$ rpki-client -vvf rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft File: C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft (raw, json) Hash identifier: VsfDDgb9BWtUQ392+BmNA7Kon1kjemnAhGIQSigPj8M= Subject key identifier: 84:58:F0:F4:87:8A:7F:4A:E0:24:7E:77:DF:87:93:29:7C:CE:3B:E3 Authority key identifier: C7:D8:F4:A5:EC:FE:5B:25:53:F6:AA:F2:A1:04:DD:C9:7F:20:54:98 Certificate issuer: /CN=C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498 Certificate serial: 29A95309AB2561DC7FB8E248C2B90E7E4FBE0507 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer Subject info access: rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft Manifest number: 01E3 Signing time: Mon 20 Oct 2025 05:47:44 +0000 Manifest this update: Mon 20 Oct 2025 05:42:44 +0000 Manifest next update: Tue 21 Oct 2025 08:23:44 +0000 Files and hashes: 1: 34352e3136392e3133322e302f32322d3234203d3e20323636363134.roa (hash: w0zwCJmuq2Rx2LHRDcsgGFVuwfU5JaDpcYN6BlkRFxk=) 2: 323830343a336561633a3a2f33322d3336203d3e20323636363134.roa (hash: Kwwbids+NN5Oj/+fS8GaPX8Ju4RLoNhweokIo7BymSY=) 3: C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.crl (hash: wudXQ7EmvBn3wYmD4OxB2I3Pz5D74C1qdTe7NFM96ww=) 4: 34352e372e3230302e302f32322d3234203d3e20323636363134.roa (hash: e1hRnxBMW38CPQQsi06h399NepnfpgUlhq4wAPAfE0Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.crl rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a9:53:09:ab:25:61:dc:7f:b8:e2:48:c2:b9:0e:7e:4f:be:05:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498 Validity Not Before: Oct 20 05:42:44 2025 GMT Not After : Oct 21 08:23:44 2025 GMT Subject: CN=8458F0F4878A7F4AE0247E77DF8793297CCE3BE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:7c:aa:a5:82:41:e6:ec:d8:8a:63:42:53: 2f:a4:d8:35:57:3e:dd:a3:5a:4a:e7:94:35:38:3b: 09:50:86:85:de:02:71:99:4c:8e:3f:9d:cf:f0:56: f3:80:0f:35:db:88:d0:1b:4e:96:e6:c6:75:3a:57: b4:98:03:e0:b6:54:6a:17:d1:43:9e:ac:7b:e5:64: 90:eb:8c:cb:f1:5c:39:ef:1a:85:d7:43:c3:73:b3: 21:a1:25:b0:2e:b8:c2:ac:5c:c1:82:82:cf:c7:cb: 8c:3c:8a:73:d6:27:14:a5:39:84:1e:de:83:7c:61: d9:e8:60:76:05:c4:10:bc:aa:b1:bc:91:cb:4f:f5: 7b:ef:ff:a8:3a:9d:3a:ca:76:21:b4:e6:0b:a9:25: fc:8b:dd:d0:cd:0b:d9:f9:9c:01:b9:57:04:ac:7a: 1e:1b:a0:f4:eb:39:36:72:82:77:49:8c:fb:08:e5: 69:88:5d:bc:8d:33:86:56:01:0f:c5:7a:88:3d:09: 93:b7:b9:87:6f:5d:9a:78:fc:e3:e2:1f:e0:a4:dd: 03:76:28:f7:2d:22:44:e4:25:7c:e2:69:87:72:eb: 43:ea:84:ff:56:a5:c1:14:bc:83:20:d2:3a:60:79: 5f:01:55:af:fb:dc:c0:aa:3b:2f:7c:9b:45:da:9f: 49:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:58:F0:F4:87:8A:7F:4A:E0:24:7E:77:DF:87:93:29:7C:CE:3B:E3 X509v3 Authority Key Identifier: keyid:C7:D8:F4:A5:EC:FE:5B:25:53:F6:AA:F2:A1:04:DD:C9:7F:20:54:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:fe:a8:5c:1e:6a:8b:56:0f:12:14:a3:1b:64:2f:74:78:06: 05:68:4c:88:b9:4f:b4:d4:34:90:f2:7c:1d:ac:a3:43:9f:f9: 94:35:06:4f:fb:36:4f:05:0d:8c:69:ce:d1:6d:9d:62:34:24: e7:a6:82:b6:cf:81:d7:04:25:84:86:3f:5b:b2:a3:d7:c5:68: 05:31:73:11:c4:6d:e1:e9:e5:a7:68:4e:c4:d0:7a:c2:0c:5b: 3e:3b:53:8e:71:e6:32:6c:70:b4:43:aa:6a:f8:51:bc:9e:5b: a8:7a:dc:a3:f8:bf:38:97:fe:b6:ae:87:f3:5d:fd:2d:6d:15: b5:af:b4:1a:73:ee:39:b6:b1:29:71:21:4d:c7:e6:86:19:40: a3:be:1e:85:6e:0a:bf:de:96:9e:de:b2:0a:3e:65:8d:ba:b0: b5:ba:04:9f:ba:9f:4a:aa:3c:4d:32:01:a9:15:be:dd:12:2a: 86:0a:39:ff:85:97:ca:9c:69:28:ff:f4:ce:39:ba:96:95:4a: a8:87:49:2d:a4:16:2f:ef:95:5f:40:94:a8:3d:bc:73:94:b9: a4:f7:0c:d6:8b:fc:c1:68:ad:b8:d4:08:e5:a1:2d:ad:2a:98: d1:d1:01:a8:bf:5c:92:37:e9:13:7c:67:fe:3c:f6:51:3a:50: 16:3b:bf:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKalTCaslYdx/uOJIwrkOfk++BQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdEOEY0QTVFQ0ZFNUIyNTUzRjZBQUYyQTEwNEREQzk3 RjIwNTQ5ODAeFw0yNTEwMjAwNTQyNDRaFw0yNTEwMjEwODIzNDRaMDMxMTAvBgNV BAMTKDg0NThGMEY0ODc4QTdGNEFFMDI0N0U3N0RGODc5MzI5N0NDRTNCRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfXyqpYJB5uzYimNCUy+k2DVX Pt2jWkrnlDU4OwlQhoXeAnGZTI4/nc/wVvOADzXbiNAbTpbmxnU6V7SYA+C2VGoX 0UOerHvlZJDrjMvxXDnvGoXXQ8NzsyGhJbAuuMKsXMGCgs/Hy4w8inPWJxSlOYQe 3oN8YdnoYHYFxBC8qrG8kctP9Xvv/6g6nTrKdiG05gupJfyL3dDNC9n5nAG5VwSs eh4boPTrOTZygndJjPsI5WmIXbyNM4ZWAQ/Feog9CZO3uYdvXZp4/OPiH+Ck3QN2 KPctIkTkJXziaYdy60PqhP9WpcEUvIMg0jpgeV8BVa/73MCqOy98m0Xan0mhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhFjw9IeKf0rgJH5334eTKXzOO+MwHwYDVR0j BBgwFoAUx9j0pez+WyVT9qryoQTdyX8gVJgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGNaaWNTZ2l2cDRSVlpvVm9yVFNNMW1lcm5Lcll4MVkxOFF5WjlScEtu MlkvMC9DN0Q4RjRBNUVDRkU1QjI1NTNGNkFBRjJBMTA0RERDOTdGMjA1NDk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3RDhGNEE1RUNGRTVCMjU1 M0Y2QUFGMkExMDREREM5N0YyMDU0OTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGNaaWNTZ2l2cDRSVlpvVm9yVFNNMW1lcm5Lcll4MVkxOFF5WjlScEtuMlkvMC9D N0Q4RjRBNUVDRkU1QjI1NTNGNkFBRjJBMTA0RERDOTdGMjA1NDk4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHv6oXB5qi1YPEhSjG2QvdHgGBWhMiLlPtNQ0kPJ8HayjQ5/5lDUGT/s2TwUN jGnO0W2dYjQk56aCts+B1wQlhIY/W7Kj18VoBTFzEcRt4enlp2hOxNB6wgxbPjtT jnHmMmxwtEOqavhRvJ5bqHrco/i/OJf+tq6H8139LW0Vta+0GnPuObaxKXEhTcfm hhlAo74ehW4Kv96Wnt6yCj5ljbqwtboEn7qfSqo8TTIBqRW+3RIqhgo5/4WXypxp KP/0zjm6lpVKqIdJLaQWL++VX0CUqD28c5S5pPcM1ov8wWituNQI5aEtrSqY0dEB qL9ckjfpE3xn/jz2UTpQFju/sQ== -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:04 2025 by rpki-client