$ rpki-client -vvf rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft File: 0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft (raw, json) Hash identifier: OO3O+DpnAGdC+lovMT5g3tOoh4spIDxIUq+dIhdtXGs= Subject key identifier: 27:BC:DC:F1:77:5A:1F:3D:14:69:B2:1F:45:C5:0D:29:03:FA:57:59 Authority key identifier: 0E:F7:13:1E:83:15:CF:BC:2A:0C:8E:B2:A6:84:48:B4:0D:F9:DD:EB Certificate issuer: /CN=0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB Certificate serial: 23107E824430EF20BCAC4CA0B6442625C9DE3D36 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft Manifest number: 02EA Signing time: Sun 19 Oct 2025 22:22:58 +0000 Manifest this update: Sun 19 Oct 2025 22:17:58 +0000 Manifest next update: Mon 20 Oct 2025 23:09:58 +0000 Files and hashes: 1: 0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl (hash: rHitcrwyfoEvO4PSMcL8audwuHy7p1wPI7bl93dXk/M=) 2: 323830313a38303a336537303a3a2f34372d3437203d3e20323731353431.roa (hash: gQvqAbK6gQBmP0J6nHXKQ8gCtZEaiIVsEdHKjqQvV/Q=) 3: 3138312e3233322e3235302e302f32332d3234203d3e20323731353431.roa (hash: 4IIa4k60q+t0mOSWWa3xktMr2fL1MMbexf0+Pk1A8dU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 23:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:10:7e:82:44:30:ef:20:bc:ac:4c:a0:b6:44:26:25:c9:de:3d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB Validity Not Before: Oct 19 22:17:58 2025 GMT Not After : Oct 20 23:09:58 2025 GMT Subject: CN=27BCDCF1775A1F3D1469B21F45C50D2903FA5759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a7:f6:74:67:12:40:37:82:9b:ec:ee:98:b1: bb:04:14:84:0b:bb:39:d2:65:2a:2f:84:45:0e:0c: 14:b9:18:05:7f:1e:bb:3f:40:4c:e1:81:68:bb:2a: f8:f5:ae:60:9a:d6:02:76:66:11:05:72:c8:93:71: af:24:5b:60:4a:9e:ca:de:4a:1b:0c:11:38:bf:1c: f5:a9:96:67:ff:df:ff:6f:6d:17:0c:64:c6:19:4d: f2:64:cc:dc:5c:31:e1:17:69:9a:ee:f1:58:cd:6a: dd:4f:a0:7d:f4:be:8d:42:c3:b5:67:a2:0b:d3:0d: f8:33:b7:09:7d:d4:4b:b1:11:e7:68:1f:63:72:f9: 30:db:10:a0:21:21:71:c9:da:31:1d:31:d7:43:03: 75:56:2b:e4:29:48:c3:93:60:df:c2:ba:a4:77:a0: 99:33:b7:31:9c:9d:03:f7:50:19:f7:e3:10:4f:81: 3d:2e:72:31:89:29:4e:65:90:22:8c:a0:8c:87:2a: 47:c0:a0:15:a3:69:60:62:27:44:d2:8e:64:d1:84: 7d:08:75:da:26:df:25:07:17:f4:d0:4c:f5:58:6f: 83:ae:ee:d2:d7:c7:45:72:39:4b:38:62:03:aa:d1: 98:95:f0:a7:33:67:c4:58:01:67:d4:1e:05:c6:65: 3c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BC:DC:F1:77:5A:1F:3D:14:69:B2:1F:45:C5:0D:29:03:FA:57:59 X509v3 Authority Key Identifier: keyid:0E:F7:13:1E:83:15:CF:BC:2A:0C:8E:B2:A6:84:48:B4:0D:F9:DD:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ce:88:a3:b2:d9:72:b4:55:70:45:b3:48:21:f0:a6:0a:bc: 4d:41:33:41:64:dc:fe:b1:e8:73:44:8e:67:08:11:3e:ea:8f: 1e:f5:57:14:53:a9:97:10:fd:bb:27:dd:77:82:1d:65:8c:aa: 98:c4:76:ec:00:63:e7:1f:01:b7:dc:cd:64:01:b2:79:d9:28: be:56:ce:18:4f:77:8f:7e:f0:32:18:e7:1d:fa:b3:ae:6b:3d: 47:29:86:58:8d:67:51:df:5a:7c:42:35:b6:8a:8e:a8:b1:80: dd:b4:70:f1:b0:9f:6c:f2:c5:22:6f:cb:85:2d:92:98:6d:ae: 05:e6:08:9b:15:02:07:e7:ab:8f:30:02:59:bd:c8:ff:57:ba: cb:02:a0:ae:07:5f:4d:ce:33:5a:f9:d2:20:ec:33:72:df:74: 84:1e:93:9d:cb:46:a1:90:ef:7a:be:12:6f:44:98:c6:18:d2: 03:cf:4c:a3:0c:2a:7e:74:a9:28:ec:7c:b4:c1:db:e9:ef:77: 1e:e4:55:d4:e9:f9:87:02:12:3c:99:d0:aa:f9:fe:f2:f0:6c: 74:30:d4:bb:ad:fd:23:79:79:60:55:f1:6c:cb:99:0f:fb:f3: 20:76:99:e2:55:df:9e:9a:b1:13:3d:a8:9c:51:ff:60:92:4f: d0:9b:ba:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIxB+gkQw7yC8rEygtkQmJcnePTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVGNzEzMUU4MzE1Q0ZCQzJBMEM4RUIyQTY4NDQ4QjQw REY5RERFQjAeFw0yNTEwMTkyMjE3NThaFw0yNTEwMjAyMzA5NThaMDMxMTAvBgNV BAMTKDI3QkNEQ0YxNzc1QTFGM0QxNDY5QjIxRjQ1QzUwRDI5MDNGQTU3NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOp/Z0ZxJAN4Kb7O6YsbsEFIQL uznSZSovhEUODBS5GAV/Hrs/QEzhgWi7Kvj1rmCa1gJ2ZhEFcsiTca8kW2BKnsre ShsMETi/HPWplmf/3/9vbRcMZMYZTfJkzNxcMeEXaZru8VjNat1PoH30vo1Cw7Vn ogvTDfgztwl91EuxEedoH2Ny+TDbEKAhIXHJ2jEdMddDA3VWK+QpSMOTYN/CuqR3 oJkztzGcnQP3UBn34xBPgT0ucjGJKU5lkCKMoIyHKkfAoBWjaWBiJ0TSjmTRhH0I ddom3yUHF/TQTPVYb4Ou7tLXx0VyOUs4YgOq0ZiV8KczZ8RYAWfUHgXGZTwPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJ7zc8XdaHz0UabIfRcUNKQP6V1kwHwYDVR0j BBgwFoAUDvcTHoMVz7wqDI6ypoRItA353eswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmE1MThTbjVDWWh3SnZFaWh5dHhDdkplUHU2d3k0eUhFWDZlZkx5aUFY RkEvMS8wRUY3MTMxRTgzMTVDRkJDMkEwQzhFQjJBNjg0NDhCNDBERjlEREVCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFRjcxMzFFODMxNUNGQkMy QTBDOEVCMkE2ODQ0OEI0MERGOURERUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmE1MThTbjVDWWh3SnZFaWh5dHhDdkplUHU2d3k0eUhFWDZlZkx5aUFYRkEvMS8w RUY3MTMxRTgzMTVDRkJDMkEwQzhFQjJBNjg0NDhCNDBERjlEREVCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUs6Io7LZcrRVcEWzSCHwpgq8TUEzQWTc/rHoc0SOZwgRPuqPHvVXFFOplxD9 uyfdd4IdZYyqmMR27ABj5x8Bt9zNZAGyedkovlbOGE93j37wMhjnHfqzrms9RymG WI1nUd9afEI1toqOqLGA3bRw8bCfbPLFIm/LhS2SmG2uBeYImxUCB+erjzACWb3I /1e6ywKgrgdfTc4zWvnSIOwzct90hB6TnctGoZDver4Sb0SYxhjSA89MowwqfnSp KOx8tMHb6e93HuRV1On5hwISPJnQqvn+8vBsdDDUu639I3l5YFXxbMuZD/vzIHaZ 4lXfnpqxEz2onFH/YJJP0Ju63w== -----END CERTIFICATE-----Generated at Mon Oct 20 13:43:39 2025 by rpki-client