$ rpki-client -vvf rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft File: 020AFECF727CE88A459FCBC17D694507CE9ADE22.mft (raw, json) Hash identifier: aoYT3zcP3N+yzMrCAfDQd8f+/TeH5L6tXR+EaAnJ96M= Subject key identifier: 06:0F:8D:46:2C:F8:14:F9:1B:23:F7:A0:42:35:46:2B:64:83:F2:F1 Authority key identifier: 02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22 Certificate issuer: /CN=020AFECF727CE88A459FCBC17D694507CE9ADE22 Certificate serial: 47EA316CC561CE0DD38875528247B93973A18342 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer Subject info access: rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft Manifest number: 019B Signing time: Mon 20 Oct 2025 12:43:21 +0000 Manifest this update: Mon 20 Oct 2025 12:38:21 +0000 Manifest next update: Tue 21 Oct 2025 15:18:21 +0000 Files and hashes: 1: 020AFECF727CE88A459FCBC17D694507CE9ADE22.crl (hash: Vpoip51X0ajWzcrNopWutzpYK/7hG107/w9bKrdy9V4=) 2: 34352e3233362e33362e302f32322d3234203d3e20323638323339.roa (hash: l5hk98Te9f3haw4W1qS9Z1091bo5I8zoSjf9ylAx404=) 3: 323830343a346531383a3a2f33322d3438203d3e20323638323339.roa (hash: 6b4aeUC83dae1eovjxZwcx3YdG1I1uSyyCOQesx8Lxw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ea:31:6c:c5:61:ce:0d:d3:88:75:52:82:47:b9:39:73:a1:83:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020AFECF727CE88A459FCBC17D694507CE9ADE22 Validity Not Before: Oct 20 12:38:21 2025 GMT Not After : Oct 21 15:18:21 2025 GMT Subject: CN=060F8D462CF814F91B23F7A04235462B6483F2F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:0c:8a:ae:4d:79:3f:24:c6:e3:54:15:c3:e5: 41:66:73:41:e2:40:39:7d:75:25:ff:c1:8b:bc:ee: 64:50:b8:68:6e:9b:52:fe:19:13:ec:ef:c6:dd:22: b3:b6:58:8e:42:79:c4:67:83:79:1b:73:cf:c3:aa: 38:2c:14:fa:fd:2d:88:86:5c:12:e7:7f:40:1f:4a: 0b:7f:f0:f0:ce:5b:84:40:dc:c8:02:1e:a0:9e:bb: 40:70:57:4c:a8:9f:e6:90:fc:39:d6:f6:f3:eb:07: 15:7b:f2:84:56:b2:71:55:b5:e1:32:94:b1:ca:ab: a6:52:91:33:6d:c7:45:c2:74:6a:af:f6:79:a1:60: c7:26:3d:24:fb:9f:3d:c8:92:c9:95:cd:35:8f:1c: 04:3f:3f:61:57:a2:04:a8:2c:7a:73:42:5d:e0:db: ae:a7:8a:62:39:ba:93:d5:4b:17:42:3d:70:dd:aa: 81:6a:d1:b9:fa:ed:f5:7f:20:90:15:99:d3:a0:e8: 7e:41:61:2e:98:f8:23:1c:3a:9f:c3:33:0e:15:f8: 38:44:3a:f9:c7:14:f8:30:43:e4:c1:1e:21:fa:e3: 07:75:bd:06:b8:89:73:aa:cf:f6:bc:8e:22:5b:d4: 2a:f8:df:8b:bf:cf:ed:d6:27:be:2d:7b:00:d4:35: 26:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0F:8D:46:2C:F8:14:F9:1B:23:F7:A0:42:35:46:2B:64:83:F2:F1 X509v3 Authority Key Identifier: keyid:02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:a7:05:d3:3f:0e:19:61:c6:05:1a:29:5f:62:b9:f9:fd:07: b7:e8:87:43:c8:b7:ff:31:12:c1:fa:30:45:bb:3b:3b:d0:a4: 1e:73:88:49:93:a8:e3:8e:0d:85:84:d8:00:d0:92:e4:62:45: c9:fa:4c:31:04:72:9b:c0:92:fc:8e:98:22:6e:dc:fd:7c:f6: 3c:7f:35:2e:19:a2:ec:0f:0e:53:7f:6c:55:4b:31:4a:3c:d8: 1e:ae:55:48:31:4c:4f:1a:12:5d:a0:57:3d:f7:35:fc:f8:3c: af:6b:21:9f:b7:84:79:2f:49:1a:b8:43:4c:50:56:50:67:5e: 81:ce:5c:6d:c1:5a:fa:5e:33:46:76:69:52:48:b6:5c:9d:9f: 63:02:8f:4b:7c:6d:4e:e3:58:ac:b7:14:c3:21:91:5d:59:6c: cf:e7:b2:ca:44:d4:35:41:86:bb:7e:73:e0:ac:7d:46:14:fb: 13:ae:94:47:f8:2d:e8:61:56:aa:d1:a6:7c:8f:df:26:1d:ba: d5:93:e8:e5:94:c9:70:ce:92:52:44:73:e1:cf:9b:50:5d:40: 81:3d:64:a2:b2:2e:a2:e5:75:9d:65:1c:3c:b5:59:fd:7d:81: 0b:08:57:9a:3e:af:31:2b:e1:69:af:e8:c4:67:e1:38:b0:d2: 0d:94:90:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR+oxbMVhzg3TiHVSgke5OXOhg0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwQUZFQ0Y3MjdDRTg4QTQ1OUZDQkMxN0Q2OTQ1MDdD RTlBREUyMjAeFw0yNTEwMjAxMjM4MjFaFw0yNTEwMjExNTE4MjFaMDMxMTAvBgNV BAMTKDA2MEY4RDQ2MkNGODE0RjkxQjIzRjdBMDQyMzU0NjJCNjQ4M0YyRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6DIquTXk/JMbjVBXD5UFmc0Hi QDl9dSX/wYu87mRQuGhum1L+GRPs78bdIrO2WI5CecRng3kbc8/DqjgsFPr9LYiG XBLnf0AfSgt/8PDOW4RA3MgCHqCeu0BwV0yon+aQ/DnW9vPrBxV78oRWsnFVteEy lLHKq6ZSkTNtx0XCdGqv9nmhYMcmPST7nz3IksmVzTWPHAQ/P2FXogSoLHpzQl3g 266nimI5upPVSxdCPXDdqoFq0bn67fV/IJAVmdOg6H5BYS6Y+CMcOp/DMw4V+DhE OvnHFPgwQ+TBHiH64wd1vQa4iXOqz/a8jiJb1Cr434u/z+3WJ74tewDUNSatAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBg+NRiz4FPkbI/egQjVGK2SD8vEwHwYDVR0j BBgwFoAUAgr+z3J86IpFn8vBfWlFB86a3iIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRURnOFdHWlA0R0JzeGJZVTI1TnBIb3EyTkE0RzJ0Nlh5QjN6YjJDZWdu YUYvMC8wMjBBRkVDRjcyN0NFODhBNDU5RkNCQzE3RDY5NDUwN0NFOUFERTIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyMEFGRUNGNzI3Q0U4OEE0 NTlGQ0JDMTdENjk0NTA3Q0U5QURFMjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RURnOFdHWlA0R0JzeGJZVTI1TnBIb3EyTkE0RzJ0Nlh5QjN6YjJDZWduYUYvMC8w MjBBRkVDRjcyN0NFODhBNDU5RkNCQzE3RDY5NDUwN0NFOUFERTIyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoqcF0z8OGWHGBRopX2K5+f0Ht+iHQ8i3/zESwfowRbs7O9CkHnOISZOo444N hYTYANCS5GJFyfpMMQRym8CS/I6YIm7c/Xz2PH81Lhmi7A8OU39sVUsxSjzYHq5V SDFMTxoSXaBXPfc1/Pg8r2shn7eEeS9JGrhDTFBWUGdegc5cbcFa+l4zRnZpUki2 XJ2fYwKPS3xtTuNYrLcUwyGRXVlsz+eyykTUNUGGu35z4Kx9RhT7E66UR/gt6GFW qtGmfI/fJh261ZPo5ZTJcM6SUkRz4c+bUF1AgT1korIuouV1nWUcPLVZ/X2BCwhX mj6vMSvhaa/oxGfhOLDSDZSQPQ== -----END CERTIFICATE-----Generated at Mon Oct 20 15:41:14 2025 by rpki-client