$ rpki-client -vvf rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft File: 8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft (raw, json) Hash identifier: phQvpU5TRr+YtUxFuXTk4vF1XJ0L4IA5EDm5uI8/41Q= Subject key identifier: 62:50:77:B5:E4:C3:58:FE:38:2C:62:09:E2:39:38:40:74:D1:C6:68 Authority key identifier: 8E:C7:D5:A9:01:6A:AE:FC:41:0E:D4:66:E0:0B:14:EB:DC:E6:EE:7F Certificate issuer: /CN=8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F Certificate serial: 25DF44A3505BD5BA046F5C819AD3A25FAACD3894 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer Subject info access: rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft Manifest number: 0302 Signing time: Mon 03 Nov 2025 08:43:45 +0000 Manifest this update: Mon 03 Nov 2025 08:38:45 +0000 Manifest next update: Tue 04 Nov 2025 11:02:45 +0000 Files and hashes: 1: 3137302e37382e3130302e302f32322d3234203d3e20323636323737.roa (hash: EOg/hM1DxnfBQMJLRQ41kPRgUah10XE4r5WsOtjys1w=) 2: 8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl (hash: icCrNpfIYU3DV5zyrqrhQEnuyDOettJHQN1JETO5klI=) 3: 323830343a333534303a3a2f33322d3438203d3e20323636323737.roa (hash: P1a8+zNmPoNV87lU1gPo9XyXRrpLc9cUorv71O21VUA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:df:44:a3:50:5b:d5:ba:04:6f:5c:81:9a:d3:a2:5f:aa:cd:38:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F Validity Not Before: Nov 3 08:38:45 2025 GMT Not After : Nov 4 11:02:45 2025 GMT Subject: CN=625077B5E4C358FE382C6209E239384074D1C668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3f:d8:13:40:e2:6c:cf:56:56:30:41:66:64: 36:26:f8:43:bd:68:7e:51:bd:e7:d8:7f:f9:bf:79: 1f:33:3a:37:b9:d8:5f:e3:31:ac:2d:49:67:f0:d3: fa:43:e2:b6:0d:15:b4:31:78:cd:73:f8:ce:7f:61: 26:f6:c2:d1:55:bf:93:f5:fb:78:3a:92:06:07:0e: 5d:20:c7:50:ff:e7:e5:3b:9c:62:0a:e4:b4:a0:3a: b4:5c:4d:bd:78:05:f7:8e:e3:34:20:b2:ac:f4:8f: 50:5d:e7:67:30:be:79:e9:d3:53:28:b9:ff:7c:6d: 4f:7d:81:31:9d:96:99:57:df:a0:4f:af:db:b5:1d: 3b:71:e1:c7:71:87:47:ea:73:35:13:60:bf:34:a9: 33:1e:e9:81:7b:b8:2c:80:bf:76:00:23:1f:07:83: 3d:e3:52:3b:7e:2d:87:28:ed:fb:04:25:9b:02:19: 73:fb:fb:5a:b4:f2:26:57:ca:b5:3a:4a:6d:51:3a: 68:f0:79:00:9d:f1:c9:e5:c0:26:e7:f4:d6:1f:18: 8d:ee:05:b7:b7:18:9f:f7:0b:7c:56:90:86:04:03: 7e:87:1c:ea:b6:81:ba:fc:3d:4b:70:77:b6:71:b4: cf:38:8b:4a:14:e1:9b:fe:fb:ec:07:06:50:7d:50: f1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:50:77:B5:E4:C3:58:FE:38:2C:62:09:E2:39:38:40:74:D1:C6:68 X509v3 Authority Key Identifier: keyid:8E:C7:D5:A9:01:6A:AE:FC:41:0E:D4:66:E0:0B:14:EB:DC:E6:EE:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a5:67:fe:ff:f8:4b:0d:9d:31:73:33:5e:d7:2e:64:9f:10: 4e:94:df:51:b6:00:6f:7d:56:d9:65:46:42:a8:1f:47:1b:77: 1f:5c:e2:d9:c9:00:d7:01:61:65:68:8c:6c:5e:32:db:d9:1b: 41:e0:14:58:38:da:81:f1:32:15:2c:6b:e6:31:33:ca:3b:21: a5:1d:e2:9e:52:1c:84:3a:e0:3f:86:fc:60:67:85:ad:fe:f4: 22:33:26:59:00:30:17:7a:e4:89:70:20:dc:9d:7d:d9:b4:5f: 45:ed:1b:aa:f7:17:a8:9d:d6:0b:db:2c:3d:c2:de:e1:c6:7e: 76:60:52:7c:84:5d:73:82:c1:df:08:41:c9:0c:04:86:d1:9f: 47:0e:3a:98:fe:6c:18:ac:c5:d9:c9:4b:7f:a3:15:6d:e9:db: 84:f5:36:b8:cf:68:5c:23:68:e5:ed:27:64:fa:0a:fe:85:81: ee:51:cf:8b:cb:a0:8a:23:7f:0a:8c:29:78:d0:b4:df:6a:e2: c2:df:8c:84:1b:f1:15:30:c2:8a:8c:c4:5a:b8:ed:e5:64:dc: 4b:b1:aa:2e:8b:d2:70:06:27:f9:be:86:6a:9f:55:f2:2b:8f: 47:2a:57:13:1f:16:7f:15:80:ee:87:08:15:db:1b:79:76:51: 48:4f:98:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJd9Eo1Bb1boEb1yBmtOiX6rNOJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVDN0Q1QTkwMTZBQUVGQzQxMEVENDY2RTAwQjE0RUJE Q0U2RUU3RjAeFw0yNTExMDMwODM4NDVaFw0yNTExMDQxMTAyNDVaMDMxMTAvBgNV BAMTKDYyNTA3N0I1RTRDMzU4RkUzODJDNjIwOUUyMzkzODQwNzREMUM2NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMP9gTQOJsz1ZWMEFmZDYm+EO9 aH5RvefYf/m/eR8zOje52F/jMawtSWfw0/pD4rYNFbQxeM1z+M5/YSb2wtFVv5P1 +3g6kgYHDl0gx1D/5+U7nGIK5LSgOrRcTb14BfeO4zQgsqz0j1Bd52cwvnnp01Mo uf98bU99gTGdlplX36BPr9u1HTtx4cdxh0fqczUTYL80qTMe6YF7uCyAv3YAIx8H gz3jUjt+LYco7fsEJZsCGXP7+1q08iZXyrU6Sm1ROmjweQCd8cnlwCbn9NYfGI3u Bbe3GJ/3C3xWkIYEA36HHOq2gbr8PUtwd7ZxtM84i0oU4Zv+++wHBlB9UPF9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYlB3teTDWP44LGIJ4jk4QHTRxmgwHwYDVR0j BBgwFoAUjsfVqQFqrvxBDtRm4AsU69zm7n8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlBwZUg0aFV3SFNtTlY5aHc3Y3g0Um1GOG90Sk5OOEhQZndrbUZuOTR1 aXMvMS84RUM3RDVBOTAxNkFBRUZDNDEwRUQ0NjZFMDBCMTRFQkRDRTZFRTdGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQzdENUE5MDE2QUFFRkM0 MTBFRDQ2NkUwMEIxNEVCRENFNkVFN0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlBwZUg0aFV3SFNtTlY5aHc3Y3g0Um1GOG90Sk5OOEhQZndrbUZuOTR1aXMvMS84 RUM3RDVBOTAxNkFBRUZDNDEwRUQ0NjZFMDBCMTRFQkRDRTZFRTdGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT6Vn/v/4Sw2dMXMzXtcuZJ8QTpTfUbYAb31W2WVGQqgfRxt3H1zi2ckA1wFh ZWiMbF4y29kbQeAUWDjagfEyFSxr5jEzyjshpR3inlIchDrgP4b8YGeFrf70IjMm WQAwF3rkiXAg3J192bRfRe0bqvcXqJ3WC9ssPcLe4cZ+dmBSfIRdc4LB3whByQwE htGfRw46mP5sGKzF2clLf6MVbenbhPU2uM9oXCNo5e0nZPoK/oWB7lHPi8ugiiN/ CowpeNC032riwt+MhBvxFTDCiozEWrjt5WTcS7GqLovScAYn+b6Gap9V8iuPRypX Ex8WfxWA7ocIFdsbeXZRSE+Y6g== -----END CERTIFICATE-----Generated at Mon Nov 3 19:39:24 2025 by rpki-client