$ rpki-client -vvf rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft File: 8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft (raw, json) Hash identifier: IXxXqt3zXy6Hs61rsDeca9Vy0cOgDBbuu/dstLP/3YM= Subject key identifier: 07:80:2D:BA:A2:0D:4D:3B:B2:85:67:D4:3A:0F:62:E9:64:92:27:81 Authority key identifier: 8C:C5:25:FD:F7:2B:81:6B:66:C1:CE:83:6C:A9:37:CE:99:A6:82:E8 Certificate issuer: /CN=8CC525FDF72B816B66C1CE836CA937CE99A682E8 Certificate serial: 32DF9DCA179EA22A2D7F069CEAF9146FBCED2424 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC525FDF72B816B66C1CE836CA937CE99A682E8.cer Subject info access: rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft Manifest number: 21 Signing time: Mon 03 Nov 2025 09:21:27 +0000 Manifest this update: Mon 03 Nov 2025 09:16:27 +0000 Manifest next update: Tue 04 Nov 2025 10:39:27 +0000 Files and hashes: 1: 8CC525FDF72B816B66C1CE836CA937CE99A682E8.crl (hash: wyXYmnlHhs6RZ8g7vyQT1QmFlctsPZTEs1+AXhniW+A=) 2: 323830343a393432383a3a2f33322d313238203d3e20323734383235.roa (hash: FzCAE8eUu2sdUtzU7IKkFBXrwi3x7JsqMdGSg0/OQCY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.crl rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC525FDF72B816B66C1CE836CA937CE99A682E8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:df:9d:ca:17:9e:a2:2a:2d:7f:06:9c:ea:f9:14:6f:bc:ed:24:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC525FDF72B816B66C1CE836CA937CE99A682E8 Validity Not Before: Nov 3 09:16:27 2025 GMT Not After : Nov 4 10:39:27 2025 GMT Subject: CN=07802DBAA20D4D3BB28567D43A0F62E964922781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0d:78:80:6e:c2:a8:f9:96:51:6b:d2:db:21: f3:e4:7b:8c:45:08:72:fd:51:5d:27:c3:49:98:14: 55:e0:de:9d:42:84:90:96:90:5a:ad:6d:ae:70:0d: 0b:5d:ad:e5:0f:2e:2c:d1:c2:25:7c:7e:08:07:26: 5d:99:b9:3c:82:4b:04:38:0a:04:17:52:58:d8:3c: a4:5a:a5:fe:aa:51:a6:2f:6b:8e:9f:00:d6:dd:f0: 45:ef:cb:07:b2:6d:1a:3b:33:19:19:67:2c:63:63: e9:60:30:43:a5:db:31:57:64:85:6a:a6:b1:ee:21: f9:3f:3b:79:89:67:a0:5c:94:22:a0:09:55:ff:41: c6:ee:26:c2:ff:ca:b7:7d:bb:31:5f:c4:7f:73:52: 7f:98:17:c7:02:4c:b4:82:78:3a:1f:65:8e:c3:6e: 88:0d:46:52:4c:60:ad:ab:79:f9:f8:81:99:1a:62: 70:54:af:1f:e0:d8:08:ec:42:ba:b6:45:ab:fc:9f: 6c:21:8d:49:04:d9:fc:d0:b3:44:e6:85:34:a8:80: 4a:33:d5:d2:05:20:75:15:c1:e8:e5:f4:ad:62:0c: d0:da:2f:49:ec:71:65:dc:74:ab:bb:fd:cc:18:0a: eb:3e:a0:73:1b:85:ab:d3:38:b4:28:32:b9:5c:4a: c7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:80:2D:BA:A2:0D:4D:3B:B2:85:67:D4:3A:0F:62:E9:64:92:27:81 X509v3 Authority Key Identifier: keyid:8C:C5:25:FD:F7:2B:81:6B:66:C1:CE:83:6C:A9:37:CE:99:A6:82:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC525FDF72B816B66C1CE836CA937CE99A682E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:8d:9d:52:e1:05:74:0a:60:23:ea:8f:b3:db:94:8d:ee:9f: dc:32:ff:85:c0:72:6b:aa:50:f9:18:39:c4:8f:1e:0a:30:43: 98:71:b9:51:fd:b4:f8:ff:77:d6:aa:47:bd:5a:56:7e:f3:8a: 5c:47:b9:d3:a6:6d:f3:3e:78:db:d0:0b:d9:55:02:f0:4b:ad: 40:d3:8c:53:91:f7:af:07:34:78:de:80:ad:c4:5c:c8:ad:0c: b9:50:ef:ee:9e:2d:f7:7d:f0:1c:2f:98:a0:1a:2d:f3:01:c2: 0e:bc:48:28:5e:c9:2e:cd:77:69:bd:3f:67:ce:33:a3:d5:69: be:53:f4:65:27:b4:c5:14:db:93:83:49:22:45:5e:3c:dd:eb: c5:b2:ec:1d:8b:e7:0f:4a:13:bb:d5:cd:68:98:2a:25:b9:99: 99:a4:de:ee:37:64:22:68:4f:8d:c5:93:3b:2f:78:8a:68:fa: e6:5a:76:84:79:e3:c5:e6:71:39:4a:6f:06:fa:1c:a6:0a:23: b3:d9:4c:b8:e8:09:d2:a7:31:f1:74:e1:47:b3:80:82:89:e5: 5c:e9:92:64:82:57:6c:99:02:f0:0d:3b:1e:87:db:e0:83:d9: 6e:a7:6e:56:39:d6:d1:d5:1d:ff:4f:2f:87:20:fd:db:68:98: 05:71:03:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMt+dyheeoiotfwac6vkUb7ztJCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDNTI1RkRGNzJCODE2QjY2QzFDRTgzNkNBOTM3Q0U5 OUE2ODJFODAeFw0yNTExMDMwOTE2MjdaFw0yNTExMDQxMDM5MjdaMDMxMTAvBgNV BAMTKDA3ODAyREJBQTIwRDREM0JCMjg1NjdENDNBMEY2MkU5NjQ5MjI3ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhDXiAbsKo+ZZRa9LbIfPke4xF CHL9UV0nw0mYFFXg3p1ChJCWkFqtba5wDQtdreUPLizRwiV8fggHJl2ZuTyCSwQ4 CgQXUljYPKRapf6qUaYva46fANbd8EXvyweybRo7MxkZZyxjY+lgMEOl2zFXZIVq prHuIfk/O3mJZ6BclCKgCVX/QcbuJsL/yrd9uzFfxH9zUn+YF8cCTLSCeDofZY7D bogNRlJMYK2refn4gZkaYnBUrx/g2AjsQrq2Rav8n2whjUkE2fzQs0TmhTSogEoz 1dIFIHUVwejl9K1iDNDaL0nscWXcdKu7/cwYCus+oHMbhavTOLQoMrlcSscHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUB4AtuqINTTuyhWfUOg9i6WSSJ4EwHwYDVR0j BBgwFoAUjMUl/fcrgWtmwc6DbKk3zpmmgugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREIyZGVaWDc2YWlWcUhabndHYkwxUWhCNGlKdEY3Um5MRVVGTXRwdzJX TjIvMC84Q0M1MjVGREY3MkI4MTZCNjZDMUNFODM2Q0E5MzdDRTk5QTY4MkU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQzUyNUZERjcyQjgxNkI2 NkMxQ0U4MzZDQTkzN0NFOTlBNjgyRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REIyZGVaWDc2YWlWcUhabndHYkwxUWhCNGlKdEY3Um5MRVVGTXRwdzJXTjIvMC84 Q0M1MjVGREY3MkI4MTZCNjZDMUNFODM2Q0E5MzdDRTk5QTY4MkU4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApY2dUuEFdApgI+qPs9uUje6f3DL/hcBya6pQ+Rg5xI8eCjBDmHG5Uf20+P93 1qpHvVpWfvOKXEe506Zt8z5429AL2VUC8EutQNOMU5H3rwc0eN6ArcRcyK0MuVDv 7p4t933wHC+YoBot8wHCDrxIKF7JLs13ab0/Z84zo9VpvlP0ZSe0xRTbk4NJIkVe PN3rxbLsHYvnD0oTu9XNaJgqJbmZmaTe7jdkImhPjcWTOy94imj65lp2hHnjxeZx OUpvBvocpgojs9lMuOgJ0qcx8XThR7OAgonlXOmSZIJXbJkC8A07Hofb4IPZbqdu VjnW0dUd/08vhyD922iYBXED6A== -----END CERTIFICATE-----Generated at Mon Nov 3 12:05:53 2025 by rpki-client