$ rpki-client -vvf rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.mft File: 1C08F161D05B2B854FDA7F58471297A3DE6844FC.mft (raw, json) Hash identifier: MY0tlBAQ+eYdsqVSd6bG8gKhBdtcAGmLtFM2Axmj/a4= Subject key identifier: BA:8E:F3:2D:6D:84:93:EE:73:34:B1:A1:E6:F7:6C:C5:BB:F8:C8:1D Authority key identifier: 1C:08:F1:61:D0:5B:2B:85:4F:DA:7F:58:47:12:97:A3:DE:68:44:FC Certificate issuer: /CN=1C08F161D05B2B854FDA7F58471297A3DE6844FC Certificate serial: 7E539FF0CE82473F719B88BDFBBE7F12DAF22A93 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.cer Subject info access: rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.mft Manifest number: 02F3 Signing time: Sun 19 Oct 2025 15:15:43 +0000 Manifest this update: Sun 19 Oct 2025 15:10:43 +0000 Manifest next update: Mon 20 Oct 2025 16:29:43 +0000 Files and hashes: 1: 1C08F161D05B2B854FDA7F58471297A3DE6844FC.crl (hash: TCj+1iDImALp1f09Mh/f9fBV25ZfYv1eVYqbERE+UPw=) 2: 3133312e3130302e33322e302f32322d3332203d3e203631373436.roa (hash: orFF+TutPb6kUNSwkmSiLQ0+Jf7+cizfKvfpGz1TEqE=) 3: 323830343a316262633a3a2f33322d313238203d3e203631373436.roa (hash: zIbE1gzb4KL2dR6A5Igy6RwE0MNboMRQfmyp14gydBE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.crl rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 16:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:53:9f:f0:ce:82:47:3f:71:9b:88:bd:fb:be:7f:12:da:f2:2a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C08F161D05B2B854FDA7F58471297A3DE6844FC Validity Not Before: Oct 19 15:10:43 2025 GMT Not After : Oct 20 16:29:43 2025 GMT Subject: CN=BA8EF32D6D8493EE7334B1A1E6F76CC5BBF8C81D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:32:48:df:59:38:f5:73:cc:70:db:3b:6b: b2:5a:e8:b0:3e:7b:c9:c4:9a:1c:30:aa:61:d0:85: d1:0b:f0:8c:24:b6:e9:4e:37:bb:36:cf:b5:a6:85: 64:2d:7b:29:0d:93:0f:49:1c:45:37:28:23:3e:58: 90:56:2f:43:ee:c2:9b:a4:20:f2:09:04:7e:b9:91: 44:9c:e6:bb:d2:09:68:4a:c4:2d:cb:66:cc:5d:13: 3a:ec:a0:22:6b:3b:b8:92:b3:7e:55:ec:22:b7:8a: ee:35:df:3e:73:fd:66:0f:a4:f0:a1:8d:39:27:2f: 3b:d6:40:3d:6c:99:21:c2:d4:fd:4f:9f:cc:24:8c: b8:49:5e:23:9d:92:b9:5f:37:16:8d:26:7c:7a:92: 12:10:56:e5:87:9f:dd:75:36:83:06:f1:3e:91:d4: b1:9e:4c:9c:1d:43:58:80:49:53:92:98:3c:20:54: 38:ba:29:e0:d9:67:15:95:7a:83:09:14:1d:26:aa: 93:01:7e:cc:56:97:73:53:19:7c:54:7c:3c:c3:4b: 52:6c:33:4f:28:68:31:3a:a5:25:96:e5:41:66:8d: e5:ff:52:d9:70:8c:31:dd:f2:59:28:1c:66:0f:8c: 20:7f:a0:64:45:55:a9:61:27:e5:11:6c:ea:4c:fb: 54:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8E:F3:2D:6D:84:93:EE:73:34:B1:A1:E6:F7:6C:C5:BB:F8:C8:1D X509v3 Authority Key Identifier: keyid:1C:08:F1:61:D0:5B:2B:85:4F:DA:7F:58:47:12:97:A3:DE:68:44:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:18:0b:3b:c0:ae:ae:2f:e7:fd:fc:a0:b6:1b:28:8c:ea:2e: 09:29:22:88:e1:ef:78:56:ef:13:6b:34:1d:9b:a6:4d:c8:89: 43:e9:4d:f0:e2:87:d0:71:a2:fa:22:da:dc:a4:5e:32:4c:e8: db:87:8d:6e:77:61:88:b1:35:91:d6:bd:6c:30:5b:07:f5:f3: 21:67:91:16:b1:c8:63:62:9d:5d:04:fd:68:39:9e:62:92:cc: ca:41:63:51:bf:52:3e:b0:ae:a5:24:3a:9f:e9:19:55:f3:4f: d2:1a:fa:d5:95:2b:12:c1:d7:2e:bc:97:d9:08:73:4e:33:08: cc:91:ba:33:a0:d1:7c:1f:18:88:c2:f3:5b:15:f4:21:49:b4: 18:03:6e:6d:13:ff:33:11:66:2f:e7:1d:6d:b8:41:0c:f7:13: c0:46:23:1a:aa:dc:05:b1:df:d8:2e:8e:46:25:53:b3:13:86: 85:4e:99:6e:9e:c4:30:99:40:a1:f5:3c:c8:65:ab:a8:0e:8e: 4c:63:0f:cc:65:7c:70:09:02:2c:ce:0c:bb:70:c8:b2:51:d1: ec:5d:af:ab:ae:17:e5:76:ef:9b:ac:99:71:39:5d:4d:d5:d1: 77:39:40:4c:d5:76:f2:53:66:df:2e:dd:56:87:db:07:6e:cf: 9b:0e:2c:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUflOf8M6CRz9xm4i9+75/EtryKpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMwOEYxNjFEMDVCMkI4NTRGREE3RjU4NDcxMjk3QTNE RTY4NDRGQzAeFw0yNTEwMTkxNTEwNDNaFw0yNTEwMjAxNjI5NDNaMDMxMTAvBgNV BAMTKEJBOEVGMzJENkQ4NDkzRUU3MzM0QjFBMUU2Rjc2Q0M1QkJGOEM4MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtjJI31k49XPMcNs7a7Ja6LA+ e8nEmhwwqmHQhdEL8IwktulON7s2z7WmhWQteykNkw9JHEU3KCM+WJBWL0Puwpuk IPIJBH65kUSc5rvSCWhKxC3LZsxdEzrsoCJrO7iSs35V7CK3iu413z5z/WYPpPCh jTknLzvWQD1smSHC1P1Pn8wkjLhJXiOdkrlfNxaNJnx6khIQVuWHn911NoMG8T6R 1LGeTJwdQ1iASVOSmDwgVDi6KeDZZxWVeoMJFB0mqpMBfsxWl3NTGXxUfDzDS1Js M08oaDE6pSWW5UFmjeX/UtlwjDHd8lkoHGYPjCB/oGRFValhJ+URbOpM+1SnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuo7zLW2Ek+5zNLGh5vdsxbv4yB0wHwYDVR0j BBgwFoAUHAjxYdBbK4VP2n9YRxKXo95oRPwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVA1RXdSb21IdzhGWGhHNWNtOGVkNHl2YjJlVmVwcXFCVnk3aGF5RzZi RzEvMS8xQzA4RjE2MUQwNUIyQjg1NEZEQTdGNTg0NzEyOTdBM0RFNjg0NEZDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDMDhGMTYxRDA1QjJCODU0 RkRBN0Y1ODQ3MTI5N0EzREU2ODQ0RkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVA1RXdSb21IdzhGWGhHNWNtOGVkNHl2YjJlVmVwcXFCVnk3aGF5RzZiRzEvMS8x QzA4RjE2MUQwNUIyQjg1NEZEQTdGNTg0NzEyOTdBM0RFNjg0NEZDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfxgLO8Curi/n/fygthsojOouCSkiiOHveFbvE2s0HZumTciJQ+lN8OKH0HGi +iLa3KReMkzo24eNbndhiLE1kda9bDBbB/XzIWeRFrHIY2KdXQT9aDmeYpLMykFj Ub9SPrCupSQ6n+kZVfNP0hr61ZUrEsHXLryX2QhzTjMIzJG6M6DRfB8YiMLzWxX0 IUm0GANubRP/MxFmL+cdbbhBDPcTwEYjGqrcBbHf2C6ORiVTsxOGhU6Zbp7EMJlA ofU8yGWrqA6OTGMPzGV8cAkCLM4Mu3DIslHR7F2vq64X5Xbvm6yZcTldTdXRdzlA TNV28lNm3y7dVofbB27Pmw4sMA== -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:13 2025 by rpki-client