$ rpki-client -vvf rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft File: 8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft (raw, json) Hash identifier: o+ZnyB463570hIdlC1/NI//BRAl5iJV8WjqNXm3cLbA= Subject key identifier: 24:0A:4E:4F:53:CB:27:28:27:8C:B5:70:79:2A:2D:05:D3:56:D9:A1 Authority key identifier: 8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB Certificate issuer: /CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB Certificate serial: 4F2102397AF8BD8288ECCB37268E78245F281706 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer Subject info access: rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft Manifest number: 0200 Signing time: Sun 19 Oct 2025 20:34:28 +0000 Manifest this update: Sun 19 Oct 2025 20:29:28 +0000 Manifest next update: Mon 20 Oct 2025 22:58:28 +0000 Files and hashes: 1: 3133312e3139362e3232342e302f32322d3332203d3e20323636303036.roa (hash: 67sP77oehV8OsJ5C0Di39/vL9cRCepWrYKC3lCcA8nA=) 2: 323830343a343132343a3a2f33322d313238203d3e20323636303036.roa (hash: sXEB3N632CJdoLkCeni+7IpZM2jJ3mGY/w149wdeu3w=) 3: 8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl (hash: lL4ppumpGzJPQFqJlOHeW007va8/ELx1KHSld4sBdVo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 22:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:21:02:39:7a:f8:bd:82:88:ec:cb:37:26:8e:78:24:5f:28:17:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB Validity Not Before: Oct 19 20:29:28 2025 GMT Not After : Oct 20 22:58:28 2025 GMT Subject: CN=240A4E4F53CB2728278CB570792A2D05D356D9A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cf:cb:93:9c:0e:c9:34:24:8f:68:18:0f:5c: 9a:b8:96:00:90:df:6e:93:46:be:49:db:f3:01:fd: 5e:a5:aa:da:09:3e:7e:99:46:2c:a1:2d:48:2c:e2: f7:a2:d3:58:fd:9a:8e:d4:e3:47:f3:84:b1:a4:ab: 29:89:05:23:79:5a:8d:33:d4:4b:50:95:a5:9d:4a: 86:a8:e4:5d:93:d3:bb:f6:4b:2e:82:fd:18:1e:53: 54:57:55:60:3e:22:54:97:ce:52:9e:b7:89:3a:5e: 14:b7:96:bd:ad:72:5a:9c:89:83:b9:a8:59:a8:7f: 16:47:5f:79:04:c0:17:bc:0a:d7:3b:ba:b2:c3:2a: ef:3d:c4:c6:60:f5:56:1e:63:6c:63:b3:3b:09:5e: 3f:b6:32:1a:60:d4:5d:d0:10:e1:a7:e7:82:5b:84: b0:8a:cd:b1:4d:35:63:36:6b:7e:a1:6f:4e:d7:68: 65:22:dd:37:1b:79:6b:ec:34:88:34:8a:62:17:c4: 6e:5c:0b:ae:29:b2:d1:01:4d:33:c1:d4:01:d0:19: d1:1a:f1:6d:6c:98:9c:29:e5:1e:01:5c:1a:cb:ee: 3e:60:7a:1b:31:e9:dd:ae:25:2f:cb:7a:b4:82:11: 88:b1:c7:37:50:42:7d:ad:2f:3c:02:68:35:75:83: 32:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0A:4E:4F:53:CB:27:28:27:8C:B5:70:79:2A:2D:05:D3:56:D9:A1 X509v3 Authority Key Identifier: keyid:8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:26:4b:b8:83:9a:13:e0:46:3f:b1:8e:8a:46:a6:eb:6d:f7: d3:8b:b7:5d:0b:7a:5e:2c:f3:34:20:0c:00:85:57:6a:18:65: be:5a:87:60:05:d2:6f:16:f9:e7:13:11:e5:41:ff:25:a5:82: 48:27:5b:6b:69:d4:59:4b:0a:ed:08:9d:45:35:44:69:f8:29: ec:00:13:f9:ea:21:88:22:36:dc:5f:9e:c4:29:26:cc:99:31: 64:f5:83:78:91:c6:2c:15:a1:4d:5c:00:58:06:de:5c:f3:83: 42:8c:a8:5c:e4:c2:f1:a9:a4:60:7b:84:76:ee:f1:d0:53:21: a8:ab:f0:de:b3:a8:92:88:a8:70:bd:13:2a:32:57:14:d7:cd: cd:e6:c8:39:cd:bc:a4:27:00:a7:48:19:77:e2:f0:87:de:68: b0:c7:69:07:7d:02:fa:b7:77:53:67:20:b7:ea:da:18:88:c0: a3:13:fb:d3:57:0c:19:3f:24:57:74:ae:73:5c:08:59:3d:d1: 81:ca:65:fe:3a:da:8b:93:23:46:d8:37:76:15:7b:35:4a:1d: 3e:e4:b0:34:c9:90:23:94:15:ad:74:41:23:1a:5f:11:e5:74: 4a:a1:87:2d:16:8a:47:52:7d:3b:87:26:95:3c:c3:69:b3:3f: 0a:09:ba:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTyECOXr4vYKI7Ms3Jo54JF8oFwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5Qzg3N0NFNDk2QjRGM0ZBQkJBMUQ0OTk2QzM0RkM4 QkJGOTlCQjAeFw0yNTEwMTkyMDI5MjhaFw0yNTEwMjAyMjU4MjhaMDMxMTAvBgNV BAMTKDI0MEE0RTRGNTNDQjI3MjgyNzhDQjU3MDc5MkEyRDA1RDM1NkQ5QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtz8uTnA7JNCSPaBgPXJq4lgCQ 326TRr5J2/MB/V6lqtoJPn6ZRiyhLUgs4vei01j9mo7U40fzhLGkqymJBSN5Wo0z 1EtQlaWdSoao5F2T07v2Sy6C/RgeU1RXVWA+IlSXzlKet4k6XhS3lr2tclqciYO5 qFmofxZHX3kEwBe8Ctc7urLDKu89xMZg9VYeY2xjszsJXj+2Mhpg1F3QEOGn54Jb hLCKzbFNNWM2a36hb07XaGUi3TcbeWvsNIg0imIXxG5cC64pstEBTTPB1AHQGdEa 8W1smJwp5R4BXBrL7j5gehsx6d2uJS/LerSCEYixxzdQQn2tLzwCaDV1gzKDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJApOT1PLJygnjLVweSotBdNW2aEwHwYDVR0j BBgwFoAUipyHfOSWtPP6u6HUmWw0/Iu/mbswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0V6cG5YVjNnMWhjekJIV3FhRzZMNmczcDZwRnZuTVN0M1RGRHhNeEVT NkovMC84QTlDODc3Q0U0OTZCNEYzRkFCQkExRDQ5OTZDMzRGQzhCQkY5OUJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBOUM4NzdDRTQ5NkI0RjNG QUJCQTFENDk5NkMzNEZDOEJCRjk5QkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0V6cG5YVjNnMWhjekJIV3FhRzZMNmczcDZwRnZuTVN0M1RGRHhNeEVTNkovMC84 QTlDODc3Q0U0OTZCNEYzRkFCQkExRDQ5OTZDMzRGQzhCQkY5OUJCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGiZLuIOaE+BGP7GOikam623304u3XQt6XizzNCAMAIVXahhlvlqHYAXSbxb5 5xMR5UH/JaWCSCdba2nUWUsK7QidRTVEafgp7AAT+eohiCI23F+exCkmzJkxZPWD eJHGLBWhTVwAWAbeXPODQoyoXOTC8amkYHuEdu7x0FMhqKvw3rOokoiocL0TKjJX FNfNzebIOc28pCcAp0gZd+Lwh95osMdpB30C+rd3U2cgt+raGIjAoxP701cMGT8k V3Suc1wIWT3Rgcpl/jrai5MjRtg3dhV7NUodPuSwNMmQI5QVrXRBIxpfEeV0SqGH LRaKR1J9O4cmlTzDabM/Cgm6DQ== -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:41 2025 by rpki-client