$ rpki-client -vvf rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft File: 17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft (raw, json) Hash identifier: lqxbPpOsngH79qRBsGHjRCn4+ogkA7nliJbhJYHa6og= Subject key identifier: 52:4A:0B:1B:46:A6:8D:15:D6:8F:B0:5C:7F:2D:0A:BC:EE:73:5A:83 Authority key identifier: 17:AE:8A:BC:70:3F:A8:58:68:09:D4:D8:7E:B5:C6:45:27:88:A9:EE Certificate issuer: /CN=17AE8ABC703FA8586809D4D87EB5C6452788A9EE Certificate serial: 52C132B506B47C24E6FD8F084DACE53024F7B912 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer Subject info access: rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft Manifest number: 019D Signing time: Mon 20 Oct 2025 11:44:56 +0000 Manifest this update: Mon 20 Oct 2025 11:39:56 +0000 Manifest next update: Tue 21 Oct 2025 14:07:56 +0000 Files and hashes: 1: 323830343a393165343a3a2f33322d3438203d3e20323734363733.roa (hash: s21rNeQfq9YTEKaQ6qP+omsM/9QsW3wpcSyzvCuwbG0=) 2: 17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl (hash: UOI8rFTLDliadwiEFZ710RGP6cUBPvmmEU1fDs+457Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c1:32:b5:06:b4:7c:24:e6:fd:8f:08:4d:ac:e5:30:24:f7:b9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17AE8ABC703FA8586809D4D87EB5C6452788A9EE Validity Not Before: Oct 20 11:39:56 2025 GMT Not After : Oct 21 14:07:56 2025 GMT Subject: CN=524A0B1B46A68D15D68FB05C7F2D0ABCEE735A83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:74:2a:54:dd:d6:4a:3f:39:99:e6:e2:ad:03: 08:be:96:b9:3b:ef:f1:ce:89:44:d5:76:52:06:12: 7c:d4:74:61:97:6f:c8:f3:10:9a:79:08:42:60:c7: bd:e4:0a:af:0c:32:dc:11:61:84:40:a5:e0:2e:9a: 3d:a4:ea:30:f1:9d:96:78:8d:f1:46:27:62:7e:01: ab:57:d3:05:55:b3:b8:4e:84:b0:ce:52:37:cc:15: aa:a9:27:eb:bf:92:b6:f7:1a:24:77:1d:0e:4c:80: 51:16:3e:17:40:24:0f:2e:39:48:5e:8c:f5:9f:8b: 19:9a:bd:3b:d9:6a:32:38:7e:20:38:c4:c6:dd:44: d9:e6:2d:8d:2f:f8:0d:9c:09:c6:05:0e:68:50:db: 33:6a:19:11:27:c3:c0:e9:ca:ad:e9:4f:14:23:ae: 9d:27:77:92:87:01:d6:20:6a:49:1a:1e:28:3e:ed: 82:58:0f:f5:1d:e6:09:6d:4e:7d:94:f8:e6:2d:0f: d0:0b:6f:ee:e1:1f:3c:86:8d:2a:7a:98:de:62:da: 3e:dd:7a:7d:fd:12:43:07:51:98:da:8b:07:3c:29: 5c:ba:c7:ed:28:0a:7f:e0:ab:58:7a:f2:5a:ad:01: e8:21:f9:5c:5a:fb:21:aa:2f:97:6a:7c:57:dc:b8: c9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4A:0B:1B:46:A6:8D:15:D6:8F:B0:5C:7F:2D:0A:BC:EE:73:5A:83 X509v3 Authority Key Identifier: keyid:17:AE:8A:BC:70:3F:A8:58:68:09:D4:D8:7E:B5:C6:45:27:88:A9:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:70:0e:a1:88:13:52:29:83:9e:70:ea:df:f3:7b:c4:de:22: cd:86:3f:d8:ad:01:8e:e8:d3:aa:48:3f:ec:5a:05:a1:17:b5: ae:ea:28:31:a2:d8:d8:c8:fb:98:dd:72:be:99:7c:7a:77:c7: 2a:f7:e8:ed:b4:f2:17:fa:0c:8f:fd:d3:44:14:5b:d5:eb:6a: f8:1f:d1:08:64:98:76:50:8c:d1:82:1e:f2:42:4e:0d:03:0f: ab:b7:87:a6:a3:85:76:05:b5:f6:8d:17:80:f8:d5:5c:33:96: 5d:85:68:58:9d:20:3b:7d:3e:f1:5b:fa:0c:b0:80:23:75:fd: d8:18:7e:ca:5c:02:12:11:af:4d:9d:3b:52:31:17:ba:d8:5a: 78:21:57:90:31:3a:aa:60:79:01:83:7e:49:7d:81:70:40:50: 93:56:4f:8e:0d:63:34:02:67:7f:cc:30:e1:b8:71:0a:fa:10: d4:26:9b:da:c8:0b:f3:9d:82:d1:1c:ee:a6:ad:8b:a5:09:1e: af:93:dd:92:09:83:2c:98:f7:86:29:04:99:d3:df:96:05:46: cb:5e:20:ce:a0:3e:a7:7f:54:04:43:da:e5:b7:18:96:52:30: ca:37:54:c8:98:9d:d4:8f:d8:ac:e8:71:1a:1e:ed:f3:fb:b1: 4e:92:f4:76 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUUsEytQa0fCTm/Y8ITazlMCT3uRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBRThBQkM3MDNGQTg1ODY4MDlENEQ4N0VCNUM2NDUy Nzg4QTlFRTAeFw0yNTEwMjAxMTM5NTZaFw0yNTEwMjExNDA3NTZaMDMxMTAvBgNV BAMTKDUyNEEwQjFCNDZBNjhEMTVENjhGQjA1QzdGMkQwQUJDRUU3MzVBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+dCpU3dZKPzmZ5uKtAwi+lrk7 7/HOiUTVdlIGEnzUdGGXb8jzEJp5CEJgx73kCq8MMtwRYYRApeAumj2k6jDxnZZ4 jfFGJ2J+AatX0wVVs7hOhLDOUjfMFaqpJ+u/krb3GiR3HQ5MgFEWPhdAJA8uOUhe jPWfixmavTvZajI4fiA4xMbdRNnmLY0v+A2cCcYFDmhQ2zNqGREnw8Dpyq3pTxQj rp0nd5KHAdYgakkaHig+7YJYD/Ud5gltTn2U+OYtD9ALb+7hHzyGjSp6mN5i2j7d en39EkMHUZjaiwc8KVy6x+0oCn/gq1h68lqtAegh+Vxa+yGqL5dqfFfcuMmJAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUUkoLG0amjRXWj7Bcfy0KvO5zWoMwHwYDVR0j BBgwFoAUF66KvHA/qFhoCdTYfrXGRSeIqe4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9jaUVFelU2bVltTnFpQ2FUNHZudDRVRjRuY3laOVZoelQyYmZWeVVVZTNp LzAvMTdBRThBQkM3MDNGQTg1ODY4MDlENEQ4N0VCNUM2NDUyNzg4QTlFRS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xN0FFOEFCQzcwM0ZBODU4Njgw OUQ0RDg3RUI1QzY0NTI3ODhBOUVFLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2Np RUV6VTZtWW1OcWlDYVQ0dm50NFVGNG5jeVo5Vmh6VDJiZlZ5VVVlM2kvMC8xN0FF OEFCQzcwM0ZBODU4NjgwOUQ0RDg3RUI1QzY0NTI3ODhBOUVFLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA P3AOoYgTUimDnnDq3/N7xN4izYY/2K0BjujTqkg/7FoFoRe1ruooMaLY2Mj7mN1y vpl8enfHKvfo7bTyF/oMj/3TRBRb1etq+B/RCGSYdlCM0YIe8kJODQMPq7eHpqOF dgW19o0XgPjVXDOWXYVoWJ0gO30+8Vv6DLCAI3X92Bh+ylwCEhGvTZ07UjEXutha eCFXkDE6qmB5AYN+SX2BcEBQk1ZPjg1jNAJnf8ww4bhxCvoQ1Cab2sgL852C0Rzu pq2LpQker5PdkgmDLJj3hikEmdPflgVGy14gzqA+p39UBEPa5bcYllIwyjdUyJid 1I/YrOhxGh7t8/uxTpL0dg== -----END CERTIFICATE-----Generated at Mon Oct 20 16:25:18 2025 by rpki-client