$ rpki-client -vvf rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.mft File: 0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.mft (raw, json) Hash identifier: kmMKQWbBQvgyjWMFNwDnDk3ToIUB5y8bZOhohXoHc9k= Subject key identifier: 6B:D0:B7:CD:B7:B7:9B:68:71:B5:D1:8F:9F:CD:E4:AB:6A:B9:96:29 Authority key identifier: 03:90:EE:C2:B0:EA:80:04:D4:BC:F7:E7:34:A7:D5:97:D3:0C:52:AF Certificate issuer: /CN=0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF Certificate serial: 7E5E78354C981235299D2AE763FC10D972D65F73 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.cer Subject info access: rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.mft Manifest number: 01A4 Signing time: Mon 20 Oct 2025 08:54:58 +0000 Manifest this update: Mon 20 Oct 2025 08:49:58 +0000 Manifest next update: Tue 21 Oct 2025 11:48:58 +0000 Files and hashes: 1: 3138392e3132372e3135302e302f32342d3234203d3e20323730373035.roa (hash: cJyjuSJvWpOgqRiNPMmpUnTD4GWTFOACN48W78BpNKY=) 2: 3138392e3132372e3134382e302f32332d3234203d3e20323730373035.roa (hash: HEdd0Kno62unwjnnOpJqQkdLQvYtUkhA/Y6Id8i29+A=) 3: 0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.crl (hash: dJytBbZlV/IswdnYDD8xdxldRgJerFtH6HgPlxWtDwE=) 4: 323830343a373031383a3a2f33322d3438203d3e20323730373035.roa (hash: HASGDeLgNzVETEVXw/fM5Lje0k/ttvuMCt0df+QhHJw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.crl rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5e:78:35:4c:98:12:35:29:9d:2a:e7:63:fc:10:d9:72:d6:5f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF Validity Not Before: Oct 20 08:49:58 2025 GMT Not After : Oct 21 11:48:58 2025 GMT Subject: CN=6BD0B7CDB7B79B6871B5D18F9FCDE4AB6AB99629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:44:38:14:c2:53:13:4d:a9:6a:96:41:56: 37:31:69:4b:61:cf:bf:10:af:ad:70:54:49:02:4d: 60:e9:03:ab:55:00:ea:12:8f:1c:7c:f5:27:f5:0e: 6e:78:f9:46:3e:0f:e1:bc:70:71:85:47:78:a0:59: 0e:a7:70:8b:bf:84:35:e7:ae:fa:cb:ec:13:e1:72: be:41:37:14:c0:fa:08:05:63:2b:a7:1c:c2:0b:c4: 5c:bc:bd:07:d8:03:e4:de:be:bc:5f:73:aa:2a:f6: d5:0d:ae:70:45:5e:04:09:9f:c1:a9:65:fc:cd:08: 3a:db:da:4a:12:7f:8a:c6:9e:5d:68:3f:6d:de:5c: b5:51:e5:bf:ef:a6:6a:c7:d1:9c:63:93:1a:88:ca: ce:70:11:1f:65:9c:00:a6:af:66:ae:c0:48:b9:0c: d4:cc:fd:ef:5c:d1:cb:d8:20:98:64:81:56:d9:af: 69:fb:3e:de:02:9c:1d:f4:4c:cf:ef:28:74:0a:90: c4:96:86:f9:7f:8f:fc:eb:24:8e:1b:6a:a3:ae:eb: f3:8e:28:e7:1e:82:86:de:e6:3f:f1:8e:3d:b9:71: 43:fe:5b:6e:12:75:42:a0:2d:b7:b6:f7:e9:1a:73: 49:47:24:0f:08:8b:98:bb:d3:52:44:a7:68:e3:eb: d5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D0:B7:CD:B7:B7:9B:68:71:B5:D1:8F:9F:CD:E4:AB:6A:B9:96:29 X509v3 Authority Key Identifier: keyid:03:90:EE:C2:B0:EA:80:04:D4:BC:F7:E7:34:A7:D5:97:D3:0C:52:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:8a:15:2b:aa:ba:6c:e2:7b:df:15:2c:77:05:5d:a2:2a:e7: 84:9d:9d:93:e7:93:0a:da:e6:a0:80:28:f0:8b:4c:32:f5:c1: 94:8a:e3:c5:5d:4e:2e:14:59:99:ca:ec:7a:4e:2a:d8:7d:1a: 8f:2c:71:56:75:a1:9d:d5:b7:92:51:6e:d0:9e:e1:ec:3b:30: 9e:80:37:1c:98:7a:eb:62:9d:48:3e:90:bc:89:ee:bc:f4:87: 4e:7b:d6:02:ae:c3:c0:bf:e7:c7:8d:bc:d6:73:03:ff:8c:f8: 5e:ee:80:07:f3:36:c1:9c:15:7e:a4:1f:d5:2a:e9:a2:49:c7: 6a:c9:2c:83:f3:b2:b1:02:ab:5a:bd:c8:dc:36:1f:d9:fb:37: 4c:25:45:df:d2:22:3a:f6:20:f0:b5:7f:3d:c4:b4:83:81:4d: 6b:42:52:7a:c8:2f:86:14:de:26:a2:24:4e:ca:c8:27:38:68: f8:f9:19:88:a8:b8:97:bd:95:12:02:76:bb:26:c9:30:d8:4a: 66:bd:ed:6e:df:e1:5b:e0:98:23:66:cf:a1:52:d0:3f:a0:09: ea:21:84:ed:14:fb:ad:20:c3:f3:3e:d3:70:17:c8:2f:73:7b: a5:f2:2c:5e:c5:cf:d7:f2:ea:a3:cd:d1:e4:69:39:13:32:ec: aa:35:d1:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfl54NUyYEjUpnSrnY/wQ2XLWX3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM5MEVFQzJCMEVBODAwNEQ0QkNGN0U3MzRBN0Q1OTdE MzBDNTJBRjAeFw0yNTEwMjAwODQ5NThaFw0yNTEwMjExMTQ4NThaMDMxMTAvBgNV BAMTKDZCRDBCN0NEQjdCNzlCNjg3MUI1RDE4RjlGQ0RFNEFCNkFCOTk2MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXUEQ4FMJTE02papZBVjcxaUth z78Qr61wVEkCTWDpA6tVAOoSjxx89Sf1Dm54+UY+D+G8cHGFR3igWQ6ncIu/hDXn rvrL7BPhcr5BNxTA+ggFYyunHMILxFy8vQfYA+Tevrxfc6oq9tUNrnBFXgQJn8Gp ZfzNCDrb2koSf4rGnl1oP23eXLVR5b/vpmrH0ZxjkxqIys5wER9lnACmr2auwEi5 DNTM/e9c0cvYIJhkgVbZr2n7Pt4CnB30TM/vKHQKkMSWhvl/j/zrJI4baqOu6/OO KOcegobe5j/xjj25cUP+W24SdUKgLbe29+kac0lHJA8Ii5i701JEp2jj69XJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUa9C3zbe3m2hxtdGPn83kq2q5likwHwYDVR0j BBgwFoAUA5DuwrDqgATUvPfnNKfVl9MMUq8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFNpcUtZTDFLZnBVcnhRRTIzdU5rdVVHaGY3ajNxQ2ZyMmp5NG9GWHNU ckIvMS8wMzkwRUVDMkIwRUE4MDA0RDRCQ0Y3RTczNEE3RDU5N0QzMEM1MkFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzOTBFRUMyQjBFQTgwMDRE NEJDRjdFNzM0QTdENTk3RDMwQzUyQUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFNpcUtZTDFLZnBVcnhRRTIzdU5rdVVHaGY3ajNxQ2ZyMmp5NG9GWHNUckIvMS8w MzkwRUVDMkIwRUE4MDA0RDRCQ0Y3RTczNEE3RDU5N0QzMEM1MkFGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjooVK6q6bOJ73xUsdwVdoirnhJ2dk+eTCtrmoIAo8ItMMvXBlIrjxV1OLhRZ mcrsek4q2H0ajyxxVnWhndW3klFu0J7h7DswnoA3HJh662KdSD6QvInuvPSHTnvW Aq7DwL/nx4281nMD/4z4Xu6AB/M2wZwVfqQf1SrpoknHasksg/OysQKrWr3I3DYf 2fs3TCVF39IiOvYg8LV/PcS0g4FNa0JSesgvhhTeJqIkTsrIJzho+PkZiKi4l72V EgJ2uybJMNhKZr3tbt/hW+CYI2bPoVLQP6AJ6iGE7RT7rSDD8z7TcBfIL3N7pfIs XsXP1/Lqo83R5Gk5EzLsqjXRCg== -----END CERTIFICATE-----Generated at Mon Oct 20 16:17:02 2025 by rpki-client