$ rpki-client -vvf rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.mft File: 88F45CA9F42577057740B3862841E292FEE58105.mft (raw, json) Hash identifier: Spr8RBYwBDUM8PqalUjuGIeuNWK2HqVopWwEAnkc8x0= Subject key identifier: 75:49:24:8A:D6:43:61:CE:EF:EF:7A:28:67:CD:EA:90:18:C7:B1:AD Authority key identifier: 88:F4:5C:A9:F4:25:77:05:77:40:B3:86:28:41:E2:92:FE:E5:81:05 Certificate issuer: /CN=88F45CA9F42577057740B3862841E292FEE58105 Certificate serial: 2BAFA2077A3C8C23260CDAA2FFCC2B6D29E50C37 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer Subject info access: rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.mft Manifest number: 01D7 Signing time: Mon 20 Oct 2025 14:20:47 +0000 Manifest this update: Mon 20 Oct 2025 14:15:47 +0000 Manifest next update: Tue 21 Oct 2025 15:00:47 +0000 Files and hashes: 1: 3137372e3138342e3232342e302f32302d3234203d3e203532393234.roa (hash: tYQ5aVdpKWE5GH0LnPRha2eDtO7fiQ5Lc0RMo6kPstc=) 2: 3137372e3138342e3232392e302f32342d3234203d3e20323733333830.roa (hash: 7ssw5qZWkqKDUwsJ7bDirXyPhXZD06dbmAyXH1hg4c4=) 3: 323830343a333665383a3a2f33322d313238203d3e203532393234.roa (hash: CmrKvDLhcDv1r2PrhVlZCz2GKreNOwMygVFrjT4bGkk=) 4: 88F45CA9F42577057740B3862841E292FEE58105.crl (hash: bDV36784iUP++YNld6PE5Oy8Owvf+d2hx/wPScaIBGk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.crl rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:af:a2:07:7a:3c:8c:23:26:0c:da:a2:ff:cc:2b:6d:29:e5:0c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88F45CA9F42577057740B3862841E292FEE58105 Validity Not Before: Oct 20 14:15:47 2025 GMT Not After : Oct 21 15:00:47 2025 GMT Subject: CN=7549248AD64361CEEFEF7A2867CDEA9018C7B1AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:7c:89:14:ce:23:9f:fc:a9:22:22:ea:f7: 56:6b:7c:51:2d:1f:a4:fc:8d:b0:8e:d8:18:0d:d0: a0:fa:43:3d:1c:5a:3c:5e:a1:27:6e:98:27:bd:a4: 0b:c2:d2:49:7d:ed:36:81:ea:30:7b:e1:75:e1:fb: 9b:15:89:80:ed:48:88:89:a2:ac:36:98:dc:de:37: 46:f3:0b:50:d6:e3:32:cd:cd:48:34:42:05:6b:81: ef:d7:1e:6f:89:92:c7:c7:67:8b:47:8c:22:1d:10: c0:23:0b:d7:26:20:2d:3c:b0:8b:9b:c0:89:24:74: 8c:2a:c7:9b:87:4c:d6:eb:3a:48:c1:05:f3:f0:a8: 3a:59:3f:38:64:99:41:72:b0:1b:a4:e2:a1:e4:17: b6:e0:54:1f:ca:c0:cf:7f:7b:f4:ff:4f:fb:10:f2: cc:93:c4:d8:8a:f8:77:21:3a:08:9c:0e:ea:4e:56: 88:5c:3e:76:a3:58:b8:e8:8b:d9:1e:4d:0b:11:84: 04:6f:2c:af:99:00:fc:ea:62:e9:1a:eb:fc:40:19: 3f:de:3d:ee:96:45:7f:91:7a:cb:4f:df:d4:f5:14: 23:e4:69:cf:9c:2f:c2:f5:fd:25:14:06:88:ab:cd: ea:53:02:03:bf:27:35:53:41:6f:4e:4b:a0:ee:a5: ba:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:49:24:8A:D6:43:61:CE:EF:EF:7A:28:67:CD:EA:90:18:C7:B1:AD X509v3 Authority Key Identifier: keyid:88:F4:5C:A9:F4:25:77:05:77:40:B3:86:28:41:E2:92:FE:E5:81:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:59:ed:39:2a:4c:30:b8:2b:28:ef:55:1d:18:48:7b:c7:eb: f1:b4:a0:88:57:d9:52:c8:e5:0f:97:cc:1d:82:dd:f2:12:95: fa:e9:38:f8:0c:2a:a2:98:4a:e0:ba:2f:89:33:f6:59:43:f8: a9:8e:25:55:26:68:8a:20:5a:7c:e7:3f:9c:f4:f9:f1:e2:03: a4:86:3f:4e:56:92:0b:dc:07:4c:61:9b:04:05:4b:68:94:bf: fb:45:dc:ff:55:94:b0:64:1a:bb:30:82:2e:2b:5b:bb:8c:be: d6:96:7f:ce:b8:98:f2:c6:ee:30:c2:a6:a7:51:46:e4:7f:da: 65:49:e5:ad:61:05:5a:52:e1:bf:61:74:3f:10:d0:68:c1:40: ac:03:bd:ff:ea:1c:4e:18:d9:8d:1d:fa:19:45:7b:9d:be:25: 15:45:83:54:6e:8d:b7:24:3c:fd:30:ec:ee:a1:33:29:63:45: 71:05:7e:e2:19:77:12:ec:c9:63:d5:d9:73:5e:99:b3:10:db: cb:bd:01:bb:32:64:2e:13:d7:f3:d2:a9:ad:c6:18:b2:fd:94: 3e:35:93:75:de:26:56:f5:07:0e:09:67:86:ef:db:39:3b:d5: 31:41:3d:3b:21:2c:6d:d7:f9:23:8e:45:f0:0e:34:eb:ca:98: 95:69:7f:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUK6+iB3o8jCMmDNqi/8wrbSnlDDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhGNDVDQTlGNDI1NzcwNTc3NDBCMzg2Mjg0MUUyOTJG RUU1ODEwNTAeFw0yNTEwMjAxNDE1NDdaFw0yNTEwMjExNTAwNDdaMDMxMTAvBgNV BAMTKDc1NDkyNDhBRDY0MzYxQ0VFRkVGN0EyODY3Q0RFQTkwMThDN0IxQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyyXyJFM4jn/ypIiLq91ZrfFEt H6T8jbCO2BgN0KD6Qz0cWjxeoSdumCe9pAvC0kl97TaB6jB74XXh+5sViYDtSIiJ oqw2mNzeN0bzC1DW4zLNzUg0QgVrge/XHm+JksfHZ4tHjCIdEMAjC9cmIC08sIub wIkkdIwqx5uHTNbrOkjBBfPwqDpZPzhkmUFysBuk4qHkF7bgVB/KwM9/e/T/T/sQ 8syTxNiK+HchOgicDupOVohcPnajWLjoi9keTQsRhARvLK+ZAPzqYuka6/xAGT/e Pe6WRX+RestP39T1FCPkac+cL8L1/SUUBoirzepTAgO/JzVTQW9OS6DupboHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdUkkitZDYc7v73ooZ83qkBjHsa0wHwYDVR0j BBgwFoAUiPRcqfQldwV3QLOGKEHikv7lgQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDJzcmNyU0piVm5odUxoWWhCczNycFJUQ3E3bVp5dXJYRm1IV25pbkJH TUYvMC84OEY0NUNBOUY0MjU3NzA1Nzc0MEIzODYyODQxRTI5MkZFRTU4MTA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4RjQ1Q0E5RjQyNTc3MDU3 NzQwQjM4NjI4NDFFMjkyRkVFNTgxMDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDJzcmNyU0piVm5odUxoWWhCczNycFJUQ3E3bVp5dXJYRm1IV25pbkJHTUYvMC84 OEY0NUNBOUY0MjU3NzA1Nzc0MEIzODYyODQxRTI5MkZFRTU4MTA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO1ntOSpMMLgrKO9VHRhIe8fr8bSgiFfZUsjlD5fMHYLd8hKV+uk4+AwqophK 4LoviTP2WUP4qY4lVSZoiiBafOc/nPT58eIDpIY/TlaSC9wHTGGbBAVLaJS/+0Xc /1WUsGQauzCCLitbu4y+1pZ/zriY8sbuMMKmp1FG5H/aZUnlrWEFWlLhv2F0PxDQ aMFArAO9/+ocThjZjR36GUV7nb4lFUWDVG6NtyQ8/TDs7qEzKWNFcQV+4hl3EuzJ Y9XZc16ZsxDby70BuzJkLhPX89KprcYYsv2UPjWTdd4mVvUHDglnhu/bOTvVMUE9 OyEsbdf5I45F8A4068qYlWl/AQ== -----END CERTIFICATE-----Generated at Mon Oct 20 23:34:48 2025 by rpki-client