$ rpki-client -vvf rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft File: 78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft (raw, json) Hash identifier: DGQL7XypSlh5WK6qX+hnqNPnnRHe/sSFCDmZFvfHaD8= Subject key identifier: 3A:12:EC:50:50:E6:54:45:F3:4D:40:9A:68:3D:EC:53:23:CC:9A:39 Authority key identifier: 78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D Certificate issuer: /CN=78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D Certificate serial: 58D59748F9067A2FA71E2F5AE83BB7C39AD0FAB1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer Subject info access: rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft Manifest number: 02F3 Signing time: Mon 20 Oct 2025 10:17:18 +0000 Manifest this update: Mon 20 Oct 2025 10:12:18 +0000 Manifest next update: Tue 21 Oct 2025 13:47:18 +0000 Files and hashes: 1: 34352e3232362e34302e302f32322d3234203d3e20323636393836.roa (hash: zeikrvwxYsGPtaj6ocKVnxUi9R+T/EHQkFPReSoa1+k=) 2: 323830343a343636303a3a2f33322d3438203d3e20323636393836.roa (hash: v7Y3jL7V1UA6vJcIJQBeXwF+XqLzRyyfV/tGx9P54gs=) 3: 78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.crl (hash: wJJ7XIRpVMn3+HV6mZ3s9exx8bk9pMQUtxKeWNS66dM=) 4: 3230302e3232392e39322e302f32322d3234203d3e20323636393836.roa (hash: ImCqjIuw7ZPjN+CMKosxW66zFXcydQRtxmlATNq8CEo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.crl rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d5:97:48:f9:06:7a:2f:a7:1e:2f:5a:e8:3b:b7:c3:9a:d0:fa:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D Validity Not Before: Oct 20 10:12:18 2025 GMT Not After : Oct 21 13:47:18 2025 GMT Subject: CN=3A12EC5050E65445F34D409A683DEC5323CC9A39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:9e:c0:b4:4b:82:40:79:66:2e:77:c4:aa: 4c:a4:c0:6d:87:52:ab:4f:66:9e:7b:ca:9a:93:16: a2:c3:c0:ac:59:66:9f:60:d0:5b:af:74:3c:a5:d8: f6:80:07:6a:88:4c:e6:43:18:b1:df:be:c7:cb:d1: 89:90:e2:83:89:0d:ee:ba:73:7b:c4:bf:63:b8:33: 52:59:ba:fc:f8:2d:fa:ed:dd:e3:75:43:4a:6f:4e: 79:8d:ca:f9:55:a3:14:0a:87:de:09:b8:25:c8:68: ec:ff:8f:92:36:ca:f5:f8:3f:f0:fb:9f:51:8a:e0: f9:37:d9:f2:38:94:73:92:86:8e:95:91:1a:c5:6c: f8:10:82:ee:fb:0e:c8:76:fd:da:fa:9d:c9:ea:73: f5:1a:01:86:2f:b3:fa:43:03:f6:66:9e:1c:21:8e: 97:04:45:66:a2:20:25:bc:a9:ec:ec:db:cf:e3:2f: f6:7f:15:fa:39:03:97:54:de:c4:b0:22:5a:80:29: 9d:20:a3:70:cb:60:a8:66:d7:27:37:8a:34:54:d3: d7:b4:70:a9:10:c2:fb:98:6c:40:7d:05:af:05:b7: 64:31:d7:2f:35:a2:eb:c2:fd:d6:d7:0d:0f:98:5b: c9:18:55:95:3f:99:a5:0b:64:db:a3:ad:a1:74:91: 36:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:12:EC:50:50:E6:54:45:F3:4D:40:9A:68:3D:EC:53:23:CC:9A:39 X509v3 Authority Key Identifier: keyid:78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d2:1d:52:07:7d:80:37:ca:f3:55:86:6e:53:5f:8b:75:eb: fe:a2:78:24:64:28:34:1d:e6:a2:90:79:f1:4d:35:d2:01:4d: b2:28:b7:16:dd:54:57:4d:9c:8b:f8:f9:8d:f0:9a:80:e7:e9: 50:e2:6f:dc:9c:0a:80:ad:26:d8:98:8d:f1:94:eb:dc:12:fb: cb:e0:1f:62:96:2d:d1:63:e6:59:93:36:bc:41:66:b4:05:81: 86:3b:2e:43:d8:22:29:3f:64:8f:d2:c2:6d:64:56:a9:c3:14: 8c:73:f0:66:58:5e:10:44:68:c5:28:6a:6c:5d:ed:f2:65:05: da:66:e1:8f:18:37:a6:e4:3b:e1:52:00:92:70:dd:e8:70:43: 92:81:7c:d6:c8:d8:3e:71:c0:cb:58:20:6d:68:56:56:c2:ce: 25:f5:66:1b:a4:57:07:09:dc:28:4f:87:3e:29:6c:54:a2:c0: 79:38:dc:bf:db:3e:c7:fb:14:e6:48:49:5a:11:01:af:a7:8a: ea:60:9d:cf:60:84:1e:34:3d:b3:bd:72:e6:12:3c:c6:a7:4a: f5:52:f4:87:74:63:53:74:56:1b:24:29:9a:1c:a2:2c:c0:6d: e7:69:66:91:70:bc:94:3e:75:3d:33:56:ca:45:14:41:4e:91: d6:3e:7e:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWNWXSPkGei+nHi9a6Du3w5rQ+rEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhDMzFGODVDRjhCNkE4NDE4RkFEMjVBNTVGNTk0MkYz QkFDREUwRDAeFw0yNTEwMjAxMDEyMThaFw0yNTEwMjExMzQ3MThaMDMxMTAvBgNV BAMTKDNBMTJFQzUwNTBFNjU0NDVGMzRENDA5QTY4M0RFQzUzMjNDQzlBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyI57AtEuCQHlmLnfEqkykwG2H UqtPZp57ypqTFqLDwKxZZp9g0FuvdDyl2PaAB2qITOZDGLHfvsfL0YmQ4oOJDe66 c3vEv2O4M1JZuvz4Lfrt3eN1Q0pvTnmNyvlVoxQKh94JuCXIaOz/j5I2yvX4P/D7 n1GK4Pk32fI4lHOSho6VkRrFbPgQgu77Dsh2/dr6ncnqc/UaAYYvs/pDA/Zmnhwh jpcERWaiICW8qezs28/jL/Z/Ffo5A5dU3sSwIlqAKZ0go3DLYKhm1yc3ijRU09e0 cKkQwvuYbEB9Ba8Ft2Qx1y81ouvC/dbXDQ+YW8kYVZU/maULZNujraF0kTZtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOhLsUFDmVEXzTUCaaD3sUyPMmjkwHwYDVR0j BBgwFoAUeMMfhc+LaoQY+tJaVfWULzus3g0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzhlVlh2bUdvaG9iMWtBR1RpYUpEVUQxVVpuU1BFbTFtM1VkUTJ2cERB b1UvMS83OEMzMUY4NUNGOEI2QTg0MThGQUQyNUE1NUY1OTQyRjNCQUNERTBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4QzMxRjg1Q0Y4QjZBODQx OEZBRDI1QTU1RjU5NDJGM0JBQ0RFMEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzhlVlh2bUdvaG9iMWtBR1RpYUpEVUQxVVpuU1BFbTFtM1VkUTJ2cERBb1UvMS83 OEMzMUY4NUNGOEI2QTg0MThGQUQyNUE1NUY1OTQyRjNCQUNERTBELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAddIdUgd9gDfK81WGblNfi3Xr/qJ4JGQoNB3mopB58U010gFNsii3Ft1UV02c i/j5jfCagOfpUOJv3JwKgK0m2JiN8ZTr3BL7y+AfYpYt0WPmWZM2vEFmtAWBhjsu Q9giKT9kj9LCbWRWqcMUjHPwZlheEERoxShqbF3t8mUF2mbhjxg3puQ74VIAknDd 6HBDkoF81sjYPnHAy1ggbWhWVsLOJfVmG6RXBwncKE+HPilsVKLAeTjcv9s+x/sU 5khJWhEBr6eK6mCdz2CEHjQ9s71y5hI8xqdK9VL0h3RjU3RWGyQpmhyiLMBt52lm kXC8lD51PTNWykUUQU6R1j5+mw== -----END CERTIFICATE-----Generated at Tue Oct 21 02:09:04 2025 by rpki-client