$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft File: 08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft (raw, json) Hash identifier: YXZmgm8Vv2rDcXptXQ/k80s1HRJLqjCG45Xd93CyfQU= Subject key identifier: 0E:C3:15:30:E3:41:6E:B3:92:52:30:AA:DF:F6:1A:63:81:F0:53:76 Authority key identifier: 08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4 Certificate issuer: /CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4 Certificate serial: 133424B2BE050083927D23140AF407355A0770B2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer Subject info access: rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft Manifest number: 0234 Signing time: Mon 20 Oct 2025 03:10:33 +0000 Manifest this update: Mon 20 Oct 2025 03:05:33 +0000 Manifest next update: Tue 21 Oct 2025 05:01:33 +0000 Files and hashes: 1: 3133382e3235352e31362e302f32322d3332203d3e20323634343034.roa (hash: W81QTTTQzuhYSuk1FTdnaq94J/D0E+fE04/OEQhe72M=) 2: 3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa (hash: TtZY2HkDxWkCvGI4HqDn8AnGzlPaFTi1kjMjjf0hwqo=) 3: 3137302e38322e3134302e302f32322d3332203d3e20323634343034.roa (hash: Pr3FB6N7/fnnubm+xzlGWqAog5Eg3D0n86eXpZJwgjA=) 4: 08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl (hash: unRQMQbUc2+50zifx7ZwQn4cT3JjXk7ySSN+h2pFCUk=) 5: 323830343a316466383a3a2f33322d313238203d3e20323634343034.roa (hash: ec1Zk7JGNh5slBLz+PZID/Uvujfx1n692BGaXyzD6Jg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 05:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:34:24:b2:be:05:00:83:92:7d:23:14:0a:f4:07:35:5a:07:70:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4 Validity Not Before: Oct 20 03:05:33 2025 GMT Not After : Oct 21 05:01:33 2025 GMT Subject: CN=0EC31530E3416EB3925230AADFF61A6381F05376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:54:87:89:d2:d9:99:41:67:38:4a:02:32: ed:3d:67:db:0f:27:bd:b6:60:b7:27:3a:5b:f7:b7: 6b:7a:39:bb:d0:fc:40:c2:06:83:c6:4b:e5:a8:1e: 28:9f:00:19:2b:91:e8:66:db:b6:8b:59:1f:d3:45: 8b:b8:c1:62:b8:fb:f0:91:36:9f:f9:6d:31:1f:ff: e5:4a:2b:ef:e6:74:d9:e6:9d:a5:ca:b4:4c:93:dd: 61:c2:cf:3d:8d:7c:18:c6:f2:24:e2:df:89:54:8f: 29:eb:dc:8c:88:17:b5:d6:9c:2f:9a:1b:50:73:f1: 9b:2b:b1:eb:4c:b8:a9:22:d1:1a:dd:f1:23:d5:59: a6:d7:be:d3:78:b3:71:a6:77:a9:b3:37:0e:82:25: 06:00:2a:e7:19:2d:87:56:5c:ba:ef:91:e3:3a:39: e5:55:34:04:57:e3:09:88:20:a5:7a:16:52:b5:b2: c8:45:20:b2:53:49:67:de:da:1d:21:ff:ef:49:e8: 53:2b:f1:98:e6:d7:97:da:66:99:37:1b:f0:89:da: 9d:20:aa:a2:88:e4:15:e3:c3:bb:99:e5:2f:8f:b7: 45:c5:0e:cb:e8:a7:03:22:95:6f:3b:6f:11:ef:9a: 3d:07:74:00:bf:e0:24:64:ff:c2:3f:63:03:86:40: fa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C3:15:30:E3:41:6E:B3:92:52:30:AA:DF:F6:1A:63:81:F0:53:76 X509v3 Authority Key Identifier: keyid:08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:eb:a9:37:45:18:86:24:f4:c5:1c:6b:7a:68:95:22:46:30: 7e:21:de:61:e3:77:0c:c3:d3:68:14:5b:5a:59:b5:d6:1b:3e: 3e:be:79:2b:2d:36:fd:cb:ae:f2:39:5b:93:db:ff:79:7a:a0: 2b:84:1a:dc:12:1e:49:05:9b:c2:42:9f:84:89:93:41:c6:8e: 4d:70:a1:c2:96:c9:2b:a9:fb:dc:6f:42:90:d1:cf:66:b6:7f: 6e:cf:23:17:fb:1c:6a:13:3a:6b:d2:bc:28:ed:b4:12:b8:b6: c9:e8:b9:bd:d4:01:52:aa:6d:19:04:bb:82:3b:d8:6c:98:95: b1:31:f4:f5:e7:16:39:18:43:ed:47:06:0d:73:e2:e9:e3:93: bb:64:82:9f:6c:ee:45:36:29:f4:cf:c3:a0:f2:7c:53:80:28: 1e:2b:90:22:53:d6:33:59:33:e2:35:fc:b6:5f:a6:b2:69:18: a8:28:c3:f3:08:03:af:bd:20:8e:c5:3b:00:74:cb:27:3d:ec: 14:a2:45:1f:22:6b:40:9f:f4:e7:70:18:ef:ab:29:59:35:bf: fb:ce:2a:c7:7e:10:df:63:01:4f:8a:1f:82:e2:eb:26:17:25: fd:c4:4d:3d:5e:94:12:d0:c6:aa:f7:a0:d2:ad:51:f2:ce:86: 92:0a:91:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEzQksr4FAIOSfSMUCvQHNVoHcLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhCMzkyQzgxNzNCQzA2M0FDRTlGNEY0MkM4NUU4RjNC QzI5N0ZBNDAeFw0yNTEwMjAwMzA1MzNaFw0yNTEwMjEwNTAxMzNaMDMxMTAvBgNV BAMTKDBFQzMxNTMwRTM0MTZFQjM5MjUyMzBBQURGRjYxQTYzODFGMDUzNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIo1SHidLZmUFnOEoCMu09Z9sP J722YLcnOlv3t2t6ObvQ/EDCBoPGS+WoHiifABkrkehm27aLWR/TRYu4wWK4+/CR Np/5bTEf/+VKK+/mdNnmnaXKtEyT3WHCzz2NfBjG8iTi34lUjynr3IyIF7XWnC+a G1Bz8ZsrsetMuKki0Rrd8SPVWabXvtN4s3Gmd6mzNw6CJQYAKucZLYdWXLrvkeM6 OeVVNARX4wmIIKV6FlK1sshFILJTSWfe2h0h/+9J6FMr8Zjm15faZpk3G/CJ2p0g qqKI5BXjw7uZ5S+Pt0XFDsvopwMilW87bxHvmj0HdAC/4CRk/8I/YwOGQPohAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDsMVMONBbrOSUjCq3/YaY4HwU3YwHwYDVR0j BBgwFoAUCLOSyBc7wGOs6fT0LIXo87wpf6QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWE3aHNraTFmU3drVnBnRGNqeVpCUHNBNU5ZZ1lHTG44Vzlza3lDNXc1 aUIvMC8wOEIzOTJDODE3M0JDMDYzQUNFOUY0RjQyQzg1RThGM0JDMjk3RkE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4QjM5MkM4MTczQkMwNjNB Q0U5RjRGNDJDODVFOEYzQkMyOTdGQTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWE3aHNraTFmU3drVnBnRGNqeVpCUHNBNU5ZZ1lHTG44Vzlza3lDNXc1aUIvMC8w OEIzOTJDODE3M0JDMDYzQUNFOUY0RjQyQzg1RThGM0JDMjk3RkE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu+upN0UYhiT0xRxremiVIkYwfiHeYeN3DMPTaBRbWlm11hs+Pr55Ky02/cuu 8jlbk9v/eXqgK4Qa3BIeSQWbwkKfhImTQcaOTXChwpbJK6n73G9CkNHPZrZ/bs8j F/scahM6a9K8KO20Eri2yei5vdQBUqptGQS7gjvYbJiVsTH09ecWORhD7UcGDXPi 6eOTu2SCn2zuRTYp9M/DoPJ8U4AoHiuQIlPWM1kz4jX8tl+msmkYqCjD8wgDr70g jsU7AHTLJz3sFKJFHyJrQJ/053AY76spWTW/+84qx34Q32MBT4ofguLrJhcl/cRN PV6UEtDGqveg0q1R8s6GkgqRsg== -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:51 2025 by rpki-client