$ rpki-client -vvf rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/8238EB7EFD442CD17FEB767C5F74049E1AC52979.mft File: 8238EB7EFD442CD17FEB767C5F74049E1AC52979.mft (raw, json) Hash identifier: Jb4hnb7w//8tk+fTceDzjakm/yBLXbTtIMDODiW/Les= Subject key identifier: 28:88:61:32:71:A4:5E:FC:53:C4:80:6A:C9:B1:23:CA:FF:01:6E:EC Authority key identifier: 82:38:EB:7E:FD:44:2C:D1:7F:EB:76:7C:5F:74:04:9E:1A:C5:29:79 Certificate issuer: /CN=8238EB7EFD442CD17FEB767C5F74049E1AC52979 Certificate serial: 6075BC256F5493BD60D4D759D063F23BA82C0053 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238EB7EFD442CD17FEB767C5F74049E1AC52979.cer Subject info access: rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/8238EB7EFD442CD17FEB767C5F74049E1AC52979.mft Manifest number: 2D Signing time: Mon 03 Nov 2025 06:58:24 +0000 Manifest this update: Mon 03 Nov 2025 06:53:24 +0000 Manifest next update: Tue 04 Nov 2025 08:46:24 +0000 Files and hashes: 1: 3133382e3131382e34302e302f32322d3332203d3e20323634323539.roa (hash: CGMYCuwpCuvrB1zGBmuoqGdhnBezP8PhYrcw93PKOrM=) 2: 323830343a323531343a3a2f33322d313238203d3e20323634323539.roa (hash: fUn/l07CRsywaYrCwb4RVxAOCaDF+ZRnC3DlcyedirY=) 3: 8238EB7EFD442CD17FEB767C5F74049E1AC52979.crl (hash: LmsLkHE0LtNRb7EEX317iYcxprCKWYiPsKMzPe/AdOQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/8238EB7EFD442CD17FEB767C5F74049E1AC52979.crl rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/8238EB7EFD442CD17FEB767C5F74049E1AC52979.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238EB7EFD442CD17FEB767C5F74049E1AC52979.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 08:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:75:bc:25:6f:54:93:bd:60:d4:d7:59:d0:63:f2:3b:a8:2c:00:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8238EB7EFD442CD17FEB767C5F74049E1AC52979 Validity Not Before: Nov 3 06:53:24 2025 GMT Not After : Nov 4 08:46:24 2025 GMT Subject: CN=2888613271A45EFC53C4806AC9B123CAFF016EEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:94:21:ba:b4:37:c4:d5:54:49:e6:9f:8a:3f: cf:af:78:be:55:dd:d2:87:aa:82:aa:e5:87:2d:77: d6:6d:0f:52:a6:4e:1f:9c:e5:c9:44:bc:5c:c9:01: dc:a1:5f:d6:74:f4:9f:37:be:58:cb:8a:47:ac:74: 47:a0:b4:bd:c7:d0:34:03:54:5d:53:77:50:08:31: 00:fb:ea:af:fa:53:78:24:21:ef:b1:fa:b7:c2:c1: 8f:9b:e6:11:92:96:22:26:43:e9:36:0b:84:7a:7f: 07:3a:2c:4e:ec:a2:91:ec:44:28:53:64:a2:4a:26: 07:05:0b:21:c1:65:cb:b0:0a:46:2f:db:ca:40:40: ed:f6:e7:6c:bd:41:c3:14:2c:57:c2:64:ef:4f:da: 5a:09:50:44:15:32:cf:2d:71:81:31:26:28:d4:b5: 86:95:51:34:3f:a4:c1:53:a4:bb:d1:f3:81:76:8b: 29:b8:8b:be:47:b7:13:e5:07:2d:51:90:65:63:5e: 28:80:5d:84:08:e2:42:4f:49:19:06:56:3f:9e:62: b3:7e:d8:b0:7a:78:9a:c2:aa:9d:e3:c1:54:b6:c8: aa:ac:a3:d3:88:12:92:77:c5:34:10:4f:be:1e:4f: b4:c4:a7:0c:dc:40:d7:bf:86:18:4d:bf:17:52:fd: 5c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:88:61:32:71:A4:5E:FC:53:C4:80:6A:C9:B1:23:CA:FF:01:6E:EC X509v3 Authority Key Identifier: keyid:82:38:EB:7E:FD:44:2C:D1:7F:EB:76:7C:5F:74:04:9E:1A:C5:29:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/8238EB7EFD442CD17FEB767C5F74049E1AC52979.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238EB7EFD442CD17FEB767C5F74049E1AC52979.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/8238EB7EFD442CD17FEB767C5F74049E1AC52979.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a5:c1:8b:6b:e8:74:68:73:3d:7d:37:d5:08:18:02:da:c5: 30:0e:b7:bc:b7:71:55:fc:ab:36:1f:3e:3e:a3:34:eb:42:2f: be:73:7d:42:04:9b:1c:e9:d2:74:77:7b:ff:5d:26:4f:c6:3a: af:52:fe:4c:12:2d:65:01:ae:f0:10:b4:f3:eb:8c:24:0f:f9: 38:e8:96:5b:c6:65:0e:ad:27:4d:a1:75:72:0e:8f:88:df:b3: c3:08:e9:dc:56:e0:0b:70:c7:55:d0:f5:60:e8:d1:04:00:75: 0f:34:58:63:be:d3:99:07:64:e5:43:c2:d6:3c:49:14:6a:06: 33:5f:47:f4:74:08:84:fe:ac:ed:93:65:1c:f4:1e:c9:b6:ae: 1d:d4:83:9d:3d:01:27:3c:62:31:6d:e5:90:3e:a7:15:bc:72: de:bb:33:5a:49:3a:b3:52:24:c6:95:96:97:7a:5c:2b:64:c9: fa:64:c5:75:0c:58:3e:e5:b0:bb:b0:93:30:ee:22:7a:f9:2b: 69:20:23:e7:39:94:f6:d1:2e:1f:19:d3:76:c4:b7:d7:7d:8b: f5:13:83:d5:cf:e9:cd:a8:ad:87:c6:10:c7:82:e4:05:5a:dc: e2:16:47:07:af:80:d1:37:a8:89:fe:9d:fe:73:dd:ad:ae:e0: 5c:f7:b4:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYHW8JW9Uk71g1NdZ0GPyO6gsAFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIzOEVCN0VGRDQ0MkNEMTdGRUI3NjdDNUY3NDA0OUUx QUM1Mjk3OTAeFw0yNTExMDMwNjUzMjRaFw0yNTExMDQwODQ2MjRaMDMxMTAvBgNV BAMTKDI4ODg2MTMyNzFBNDVFRkM1M0M0ODA2QUM5QjEyM0NBRkYwMTZFRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmlCG6tDfE1VRJ5p+KP8+veL5V 3dKHqoKq5Yctd9ZtD1KmTh+c5clEvFzJAdyhX9Z09J83vljLikesdEegtL3H0DQD VF1Td1AIMQD76q/6U3gkIe+x+rfCwY+b5hGSliImQ+k2C4R6fwc6LE7sopHsRChT ZKJKJgcFCyHBZcuwCkYv28pAQO3252y9QcMULFfCZO9P2loJUEQVMs8tcYExJijU tYaVUTQ/pMFTpLvR84F2iym4i75HtxPlBy1RkGVjXiiAXYQI4kJPSRkGVj+eYrN+ 2LB6eJrCqp3jwVS2yKqso9OIEpJ3xTQQT74eT7TEpwzcQNe/hhhNvxdS/VznAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKIhhMnGkXvxTxIBqybEjyv8BbuwwHwYDVR0j BBgwFoAUgjjrfv1ELNF/63Z8X3QEnhrFKXkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlcyZldFY3lKOTRKQkNad2p3R0R6ZUNhV0NNTVp4OHUxV0h2cndoTHc5 RFovMC84MjM4RUI3RUZENDQyQ0QxN0ZFQjc2N0M1Rjc0MDQ5RTFBQzUyOTc5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgyMzhFQjdFRkQ0NDJDRDE3 RkVCNzY3QzVGNzQwNDlFMUFDNTI5NzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlcyZldFY3lKOTRKQkNad2p3R0R6ZUNhV0NNTVp4OHUxV0h2cndoTHc5RFovMC84 MjM4RUI3RUZENDQyQ0QxN0ZFQjc2N0M1Rjc0MDQ5RTFBQzUyOTc5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf6XBi2vodGhzPX031QgYAtrFMA63vLdxVfyrNh8+PqM060IvvnN9QgSbHOnS dHd7/10mT8Y6r1L+TBItZQGu8BC08+uMJA/5OOiWW8ZlDq0nTaF1cg6PiN+zwwjp 3FbgC3DHVdD1YOjRBAB1DzRYY77TmQdk5UPC1jxJFGoGM19H9HQIhP6s7ZNlHPQe ybauHdSDnT0BJzxiMW3lkD6nFbxy3rszWkk6s1IkxpWWl3pcK2TJ+mTFdQxYPuWw u7CTMO4ievkraSAj5zmU9tEuHxnTdsS3132L9ROD1c/pzaith8YQx4LkBVrc4hZH B6+A0Teoif6d/nPdra7gXPe0Iw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:01:26 2025 by rpki-client