$ rpki-client -vvf rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.mft File: 8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.mft (raw, json) Hash identifier: TELKlKqgQqj8MiCXPUFla9Q+HI5BWrreqWdUdXYAzTk= Subject key identifier: F2:9B:A1:E5:32:64:5E:59:57:1C:BA:13:F7:F5:B7:93:31:4D:55:3A Authority key identifier: 8B:E6:51:CB:0C:FD:9D:3B:1C:7B:C9:48:3B:51:70:67:2B:77:ED:4B Certificate issuer: /CN=8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B Certificate serial: 5CE20E10BAF401DBF181AD42BE4BDA002D102DBA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.mft Manifest number: 024B Signing time: Mon 03 Nov 2025 10:07:58 +0000 Manifest this update: Mon 03 Nov 2025 10:02:58 +0000 Manifest next update: Tue 04 Nov 2025 13:44:58 +0000 Files and hashes: 1: 323830343a323563343a3a2f33322d3438203d3e20323634333031.roa (hash: AGb/N8ZPtoihV0bqDpsml/vTt3PMTKJp7EIpf44fJ3E=) 2: 8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.crl (hash: eXP2nn55HkWmFu86Gv21PP/+U3nsvtKFvP50xp35G4I=) 3: 3133382e3132312e3139362e302f32322d3234203d3e20323634333031.roa (hash: Lw3oXs27+kclpcAbki3gab/aEtoYxajf5Cmi//fS1As=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.crl rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 13:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e2:0e:10:ba:f4:01:db:f1:81:ad:42:be:4b:da:00:2d:10:2d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B Validity Not Before: Nov 3 10:02:58 2025 GMT Not After : Nov 4 13:44:58 2025 GMT Subject: CN=F29BA1E532645E59571CBA13F7F5B793314D553A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ec:c4:9e:08:2e:57:ca:f2:ed:c0:bf:23:5d: 9e:b6:b1:bf:bd:32:67:f3:58:d4:2c:6a:55:f4:d2: 89:72:62:04:ac:a9:e4:88:33:d8:4a:e9:4f:db:e4: 0e:62:99:d3:a5:80:a9:34:64:2f:0a:65:47:d0:37: a1:c1:8a:23:fc:3e:70:19:7c:33:b9:d1:c8:cc:89: e7:c0:60:57:e8:72:09:3e:16:c0:36:d5:d3:72:ee: 0c:3f:f2:94:36:7c:35:ae:74:d1:19:8f:92:39:37: c3:26:fc:1c:3b:80:89:cd:07:59:8c:b2:11:ea:60: 9d:c1:8f:9d:81:8e:be:e9:d6:d4:b1:b4:79:08:96: e1:c8:97:a4:02:4a:ba:4d:09:6a:b8:6c:e6:8a:8c: 84:35:c9:53:14:e6:22:11:c4:b4:7d:ab:8b:b7:4f: 09:b4:8e:56:40:d0:36:7a:3f:40:56:bf:91:40:3e: 63:08:cc:94:79:24:e6:5d:ba:a0:1a:ce:aa:da:9c: d5:2a:86:74:a1:49:f6:b7:88:5e:f9:45:14:96:67: 09:b6:af:2c:c8:3d:21:b2:25:65:37:64:83:0d:36: 3c:bd:6e:41:cb:a6:ba:fc:cf:ed:b1:f5:87:8a:57: df:15:36:64:a5:f4:73:7f:07:67:f0:5b:b8:fc:88: 07:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9B:A1:E5:32:64:5E:59:57:1C:BA:13:F7:F5:B7:93:31:4D:55:3A X509v3 Authority Key Identifier: keyid:8B:E6:51:CB:0C:FD:9D:3B:1C:7B:C9:48:3B:51:70:67:2B:77:ED:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ec:01:77:da:6b:9a:79:91:35:4d:22:91:96:e1:86:53:ec: e8:58:29:aa:db:86:cc:46:6b:5c:44:24:74:88:37:2a:8a:7f: 78:71:8b:75:7d:cf:e2:d8:9d:5c:da:52:b9:fa:70:f2:8b:a7: 91:c8:c0:87:61:ff:16:2b:c7:0b:35:8d:4f:1e:dd:ee:ec:9a: 76:98:41:1c:0a:fc:60:7c:94:d1:87:16:33:76:66:e8:a5:f2: 82:77:87:49:57:90:ef:52:02:dd:75:43:62:da:6b:7c:7a:c6: d4:30:3a:ea:9c:1e:a8:6f:81:ea:01:71:18:93:b8:1f:ad:af: 4e:aa:94:c2:35:57:2f:40:5b:78:5e:98:ba:ac:80:17:88:2f: 2e:e5:02:b4:2c:c9:7b:a8:d9:36:99:d2:33:0b:19:b3:d4:54: a5:a0:e3:d4:43:16:2d:a6:ad:0d:9c:99:71:fb:9b:85:c9:27: 19:ad:b5:9f:c6:4c:b1:bb:9c:38:13:11:62:01:fa:ed:1f:f9: ea:c9:92:b1:6e:59:2b:ef:82:38:9a:dd:32:1b:1d:81:80:86: 22:b7:7f:28:ab:d2:66:fe:dd:7a:d9:02:3b:6a:bb:22:28:2b: 3a:ec:2b:7a:25:10:50:c2:89:27:64:50:4a:88:35:39:bc:e8: 7e:32:aa:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXOIOELr0Advxga1CvkvaAC0QLbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNjUxQ0IwQ0ZEOUQzQjFDN0JDOTQ4M0I1MTcwNjcy Qjc3RUQ0QjAeFw0yNTExMDMxMDAyNThaFw0yNTExMDQxMzQ0NThaMDMxMTAvBgNV BAMTKEYyOUJBMUU1MzI2NDVFNTk1NzFDQkExM0Y3RjVCNzkzMzE0RDU1M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI7MSeCC5XyvLtwL8jXZ62sb+9 MmfzWNQsalX00olyYgSsqeSIM9hK6U/b5A5imdOlgKk0ZC8KZUfQN6HBiiP8PnAZ fDO50cjMiefAYFfocgk+FsA21dNy7gw/8pQ2fDWudNEZj5I5N8Mm/Bw7gInNB1mM shHqYJ3Bj52Bjr7p1tSxtHkIluHIl6QCSrpNCWq4bOaKjIQ1yVMU5iIRxLR9q4u3 Twm0jlZA0DZ6P0BWv5FAPmMIzJR5JOZduqAazqranNUqhnShSfa3iF75RRSWZwm2 ryzIPSGyJWU3ZIMNNjy9bkHLprr8z+2x9YeKV98VNmSl9HN/B2fwW7j8iAc1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8puh5TJkXllXHLoT9/W3kzFNVTowHwYDVR0j BBgwFoAUi+ZRywz9nTsce8lIO1FwZyt37UswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkFINHQ0RmI5QkNodE5EeEh6V0pYWDl1dkpaZlBkd1FDZk5OV1h4aUx3 ZzgvMC84QkU2NTFDQjBDRkQ5RDNCMUM3QkM5NDgzQjUxNzA2NzJCNzdFRDRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCRTY1MUNCMENGRDlEM0Ix QzdCQzk0ODNCNTE3MDY3MkI3N0VENEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkFINHQ0RmI5QkNodE5EeEh6V0pYWDl1dkpaZlBkd1FDZk5OV1h4aUx3ZzgvMC84 QkU2NTFDQjBDRkQ5RDNCMUM3QkM5NDgzQjUxNzA2NzJCNzdFRDRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAewBd9prmnmRNU0ikZbhhlPs6FgpqtuGzEZrXEQkdIg3Kop/eHGLdX3P4tid XNpSufpw8ounkcjAh2H/FivHCzWNTx7d7uyadphBHAr8YHyU0YcWM3Zm6KXygneH SVeQ71IC3XVDYtprfHrG1DA66pweqG+B6gFxGJO4H62vTqqUwjVXL0BbeF6YuqyA F4gvLuUCtCzJe6jZNpnSMwsZs9RUpaDj1EMWLaatDZyZcfubhcknGa21n8ZMsbuc OBMRYgH67R/56smSsW5ZK++COJrdMhsdgYCGIrd/KKvSZv7detkCO2q7IigrOuwr eiUQUMKJJ2RQSog1ObzofjKqSw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:26:30 2025 by rpki-client