$ rpki-client -vvf rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft File: D1FFDF44055E16082D529730642377D751467152.mft (raw, json) Hash identifier: VhvrzK7X3+3F367n280yqMx12j+xxHxcZlorgtkm/Ys= Subject key identifier: E3:30:E1:6A:F7:67:8D:10:A7:3C:ED:FB:DD:A9:87:33:F7:D3:2E:FB Authority key identifier: D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52 Certificate issuer: /CN=D1FFDF44055E16082D529730642377D751467152 Certificate serial: 21AF60E5C944A68EFC89DBE214D93D9852729B02 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer Subject info access: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft Manifest number: 0198 Signing time: Mon 20 Oct 2025 03:03:17 +0000 Manifest this update: Mon 20 Oct 2025 02:58:17 +0000 Manifest next update: Tue 21 Oct 2025 06:31:17 +0000 Files and hashes: 1: 34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa (hash: +J/bMMv2VTnAcenJxSzOTld7FO4bilmUXcdCfBnX9eY=) 2: 323830343a356139343a3a2f33322d3438203d3e20323638373832.roa (hash: 8CQrF34soBwXu1YRdamnxb0gJeOCBly8lfmNOKaeNCU=) 3: D1FFDF44055E16082D529730642377D751467152.crl (hash: 6uEl+g70V3soAwhScVFdhoMfqCfUTdC8E6ucOphMcCs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:af:60:e5:c9:44:a6:8e:fc:89:db:e2:14:d9:3d:98:52:72:9b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1FFDF44055E16082D529730642377D751467152 Validity Not Before: Oct 20 02:58:17 2025 GMT Not After : Oct 21 06:31:17 2025 GMT Subject: CN=E330E16AF7678D10A73CEDFBDDA98733F7D32EFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3e:ae:83:60:d3:c8:10:9f:43:d0:fc:38:e6: f5:34:ac:82:bd:3e:2e:7b:d0:37:2a:34:57:84:f3: f3:b8:32:d5:bc:5c:00:08:74:69:64:f0:6a:e4:74: 3c:48:e1:0b:dd:64:5e:39:d9:22:39:0e:34:1a:1c: a3:da:2d:2a:33:f3:fb:2e:91:fe:30:05:95:04:77: 3f:73:f1:34:d0:87:e8:ed:11:18:fb:13:57:cc:22: 65:86:cc:0d:06:4d:b9:9d:7b:23:84:ac:eb:8c:02: 34:b7:1c:ce:ea:70:4d:40:f5:18:d5:4c:06:a1:cc: 96:d2:17:e5:9b:44:8c:22:bf:68:6c:62:16:14:0d: d8:04:40:61:02:f2:f2:15:78:18:10:98:27:2e:1e: 9a:0a:9e:9d:c5:cf:f7:6c:29:8a:7b:6e:a1:9f:f6: d2:e6:1d:c3:4e:b9:30:d8:bf:99:fd:66:91:ab:8d: 3b:1e:c2:ad:9c:06:a6:8a:0c:87:5c:55:3d:50:39: 8b:8b:2f:4e:bf:69:3a:85:8f:79:82:18:15:c7:d5: fd:95:57:07:1d:98:7c:ae:d3:bd:f0:3d:52:b8:68: 28:e0:1d:2a:34:50:f3:09:96:b8:a6:ec:79:b1:5d: 1f:0b:7e:f3:57:ea:c3:9b:d7:19:07:89:65:03:62: e6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:30:E1:6A:F7:67:8D:10:A7:3C:ED:FB:DD:A9:87:33:F7:D3:2E:FB X509v3 Authority Key Identifier: keyid:D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6a:ca:a9:5c:7c:39:6a:c1:17:a6:1a:cd:2d:df:08:41:0b: 64:19:26:82:e2:cc:04:0f:0b:11:db:73:24:f6:5d:23:4d:b3: 6e:8a:20:35:3d:f6:9c:a9:5e:2a:d2:2a:91:b7:e2:ed:88:3e: 45:22:f7:8e:ba:fd:b2:c9:37:f9:9e:35:fc:b6:65:2e:84:34: 30:7e:43:fc:4e:27:c0:6a:0e:c4:e4:fa:17:ac:cb:fd:61:53: e9:e8:2a:6a:7d:14:b8:3c:a8:c9:20:d7:63:b9:f9:6f:5a:e2: 84:ca:95:ea:7e:db:26:3a:2f:5d:f5:3a:77:96:17:13:22:7d: 43:4b:6b:51:29:0f:62:6f:10:ea:96:ab:c1:3e:5c:86:23:ac: f1:61:d8:25:87:10:f5:64:54:6e:c8:20:c9:98:57:d6:a4:cc: 64:d3:59:86:b8:70:2d:18:d8:9d:59:93:47:b1:45:06:11:a7: 46:93:34:27:99:15:b3:77:ea:eb:19:bb:ee:f2:67:b1:90:69: 81:77:d8:45:b5:16:f9:aa:3e:e3:43:26:7a:d9:c8:aa:47:07: 98:3b:44:be:58:b5:17:8c:c6:da:c7:fa:bd:d2:f2:01:6c:8c: f7:c2:85:04:cb:6d:f2:70:f1:42:b2:36:73:e1:32:f2:65:9e: 77:2d:f0:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIa9g5clEpo78idviFNk9mFJymwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGRkRGNDQwNTVFMTYwODJENTI5NzMwNjQyMzc3RDc1 MTQ2NzE1MjAeFw0yNTEwMjAwMjU4MTdaFw0yNTEwMjEwNjMxMTdaMDMxMTAvBgNV BAMTKEUzMzBFMTZBRjc2NzhEMTBBNzNDRURGQkREQTk4NzMzRjdEMzJFRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOPq6DYNPIEJ9D0Pw45vU0rIK9 Pi570DcqNFeE8/O4MtW8XAAIdGlk8GrkdDxI4QvdZF452SI5DjQaHKPaLSoz8/su kf4wBZUEdz9z8TTQh+jtERj7E1fMImWGzA0GTbmdeyOErOuMAjS3HM7qcE1A9RjV TAahzJbSF+WbRIwiv2hsYhYUDdgEQGEC8vIVeBgQmCcuHpoKnp3Fz/dsKYp7bqGf 9tLmHcNOuTDYv5n9ZpGrjTsewq2cBqaKDIdcVT1QOYuLL06/aTqFj3mCGBXH1f2V VwcdmHyu073wPVK4aCjgHSo0UPMJlrim7HmxXR8LfvNX6sOb1xkHiWUDYualAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4zDhavdnjRCnPO373amHM/fTLvswHwYDVR0j BBgwFoAU0f/fRAVeFggtUpcwZCN311FGcVIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHlSTmFTVENLWjlia29hRndlRkxqVHNyR0c2eUtiQWZ5ZGQ2alI2bWlK Wm4vMC9EMUZGREY0NDA1NUUxNjA4MkQ1Mjk3MzA2NDIzNzdENzUxNDY3MTUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRkZERjQ0MDU1RTE2MDgy RDUyOTczMDY0MjM3N0Q3NTE0NjcxNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHlSTmFTVENLWjlia29hRndlRkxqVHNyR0c2eUtiQWZ5ZGQ2alI2bWlKWm4vMC9E MUZGREY0NDA1NUUxNjA4MkQ1Mjk3MzA2NDIzNzdENzUxNDY3MTUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmmrKqVx8OWrBF6YazS3fCEELZBkmguLMBA8LEdtzJPZdI02zboogNT32nKle KtIqkbfi7Yg+RSL3jrr9ssk3+Z41/LZlLoQ0MH5D/E4nwGoOxOT6F6zL/WFT6egq an0UuDyoySDXY7n5b1rihMqV6n7bJjovXfU6d5YXEyJ9Q0trUSkPYm8Q6parwT5c hiOs8WHYJYcQ9WRUbsggyZhX1qTMZNNZhrhwLRjYnVmTR7FFBhGnRpM0J5kVs3fq 6xm77vJnsZBpgXfYRbUW+ao+40MmetnIqkcHmDtEvli1F4zG2sf6vdLyAWyM98KF BMtt8nDxQrI2c+Ey8mWedy3wog== -----END CERTIFICATE-----Generated at Mon Oct 20 08:24:05 2025 by rpki-client