$ rpki-client -vvf rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft File: D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft (raw, json) Hash identifier: hf99eh4B3OUH/Ebb5JFbFR9km6gyJ3gXKr35IRRDIUg= Subject key identifier: B9:0E:A1:0E:C6:4D:98:4F:7C:0F:38:8F:D4:29:9D:5B:16:8C:92:C3 Authority key identifier: D2:EA:FB:BD:D2:75:15:C2:E6:42:A2:8C:64:C6:1A:93:2A:14:BD:02 Certificate issuer: /CN=D2EAFBBDD27515C2E642A28C64C61A932A14BD02 Certificate serial: 0461255A0751A3D23EB8152F355DE4F8F197CF69 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer Subject info access: rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft Manifest number: 021E Signing time: Mon 20 Oct 2025 05:00:01 +0000 Manifest this update: Mon 20 Oct 2025 04:55:01 +0000 Manifest next update: Tue 21 Oct 2025 05:00:01 +0000 Files and hashes: 1: 323830343a393134633a3a2f33322d3332203d3e20323734363332.roa (hash: DvD9mUDQGbID1Fj3RmQTkwTUsJ5MXscX3LhKAmPGVSc=) 2: D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl (hash: DJ+mOo/G41Z5ryOuCR5cz06bLgBZBWjXfYDAYVkI3jc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 05:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:61:25:5a:07:51:a3:d2:3e:b8:15:2f:35:5d:e4:f8:f1:97:cf:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EAFBBDD27515C2E642A28C64C61A932A14BD02 Validity Not Before: Oct 20 04:55:01 2025 GMT Not After : Oct 27 05:00:01 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cb:74:a8:b5:94:f4:c5:85:a6:11:85:cb:2d: a8:17:db:4f:69:ea:2a:0e:62:78:a4:2f:bd:f6:84: 03:e4:2d:44:ad:ce:e3:3a:07:c7:88:ba:a3:05:14: e8:b4:52:eb:b5:42:0d:24:d0:df:65:3b:e7:f0:75: da:c7:c8:1a:35:84:fc:d7:5f:e3:33:fe:82:12:75: 64:f0:66:58:9a:5d:09:90:82:87:0a:5b:b3:b8:59: bb:7a:25:bc:a7:ef:3f:ce:26:57:5f:02:31:3b:6a: c8:bd:b1:e9:6e:2a:fa:24:ac:0b:84:cd:57:10:16: b3:6d:52:b2:ec:20:97:ec:c0:42:2e:e3:cc:3b:e8: 4b:a4:36:d6:20:9e:60:18:1a:e7:d9:46:fc:90:a8: a2:20:02:4f:0e:4c:04:e1:0c:bb:ee:0b:41:9a:21: f8:bd:b3:13:14:47:e8:98:b8:6c:bb:a0:af:c1:5d: 12:5b:a5:43:da:2f:1d:b0:09:75:f8:2d:54:b4:35: 79:73:8f:d2:f3:e7:10:2a:d7:b7:94:77:3a:e3:ae: 4c:b6:3f:e3:98:b8:bf:46:7e:5f:c9:92:2e:9c:86: 1e:83:b7:46:3d:df:4f:a2:19:cc:24:5e:3a:0e:c7: 2e:6e:89:4c:99:fe:d5:28:ea:4f:80:36:3c:9e:19: 87:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0E:A1:0E:C6:4D:98:4F:7C:0F:38:8F:D4:29:9D:5B:16:8C:92:C3 X509v3 Authority Key Identifier: keyid:D2:EA:FB:BD:D2:75:15:C2:E6:42:A2:8C:64:C6:1A:93:2A:14:BD:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:7c:57:61:3d:4e:0d:e8:90:82:d5:67:ca:90:89:e5:7f:f8: e9:10:80:cc:c7:da:60:09:31:c9:91:a9:c2:06:15:5d:77:df: 3e:86:b2:52:a7:08:87:fe:4e:31:d3:3b:1d:42:12:73:1f:64: 1a:bf:c6:fa:3c:f8:d8:ec:96:09:57:38:ff:c1:d1:64:b3:c7: 40:d9:9c:0e:79:3d:c7:fd:39:77:60:a2:30:c2:84:7a:b3:1b: ad:86:ee:9f:ad:c4:67:f5:ed:4a:12:5e:2d:a2:19:2c:0a:0d: b3:68:42:9d:af:09:be:48:b1:f0:52:7e:c3:e9:9e:5c:7d:fa: e3:c3:41:b8:41:06:25:9a:92:5d:d6:fe:70:d0:a5:2b:dc:47: 1d:6d:0b:5a:4e:56:e5:45:9c:04:9e:78:27:c4:ba:aa:92:88: 56:97:50:8e:b1:42:2e:a9:63:57:cc:79:db:a1:eb:18:65:3e: 43:81:39:12:94:39:65:87:ef:f1:85:e0:17:da:ec:80:37:fb: 00:ee:1f:8b:4e:d4:77:e9:21:02:b5:aa:d8:a9:d1:8d:b5:1a: c8:8f:c7:d0:88:de:ee:1a:07:dc:be:62:f9:09:51:7a:50:c7: 79:57:48:12:cb:1f:7e:95:44:34:70:89:86:a8:0e:b8:c2:de: f6:50:3e:9d -----BEGIN CERTIFICATE----- MIIHSDCCBjCgAwIBAgIUBGElWgdRo9I+uBUvNV3k+PGXz2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFQUZCQkREMjc1MTVDMkU2NDJBMjhDNjRDNjFBOTMy QTE0QkQwMjAeFw0yNTEwMjAwNDU1MDFaFw0yNTEwMjcwNTAwMDFaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUVDQjc0QThCNTk0RjRDNTg1 QTYxMTg1Q0IyREE4MTdEQjRGNjlFQTJBMEU2Mjc4QTQyRkJERjY4NDAzRTQyRDQ0 QURDRUUzM0EwN0M3ODhCQUEzMDUxNEU4QjQ1MkVCQjU0MjBEMjREMERGNjUzQkU3 RjA3NURBQzdDODFBMzU4NEZDRDc1RkUzMzNGRTgyMTI3NTY0RjA2NjU4OUE1RDA5 OTA4Mjg3MEE1QkIzQjg1OUJCN0EyNUJDQTdFRjNGQ0UyNjU3NUYwMjMxM0I2QUM4 QkRCMUU5NkUyQUZBMjRBQzBCODRDRDU3MTAxNkIzNkQ1MkIyRUMyMDk3RUNDMDQy MkVFM0NDM0JFODRCQTQzNkQ2MjA5RTYwMTgxQUU3RDk0NkZDOTBBOEEyMjAwMjRG MEU0QzA0RTEwQ0JCRUUwQjQxOUEyMUY4QkRCMzEzMTQ0N0U4OThCODZDQkJBMEFG QzE1RDEyNUJBNTQzREEyRjFEQjAwOTc1RjgyRDU0QjQzNTc5NzM4RkQyRjNFNzEw MkFEN0I3OTQ3NzNBRTNBRTRDQjYzRkUzOThCOEJGNDY3RTVGQzk5MjJFOUM4NjFF ODNCNzQ2M0RERjRGQTIxOUNDMjQ1RTNBMEVDNzJFNkU4OTRDOTlGRUQ1MjhFQTRG ODAzNjNDOUUxOTg3NjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEArst0qLWU9MWFphGFyy2oF9tPaeoqDmJ4pC+99oQD5C1Erc7jOgfH iLqjBRTotFLrtUINJNDfZTvn8HXax8gaNYT811/jM/6CEnVk8GZYml0JkIKHCluz uFm7eiW8p+8/ziZXXwIxO2rIvbHpbir6JKwLhM1XEBazbVKy7CCX7MBCLuPMO+hL pDbWIJ5gGBrn2Ub8kKiiIAJPDkwE4Qy77gtBmiH4vbMTFEfomLhsu6CvwV0SW6VD 2i8dsAl1+C1UtDV5c4/S8+cQKte3lHc6465Mtj/jmLi/Rn5fyZIunIYeg7dGPd9P ohnMJF46DscubolMmf7VKOpPgDY8nhmHYwIDAQABo4ICVjCCAlIwHQYDVR0OBBYE FLkOoQ7GTZhPfA84j9QpnVsWjJLDMB8GA1UdIwQYMBaAFNLq+73SdRXC5kKijGTG GpMqFL0CMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVJZSDlweEZOZTNuRGRT alpqenA3NEptdERWZHgzb2lmV0VraEd6TkJGZi8wL0QyRUFGQkJERDI3NTE1QzJF NjQyQTI4QzY0QzYxQTkzMkExNEJEMDIuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi cl9yZXBvLzEvRDJFQUZCQkREMjc1MTVDMkU2NDJBMjhDNjRDNjFBOTMyQTE0QkQw Mi5jZXIwgZwGCCsGAQUFBwELBIGPMIGMMIGJBggrBgEFBQcwC4Z9cnN5bmM6Ly9y cGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85UllIOXB4Rk5lM25EZFNqWmp6cDc0 Sm10RFZkeDNvaWZXRWtoR3pOQkZmLzAvRDJFQUZCQkREMjc1MTVDMkU2NDJBMjhD NjRDNjFBOTMyQTE0QkQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJd8V2E9Tg3okILVZ8qQieV/+OkQ gMzH2mAJMcmRqcIGFV133z6GslKnCIf+TjHTOx1CEnMfZBq/xvo8+NjslglXOP/B 0WSzx0DZnA55Pcf9OXdgojDChHqzG62G7p+txGf17UoSXi2iGSwKDbNoQp2vCb5I sfBSfsPpnlx9+uPDQbhBBiWakl3W/nDQpSvcRx1tC1pOVuVFnASeeCfEuqqSiFaX UI6xQi6pY1fMeduh6xhlPkOBORKUOWWH7/GF4Bfa7IA3+wDuH4tO1HfpIQK1qtip 0Y21GsiPx9CI3u4aB9y+YvkJUXpQx3lXSBLLH36VRDRwiYaoDrjC3vZQPp0= -----END CERTIFICATE-----Generated at Mon Oct 20 16:05:25 2025 by rpki-client