$ rpki-client -vvf rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.mft File: D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.mft (raw, json) Hash identifier: PNIa+2ZzKSGVRDGvyqJNXRdyucvsR2VcK00V3XJ4zi4= Subject key identifier: DE:40:6F:20:01:A9:78:5F:5B:AE:4F:81:99:5A:4E:DB:4D:06:A2:E8 Authority key identifier: D0:C7:38:2C:3F:8D:E8:1A:23:90:89:9A:35:04:85:2C:3F:3E:2F:AF Certificate issuer: /CN=D0C7382C3F8DE81A2390899A3504852C3F3E2FAF Certificate serial: 4DDF198A564D4704AFBED1227217EDB17DCA17ED Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.cer Subject info access: rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.mft Manifest number: 21 Signing time: Mon 20 Oct 2025 03:30:56 +0000 Manifest this update: Mon 20 Oct 2025 03:25:56 +0000 Manifest next update: Tue 21 Oct 2025 03:47:56 +0000 Files and hashes: 1: D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.crl (hash: 2lO/GmXxZuPMKXeKaEu1ohufu4W8LO3CCB76OIh7kOg=) 2: 3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa (hash: Uowem+LzYl1JyCZCsHEfTMQHEAC3Ebsrx0Hmo5HI4bQ=) 3: 323830343a373930343a3a2f33322d313238203d3e20323731323830.roa (hash: lYvNUFCnmy0F9mKUaBfM6n6xRFogG6MEYh7M55VBPSM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.crl rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:df:19:8a:56:4d:47:04:af:be:d1:22:72:17:ed:b1:7d:ca:17:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C7382C3F8DE81A2390899A3504852C3F3E2FAF Validity Not Before: Oct 20 03:25:56 2025 GMT Not After : Oct 21 03:47:56 2025 GMT Subject: CN=DE406F2001A9785F5BAE4F81995A4EDB4D06A2E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6b:d1:41:0b:51:e2:e1:b9:20:dc:52:35:a1: 80:02:e5:79:9e:47:44:6f:1d:f0:dc:36:20:a2:99: 6a:8b:38:d9:60:59:a2:c4:d8:59:43:36:e9:1e:21: 6f:21:64:ec:53:e6:03:f6:8d:15:f3:a2:5c:7e:10: 8e:67:9f:04:65:ba:ec:6a:92:a5:fc:fc:ab:2f:5b: cb:c7:5d:8f:cd:f2:5c:ef:78:d2:18:ef:98:bb:ab: 19:db:0e:82:b8:6a:bb:8f:a2:4d:8d:d2:26:b8:85: a4:af:fe:c7:4a:c6:9f:50:96:17:eb:82:af:f7:35: 59:33:5b:46:fa:34:a3:49:16:4f:6f:48:ce:6b:01: 50:ab:c2:49:c5:e6:08:49:93:5d:53:9f:21:c4:d9: b2:5f:00:29:4f:5e:f0:12:e5:6c:c4:ef:cc:d5:97: 86:85:c6:80:6f:7e:20:5e:e9:46:e4:17:27:ba:d3: 4b:e1:e2:e1:54:7f:b5:91:b6:9b:73:31:63:74:66: 84:4e:85:11:06:3a:c4:9d:34:6a:36:b9:f0:49:35: 3d:e8:7f:bf:2d:b7:1d:01:b2:9d:94:20:c5:0b:7f: b7:85:15:dc:60:9a:7d:2f:e9:16:2b:7e:a6:38:b7: fe:5c:41:23:09:b5:3b:d3:47:90:30:88:3e:0e:3b: 4f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:40:6F:20:01:A9:78:5F:5B:AE:4F:81:99:5A:4E:DB:4D:06:A2:E8 X509v3 Authority Key Identifier: keyid:D0:C7:38:2C:3F:8D:E8:1A:23:90:89:9A:35:04:85:2C:3F:3E:2F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:1d:d0:51:99:c0:d9:c9:37:2f:0f:f7:22:be:a8:66:40:e5: b8:b0:61:59:7a:fe:f0:b2:51:23:ce:ba:7a:dc:5a:f8:06:f5: 91:96:9c:25:ad:db:5f:7b:5c:7a:70:97:7e:a4:6c:23:8d:75: 9a:77:a6:4a:d5:04:96:64:50:aa:68:2b:42:eb:dc:27:84:31: 2d:90:27:1e:fc:90:15:8b:5f:fa:48:38:29:07:bd:76:ef:87: 8c:81:e2:98:93:5b:47:ea:44:f1:84:46:a8:57:cd:48:1f:71: 07:41:95:83:83:87:e3:5d:3b:89:e3:1e:0d:a0:f9:cb:4d:45: c9:43:b6:f6:ff:d7:36:ee:e5:bf:60:2a:03:4f:68:09:36:3f: 89:d1:6f:e5:6b:4c:55:88:35:f7:cb:42:b6:bb:56:97:8a:25: 6c:04:61:b7:51:79:03:8a:cf:ea:7e:7d:cc:00:54:c0:c4:e1: 64:9f:bd:f9:0c:57:3d:c6:e3:47:a3:28:f7:6b:2f:fa:57:be: ba:9c:81:c5:30:fb:61:17:39:5d:d4:40:db:d4:de:9a:4d:fa: 2f:19:8e:07:dc:0b:61:7f:c6:24:16:38:07:87:c3:5a:ae:e8: 44:70:c5:71:95:44:01:2e:54:20:79:04:95:b2:ac:01:ce:c1: 10:15:83:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTd8ZilZNRwSvvtEichftsX3KF+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDNzM4MkMzRjhERTgxQTIzOTA4OTlBMzUwNDg1MkMz RjNFMkZBRjAeFw0yNTEwMjAwMzI1NTZaFw0yNTEwMjEwMzQ3NTZaMDMxMTAvBgNV BAMTKERFNDA2RjIwMDFBOTc4NUY1QkFFNEY4MTk5NUE0RURCNEQwNkEyRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDha9FBC1Hi4bkg3FI1oYAC5Xme R0RvHfDcNiCimWqLONlgWaLE2FlDNukeIW8hZOxT5gP2jRXzolx+EI5nnwRluuxq kqX8/KsvW8vHXY/N8lzveNIY75i7qxnbDoK4aruPok2N0ia4haSv/sdKxp9Qlhfr gq/3NVkzW0b6NKNJFk9vSM5rAVCrwknF5ghJk11TnyHE2bJfAClPXvAS5WzE78zV l4aFxoBvfiBe6UbkFye600vh4uFUf7WRtptzMWN0ZoROhREGOsSdNGo2ufBJNT3o f78ttx0Bsp2UIMULf7eFFdxgmn0v6RYrfqY4t/5cQSMJtTvTR5AwiD4OO09NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3kBvIAGpeF9brk+BmVpO200GougwHwYDVR0j BBgwFoAU0Mc4LD+N6BojkImaNQSFLD8+L68wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEc4a3g4MVBZVW9STmFRcXVpRjJtNnk5eGp3dUJ5VnhlTnJpSjk5c2h3 M0svMC9EMEM3MzgyQzNGOERFODFBMjM5MDg5OUEzNTA0ODUyQzNGM0UyRkFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQzczODJDM0Y4REU4MUEy MzkwODk5QTM1MDQ4NTJDM0YzRTJGQUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEc4a3g4MVBZVW9STmFRcXVpRjJtNnk5eGp3dUJ5VnhlTnJpSjk5c2h3M0svMC9E MEM3MzgyQzNGOERFODFBMjM5MDg5OUEzNTA0ODUyQzNGM0UyRkFGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhh3QUZnA2ck3Lw/3Ir6oZkDluLBhWXr+8LJRI866etxa+Ab1kZacJa3bX3tc enCXfqRsI411mnemStUElmRQqmgrQuvcJ4QxLZAnHvyQFYtf+kg4KQe9du+HjIHi mJNbR+pE8YRGqFfNSB9xB0GVg4OH4107ieMeDaD5y01FyUO29v/XNu7lv2AqA09o CTY/idFv5WtMVYg198tCtrtWl4olbARht1F5A4rP6n59zABUwMThZJ+9+QxXPcbj R6Mo92sv+le+upyBxTD7YRc5XdRA29Temk36LxmOB9wLYX/GJBY4B4fDWq7oRHDF cZVEAS5UIHkElbKsAc7BEBWDkQ== -----END CERTIFICATE-----Generated at Mon Oct 20 08:28:22 2025 by rpki-client