$ rpki-client -vvf rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft File: C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft (raw, json) Hash identifier: 83OtKA+fZyxlvo4bbMqziGN1ouBi1WQ35v8m8pcB0nE= Subject key identifier: 87:A4:88:BD:28:09:C7:AD:53:80:10:F5:DA:D9:8D:00:D3:96:AE:6D Authority key identifier: C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88 Certificate issuer: /CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88 Certificate serial: 292BA55E677E878F5F588A38CFBC52A0417B433F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer Subject info access: rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft Manifest number: 029D Signing time: Mon 20 Oct 2025 07:30:00 +0000 Manifest this update: Mon 20 Oct 2025 07:25:00 +0000 Manifest next update: Tue 21 Oct 2025 07:39:00 +0000 Files and hashes: 1: C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl (hash: JErNMLSib38JMQqsZ6JnsW7OUFnMo/XnPdlQjoHH9wc=) 2: 34352e3136312e3133362e302f32322d3234203d3e20323638353433.roa (hash: +UWLRPcrCNkkl3d7+jayjTCSeAxunhCr55Vu+UR33iY=) 3: 323830343a353264303a3a2f33322d3438203d3e20323638353433.roa (hash: Qrd0JpxRdK63UXPHTnI5YXQzpZ6Yil2JDfrC15kjcbA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2b:a5:5e:67:7e:87:8f:5f:58:8a:38:cf:bc:52:a0:41:7b:43:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88 Validity Not Before: Oct 20 07:25:00 2025 GMT Not After : Oct 21 07:39:00 2025 GMT Subject: CN=87A488BD2809C7AD538010F5DAD98D00D396AE6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:32:2c:00:dc:41:7d:bb:bd:e2:52:e8:e2:12: d9:dd:da:04:a3:a9:c9:22:46:50:a4:22:3f:68:22: 97:e1:5a:8a:6c:1b:fe:69:82:f4:a6:ed:ea:d1:0e: ed:7a:44:2b:87:9a:13:f9:ff:ae:31:bd:ec:6e:65: 06:bc:35:9d:b7:19:06:e1:24:5b:30:8b:96:ff:22: 75:fc:91:97:35:9b:e5:b8:2c:49:00:08:b9:db:8f: cd:99:7b:69:7a:f2:22:8f:77:37:c5:2c:b0:d9:06: 18:72:78:01:c5:e8:60:07:81:93:33:b4:ff:53:11: bb:e5:c4:e2:27:72:9d:ae:87:8c:0a:ae:c6:49:13: b5:47:78:92:87:0c:2e:2c:3a:70:09:89:36:38:f2: 79:54:16:45:18:fc:27:cb:94:d8:26:fb:ea:53:64: 26:0b:ac:1a:08:25:4e:4b:07:70:ae:69:7e:9c:14: 75:2b:57:aa:a2:4f:a8:22:7d:51:d9:b7:e2:86:c9: 24:bf:75:fe:00:91:f1:9c:21:91:e7:72:9f:25:c9: 6d:7e:bb:bc:dc:4f:3e:93:38:89:4b:ea:b1:40:8f: 5b:ad:d3:94:a9:f2:8a:7d:0f:68:db:2a:c9:88:82: 14:52:a3:95:1a:e0:ad:14:b2:9c:6e:f3:a6:0a:3f: f7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A4:88:BD:28:09:C7:AD:53:80:10:F5:DA:D9:8D:00:D3:96:AE:6D X509v3 Authority Key Identifier: keyid:C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:59:cd:7f:9d:c8:0e:f0:19:03:e0:52:26:85:e3:4f:66:b2: 24:6f:16:88:fd:e5:84:23:e7:63:48:9f:55:59:cb:59:bd:ef: 70:80:22:74:ee:04:a0:08:67:f7:22:5f:e0:09:fa:24:30:9e: 19:9a:e2:32:62:4c:ce:75:dd:85:d2:eb:c7:1e:a6:05:f4:4b: 6a:42:af:1b:d6:b2:6f:09:18:27:15:5c:16:e5:ee:17:1a:84: 59:9e:54:1d:02:33:d1:a2:77:3e:08:47:aa:d1:93:6f:61:fc: 88:ab:bb:25:ed:37:d6:ec:f1:4f:3b:ed:bd:05:ba:2c:62:25: 37:31:a6:a0:9c:ac:5f:ba:b4:fa:f1:92:c5:10:9f:94:7a:c3: 07:8d:28:87:c1:2a:03:19:07:d1:36:5a:79:66:d1:bb:5e:0a: 2a:ed:a4:ce:f4:92:eb:a7:d7:6e:6e:a6:2d:cd:d2:3b:02:cd: a5:e4:3b:04:af:d2:ec:4e:76:af:39:85:03:f4:a2:72:e0:6d: 0c:52:87:3a:ac:23:82:a5:bf:b1:3b:ac:ef:c3:23:28:c9:54: 83:fd:86:31:0d:fd:ea:10:b2:a5:39:d4:a8:b7:9e:9e:c3:55: 9d:d6:86:ea:85:9a:83:32:5f:dc:f0:eb:27:ab:e3:ae:80:58: 64:b2:82:28 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUKSulXmd+h49fWIo4z7xSoEF7Qz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQjdDMUE1MkU3NUMwRDRCMzk0RTA5RkM2M0VBQ0ZG RDY5MkQ4ODAeFw0yNTEwMjAwNzI1MDBaFw0yNTEwMjEwNzM5MDBaMDMxMTAvBgNV BAMTKDg3QTQ4OEJEMjgwOUM3QUQ1MzgwMTBGNURBRDk4RDAwRDM5NkFFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZMiwA3EF9u73iUujiEtnd2gSj qckiRlCkIj9oIpfhWopsG/5pgvSm7erRDu16RCuHmhP5/64xvexuZQa8NZ23GQbh JFswi5b/InX8kZc1m+W4LEkACLnbj82Ze2l68iKPdzfFLLDZBhhyeAHF6GAHgZMz tP9TEbvlxOIncp2uh4wKrsZJE7VHeJKHDC4sOnAJiTY48nlUFkUY/CfLlNgm++pT ZCYLrBoIJU5LB3CuaX6cFHUrV6qiT6gifVHZt+KGySS/df4AkfGcIZHncp8lyW1+ u7zcTz6TOIlL6rFAj1ut05Sp8op9D2jbKsmIghRSo5Ua4K0Uspxu86YKP/f/AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUh6SIvSgJx61TgBD12tmNANOWrm0wHwYDVR0j BBgwFoAUwst8GlLnXA1LOU4J/GPqz/1pLYgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby84V3RoTnNhcHRCc1BFRWU4YUxmeEhBeWFTeEFublQ5eXVXZWdIU2RITVZN LzAvQzJDQjdDMUE1MkU3NUMwRDRCMzk0RTA5RkM2M0VBQ0ZGRDY5MkQ4OC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DMkNCN0MxQTUyRTc1QzBENEIz OTRFMDlGQzYzRUFDRkZENjkyRDg4LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhX dGhOc2FwdEJzUEVFZThhTGZ4SEF5YVN4QW5uVDl5dVdlZ0hTZEhNVk0vMC9DMkNC N0MxQTUyRTc1QzBENEIzOTRFMDlGQzYzRUFDRkZENjkyRDg4Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA HVnNf53IDvAZA+BSJoXjT2ayJG8WiP3lhCPnY0ifVVnLWb3vcIAidO4EoAhn9yJf 4An6JDCeGZriMmJMznXdhdLrxx6mBfRLakKvG9aybwkYJxVcFuXuFxqEWZ5UHQIz 0aJ3PghHqtGTb2H8iKu7Je031uzxTzvtvQW6LGIlNzGmoJysX7q0+vGSxRCflHrD B40oh8EqAxkH0TZaeWbRu14KKu2kzvSS66fXbm6mLc3SOwLNpeQ7BK/S7E52rzmF A/SicuBtDFKHOqwjgqW/sTus78MjKMlUg/2GMQ396hCypTnUqLeensNVndaG6oWa gzJf3PDrJ6vjroBYZLKCKA== -----END CERTIFICATE-----Generated at Mon Oct 20 19:05:26 2025 by rpki-client