$ rpki-client -vvf rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft File: 1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft (raw, json) Hash identifier: bPMtDILr1j3NAL7iw42SnN7A32Co5rDt7rM02kdHAyU= Subject key identifier: 4E:D7:71:AD:86:46:3C:F3:47:31:D4:E5:07:6A:7D:14:DC:74:1C:4A Authority key identifier: 1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92 Certificate issuer: /CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92 Certificate serial: 40612B51100CC7CF79F7E50F102332180F182FD3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft Manifest number: 02E2 Signing time: Mon 20 Oct 2025 10:15:20 +0000 Manifest this update: Mon 20 Oct 2025 10:10:20 +0000 Manifest next update: Tue 21 Oct 2025 13:24:20 +0000 Files and hashes: 1: 1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl (hash: UJ5zGVQuY6f3XnbpiZH8dxAS74nRrZQoiosEQz807VY=) 2: 3230302e3231392e3134392e302f32342d3234203d3e20323634393731.roa (hash: CtlsUAFWjImlwZWNz6P/jVFD3JBP5hLeswnSXTvh7E4=) 3: 323830313a38303a313932303a3a2f34382d3438203d3e20323634393731.roa (hash: V4pr7EMRf7I7ElOQ2jaIag3WW0+6k23seAgpv3kqk1E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:61:2b:51:10:0c:c7:cf:79:f7:e5:0f:10:23:32:18:0f:18:2f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92 Validity Not Before: Oct 20 10:10:20 2025 GMT Not After : Oct 21 13:24:20 2025 GMT Subject: CN=4ED771AD86463CF34731D4E5076A7D14DC741C4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:25:88:81:57:2b:28:51:7a:4a:af:b9:14: 67:b4:7a:80:bf:c6:8f:84:18:4e:da:fe:46:8f:0e: 28:32:db:b0:17:3a:ce:04:ed:c2:50:54:04:a2:8f: 92:59:eb:2e:5d:f0:9b:f6:d4:ed:26:b6:ac:de:0d: 48:4e:48:ac:91:16:ed:cc:0a:04:2e:42:f6:a2:3b: 58:10:3d:eb:fa:1f:ac:63:65:af:d4:00:6a:83:b7: e0:66:52:df:60:ca:bb:8b:89:63:d8:f0:52:ef:bf: e1:83:d6:2b:35:ef:00:08:11:61:9b:3a:51:fd:d9: 10:f4:55:c3:d0:34:fd:19:45:21:90:21:cd:f0:51: 85:50:a2:ea:f1:05:08:de:64:4d:c8:96:70:9a:3f: 7a:fb:44:02:ff:e9:96:de:da:e1:b1:4e:20:21:64: 97:3a:fb:eb:a5:9c:2d:0b:1c:ca:46:df:60:85:46: e2:a0:25:92:f2:9a:d1:53:71:ff:a2:68:b2:20:69: 60:71:50:8f:8f:48:eb:3d:6b:18:21:3e:d8:ab:4f: 03:41:25:47:43:c6:fa:72:c5:34:2f:b1:4f:2d:81: c2:c3:c5:8f:c9:88:33:44:41:53:19:21:9a:7e:93: 0e:c0:dd:1d:5c:a1:56:7e:1d:6f:80:0a:f8:83:1d: 54:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D7:71:AD:86:46:3C:F3:47:31:D4:E5:07:6A:7D:14:DC:74:1C:4A X509v3 Authority Key Identifier: keyid:1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f2:54:03:24:d9:26:b8:06:1f:16:38:8e:f6:eb:cf:33:e9: e7:f1:a6:91:78:dc:01:d4:3d:df:7c:33:dd:bd:6f:52:a0:4d: de:8f:b4:af:db:7b:c3:62:e2:fc:b3:fe:06:f0:4b:01:a7:df: 82:72:f3:e1:ec:92:bf:74:9e:ae:0f:7f:e0:a2:ff:25:20:18: d5:19:f5:76:04:c9:da:cc:26:91:69:ad:ab:96:60:c9:19:7d: 71:08:08:e7:40:77:71:f2:b1:3a:1e:e8:99:19:0b:29:9f:f3: 6a:0b:08:c1:0a:a1:5c:26:81:5d:f7:61:e2:21:9d:72:d8:a8: e9:59:87:30:cf:e1:47:dd:66:e4:a6:30:5f:bd:8d:73:d2:fe: 73:06:cd:1d:04:d4:31:06:1e:9a:25:c3:d2:4d:30:01:46:6d: 75:22:81:67:09:0f:c5:39:fa:e5:60:97:64:ec:69:09:9b:da: cc:bf:52:5b:9c:a3:1b:a2:b9:5c:0e:e1:c2:08:99:23:24:45: 29:5c:97:32:f3:9b:60:cb:06:84:fb:3b:f5:e9:a0:c2:0f:31: ab:f8:fd:3c:6d:df:ad:e6:60:07:5c:61:fa:ce:77:76:3a:ed: 27:4a:09:03:31:73:4b:fc:59:2e:ba:73:64:79:59:52:fe:64: 69:bd:aa:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQGErURAMx8959+UPECMyGA8YL9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZENTNCRUM5NzY2QzBCNEY4MTE1NTFFNzM4NUNFMkU0 RDQwRkU5MjAeFw0yNTEwMjAxMDEwMjBaFw0yNTEwMjExMzI0MjBaMDMxMTAvBgNV BAMTKDRFRDc3MUFEODY0NjNDRjM0NzMxRDRFNTA3NkE3RDE0REM3NDFDNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1eiWIgVcrKFF6Sq+5FGe0eoC/ xo+EGE7a/kaPDigy27AXOs4E7cJQVASij5JZ6y5d8Jv21O0mtqzeDUhOSKyRFu3M CgQuQvaiO1gQPev6H6xjZa/UAGqDt+BmUt9gyruLiWPY8FLvv+GD1is17wAIEWGb OlH92RD0VcPQNP0ZRSGQIc3wUYVQourxBQjeZE3IlnCaP3r7RAL/6Zbe2uGxTiAh ZJc6++ulnC0LHMpG32CFRuKgJZLymtFTcf+iaLIgaWBxUI+PSOs9axghPtirTwNB JUdDxvpyxTQvsU8tgcLDxY/JiDNEQVMZIZp+kw7A3R1coVZ+HW+ACviDHVTNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTtdxrYZGPPNHMdTlB2p9FNx0HEowHwYDVR0j BBgwFoAUH9U77JdmwLT4EVUec4XOLk1A/pIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFpQmFMUGNQanJ6OU5IVmhtRXR5VWE4TW16bkY0MVdGUnhkV3U0U1lN WUMvMC8xRkQ1M0JFQzk3NjZDMEI0RjgxMTU1MUU3Mzg1Q0UyRTRENDBGRTkyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGRDUzQkVDOTc2NkMwQjRG ODExNTUxRTczODVDRTJFNEQ0MEZFOTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGFpQmFMUGNQanJ6OU5IVmhtRXR5VWE4TW16bkY0MVdGUnhkV3U0U1lNWUMvMC8x RkQ1M0JFQzk3NjZDMEI0RjgxMTU1MUU3Mzg1Q0UyRTRENDBGRTkyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUvJUAyTZJrgGHxY4jvbrzzPp5/GmkXjcAdQ933wz3b1vUqBN3o+0r9t7w2Li /LP+BvBLAaffgnLz4eySv3Serg9/4KL/JSAY1Rn1dgTJ2swmkWmtq5ZgyRl9cQgI 50B3cfKxOh7omRkLKZ/zagsIwQqhXCaBXfdh4iGdctio6VmHMM/hR91m5KYwX72N c9L+cwbNHQTUMQYemiXD0k0wAUZtdSKBZwkPxTn65WCXZOxpCZvazL9SW5yjG6K5 XA7hwgiZIyRFKVyXMvObYMsGhPs79emgwg8xq/j9PG3freZgB1xh+s53djrtJ0oJ AzFzS/xZLrpzZHlZUv5kab2qsw== -----END CERTIFICATE-----Generated at Mon Oct 20 23:36:41 2025 by rpki-client