$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft File: 8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft (raw, json) Hash identifier: tq85A4KRl8LWoRGuoOcfHYg63hK7l9BFc0PdoOXvzIw= Subject key identifier: 75:D4:17:18:14:7A:D2:B6:6A:61:05:EF:EE:F4:8E:6E:FC:26:41:65 Authority key identifier: 8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD Certificate issuer: /CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD Certificate serial: 71B562C215128C889C37B9ECD72D4C604718B543 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft Manifest number: 026B Signing time: Mon 20 Oct 2025 11:55:51 +0000 Manifest this update: Mon 20 Oct 2025 11:50:51 +0000 Manifest next update: Tue 21 Oct 2025 13:40:51 +0000 Files and hashes: 1: 3230302e37312e37322e302f32322d3332203d3e20323636323136.roa (hash: YvegZmyo9sJ4pcNnNHBjTBF2t5WeDgSktWpePZYDq0g=) 2: 323830343a336338303a3a2f33322d313238203d3e20323636323136.roa (hash: Joy2sepoO+FIC2vMr6AO34cX5OproAo288/h6AiK80Q=) 3: 8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl (hash: xjUePqBbttGpTr2Fn96npfl4QUOYXX/n4MHTRrHgPvc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b5:62:c2:15:12:8c:88:9c:37:b9:ec:d7:2d:4c:60:47:18:b5:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD Validity Not Before: Oct 20 11:50:51 2025 GMT Not After : Oct 21 13:40:51 2025 GMT Subject: CN=75D41718147AD2B66A6105EFEEF48E6EFC264165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:de:6f:cc:3d:b7:21:dd:4b:b3:a6:0c:fe: 7d:47:39:1e:d9:9c:08:62:0b:7f:72:2a:a0:27:95: 64:9f:64:4f:e7:98:74:6d:e6:d2:43:ec:98:42:26: 7e:c4:31:98:a2:f2:1e:36:b8:c4:d7:2c:ff:08:cb: a6:a6:1e:48:39:ae:fb:c8:4a:f7:29:7c:e3:9a:46: a4:e3:76:0c:e0:b4:b0:82:5f:94:c4:83:44:5f:0c: 3a:1b:d2:1f:0c:a1:f9:cc:05:c6:06:85:36:82:b6: c1:b6:6c:c7:94:72:dd:8f:bf:c6:da:88:f6:e8:30: 75:10:6f:93:bb:8f:2f:a7:1b:42:f6:17:dd:96:b6: 25:92:b0:10:03:d4:02:08:bf:68:dc:56:b1:a8:91: d7:d3:54:a8:4a:d3:85:fd:fa:22:67:6f:6d:9e:2a: 67:66:8f:84:f5:97:32:00:bf:81:bb:0c:10:bd:cf: 82:73:39:16:4d:13:7d:f6:8d:a7:e4:ef:b3:de:5e: f5:e2:99:13:e2:b7:56:35:80:72:97:61:e2:ac:fc: 28:c3:ab:a1:2f:f8:68:15:8b:87:36:d9:c1:83:8c: 08:33:33:c1:0d:ff:c3:d9:66:09:ec:bd:f1:4a:a4: 60:7d:23:62:98:f7:8c:a4:23:15:88:af:bb:8b:fc: ce:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D4:17:18:14:7A:D2:B6:6A:61:05:EF:EE:F4:8E:6E:FC:26:41:65 X509v3 Authority Key Identifier: keyid:8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:07:5a:cb:a4:2f:b6:19:f3:1d:5d:7a:2e:6d:2d:c1:b7:48: de:7a:69:0f:73:9b:be:2c:c7:98:8d:09:b7:d8:6e:ed:37:bc: 87:a2:41:00:5c:ad:c8:93:a7:31:89:2f:81:0a:ca:7b:e9:11: 08:39:06:8b:16:32:cd:d8:f8:ef:94:08:1e:fc:5b:e8:eb:98: 49:8f:a3:8b:c5:43:26:24:2a:4d:4b:33:5f:01:64:e6:4c:82: 6a:98:e2:0c:b6:de:88:6a:45:bc:fd:16:48:d3:70:bd:fb:e8: 88:a4:2e:97:5e:64:9e:00:11:82:96:a9:2c:cf:62:f9:03:30: 57:88:85:68:43:a0:8b:6d:d0:8a:e8:e9:9a:4a:61:7d:e2:95: 77:4f:28:22:fc:36:ed:62:02:02:56:b8:71:18:a0:1e:88:c5: 5f:dd:56:23:7c:c5:07:fa:a5:ed:96:64:52:a0:5b:3e:eb:50: 27:72:db:b3:8b:48:e8:ed:50:7f:a8:2b:16:3b:89:cd:b0:b3: ec:f9:da:96:22:ac:34:a4:ef:f3:f2:f8:27:27:2f:94:84:88: fb:ce:11:69:7e:19:84:94:77:49:6f:79:5b:74:05:20:ba:8d: 5a:08:f1:a7:27:d2:83:29:92:34:8a:96:2c:31:65:9b:62:9c: b6:65:d9:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcbViwhUSjIicN7ns1y1MYEcYtUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFMUVCRjRFRTMzNDQ1RTM5OEJGNTVDN0JGQkIwNTRF ODU0NkZGRDAeFw0yNTEwMjAxMTUwNTFaFw0yNTEwMjExMzQwNTFaMDMxMTAvBgNV BAMTKDc1RDQxNzE4MTQ3QUQyQjY2QTYxMDVFRkVFRjQ4RTZFRkMyNjQxNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoNN5vzD23Id1Ls6YM/n1HOR7Z nAhiC39yKqAnlWSfZE/nmHRt5tJD7JhCJn7EMZii8h42uMTXLP8Iy6amHkg5rvvI SvcpfOOaRqTjdgzgtLCCX5TEg0RfDDob0h8MofnMBcYGhTaCtsG2bMeUct2Pv8ba iPboMHUQb5O7jy+nG0L2F92WtiWSsBAD1AIIv2jcVrGokdfTVKhK04X9+iJnb22e Kmdmj4T1lzIAv4G7DBC9z4JzORZNE332jafk77PeXvXimRPit1Y1gHKXYeKs/CjD q6Ev+GgVi4c22cGDjAgzM8EN/8PZZgnsvfFKpGB9I2KY94ykIxWIr7uL/M6NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUddQXGBR60rZqYQXv7vSObvwmQWUwHwYDVR0j BBgwFoAUjeHr9O4zRF45i/Vce/uwVOhUb/0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5YZDduZzVEQUtWNzh0bkhWeHdKQXFETExMaHd2WW5UbzdFOFNGdlQ2 clYvMC84REUxRUJGNEVFMzM0NDVFMzk4QkY1NUM3QkZCQjA1NEU4NTQ2RkZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhERTFFQkY0RUUzMzQ0NUUz OThCRjU1QzdCRkJCMDU0RTg1NDZGRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OG5YZDduZzVEQUtWNzh0bkhWeHdKQXFETExMaHd2WW5UbzdFOFNGdlQ2clYvMC84 REUxRUJGNEVFMzM0NDVFMzk4QkY1NUM3QkZCQjA1NEU4NTQ2RkZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbQday6QvthnzHV16Lm0twbdI3nppD3ObvizHmI0Jt9hu7Te8h6JBAFytyJOn MYkvgQrKe+kRCDkGixYyzdj475QIHvxb6OuYSY+ji8VDJiQqTUszXwFk5kyCapji DLbeiGpFvP0WSNNwvfvoiKQul15kngARgpapLM9i+QMwV4iFaEOgi23Qiujpmkph feKVd08oIvw27WICAla4cRigHojFX91WI3zFB/ql7ZZkUqBbPutQJ3Lbs4tI6O1Q f6grFjuJzbCz7PnaliKsNKTv8/L4JycvlISI+84RaX4ZhJR3SW95W3QFILqNWgjx pyfSgymSNIqWLDFlm2KctmXZqA== -----END CERTIFICATE-----Generated at Mon Oct 20 16:18:18 2025 by rpki-client