$ rpki-client -vvf rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft File: 8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft (raw, json) Hash identifier: KTEpe4Nv5XGredoCsqwdiNo/JPrPHxOvsbNhQFB0pE8= Subject key identifier: CB:40:99:0A:B2:88:E4:C1:CB:5D:50:B4:21:53:0A:86:78:80:95:9A Authority key identifier: 8A:F0:30:45:F9:CB:7B:61:29:FF:D8:D6:A2:4F:2E:9E:06:72:D1:00 Certificate issuer: /CN=8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100 Certificate serial: 1D1AF761E027A7716402E04AEC7B5FB92F317916 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer Subject info access: rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft Manifest number: 78 Signing time: Mon 20 Oct 2025 08:40:32 +0000 Manifest this update: Mon 20 Oct 2025 08:35:32 +0000 Manifest next update: Tue 21 Oct 2025 12:38:32 +0000 Files and hashes: 1: 3139312e3234322e34342e302f32322d3234203d3e20323731353136.roa (hash: C5MjkKI8WR8yW/gmqOUvb7uzWMbYZ7XJCuts3sWaP28=) 2: 3138312e3233322e3137362e302f32322d3234203d3e20323731353136.roa (hash: +mkXeaWBvETVR9EqVxiUxNimAV0s2kSfzpDbh9PMIJU=) 3: 8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.crl (hash: yD31IncgIxJXWhLpFU36C+R3DEqcjXq629CMtfjXH5g=) 4: 323830343a376363303a3a2f33322d3438203d3e20323731353136.roa (hash: Y/bFQxEmatak+WdOEDmNCXV81gJbtzwfxCaukWu+JC8=) 5: 3139312e3234322e34322e302f32332d3234203d3e20323731353136.roa (hash: GWBpEjifIF3zr0IPEjZ4U9RGMhXuCxOIRrwP6DNm48E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.crl rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:1a:f7:61:e0:27:a7:71:64:02:e0:4a:ec:7b:5f:b9:2f:31:79:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100 Validity Not Before: Oct 20 08:35:32 2025 GMT Not After : Oct 21 12:38:32 2025 GMT Subject: CN=CB40990AB288E4C1CB5D50B421530A867880959A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:04:c3:dc:67:2f:19:2f:3f:c5:77:38:48:b4: 1a:01:33:1a:59:24:d9:70:97:7b:40:ef:df:8e:41: 9d:32:5a:34:b2:3f:6a:7b:67:d4:72:cb:b0:65:b4: 88:f7:eb:48:56:68:49:27:03:dc:fc:62:3f:b3:25: 76:08:f2:1a:32:66:26:46:2d:78:15:ad:9f:8e:f0: b5:6e:d8:3a:6f:66:aa:e5:51:51:5d:57:42:f3:a2: bf:24:e6:11:d8:42:db:2c:f9:5e:0c:46:d9:a8:13: b3:1c:21:08:45:b1:45:84:1e:11:4c:67:dd:d1:96: 98:09:3d:0e:fa:a8:ba:14:f0:a1:cb:8c:8a:08:d8: f8:e5:d6:34:c2:d2:68:1c:f6:71:6a:24:f0:26:14: c8:a4:71:41:a7:00:5d:49:df:4b:f8:84:d1:30:40: 92:42:f4:d9:4e:ce:35:21:5a:ed:70:30:d1:76:50: 24:e9:46:f2:68:6b:fd:be:c0:85:38:37:5f:f1:b2: a7:4e:d3:b7:00:8b:6b:e7:49:db:57:a5:18:df:88: c0:b6:06:18:7a:c2:3a:1b:65:99:2c:ee:2d:3a:00: 0a:47:bc:14:55:41:44:f3:0d:73:64:0d:93:a3:ac: 16:1d:e4:da:a1:61:b1:95:27:74:8d:90:01:f2:48: e8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:40:99:0A:B2:88:E4:C1:CB:5D:50:B4:21:53:0A:86:78:80:95:9A X509v3 Authority Key Identifier: keyid:8A:F0:30:45:F9:CB:7B:61:29:FF:D8:D6:A2:4F:2E:9E:06:72:D1:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fb:b3:6c:76:09:02:f3:d8:a0:4f:55:8a:c1:d2:77:46:4f: 47:00:31:0e:54:26:6a:4c:f2:fc:8b:98:e4:01:92:a3:b7:e3: de:24:a3:5f:ad:b3:fe:94:c0:aa:3e:58:da:38:4e:f6:17:c8: 0a:46:1f:e3:26:fc:18:2a:7f:b8:7d:53:8d:f9:bd:e7:85:03: af:41:35:6c:17:aa:6b:ba:c2:79:93:92:cb:8c:ab:19:76:fd: ac:b6:01:5e:18:a6:91:69:4c:ec:d5:3c:27:20:0b:32:4e:e4: 3c:df:e0:cd:e4:30:94:bd:c6:33:3b:4b:1d:c3:2e:9f:d5:2d: f2:e0:39:a7:60:78:f0:00:a9:21:10:b1:a4:47:dc:e4:81:79: b3:e8:ac:42:49:aa:98:ed:a6:e3:01:3d:6a:72:59:74:1f:a8: 55:63:d1:9d:ee:15:30:b4:0f:4f:3a:fb:1d:84:e6:6a:42:2a: f1:f3:ef:60:60:b5:48:f6:5a:7e:f5:83:c7:dc:21:7b:a6:a0: 00:ef:75:16:ce:2c:1d:5d:26:13:ed:b1:e7:18:67:0f:8a:9d: dc:f0:fe:18:0e:cf:4e:d1:af:78:89:f3:20:e3:f5:24:1b:3c: d5:b9:62:08:df:be:6b:12:2f:4c:0d:e1:28:ad:e9:13:47:0c: 80:72:74:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHRr3YeAnp3FkAuBK7HtfuS8xeRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMDMwNDVGOUNCN0I2MTI5RkZEOEQ2QTI0RjJFOUUw NjcyRDEwMDAeFw0yNTEwMjAwODM1MzJaFw0yNTEwMjExMjM4MzJaMDMxMTAvBgNV BAMTKENCNDA5OTBBQjI4OEU0QzFDQjVENTBCNDIxNTMwQTg2Nzg4MDk1OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuBMPcZy8ZLz/FdzhItBoBMxpZ JNlwl3tA79+OQZ0yWjSyP2p7Z9Ryy7BltIj360hWaEknA9z8Yj+zJXYI8hoyZiZG LXgVrZ+O8LVu2DpvZqrlUVFdV0Lzor8k5hHYQtss+V4MRtmoE7McIQhFsUWEHhFM Z93RlpgJPQ76qLoU8KHLjIoI2Pjl1jTC0mgc9nFqJPAmFMikcUGnAF1J30v4hNEw QJJC9NlOzjUhWu1wMNF2UCTpRvJoa/2+wIU4N1/xsqdO07cAi2vnSdtXpRjfiMC2 Bhh6wjobZZks7i06AApHvBRVQUTzDXNkDZOjrBYd5NqhYbGVJ3SNkAHySOjdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUy0CZCrKI5MHLXVC0IVMKhniAlZowHwYDVR0j BBgwFoAUivAwRfnLe2Ep/9jWok8ungZy0QAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWtKcm9ZUFpyakJZdXJrQjFMSzhESk5NQmtKMlJodDZUdG5SY1R4a3Rx bmIvMC84QUYwMzA0NUY5Q0I3QjYxMjlGRkQ4RDZBMjRGMkU5RTA2NzJEMTAwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBRjAzMDQ1RjlDQjdCNjEy OUZGRDhENkEyNEYyRTlFMDY3MkQxMDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWtKcm9ZUFpyakJZdXJrQjFMSzhESk5NQmtKMlJodDZUdG5SY1R4a3RxbmIvMC84 QUYwMzA0NUY5Q0I3QjYxMjlGRkQ4RDZBMjRGMkU5RTA2NzJEMTAwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACvuzbHYJAvPYoE9VisHSd0ZPRwAxDlQmakzy/IuY5AGSo7fj3iSjX62z/pTA qj5Y2jhO9hfICkYf4yb8GCp/uH1Tjfm954UDr0E1bBeqa7rCeZOSy4yrGXb9rLYB XhimkWlM7NU8JyALMk7kPN/gzeQwlL3GMztLHcMun9Ut8uA5p2B48ACpIRCxpEfc 5IF5s+isQkmqmO2m4wE9anJZdB+oVWPRne4VMLQPTzr7HYTmakIq8fPvYGC1SPZa fvWDx9whe6agAO91Fs4sHV0mE+2x5xhnD4qd3PD+GA7PTtGveInzIOP1JBs81bli CN++axIvTA3hKK3pE0cMgHJ0eQ== -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:09 2025 by rpki-client