$ rpki-client -vvf rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft File: 8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft (raw, json) Hash identifier: IT+M6BiqPS7Hd9MMS2b0k6ddk30bmOZ+tPpSOuzzER8= Subject key identifier: FE:06:A5:9B:F4:6D:3C:75:E9:F0:F1:75:31:9C:CE:17:EA:CB:B7:4F Authority key identifier: 8D:E5:4B:0B:23:A5:AE:C0:28:1A:FC:60:99:5B:BC:E1:13:A9:24:23 Certificate issuer: /CN=8DE54B0B23A5AEC0281AFC60995BBCE113A92423 Certificate serial: 5ADA6EE6535ECBEF85CBC19CE9203AF4F363B685 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.cer Subject info access: rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft Manifest number: 01CE Signing time: Sun 19 Oct 2025 20:22:31 +0000 Manifest this update: Sun 19 Oct 2025 20:17:31 +0000 Manifest next update: Mon 20 Oct 2025 22:56:31 +0000 Files and hashes: 1: 8DE54B0B23A5AEC0281AFC60995BBCE113A92423.crl (hash: KbqmlD5oMo76PIuYL0UUbkoQNPmT9iHAKhFys/ue93w=) 2: 323830343a323531303a3a2f33322d3438203d3e20323634323537.roa (hash: nto9EgJXC/dWG0WEdavSKMEwi3srLv0jSlA+N/kLPP4=) 3: 3133382e3131382e3130382e302f32322d3234203d3e20323634323537.roa (hash: V5tvgEYxwqyrBiZbfBmfrrGfxjZimkFzr+SP4Ye2TY8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.crl rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 22:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:da:6e:e6:53:5e:cb:ef:85:cb:c1:9c:e9:20:3a:f4:f3:63:b6:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DE54B0B23A5AEC0281AFC60995BBCE113A92423 Validity Not Before: Oct 19 20:17:31 2025 GMT Not After : Oct 20 22:56:31 2025 GMT Subject: CN=FE06A59BF46D3C75E9F0F175319CCE17EACBB74F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8e:9b:9e:39:6a:2f:4f:dd:84:0e:ec:d3:e6: 44:0f:47:2b:e4:30:b3:9b:43:43:94:c6:57:f7:2e: f8:0e:9f:94:82:81:b3:13:23:e8:3f:73:0d:a7:37: 60:72:e1:a2:82:d2:9d:ab:fb:b5:a3:d8:5d:49:99: b2:cf:74:b3:10:04:9e:a8:10:13:5c:05:c7:bd:8f: b5:c3:ae:90:24:4c:74:6a:f0:34:30:4e:24:85:13: ef:7e:2a:19:b7:4f:75:90:88:cf:23:43:d3:5f:ad: 45:12:46:92:17:19:69:88:43:cf:a2:4a:0f:9f:95: 6b:eb:64:4e:d9:5f:79:e7:6a:58:cc:38:65:23:8b: fc:e2:a6:09:b6:e9:18:ea:2c:fc:1f:a7:12:4c:42: 14:2d:54:0e:9f:fa:09:61:ca:77:87:44:b9:16:d6: aa:21:ce:8a:7e:6e:73:06:27:7d:c8:65:12:ae:5b: 59:a5:37:8f:30:ae:30:95:bb:dc:cc:d6:48:4a:80: c0:57:a5:7f:83:13:07:2f:82:1e:3e:47:c3:f7:03: 4f:82:35:7e:f1:5f:e6:91:ec:ae:78:90:f5:43:98: 39:1b:3e:f3:c5:be:57:b0:d4:68:81:eb:28:81:1b: 76:58:76:d5:55:c3:52:7e:32:dd:78:b5:7e:26:30: e0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:06:A5:9B:F4:6D:3C:75:E9:F0:F1:75:31:9C:CE:17:EA:CB:B7:4F X509v3 Authority Key Identifier: keyid:8D:E5:4B:0B:23:A5:AE:C0:28:1A:FC:60:99:5B:BC:E1:13:A9:24:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:27:e5:e3:c5:a0:d2:5f:4c:fb:1c:09:ad:5e:45:b4:6c:ee: 0d:c7:bb:3d:87:df:f7:96:4b:2b:9f:d1:ff:bb:78:89:ca:dc: 4a:8b:20:4c:f9:a7:cc:a7:35:91:19:78:74:e9:43:db:f7:34: 94:88:60:ac:99:45:db:80:a4:ed:ec:40:f8:ea:26:17:02:5a: 0b:5d:90:bd:f6:7b:dd:0d:22:c9:5c:06:3c:5b:97:16:72:35: 48:de:ba:fb:c7:ac:46:6d:98:ca:c2:38:e2:fc:c0:e6:f2:42: d8:f6:e3:2a:eb:84:92:45:2d:bd:25:ab:10:de:26:11:6e:df: de:68:d1:6d:7d:f6:5d:ac:63:a2:83:ae:70:7c:5e:77:c1:73: 4f:64:86:9f:9d:88:50:ab:d8:3c:9c:b9:eb:26:69:50:de:02: 67:b4:28:c2:5b:72:bc:4d:ef:78:d4:79:83:8f:b2:fd:86:8b: 69:38:29:9e:7d:89:6a:f2:dc:f3:33:8c:d5:eb:6c:e5:8a:d0: 66:e4:a3:fa:8e:4d:1d:1e:82:a8:2e:96:39:24:8b:85:4f:b9: af:e5:66:80:39:cd:29:b0:27:a8:b9:0c:3f:ff:05:c0:fe:84: 5a:d5:1a:53:5d:61:cd:4f:2e:40:c7:86:ce:01:14:e7:80:f9: 08:61:d0:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWtpu5lNey++Fy8Gc6SA69PNjtoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFNTRCMEIyM0E1QUVDMDI4MUFGQzYwOTk1QkJDRTEx M0E5MjQyMzAeFw0yNTEwMTkyMDE3MzFaFw0yNTEwMjAyMjU2MzFaMDMxMTAvBgNV BAMTKEZFMDZBNTlCRjQ2RDNDNzVFOUYwRjE3NTMxOUNDRTE3RUFDQkI3NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDljpueOWovT92EDuzT5kQPRyvk MLObQ0OUxlf3LvgOn5SCgbMTI+g/cw2nN2By4aKC0p2r+7Wj2F1JmbLPdLMQBJ6o EBNcBce9j7XDrpAkTHRq8DQwTiSFE+9+Khm3T3WQiM8jQ9NfrUUSRpIXGWmIQ8+i Sg+flWvrZE7ZX3nnaljMOGUji/zipgm26RjqLPwfpxJMQhQtVA6f+glhyneHRLkW 1qohzop+bnMGJ33IZRKuW1mlN48wrjCVu9zM1khKgMBXpX+DEwcvgh4+R8P3A0+C NX7xX+aR7K54kPVDmDkbPvPFvlew1GiB6yiBG3ZYdtVVw1J+Mt14tX4mMODTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/galm/RtPHXp8PF1MZzOF+rLt08wHwYDVR0j BBgwFoAUjeVLCyOlrsAoGvxgmVu84ROpJCMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0RmUnBRZ1NFSmp3Qmc1cEdLOE5wNHg3NzljN0NaQ1pCQUUyNEFQTmlw OFYvMS84REU1NEIwQjIzQTVBRUMwMjgxQUZDNjA5OTVCQkNFMTEzQTkyNDIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhERTU0QjBCMjNBNUFFQzAy ODFBRkM2MDk5NUJCQ0UxMTNBOTI0MjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0RmUnBRZ1NFSmp3Qmc1cEdLOE5wNHg3NzljN0NaQ1pCQUUyNEFQTmlwOFYvMS84 REU1NEIwQjIzQTVBRUMwMjgxQUZDNjA5OTVCQkNFMTEzQTkyNDIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABifl48Wg0l9M+xwJrV5FtGzuDce7PYff95ZLK5/R/7t4icrcSosgTPmnzKc1 kRl4dOlD2/c0lIhgrJlF24Ck7exA+OomFwJaC12QvfZ73Q0iyVwGPFuXFnI1SN66 +8esRm2YysI44vzA5vJC2PbjKuuEkkUtvSWrEN4mEW7f3mjRbX32XaxjooOucHxe d8FzT2SGn52IUKvYPJy56yZpUN4CZ7QowltyvE3veNR5g4+y/YaLaTgpnn2JavLc 8zOM1ets5YrQZuSj+o5NHR6CqC6WOSSLhU+5r+VmgDnNKbAnqLkMP/8FwP6EWtUa U11hzU8uQMeGzgEU54D5CGHQvA== -----END CERTIFICATE-----Generated at Mon Oct 20 10:15:42 2025 by rpki-client