$ rpki-client -vvf rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft File: A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft (raw, json) Hash identifier: +0e0lQdF5Eb/DRXj7L+mKxgNjRlhpJ1pQJJvTn5SaUw= Subject key identifier: F2:1C:C8:A7:A8:59:B1:5B:0C:B4:09:76:C6:9A:30:B6:93:A6:C0:89 Authority key identifier: A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78 Certificate issuer: /CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478 Certificate serial: 3CFF8AF4E58E342CCF7EAA1F5ABB68605482A39F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer Subject info access: rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft Manifest number: 0182 Signing time: Mon 20 Oct 2025 01:18:47 +0000 Manifest this update: Mon 20 Oct 2025 01:13:47 +0000 Manifest next update: Tue 21 Oct 2025 02:48:47 +0000 Files and hashes: 1: A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl (hash: UxGrq+KG8wnU2zP8eUY5812mfmihc6w097SXuwOdBGk=) 2: 323830343a373865633a323030303a3a2f33362d3336203d3e20323731323734.roa (hash: /GVfblh8G4/htSymp0DWV+ukSlnZu4UwALGlIKuOsz0=) 3: 323830343a373865633a3a2f33322d3332203d3e20323731323734.roa (hash: 2W2KSo/Abj/XorQFmTqJcenbjW+CL3gGoaAjYN3R7js=) 4: 323830343a373865633a313030303a3a2f33362d3336203d3e20323731323734.roa (hash: oLmLFNGFzVEdnh4c4itLZP17aZpEt3QNy5IaojB/SV4=) 5: 3139302e31322e3133362e302f32322d3234203d3e20323731323734.roa (hash: Q3yHgRlmtEhdQ8yepDv0S7EpKfArRnJDjYInZLcsL7Y=) 6: 323830343a373865633a333030303a3a2f33362d3336203d3e20323731323734.roa (hash: itszwuEmuIFWcA7xqcmDhV3dc8Ptj1VPtF9iuMZi9H0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ff:8a:f4:e5:8e:34:2c:cf:7e:aa:1f:5a:bb:68:60:54:82:a3:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478 Validity Not Before: Oct 20 01:13:47 2025 GMT Not After : Oct 21 02:48:47 2025 GMT Subject: CN=F21CC8A7A859B15B0CB40976C69A30B693A6C089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:4e:95:89:c1:28:7a:d7:ec:46:5a:81:a0:7a: ae:60:5a:f4:2a:f2:59:34:38:9c:8b:f7:8a:c4:6e: 1a:d8:7c:d4:fb:89:d6:aa:de:85:86:73:10:7c:26: a1:fa:4d:0f:c1:c4:47:ac:5a:d9:c4:ac:ba:9c:d0: be:2d:31:7b:54:0c:a0:bd:7d:54:af:e3:61:a6:ea: 3c:64:fb:b4:00:47:5c:af:d6:19:ba:50:62:ae:7b: 12:c2:84:1e:45:6b:0a:a3:18:a8:bc:16:f0:e8:e4: 78:30:40:eb:f8:75:c1:3c:f6:2a:a6:69:34:4b:f5: 5e:c8:a3:74:0e:5d:64:28:f5:db:bf:ce:52:9c:5e: 6b:ca:6b:f6:89:e2:5d:44:81:dd:1a:0d:e3:80:fe: c0:87:d0:b4:72:62:6b:1c:9d:d4:a9:3c:4c:0c:5a: ac:8b:6c:4c:12:18:fd:b2:22:4a:f5:55:a4:ad:66: 31:f7:f7:2e:a8:a3:b7:68:42:b5:89:b5:80:d1:6e: 42:01:10:b2:3f:99:b6:cb:11:72:dd:41:50:a9:30: 25:22:dc:99:9d:e6:04:99:7c:14:42:06:ac:72:7f: e3:2d:a4:1b:c7:d0:c7:e0:19:a7:39:65:cb:d0:d2: cd:78:7b:a8:ac:fd:50:47:a5:21:90:fd:8b:08:e9: 85:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1C:C8:A7:A8:59:B1:5B:0C:B4:09:76:C6:9A:30:B6:93:A6:C0:89 X509v3 Authority Key Identifier: keyid:A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:08:3f:1e:64:b2:aa:8b:3a:ba:c0:e7:28:e3:ea:9f:27:10: 6a:00:b3:ac:f4:d5:e1:e6:20:b5:04:33:09:87:6d:04:32:51: 9e:0b:14:9d:84:18:a7:9d:7f:0a:e7:a5:b2:51:10:12:7a:53: 89:8e:16:01:89:1d:18:90:fd:c7:b6:69:7e:a7:ff:3f:66:12: 91:d5:ab:26:79:6c:e8:79:e3:fb:0d:2d:db:de:88:c5:1a:1c: 74:57:69:93:eb:25:49:d9:75:de:71:84:12:fd:20:cb:ea:be: 25:5a:8e:c7:ff:af:86:eb:38:ef:0e:a1:84:f2:9a:b7:d5:c3: f4:6e:95:9e:c6:f2:1c:98:8a:e2:0b:34:52:fe:ce:ea:d4:b6: fd:9e:91:f1:b4:0f:1b:a6:ce:5f:a0:b4:5a:06:1b:84:ca:7d: a1:82:4a:fb:74:a7:c5:f4:b7:be:9f:39:10:d9:cf:1e:8b:ba: a8:6b:fe:55:26:11:c3:18:e2:43:45:3d:05:8a:c8:f4:eb:78: fa:07:9e:50:e4:f9:c0:13:75:1d:7e:65:e4:63:61:02:07:f8: 4e:dc:a2:11:13:a4:5b:56:51:9c:58:0e:e3:29:31:20:33:dd: 36:5c:2d:48:3d:7e:2d:84:00:c6:e6:4d:4d:94:73:09:ae:c0: c6:16:0f:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPP+K9OWONCzPfqofWrtoYFSCo58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFDQzg4QzdGRDQ5RUVCNDE2OUJDQzdGQzM2NkREQUQ3 NTBDMTQ3ODAeFw0yNTEwMjAwMTEzNDdaFw0yNTEwMjEwMjQ4NDdaMDMxMTAvBgNV BAMTKEYyMUNDOEE3QTg1OUIxNUIwQ0I0MDk3NkM2OUEzMEI2OTNBNkMwODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3TpWJwSh61+xGWoGgeq5gWvQq 8lk0OJyL94rEbhrYfNT7idaq3oWGcxB8JqH6TQ/BxEesWtnErLqc0L4tMXtUDKC9 fVSv42Gm6jxk+7QAR1yv1hm6UGKuexLChB5FawqjGKi8FvDo5HgwQOv4dcE89iqm aTRL9V7Io3QOXWQo9du/zlKcXmvKa/aJ4l1Egd0aDeOA/sCH0LRyYmscndSpPEwM WqyLbEwSGP2yIkr1VaStZjH39y6oo7doQrWJtYDRbkIBELI/mbbLEXLdQVCpMCUi 3Jmd5gSZfBRCBqxyf+MtpBvH0MfgGac5ZcvQ0s14e6is/VBHpSGQ/YsI6YVHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8hzIp6hZsVsMtAl2xpowtpOmwIkwHwYDVR0j BBgwFoAUocyIx/1J7rQWm8x/w2bdrXUMFHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGZoVDdqSjJDbVk5NEdFVkt4OGd5bVNDUDg0SGRQazhUa0VTRXNaWlFh N3UvMC9BMUNDODhDN0ZENDlFRUI0MTY5QkNDN0ZDMzY2RERBRDc1MEMxNDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExQ0M4OEM3RkQ0OUVFQjQx NjlCQ0M3RkMzNjZEREFENzUwQzE0NzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGZoVDdqSjJDbVk5NEdFVkt4OGd5bVNDUDg0SGRQazhUa0VTRXNaWlFhN3UvMC9B MUNDODhDN0ZENDlFRUI0MTY5QkNDN0ZDMzY2RERBRDc1MEMxNDc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhgg/HmSyqos6usDnKOPqnycQagCzrPTV4eYgtQQzCYdtBDJRngsUnYQYp51/ CuelslEQEnpTiY4WAYkdGJD9x7Zpfqf/P2YSkdWrJnls6Hnj+w0t296IxRocdFdp k+slSdl13nGEEv0gy+q+JVqOx/+vhus47w6hhPKat9XD9G6VnsbyHJiK4gs0Uv7O 6tS2/Z6R8bQPG6bOX6C0WgYbhMp9oYJK+3SnxfS3vp85ENnPHou6qGv+VSYRwxji Q0U9BYrI9Ot4+geeUOT5wBN1HX5l5GNhAgf4TtyiEROkW1ZRnFgO4ykxIDPdNlwt SD1+LYQAxuZNTZRzCa7AxhYPuw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:43:45 2025 by rpki-client