$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.mft File: 8DADF2625ADA58A1BBED95A105F350C79962F7DF.mft (raw, json) Hash identifier: lrSeAN5qy+wmwCdbcn1js0Lhs4iIczOVoX3nVgVKGkE= Subject key identifier: 39:6D:BF:FB:44:D5:A3:EE:79:AD:AC:36:60:86:12:FE:91:8A:19:BE Authority key identifier: 8D:AD:F2:62:5A:DA:58:A1:BB:ED:95:A1:05:F3:50:C7:99:62:F7:DF Certificate issuer: /CN=8DADF2625ADA58A1BBED95A105F350C79962F7DF Certificate serial: 6C4DC34C1E764FEC6415274019144814FD55C711 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DADF2625ADA58A1BBED95A105F350C79962F7DF.cer Subject info access: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.mft Manifest number: 0137 Signing time: Sun 02 Nov 2025 19:14:50 +0000 Manifest this update: Sun 02 Nov 2025 19:09:50 +0000 Manifest next update: Mon 03 Nov 2025 19:25:50 +0000 Files and hashes: 1: 3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa (hash: jvOaxLjiqvOdI8K+lUyUL7YEETsfWoSFl0/uLR99Oe8=) 2: 323830343a313934383a3a2f33322d313238203d3e203631373834.roa (hash: c4qHtAaRVCfHGye+AmZjvOdvXcBA17zzyqsMVQdybL8=) 3: 3230312e35352e3230302e302f32322d3332203d3e203631373834.roa (hash: rT6UND/SmBGOjHVUN3QxSDRoFdYbach6YTC7z92UaOw=) 4: 8DADF2625ADA58A1BBED95A105F350C79962F7DF.crl (hash: iDqa0nTUhUwr625GvDKbytC9KGyZ9m0KKeGDNqT15Wg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.crl rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DADF2625ADA58A1BBED95A105F350C79962F7DF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 19:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:4d:c3:4c:1e:76:4f:ec:64:15:27:40:19:14:48:14:fd:55:c7:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DADF2625ADA58A1BBED95A105F350C79962F7DF Validity Not Before: Nov 2 19:09:50 2025 GMT Not After : Nov 3 19:25:50 2025 GMT Subject: CN=396DBFFB44D5A3EE79ADAC36608612FE918A19BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:31:38:19:f1:e5:64:28:df:51:ef:e0:9a:81: 96:ef:28:f4:92:06:d6:47:50:ec:be:b1:fd:b3:19: 54:f1:c0:3f:4e:55:ae:7d:85:2e:c0:d1:61:29:1f: 92:6f:ff:86:33:fa:79:21:18:d0:35:87:a8:82:99: 62:94:f7:1b:17:48:30:83:12:17:70:ec:c8:f6:32: cd:3a:b6:c5:85:3a:01:7b:a3:90:e0:32:44:be:00: ba:cb:1d:33:65:1d:55:7e:5b:d1:b1:e5:ab:b5:43: 43:ad:45:a2:a2:af:30:7d:bf:ad:55:27:68:9d:e8: 0a:f4:9d:76:c3:49:34:0e:3a:fa:d4:c8:d2:e6:2d: 8e:25:44:06:f2:1c:95:07:be:5c:f2:70:4d:3b:ef: 7a:2d:aa:bf:4d:8a:19:e4:f6:3b:6d:f6:60:12:22: 7a:ee:46:3d:c8:20:3b:71:ec:a4:f8:a8:db:c0:3f: 67:7a:cb:a2:a3:f2:af:96:bc:fe:0c:f3:35:18:d8: e0:44:43:41:84:bb:b1:7e:46:1d:2f:9a:6e:8d:8b: 68:85:cc:e2:44:0c:6b:73:43:eb:ed:74:51:e9:f0: 75:93:4a:2b:e7:86:b4:3a:a2:68:75:8b:6e:58:fa: 18:51:ea:ab:ad:17:b3:63:e7:19:d0:e7:5a:48:54: ef:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6D:BF:FB:44:D5:A3:EE:79:AD:AC:36:60:86:12:FE:91:8A:19:BE X509v3 Authority Key Identifier: keyid:8D:AD:F2:62:5A:DA:58:A1:BB:ED:95:A1:05:F3:50:C7:99:62:F7:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DADF2625ADA58A1BBED95A105F350C79962F7DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:e6:d7:fb:28:00:6b:fa:b6:27:66:c6:a9:54:23:5d:5f:e2: f5:e3:ee:d0:36:59:91:4d:fd:d3:52:ff:2c:05:31:47:cd:ba: 1f:a1:9b:72:d7:04:90:0d:2c:18:84:07:ff:71:ce:94:9f:39: 5d:b8:6d:77:c5:d6:07:64:87:d7:67:5f:b2:9f:9d:87:ea:c0: 8d:90:2b:28:ad:c7:1e:a6:32:e0:2f:c7:00:01:59:86:6a:6d: 73:e8:38:0f:5a:6a:78:3f:a6:bb:45:da:09:d6:64:01:89:d7: f2:ac:04:58:51:0a:1b:17:7e:ce:c6:6c:90:5b:97:48:8b:c8: f1:82:5c:28:cf:bb:68:90:18:5f:7f:98:35:39:95:1d:0d:2a: dd:39:ba:0c:be:50:10:41:7b:10:3a:50:bc:1c:f4:bf:85:e5: 60:d5:e3:07:54:48:af:44:e5:80:09:76:f9:4b:40:bb:30:16: b1:17:c9:78:3e:28:77:ea:59:73:b0:cc:3c:d5:6e:d9:ef:72: 05:e6:77:7e:13:a5:28:99:f4:d2:b0:28:15:e0:b1:4a:74:42: eb:2f:9b:0e:d5:56:c4:89:10:34:07:b6:1d:d0:3a:08:17:a4: 4c:b2:be:a2:4a:3f:15:5d:0a:d8:88:37:b9:9e:95:ef:ab:c8: aa:7d:b8:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbE3DTB52T+xkFSdAGRRIFP1VxxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBREYyNjI1QURBNThBMUJCRUQ5NUExMDVGMzUwQzc5 OTYyRjdERjAeFw0yNTExMDIxOTA5NTBaFw0yNTExMDMxOTI1NTBaMDMxMTAvBgNV BAMTKDM5NkRCRkZCNDRENUEzRUU3OUFEQUMzNjYwODYxMkZFOTE4QTE5QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsMTgZ8eVkKN9R7+CagZbvKPSS BtZHUOy+sf2zGVTxwD9OVa59hS7A0WEpH5Jv/4Yz+nkhGNA1h6iCmWKU9xsXSDCD Ehdw7Mj2Ms06tsWFOgF7o5DgMkS+ALrLHTNlHVV+W9Gx5au1Q0OtRaKirzB9v61V J2id6Ar0nXbDSTQOOvrUyNLmLY4lRAbyHJUHvlzycE0773otqr9Nihnk9jtt9mAS InruRj3IIDtx7KT4qNvAP2d6y6Kj8q+WvP4M8zUY2OBEQ0GEu7F+Rh0vmm6Ni2iF zOJEDGtzQ+vtdFHp8HWTSivnhrQ6omh1i25Y+hhR6qutF7Nj5xnQ51pIVO8BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOW2/+0TVo+55raw2YIYS/pGKGb4wHwYDVR0j BBgwFoAUja3yYlraWKG77ZWhBfNQx5li998wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDRFV1RYWEdVaW9CcGFTMzhiV1VHUDMxdzFwR2hFVkxxRGRSYlViWjJU VVIvMC84REFERjI2MjVBREE1OEExQkJFRDk1QTEwNUYzNTBDNzk5NjJGN0RGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEQURGMjYyNUFEQTU4QTFC QkVEOTVBMTA1RjM1MEM3OTk2MkY3REYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDRFV1RYWEdVaW9CcGFTMzhiV1VHUDMxdzFwR2hFVkxxRGRSYlViWjJUVVIvMC84 REFERjI2MjVBREE1OEExQkJFRDk1QTEwNUYzNTBDNzk5NjJGN0RGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmObX+ygAa/q2J2bGqVQjXV/i9ePu0DZZkU3901L/LAUxR826H6GbctcEkA0s GIQH/3HOlJ85Xbhtd8XWB2SH12dfsp+dh+rAjZArKK3HHqYy4C/HAAFZhmptc+g4 D1pqeD+mu0XaCdZkAYnX8qwEWFEKGxd+zsZskFuXSIvI8YJcKM+7aJAYX3+YNTmV HQ0q3Tm6DL5QEEF7EDpQvBz0v4XlYNXjB1RIr0TlgAl2+UtAuzAWsRfJeD4od+pZ c7DMPNVu2e9yBeZ3fhOlKJn00rAoFeCxSnRC6y+bDtVWxIkQNAe2HdA6CBekTLK+ oko/FV0K2Ig3uZ6V76vIqn24Hg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:13:24 2025 by rpki-client