$ rpki-client -vvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft File: D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft (raw, json) Hash identifier: vM/xdBk4J51OyFV+g4weH/LvEWwzN5venn77djtdAHk= Subject key identifier: 51:18:D2:9E:6F:8E:F3:A1:11:23:89:2C:40:80:99:76:25:79:33:F0 Authority key identifier: D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8 Certificate issuer: /CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8 Certificate serial: 03417B7D244E16CDDB64F30AD298BAB989110392 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft Manifest number: 02EF Signing time: Sun 19 Oct 2025 15:24:37 +0000 Manifest this update: Sun 19 Oct 2025 15:19:37 +0000 Manifest next update: Mon 20 Oct 2025 16:41:37 +0000 Files and hashes: 1: 3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa (hash: lpESvqoVhwYOSjN4Vj1yVDNhsu54LQTMAxhBhXWO+2I=) 2: 3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa (hash: HehrNIzW8YIj50NZzvz1VRN/ThMuVHcdZYg24/SmLgI=) 3: D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl (hash: HS+wbbm0YZN5RN5OeMVeCs3YkHVV5ar+uSIwpj35Z4Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 16:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:41:7b:7d:24:4e:16:cd:db:64:f3:0a:d2:98:ba:b9:89:11:03:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8 Validity Not Before: Oct 19 15:19:37 2025 GMT Not After : Oct 20 16:41:37 2025 GMT Subject: CN=5118D29E6F8EF3A11123892C40809976257933F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:11:41:81:04:0f:a1:1f:1c:24:93:06:69:a7: f9:57:c5:aa:37:be:39:8e:ea:69:92:a1:1e:7f:d3: 41:3b:f4:bf:e2:98:b2:85:45:1a:c5:a9:c4:49:f2: c7:75:ec:c3:47:1a:56:42:d9:01:09:7b:e7:69:ca: 95:a0:a1:8a:b6:18:e2:77:c2:1d:6f:f3:af:f0:e7: 6b:5c:f9:97:3c:90:8c:1f:59:ec:9d:ae:82:b4:85: d5:19:a2:c3:e0:28:7e:ff:a2:c7:1c:59:b1:b5:e2: 5c:b6:05:e6:c8:58:b7:10:1f:66:02:97:63:14:4e: 77:55:e1:bf:c7:9c:bf:97:76:e7:ae:b1:35:bc:6a: 27:b4:7e:64:e6:2a:2c:06:e3:2e:46:e7:35:71:55: 32:b7:d8:ca:55:98:f0:48:ae:2f:f4:2b:e2:a0:68: 08:ec:f6:23:e6:86:94:95:eb:b6:e3:c9:36:7e:c3: 61:00:ac:50:92:49:55:54:60:c3:e7:02:6f:29:b3: 33:18:69:8d:b1:ca:7a:bd:8b:e3:e5:7d:b1:56:0f: 71:ec:7c:47:ab:93:25:4b:87:19:4e:9f:bb:b6:8c: 9e:4a:1f:f9:3f:c8:ec:08:dc:2a:95:e8:fc:12:90: 15:5f:ee:e2:68:fa:2a:93:cb:d7:7a:d7:3a:72:10: 30:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:18:D2:9E:6F:8E:F3:A1:11:23:89:2C:40:80:99:76:25:79:33:F0 X509v3 Authority Key Identifier: keyid:D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:08:b0:8b:0e:25:5b:fa:ce:81:95:79:e5:ba:0e:f6:5e:47: bc:ea:92:8e:28:9e:63:7f:c6:5d:93:51:f3:5e:74:27:73:71: db:be:fd:ce:fa:c1:94:e1:a9:ea:01:7d:b7:4f:c3:51:91:47: d4:21:d1:95:66:5b:20:6f:03:f0:47:48:fa:81:28:ce:9d:de: fa:eb:43:43:2c:77:6c:5a:bd:ac:0d:fa:c7:46:45:80:f8:f4: 02:06:db:a1:d4:e2:90:3e:2d:ee:34:fa:e7:a8:24:d5:97:a7: 84:61:da:0f:3c:8b:2d:fa:78:1c:a6:e9:f7:50:1e:92:3c:1d: 3a:91:07:92:d5:c8:d7:08:93:d6:66:46:ab:7a:8f:04:2e:09: 4b:c5:ee:50:76:c6:90:f6:2e:e2:31:a1:1d:ef:a7:e8:27:bb: 48:0d:87:20:6f:9c:bd:4b:01:fe:3d:48:13:a7:37:89:c7:62: d5:57:e9:7b:a6:94:ed:b2:d0:36:67:02:68:97:e5:5a:47:e3: b5:45:bb:15:94:d1:13:08:8a:ad:f7:1b:4e:76:fc:42:63:1b: d1:07:ed:80:24:8d:b8:7e:6c:a7:18:6e:5d:d3:9f:44:b6:8f: 75:2c:8c:85:5c:81:58:d2:f9:57:7b:6e:75:c0:61:72:89:bd: 02:7e:69:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA0F7fSROFs3bZPMK0pi6uYkRA5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRCQTVDQ0ZCN0JGRTA5NEZDM0E0QTZBRTdENTI3RDM4 RkM2MDhEODAeFw0yNTEwMTkxNTE5MzdaFw0yNTEwMjAxNjQxMzdaMDMxMTAvBgNV BAMTKDUxMThEMjlFNkY4RUYzQTExMTIzODkyQzQwODA5OTc2MjU3OTMzRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdEUGBBA+hHxwkkwZpp/lXxao3 vjmO6mmSoR5/00E79L/imLKFRRrFqcRJ8sd17MNHGlZC2QEJe+dpypWgoYq2GOJ3 wh1v86/w52tc+Zc8kIwfWeydroK0hdUZosPgKH7/osccWbG14ly2BebIWLcQH2YC l2MUTndV4b/HnL+XdueusTW8aie0fmTmKiwG4y5G5zVxVTK32MpVmPBIri/0K+Kg aAjs9iPmhpSV67bjyTZ+w2EArFCSSVVUYMPnAm8pszMYaY2xynq9i+PlfbFWD3Hs fEerkyVLhxlOn7u2jJ5KH/k/yOwI3CqV6PwSkBVf7uJo+iqTy9d61zpyEDDXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUURjSnm+O86ERI4ksQICZdiV5M/AwHwYDVR0j BBgwFoAU1Lpcz7e/4JT8Okpq59Un04/GCNgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHZMRVIzQXBpbkpMRWRUOXB5UFdRYlAzbVZmQmlDc1ljZkZnc1NucXpI M2kvMS9ENEJBNUNDRkI3QkZFMDk0RkMzQTRBNkFFN0Q1MjdEMzhGQzYwOEQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0QkE1Q0NGQjdCRkUwOTRG QzNBNEE2QUU3RDUyN0QzOEZDNjA4RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHZMRVIzQXBpbkpMRWRUOXB5UFdRYlAzbVZmQmlDc1ljZkZnc1NucXpIM2kvMS9E NEJBNUNDRkI3QkZFMDk0RkMzQTRBNkFFN0Q1MjdEMzhGQzYwOEQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnAiwiw4lW/rOgZV55boO9l5HvOqSjiieY3/GXZNR8150J3Nx2779zvrBlOGp 6gF9t0/DUZFH1CHRlWZbIG8D8EdI+oEozp3e+utDQyx3bFq9rA36x0ZFgPj0Agbb odTikD4t7jT656gk1ZenhGHaDzyLLfp4HKbp91AekjwdOpEHktXI1wiT1mZGq3qP BC4JS8XuUHbGkPYu4jGhHe+n6Ce7SA2HIG+cvUsB/j1IE6c3icdi1Vfpe6aU7bLQ NmcCaJflWkfjtUW7FZTREwiKrfcbTnb8QmMb0QftgCSNuH5spxhuXdOfRLaPdSyM hVyBWNL5V3tudcBhcom9An5psw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:04:14 2025 by rpki-client