$ rpki-client -vvf rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft File: 8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft (raw, json) Hash identifier: v5HPR3mKBH2TREO4x5XD0jqzQeWLQvCwMT0KHHokG6Q= Subject key identifier: D9:4B:B0:17:37:07:31:92:99:C8:8B:E5:3C:4A:4D:15:AD:44:28:92 Authority key identifier: 8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84 Certificate issuer: /CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084 Certificate serial: 1E0A8334D50ACB1A14986AC3F5E613F5E1F4F44C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer Subject info access: rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft Manifest number: 02F1 Signing time: Mon 20 Oct 2025 07:13:14 +0000 Manifest this update: Mon 20 Oct 2025 07:08:14 +0000 Manifest next update: Tue 21 Oct 2025 10:00:14 +0000 Files and hashes: 1: 3133382e3132312e33362e302f32322d3332203d3e20323731363233.roa (hash: 0aM/hZZShDJsW9ewKI93DVkiHc2tzvTtFjiHy0/zhVU=) 2: 323830343a376536633a3a2f33322d313238203d3e20323731363233.roa (hash: dMeIzUUgXYMifee7yUy6Z7Qqcq81KQpEhu3ht6d+GPM=) 3: 8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl (hash: XIHv6CavXBnzxrmIPs6txRzSKmOMTrb2w1bAKgWSyvs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:0a:83:34:d5:0a:cb:1a:14:98:6a:c3:f5:e6:13:f5:e1:f4:f4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084 Validity Not Before: Oct 20 07:08:14 2025 GMT Not After : Oct 21 10:00:14 2025 GMT Subject: CN=D94BB0173707319299C88BE53C4A4D15AD442892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3b:09:f6:76:b5:3a:61:dd:96:a0:20:a1:86: 6c:5c:82:35:ab:62:90:3c:3c:9d:e7:83:ba:b1:8e: 33:9f:f8:51:69:7e:f4:e1:eb:3b:7e:6a:f9:19:fb: b3:c2:39:47:66:3c:92:f2:67:de:29:df:0d:2f:be: f1:48:29:46:1b:15:4f:11:83:78:d9:c2:eb:6c:d9: 7c:6e:1a:4b:96:d5:b6:0d:37:f1:92:14:a8:75:b4: 1e:f9:70:ee:d5:be:8b:e7:b9:97:16:b5:63:f3:ea: bc:59:fb:10:16:09:d9:64:73:b8:49:d4:23:e9:05: 68:19:8f:4b:a6:b9:2a:70:ce:26:b4:3a:78:14:1b: 7f:9d:f6:27:43:8e:84:e9:23:52:2d:cc:1a:67:70: 75:67:7f:b0:8a:c5:9d:4b:10:c8:a9:63:b2:08:3b: 1d:b1:a2:39:ca:cf:80:94:77:f7:99:78:2a:b3:9b: d2:e4:f1:37:f6:a2:25:74:d5:68:7b:02:c4:de:40: bb:2b:c1:e6:16:e1:c1:27:06:3f:a6:fa:2e:bd:4c: 73:47:ef:58:a5:ae:6e:08:e9:d0:d9:8b:a6:68:5d: 94:02:c7:18:d4:c7:79:c3:e9:b8:5c:f4:05:e9:09: 22:a7:94:ad:a2:12:19:bf:bb:b9:cd:bc:42:2a:3f: 7f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4B:B0:17:37:07:31:92:99:C8:8B:E5:3C:4A:4D:15:AD:44:28:92 X509v3 Authority Key Identifier: keyid:8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:68:39:52:dc:14:62:ca:77:85:d9:92:70:69:1e:e7:69:5c: d8:96:7f:03:65:f2:1a:12:44:99:c0:5b:49:0c:c4:6a:78:93: 9d:0d:17:f2:0e:91:cb:07:81:a7:2f:0b:56:06:c5:c3:0c:76: c5:6f:f4:e8:0a:40:c9:06:92:ab:1b:0b:04:f5:17:4b:d1:86: 89:38:21:8a:06:3c:a3:e7:bc:78:66:9e:74:33:5c:fe:03:6b: 0b:ba:42:24:76:8a:b9:c7:29:11:70:7a:7b:e9:fc:d4:01:82: dd:ef:a9:70:8d:c9:bf:9f:0e:d0:bf:fd:8c:81:f6:87:d6:b4: af:8b:16:f7:0a:2d:16:59:95:a3:3f:04:14:ca:db:4d:8d:cf: 16:88:bf:66:e5:3e:42:69:a5:64:4f:31:90:5f:d3:85:09:9b: fa:63:2c:42:84:c3:ca:0d:79:c6:ce:c8:40:64:09:3c:4e:17: 57:b9:3c:ca:46:b8:4d:0c:4b:4a:5e:5e:97:e3:2e:cc:ad:45: 6a:e6:8c:6a:17:af:36:16:53:90:c2:ae:29:a0:53:89:25:4b: 63:0c:02:77:f2:76:5d:3c:57:5e:b5:01:24:6a:b4:2a:88:d3: 6a:f3:fa:5c:9b:f1:7d:25:5e:5a:d7:f3:5e:cb:b4:f8:d6:be: bc:a6:05:dc -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUHgqDNNUKyxoUmGrD9eYT9eH09EwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI4QjRFMUYzMjlCODhGNzBERTM1REEzMzBGQzFGOUNB MkI5MjA4NDAeFw0yNTEwMjAwNzA4MTRaFw0yNTEwMjExMDAwMTRaMDMxMTAvBgNV BAMTKEQ5NEJCMDE3MzcwNzMxOTI5OUM4OEJFNTNDNEE0RDE1QUQ0NDI4OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOOwn2drU6Yd2WoCChhmxcgjWr YpA8PJ3ng7qxjjOf+FFpfvTh6zt+avkZ+7PCOUdmPJLyZ94p3w0vvvFIKUYbFU8R g3jZwuts2XxuGkuW1bYNN/GSFKh1tB75cO7VvovnuZcWtWPz6rxZ+xAWCdlkc7hJ 1CPpBWgZj0umuSpwzia0OngUG3+d9idDjoTpI1ItzBpncHVnf7CKxZ1LEMipY7II Ox2xojnKz4CUd/eZeCqzm9Lk8Tf2oiV01Wh7AsTeQLsrweYW4cEnBj+m+i69THNH 71ilrm4I6dDZi6ZoXZQCxxjUx3nD6bhc9AXpCSKnlK2iEhm/u7nNvEIqP3+5AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU2UuwFzcHMZKZyIvlPEpNFa1EKJIwHwYDVR0j BBgwFoAUi4tOHzKbiPcN412jMPwfnKK5IIQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9tQURYNDdBRUR4bzVTVzVIeVNRNXl2Z21rVjhUNzRqcWt6Mlh0RTFlTWo4 LzEvOEI4QjRFMUYzMjlCODhGNzBERTM1REEzMzBGQzFGOUNBMkI5MjA4NC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84QjhCNEUxRjMyOUI4OEY3MERF MzVEQTMzMEZDMUY5Q0EyQjkyMDg0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL21B RFg0N0FFRHhvNVNXNUh5U1E1eXZnbWtWOFQ3NGpxa3oyWHRFMWVNajgvMS84QjhC NEUxRjMyOUI4OEY3MERFMzVEQTMzMEZDMUY5Q0EyQjkyMDg0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA fGg5UtwUYsp3hdmScGke52lc2JZ/A2XyGhJEmcBbSQzEaniTnQ0X8g6RyweBpy8L VgbFwwx2xW/06ApAyQaSqxsLBPUXS9GGiTghigY8o+e8eGaedDNc/gNrC7pCJHaK uccpEXB6e+n81AGC3e+pcI3Jv58O0L/9jIH2h9a0r4sW9wotFlmVoz8EFMrbTY3P Foi/ZuU+QmmlZE8xkF/ThQmb+mMsQoTDyg15xs7IQGQJPE4XV7k8yka4TQxLSl5e l+MuzK1FauaMahevNhZTkMKuKaBTiSVLYwwCd/J2XTxXXrUBJGq0KojTavP6XJvx fSVeWtfzXsu0+Na+vKYF3A== -----END CERTIFICATE-----Generated at Tue Oct 21 00:11:12 2025 by rpki-client