$ rpki-client -vvf rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft File: 38E14B86FE172DD4D8E534146604EB873463394D.mft (raw, json) Hash identifier: o12HNtND0B6q9pBJSxF9WHddB2MGpxbJle4kTWoOhAM= Subject key identifier: 3D:B9:2C:C7:7A:7E:C7:B1:5D:91:62:07:D0:31:60:BD:BA:99:70:C4 Authority key identifier: 38:E1:4B:86:FE:17:2D:D4:D8:E5:34:14:66:04:EB:87:34:63:39:4D Certificate issuer: /CN=38E14B86FE172DD4D8E534146604EB873463394D Certificate serial: 4D58E7FF3EF027E81CDE96D835E0116363BD3FC6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38E14B86FE172DD4D8E534146604EB873463394D.cer Subject info access: rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft Manifest number: 019A Signing time: Mon 20 Oct 2025 14:53:53 +0000 Manifest this update: Mon 20 Oct 2025 14:48:53 +0000 Manifest next update: Tue 21 Oct 2025 17:44:53 +0000 Files and hashes: 1: 323830343a376236303a3a2f33322d3438203d3e20323731343238.roa (hash: KS3CIPQBP8uBSzv8b+te50bhqKxNppim+ZvFE5maTMk=) 2: 38E14B86FE172DD4D8E534146604EB873463394D.crl (hash: BcQAiLm63TxNF4SZrIsgqhOhPG1LZGxmT6OPLunBDA0=) 3: 3230302e33362e3139322e302f32322d3234203d3e20323731343238.roa (hash: FGbym0C7oy+3WkWLxGeUkkMs9tZRG07fiF6hYHOGFP8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.crl rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38E14B86FE172DD4D8E534146604EB873463394D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 15:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:58:e7:ff:3e:f0:27:e8:1c:de:96:d8:35:e0:11:63:63:bd:3f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E14B86FE172DD4D8E534146604EB873463394D Validity Not Before: Oct 20 14:48:53 2025 GMT Not After : Oct 21 17:44:53 2025 GMT Subject: CN=3DB92CC77A7EC7B15D916207D03160BDBA9970C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c5:e3:c9:ae:a3:ec:27:e9:6d:90:2e:3f:70: 1f:a3:f5:0c:79:18:15:97:f1:72:9f:c1:e8:98:59: 54:be:0a:e7:40:96:17:fe:f4:89:47:21:54:01:e5: bb:d8:86:a4:23:8c:70:9b:e4:3a:1a:2d:0f:32:33: 25:97:b7:01:c4:af:66:22:65:80:82:57:7a:ad:55: a5:7c:4e:c9:1e:e2:3c:2b:40:3e:4e:e2:a7:0b:ba: 55:2c:52:dd:1e:10:05:8c:71:46:f2:4d:ff:e4:d4: 59:57:f0:5b:13:2d:69:24:a3:5f:86:09:c3:0a:03: 86:46:b9:7e:45:c3:47:66:63:a7:8b:8c:9d:8d:88: 15:e4:94:86:57:c4:72:b3:36:b8:aa:2a:d5:34:39: 46:c4:af:c6:63:19:ea:b7:cb:05:11:66:c7:4c:85: ce:4a:eb:a1:aa:9b:55:03:c0:91:da:5d:19:7d:d1: ff:90:8a:d2:c2:4c:15:07:b8:d2:10:3a:e4:c0:6b: 03:07:30:51:3d:83:26:81:e1:77:32:06:14:fe:80: 81:f8:ac:9d:36:55:a0:9e:f0:71:89:62:db:49:07: 78:f0:51:9e:14:3b:07:bf:94:c9:3f:62:95:92:42: 16:0f:13:dc:cd:77:67:d8:13:91:2e:e9:1b:2a:b5: 40:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B9:2C:C7:7A:7E:C7:B1:5D:91:62:07:D0:31:60:BD:BA:99:70:C4 X509v3 Authority Key Identifier: keyid:38:E1:4B:86:FE:17:2D:D4:D8:E5:34:14:66:04:EB:87:34:63:39:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38E14B86FE172DD4D8E534146604EB873463394D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:9b:83:f3:02:4c:bf:00:1b:ce:e9:1d:19:1f:05:a1:4f:e6: 64:82:49:f3:73:9f:d3:4a:cf:06:c0:13:0f:4c:46:e3:33:48: 5a:a7:78:53:27:57:a3:38:8a:73:11:6e:d4:f1:f5:17:a6:de: cb:59:44:0f:6e:30:6a:95:98:30:66:5b:a3:d1:84:53:bc:7c: 09:89:2c:df:5e:ce:10:e2:ba:8e:ea:8b:36:98:9a:fc:da:79: 42:d6:fb:33:31:fe:13:25:1d:9a:6e:54:50:10:8f:bf:0e:67: 5b:a2:6b:02:32:25:7f:cd:c2:6a:17:07:37:6e:bc:91:89:35: 0c:9f:fa:54:97:45:61:29:01:52:20:93:46:85:11:99:db:40: bb:a7:64:14:dd:8c:4a:4d:4e:2c:b8:7d:a9:2a:bc:c7:de:5f: 4d:d1:b4:f6:f6:bd:30:55:af:47:c0:40:58:a1:b8:82:35:d0: 1f:97:bb:1f:7b:45:5e:7e:be:02:eb:86:de:31:ae:fa:7d:62: 54:60:49:82:e4:06:8d:36:dc:d8:62:5c:4a:da:1c:a5:87:10: e4:30:bd:88:c3:19:69:87:b2:da:e4:1a:94:c0:fd:89:0e:2f: 0c:89:4e:b7:b8:04:44:cd:b6:52:c6:bb:a2:bb:e7:54:55:9a: 35:18:54:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTVjn/z7wJ+gc3pbYNeARY2O9P8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFMTRCODZGRTE3MkRENEQ4RTUzNDE0NjYwNEVCODcz NDYzMzk0RDAeFw0yNTEwMjAxNDQ4NTNaFw0yNTEwMjExNzQ0NTNaMDMxMTAvBgNV BAMTKDNEQjkyQ0M3N0E3RUM3QjE1RDkxNjIwN0QwMzE2MEJEQkE5OTcwQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrxePJrqPsJ+ltkC4/cB+j9Qx5 GBWX8XKfweiYWVS+CudAlhf+9IlHIVQB5bvYhqQjjHCb5DoaLQ8yMyWXtwHEr2Yi ZYCCV3qtVaV8Tske4jwrQD5O4qcLulUsUt0eEAWMcUbyTf/k1FlX8FsTLWkko1+G CcMKA4ZGuX5Fw0dmY6eLjJ2NiBXklIZXxHKzNriqKtU0OUbEr8ZjGeq3ywURZsdM hc5K66Gqm1UDwJHaXRl90f+QitLCTBUHuNIQOuTAawMHMFE9gyaB4XcyBhT+gIH4 rJ02VaCe8HGJYttJB3jwUZ4UOwe/lMk/YpWSQhYPE9zNd2fYE5Eu6RsqtUDlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPbksx3p+x7FdkWIH0DFgvbqZcMQwHwYDVR0j BBgwFoAUOOFLhv4XLdTY5TQUZgTrhzRjOU0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFdDRTVIdkFxWWUyQ3VvWXRFVXgzY0dZSDNqTExDbTE5VXN2Vms3QTlx Y1kvMC8zOEUxNEI4NkZFMTcyREQ0RDhFNTM0MTQ2NjA0RUI4NzM0NjMzOTRELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RTE0Qjg2RkUxNzJERDRE OEU1MzQxNDY2MDRFQjg3MzQ2MzM5NEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFdDRTVIdkFxWWUyQ3VvWXRFVXgzY0dZSDNqTExDbTE5VXN2Vms3QTlxY1kvMC8z OEUxNEI4NkZFMTcyREQ0RDhFNTM0MTQ2NjA0RUI4NzM0NjMzOTRELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAApuD8wJMvwAbzukdGR8FoU/mZIJJ83Of00rPBsATD0xG4zNIWqd4UydXoziK cxFu1PH1F6bey1lED24wapWYMGZbo9GEU7x8CYks317OEOK6juqLNpia/Np5Qtb7 MzH+EyUdmm5UUBCPvw5nW6JrAjIlf83CahcHN268kYk1DJ/6VJdFYSkBUiCTRoUR mdtAu6dkFN2MSk1OLLh9qSq8x95fTdG09va9MFWvR8BAWKG4gjXQH5e7H3tFXn6+ AuuG3jGu+n1iVGBJguQGjTbc2GJcStocpYcQ5DC9iMMZaYey2uQalMD9iQ4vDIlO t7gERM22Usa7orvnVFWaNRhUiw== -----END CERTIFICATE-----Generated at Mon Oct 20 16:35:42 2025 by rpki-client