END CERTIFICATE-----Generated at Mon Oct 20 13:35:26 2025 by rpki-client