$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft File: 8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft (raw, json) Hash identifier: ZVVd1WQ8iy7z4OZ6y1Wg/HlIFhlvOTmYMJBCS6dBO+0= Subject key identifier: 3C:22:00:84:9C:22:FE:04:CC:A6:B3:A1:FB:C7:79:9F:BD:23:B7:DA Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05 Certificate issuer: /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505 Certificate serial: 235B6A003867B6043F82465162BD0519A3B1662D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer Subject info access: rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft Manifest number: 0307 Signing time: Mon 03 Nov 2025 10:20:55 +0000 Manifest this update: Mon 03 Nov 2025 10:15:55 +0000 Manifest next update: Tue 04 Nov 2025 12:58:55 +0000 Files and hashes: 1: 323830343a366663343a3a2f33322d3438203d3e20323730363833.roa (hash: 9XM9sCu/TTNlq6V0+SeS3wOQF44MqPp8oXHMdR1O5SQ=) 2: 3230302e3138372e3130322e302f32342d3234203d3e20323730363833.roa (hash: +Z0ru9BsWPOHlK8tWb0IGKgXDXi0PyLC2vV8M76GVfU=) 3: 3230302e3138372e3130332e302f32342d3234203d3e20323730363833.roa (hash: KActml71cD6wjVfmrA4DV2SdMETPMc7+yZI29YEKnmM=) 4: 3230302e3138372e3130312e302f32342d3234203d3e20323730363833.roa (hash: rbaOKt87D3c/UdScnRw1BNEUloJVfu1i1+4xUlIseJA=) 5: 3230302e3138372e3130302e302f32342d3234203d3e20323730363833.roa (hash: nskPvpUAon2GR7geuGsQF/wkm/R59aEnIpAp4kUkmdg=) 6: 8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl (hash: oRhPZzxG0R2oEqwww1g/1g4gsxDDV4yuJ/EgLFn1dKw=) 7: 3230302e3138372e3130322e302f32332d3233203d3e20323730363833.roa (hash: o0hcy/9RDOTJR5RMuj3MyjZzVFgfCkfY0wQiAz+xBIc=) 8: 3230302e3138372e3130302e302f32332d3233203d3e20323730363833.roa (hash: BxB6GE4kHFzE5wUoGDmDFcb0CWCHJJOVcEpZmmtAjxI=) 9: 3230302e3138372e3130302e302f32322d3232203d3e20323730363833.roa (hash: vzsfIDw2oqflztrjwgdkWaCyFMfSI1wnTfFDvenx+5k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:5b:6a:00:38:67:b6:04:3f:82:46:51:62:bd:05:19:a3:b1:66:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505 Validity Not Before: Nov 3 10:15:55 2025 GMT Not After : Nov 4 12:58:55 2025 GMT Subject: CN=3C2200849C22FE04CCA6B3A1FBC7799FBD23B7DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c2:f9:3a:ba:cd:f2:47:cb:1f:17:4e:dc:02: c1:f3:de:91:0d:0a:6d:10:7a:24:41:37:77:91:99: f6:45:e1:81:f3:fe:d0:03:a4:d9:0e:c8:a4:dc:8c: 0e:76:bf:75:04:98:d0:4e:34:08:30:b8:aa:46:e1: e5:2a:d3:90:3d:a8:b2:ea:b0:b3:7c:02:1d:34:63: da:2b:18:10:a6:32:4f:15:42:91:d4:8d:3a:bc:b9: 35:fa:92:f9:fe:94:1d:8a:6f:c4:d4:ec:ba:34:eb: 9d:b1:ca:3d:51:7c:50:12:7e:38:a3:32:f1:7c:2b: d9:4e:75:b7:46:43:c4:8e:bb:80:0e:bb:61:dc:31: 54:65:21:13:ac:94:ca:b6:87:4a:04:c4:55:0e:59: 47:f5:4a:93:a5:9e:0e:90:39:40:71:f1:d0:70:6b: e0:3d:5b:3b:94:5c:96:af:1c:65:e3:06:c4:d3:68: 5b:2f:ed:7f:02:75:1b:e3:b4:92:49:cd:f2:c4:8f: d9:e9:81:f5:da:12:21:47:20:4f:e0:65:df:d0:a9: 94:6c:d4:ac:1c:e0:ef:95:51:38:38:44:57:df:11: 83:87:8e:68:27:d1:93:a1:27:49:c8:dd:f6:43:1e: c6:5c:03:8f:12:d5:ca:32:9f:d0:70:61:53:71:cb: 55:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:22:00:84:9C:22:FE:04:CC:A6:B3:A1:FB:C7:79:9F:BD:23:B7:DA X509v3 Authority Key Identifier: keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:4a:d9:bd:42:fb:43:17:33:e3:e9:fe:e6:3e:63:bc:e1:15: 56:1b:4a:99:f6:20:32:d0:17:97:ae:74:4a:76:dc:66:da:a8: ca:6f:99:b7:84:b4:c9:95:1b:64:be:85:52:49:c4:ed:79:36: d8:05:a2:6d:e7:bc:31:23:d3:b3:a4:a6:b9:9e:a3:d2:d7:9c: b6:47:43:c2:9b:88:8a:24:af:3a:01:3c:dd:4d:66:dc:2d:88: 71:1c:73:9c:84:6e:7b:6c:1b:55:5e:8c:f0:ec:13:4e:5d:93: 6f:82:1d:33:a6:b7:44:6f:36:9f:23:60:ac:21:5a:98:24:2a: 4f:86:3c:d6:70:36:90:f1:a6:1c:59:7d:58:3e:0d:29:6a:d8: 7e:1c:ab:f1:3b:48:5c:ee:a4:08:7a:ef:84:b6:d8:63:37:45: 0b:39:43:6f:eb:7f:d9:e8:df:8f:fc:c4:00:54:1f:e9:65:e0: 27:f6:e3:cf:e8:bd:6c:f2:0d:84:9a:4a:75:25:b9:fd:e1:fc: 2f:d4:83:a2:26:f7:e6:83:56:56:88:8d:a0:04:39:ca:20:cb: 20:3c:22:a2:d0:c9:c8:ce:50:48:54:0c:85:66:55:d1:91:b1: a4:e2:36:22:46:a8:15:3c:13:62:aa:d3:95:a3:bd:d1:5d:94: 05:3b:f5:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI1tqADhntgQ/gkZRYr0FGaOxZi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVBMjE0OTlEOUY3NkRBODVFRUM4RDhCMUE4RTNCMDY5 RDRDNzUwNTAeFw0yNTExMDMxMDE1NTVaFw0yNTExMDQxMjU4NTVaMDMxMTAvBgNV BAMTKDNDMjIwMDg0OUMyMkZFMDRDQ0E2QjNBMUZCQzc3OTlGQkQyM0I3REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjwvk6us3yR8sfF07cAsHz3pEN Cm0QeiRBN3eRmfZF4YHz/tADpNkOyKTcjA52v3UEmNBONAgwuKpG4eUq05A9qLLq sLN8Ah00Y9orGBCmMk8VQpHUjTq8uTX6kvn+lB2Kb8TU7Lo0652xyj1RfFASfjij MvF8K9lOdbdGQ8SOu4AOu2HcMVRlIROslMq2h0oExFUOWUf1SpOlng6QOUBx8dBw a+A9WzuUXJavHGXjBsTTaFsv7X8CdRvjtJJJzfLEj9npgfXaEiFHIE/gZd/QqZRs 1Kwc4O+VUTg4RFffEYOHjmgn0ZOhJ0nI3fZDHsZcA48S1coyn9BwYVNxy1XLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPCIAhJwi/gTMprOh+8d5n70jt9owHwYDVR0j BBgwFoAUjqIUmdn3bahe7I2LGo47Bp1MdQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkN4dEtnVk5qMlRQZ0cyOHJOUXp6VnI0bjIxNXRWUUV4TWdnSkF1TnJI UHkvMS84RUEyMTQ5OUQ5Rjc2REE4NUVFQzhEOEIxQThFM0IwNjlENEM3NTA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQTIxNDk5RDlGNzZEQTg1 RUVDOEQ4QjFBOEUzQjA2OUQ0Qzc1MDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkN4dEtnVk5qMlRQZ0cyOHJOUXp6VnI0bjIxNXRWUUV4TWdnSkF1TnJIUHkvMS84 RUEyMTQ5OUQ5Rjc2REE4NUVFQzhEOEIxQThFM0IwNjlENEM3NTA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHUrZvUL7Qxcz4+n+5j5jvOEVVhtKmfYgMtAXl650SnbcZtqoym+Zt4S0yZUb ZL6FUknE7Xk22AWibee8MSPTs6SmuZ6j0tectkdDwpuIiiSvOgE83U1m3C2IcRxz nIRue2wbVV6M8OwTTl2Tb4IdM6a3RG82nyNgrCFamCQqT4Y81nA2kPGmHFl9WD4N KWrYfhyr8TtIXO6kCHrvhLbYYzdFCzlDb+t/2ejfj/zEAFQf6WXgJ/bjz+i9bPIN hJpKdSW5/eH8L9SDoib35oNWVoiNoAQ5yiDLIDwiotDJyM5QSFQMhWZV0ZGxpOI2 IkaoFTwTYqrTlaO90V2UBTv1TQ== -----END CERTIFICATE-----Generated at Tue Nov 4 00:25:55 2025 by rpki-client