$ rpki-client -vvf rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft File: 7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft (raw, json) Hash identifier: laSqIT7tpVkM97rKJ/N6Lukj+CJPwv5aAaY2MOvurd8= Subject key identifier: 19:9F:D2:38:A4:4E:D7:90:26:01:31:58:9C:80:E1:C4:ED:16:21:26 Authority key identifier: 76:52:D9:D4:F9:A6:42:C7:B0:47:74:C9:0C:F6:F3:FB:21:B7:F4:2B Certificate issuer: /CN=7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B Certificate serial: 482209845EC6173395A3B56713839C519D7DC976 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer Subject info access: rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft Manifest number: 02E8 Signing time: Mon 20 Oct 2025 09:45:39 +0000 Manifest this update: Mon 20 Oct 2025 09:40:39 +0000 Manifest next update: Tue 21 Oct 2025 12:32:39 +0000 Files and hashes: 1: 323830343a326635303a3a2f33322d3334203d3e20323634383833.roa (hash: UhuA4JaTHqXuDos7SEPbAnepHfJlw4HrEcewbAoILag=) 2: 3136382e3232372e34302e302f32322d3234203d3e20323634383833.roa (hash: PMrjcyP1eWdz1t4C8jQeZvMc6KD9XmEaTz6pAa2qGc0=) 3: 7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl (hash: /2fxukvXfrSLIM5NXN3YtcYVZZq1Q9I+z7azW/xPabQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:22:09:84:5e:c6:17:33:95:a3:b5:67:13:83:9c:51:9d:7d:c9:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B Validity Not Before: Oct 20 09:40:39 2025 GMT Not After : Oct 21 12:32:39 2025 GMT Subject: CN=199FD238A44ED790260131589C80E1C4ED162126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c6:50:aa:30:87:84:ab:fb:6b:55:37:17:64: 0c:c1:bc:b8:eb:b3:9c:ff:34:a1:e7:3b:cc:47:49: 3d:90:1f:ee:39:82:05:18:0f:62:74:c4:6f:a4:66: af:7e:87:3d:07:8b:3b:f9:bd:3c:d6:5b:28:f8:71: e4:c5:43:33:2d:d0:c7:cc:db:08:be:8c:be:55:99: 14:40:23:b3:ff:f1:73:ab:3f:20:3f:c9:37:33:22: a7:94:e5:40:66:ae:e5:04:74:e4:11:97:35:f3:30: ab:0a:bd:04:0e:49:f2:fb:d9:b3:78:6b:67:87:42: 1e:14:e1:cd:51:e3:f7:d0:dd:51:52:33:ce:b3:5e: 5f:0a:70:65:28:5b:5c:d3:0d:bb:3d:b7:a2:4a:6b: 6b:68:29:e0:c2:57:d0:1e:c8:48:b9:ed:03:a0:84: 3b:1b:73:46:74:14:fa:89:24:f2:0f:26:5d:65:e4: 41:b3:b4:b0:58:7a:7d:ee:0a:61:51:3a:67:2f:f5: e6:f5:96:b8:98:49:5e:c7:4a:34:74:a8:76:d6:20: bf:b0:01:a9:ce:20:71:e5:d7:97:03:a2:f8:29:5f: eb:d4:25:78:8f:9f:55:b0:8b:62:5e:9c:80:a7:03: 98:a4:db:c8:92:d6:e1:23:41:8b:c5:02:90:e7:c1: e7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9F:D2:38:A4:4E:D7:90:26:01:31:58:9C:80:E1:C4:ED:16:21:26 X509v3 Authority Key Identifier: keyid:76:52:D9:D4:F9:A6:42:C7:B0:47:74:C9:0C:F6:F3:FB:21:B7:F4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:80:31:df:69:03:8e:9c:c2:d0:88:33:88:6c:b3:4c:2d:ca: 88:eb:03:06:ab:f1:71:85:29:fd:9e:e9:22:ed:f5:3a:02:d5: 87:1a:8e:12:86:8e:a7:aa:71:bf:1d:e6:46:c5:6a:6a:ec:50: c2:af:c9:62:39:08:1e:3c:25:25:20:8c:9d:d0:4c:f5:03:c1: ae:23:5f:58:42:d4:3b:3f:66:ae:4c:f9:67:0f:9d:46:8d:49: 52:34:f9:fc:10:bd:ff:73:66:be:0c:d2:26:05:84:6c:e8:47: 2a:a5:68:84:e3:a5:90:6d:c6:16:61:41:12:c3:3e:5e:64:89: 88:d9:99:db:cf:a2:94:96:f1:b5:3b:7c:ef:21:bc:d6:71:18: 28:80:19:78:63:62:6b:6d:4c:3d:67:81:9c:80:3e:d1:0b:b6: af:f4:4d:c0:93:73:b5:83:d0:77:a8:90:93:21:79:ce:19:05: 05:8f:b1:3e:ec:00:40:51:9f:c9:30:dc:c4:1f:9d:f3:36:be: 50:23:4d:85:ee:d5:a8:eb:4c:9f:bb:27:e1:62:1d:60:e7:5a: bc:99:17:29:c0:39:95:0d:19:c9:7e:44:22:15:96:1b:59:f0: fe:b2:cc:59:42:5b:3e:1e:23:f6:2b:73:03:cd:70:77:02:e5: 27:7f:19:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSCIJhF7GFzOVo7VnE4OcUZ19yXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1MkQ5RDRGOUE2NDJDN0IwNDc3NEM5MENGNkYzRkIy MUI3RjQyQjAeFw0yNTEwMjAwOTQwMzlaFw0yNTEwMjExMjMyMzlaMDMxMTAvBgNV BAMTKDE5OUZEMjM4QTQ0RUQ3OTAyNjAxMzE1ODlDODBFMUM0RUQxNjIxMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxlCqMIeEq/trVTcXZAzBvLjr s5z/NKHnO8xHST2QH+45ggUYD2J0xG+kZq9+hz0Hizv5vTzWWyj4ceTFQzMt0MfM 2wi+jL5VmRRAI7P/8XOrPyA/yTczIqeU5UBmruUEdOQRlzXzMKsKvQQOSfL72bN4 a2eHQh4U4c1R4/fQ3VFSM86zXl8KcGUoW1zTDbs9t6JKa2toKeDCV9AeyEi57QOg hDsbc0Z0FPqJJPIPJl1l5EGztLBYen3uCmFROmcv9eb1lriYSV7HSjR0qHbWIL+w AanOIHHl15cDovgpX+vUJXiPn1Wwi2JenICnA5ik28iS1uEjQYvFApDnwefXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGZ/SOKRO15AmATFYnIDhxO0WISYwHwYDVR0j BBgwFoAUdlLZ1PmmQsewR3TJDPbz+yG39CswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFVWWmk1SFRHZnhUbTdYNFlXN2ZxRlczZFU1b3gzTXpDa0Vjelh4UHB6 WVEvMS83NjUyRDlENEY5QTY0MkM3QjA0Nzc0QzkwQ0Y2RjNGQjIxQjdGNDJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2NTJEOUQ0RjlBNjQyQzdC MDQ3NzRDOTBDRjZGM0ZCMjFCN0Y0MkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFVWWmk1SFRHZnhUbTdYNFlXN2ZxRlczZFU1b3gzTXpDa0Vjelh4UHB6WVEvMS83 NjUyRDlENEY5QTY0MkM3QjA0Nzc0QzkwQ0Y2RjNGQjIxQjdGNDJCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASIAx32kDjpzC0IgziGyzTC3KiOsDBqvxcYUp/Z7pIu31OgLVhxqOEoaOp6px vx3mRsVqauxQwq/JYjkIHjwlJSCMndBM9QPBriNfWELUOz9mrkz5Zw+dRo1JUjT5 /BC9/3NmvgzSJgWEbOhHKqVohOOlkG3GFmFBEsM+XmSJiNmZ28+ilJbxtTt87yG8 1nEYKIAZeGNia21MPWeBnIA+0Qu2r/RNwJNztYPQd6iQkyF5zhkFBY+xPuwAQFGf yTDcxB+d8za+UCNNhe7VqOtMn7sn4WIdYOdavJkXKcA5lQ0ZyX5EIhWWG1nw/rLM WUJbPh4j9itzA81wdwLlJ38ZeQ== -----END CERTIFICATE-----Generated at Tue Oct 21 03:57:14 2025 by rpki-client