$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft File: 8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft (raw, json) Hash identifier: nRukaZmPONkKTxiJuRAT2yPmuCivvgxYSE31KZ+ohgA= Subject key identifier: BB:B8:E3:89:D6:60:72:2C:84:2F:3B:5E:3A:88:E3:67:44:6D:68:67 Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05 Certificate issuer: /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505 Certificate serial: 2E6052D05E162BC6545748C97AEBC6BE8387A4D7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer Subject info access: rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft Manifest number: 0309 Signing time: Tue 04 Nov 2025 23:29:12 +0000 Manifest this update: Tue 04 Nov 2025 23:24:12 +0000 Manifest next update: Thu 06 Nov 2025 01:40:12 +0000 Files and hashes: 1: 3230302e3138372e3130332e302f32342d3234203d3e20323730363833.roa (hash: KActml71cD6wjVfmrA4DV2SdMETPMc7+yZI29YEKnmM=) 2: 323830343a366663343a3a2f33322d3438203d3e20323730363833.roa (hash: 9XM9sCu/TTNlq6V0+SeS3wOQF44MqPp8oXHMdR1O5SQ=) 3: 3230302e3138372e3130312e302f32342d3234203d3e20323730363833.roa (hash: rbaOKt87D3c/UdScnRw1BNEUloJVfu1i1+4xUlIseJA=) 4: 3230302e3138372e3130322e302f32342d3234203d3e20323730363833.roa (hash: +Z0ru9BsWPOHlK8tWb0IGKgXDXi0PyLC2vV8M76GVfU=) 5: 3230302e3138372e3130302e302f32322d3232203d3e20323730363833.roa (hash: vzsfIDw2oqflztrjwgdkWaCyFMfSI1wnTfFDvenx+5k=) 6: 3230302e3138372e3130302e302f32332d3233203d3e20323730363833.roa (hash: BxB6GE4kHFzE5wUoGDmDFcb0CWCHJJOVcEpZmmtAjxI=) 7: 3230302e3138372e3130302e302f32342d3234203d3e20323730363833.roa (hash: nskPvpUAon2GR7geuGsQF/wkm/R59aEnIpAp4kUkmdg=) 8: 8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl (hash: x60J7snBWw5Q/f4E5toFKBO9TdoAgkbbo9G+pEg22F8=) 9: 3230302e3138372e3130322e302f32332d3233203d3e20323730363833.roa (hash: o0hcy/9RDOTJR5RMuj3MyjZzVFgfCkfY0wQiAz+xBIc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:60:52:d0:5e:16:2b:c6:54:57:48:c9:7a:eb:c6:be:83:87:a4:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505 Validity Not Before: Nov 4 23:24:12 2025 GMT Not After : Nov 6 01:40:12 2025 GMT Subject: CN=BBB8E389D660722C842F3B5E3A88E367446D6867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bb:45:e5:28:cd:d3:c4:43:c2:f6:f4:83:f2: ef:fc:1d:97:15:7a:17:9d:59:c0:f3:1b:e1:7a:37: d1:82:94:c6:fb:7f:3b:5d:d1:f3:4e:92:52:df:3a: 8a:d9:3e:1a:96:e3:29:7c:9f:3a:73:b9:fc:c4:1d: 2e:f6:3a:1d:1b:be:9e:75:15:56:26:6b:9c:6f:19: 55:13:fa:4b:6a:84:24:de:c6:4c:3b:03:52:41:d8: 69:98:0d:4e:b7:b2:e4:83:7b:77:4d:81:a0:7c:01: 75:09:13:72:10:01:6b:57:13:e2:89:3b:55:45:6c: 32:f9:89:06:d6:39:ab:e7:e9:51:eb:c0:66:38:2c: 0c:70:f2:60:91:1e:d0:cd:49:94:6e:bf:48:b6:ec: fb:af:1c:6f:65:e1:bd:62:78:b1:7c:8e:f2:e0:06: f2:2c:b4:bc:8a:b9:b7:09:e4:af:25:72:b5:af:c9: c3:65:25:c4:59:eb:eb:b8:df:07:9f:a0:60:92:be: f4:bc:f0:c6:54:c5:e5:6c:ec:e4:21:52:fe:f7:fb: cf:cb:45:a8:31:36:61:87:43:17:28:31:ed:59:f3: 98:03:48:28:c1:49:fb:ad:7d:23:9d:59:c6:39:89: b4:e6:da:09:37:8b:fd:28:39:6b:ce:9d:e7:d1:44: d3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B8:E3:89:D6:60:72:2C:84:2F:3B:5E:3A:88:E3:67:44:6D:68:67 X509v3 Authority Key Identifier: keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:28:66:89:c9:f4:f0:a6:77:9f:95:b3:21:28:d7:ba:71:68: 55:8d:c2:bd:6b:7b:d8:da:38:b1:41:8c:72:77:34:0a:f7:46: b4:17:72:f3:32:36:70:9e:dd:63:02:de:04:a8:29:41:3a:e9: a6:e1:4b:98:29:eb:0f:26:85:e8:d7:67:80:13:88:fb:15:21: 5c:72:40:b8:62:2b:bd:b3:98:7d:6c:91:df:4f:51:36:99:1e: 84:9e:3b:3f:69:c5:09:ba:5c:1b:9f:e2:d7:93:d1:31:3c:6d: cf:4a:03:3e:87:29:40:7b:33:16:30:4e:fd:8b:a6:46:df:3e: b3:4e:11:d9:7f:ac:c7:26:63:c1:8e:73:7a:86:6d:a6:3a:3e: 69:72:04:59:2d:62:21:e4:50:d1:46:c6:ab:41:32:54:74:30: 71:99:a7:df:b4:f1:e2:fb:4f:81:2c:f8:a2:f7:cd:1e:91:bd: 53:db:ac:45:2f:9f:e3:e4:05:11:a2:23:1d:07:c7:27:66:20: 27:ad:a5:c3:01:32:aa:3f:f3:a9:56:89:21:84:44:22:7e:5d: ca:70:92:a0:37:30:7f:40:d7:2f:26:f7:9a:f3:94:d9:64:a0: ff:45:da:e3:43:1f:e0:65:f4:55:a8:12:85:07:81:37:a2:8c: bd:b7:6a:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULmBS0F4WK8ZUV0jJeuvGvoOHpNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVBMjE0OTlEOUY3NkRBODVFRUM4RDhCMUE4RTNCMDY5 RDRDNzUwNTAeFw0yNTExMDQyMzI0MTJaFw0yNTExMDYwMTQwMTJaMDMxMTAvBgNV BAMTKEJCQjhFMzg5RDY2MDcyMkM4NDJGM0I1RTNBODhFMzY3NDQ2RDY4NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKu0XlKM3TxEPC9vSD8u/8HZcV ehedWcDzG+F6N9GClMb7fztd0fNOklLfOorZPhqW4yl8nzpzufzEHS72Oh0bvp51 FVYma5xvGVUT+ktqhCTexkw7A1JB2GmYDU63suSDe3dNgaB8AXUJE3IQAWtXE+KJ O1VFbDL5iQbWOavn6VHrwGY4LAxw8mCRHtDNSZRuv0i27PuvHG9l4b1ieLF8jvLg BvIstLyKubcJ5K8lcrWvycNlJcRZ6+u43wefoGCSvvS88MZUxeVs7OQhUv73+8/L RagxNmGHQxcoMe1Z85gDSCjBSfutfSOdWcY5ibTm2gk3i/0oOWvOnefRRNO5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUu7jjidZgciyELzteOojjZ0RtaGcwHwYDVR0j BBgwFoAUjqIUmdn3bahe7I2LGo47Bp1MdQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkN4dEtnVk5qMlRQZ0cyOHJOUXp6VnI0bjIxNXRWUUV4TWdnSkF1TnJI UHkvMS84RUEyMTQ5OUQ5Rjc2REE4NUVFQzhEOEIxQThFM0IwNjlENEM3NTA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQTIxNDk5RDlGNzZEQTg1 RUVDOEQ4QjFBOEUzQjA2OUQ0Qzc1MDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkN4dEtnVk5qMlRQZ0cyOHJOUXp6VnI0bjIxNXRWUUV4TWdnSkF1TnJIUHkvMS84 RUEyMTQ5OUQ5Rjc2REE4NUVFQzhEOEIxQThFM0IwNjlENEM3NTA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARChmicn08KZ3n5WzISjXunFoVY3CvWt72No4sUGMcnc0CvdGtBdy8zI2cJ7d YwLeBKgpQTrppuFLmCnrDyaF6NdngBOI+xUhXHJAuGIrvbOYfWyR309RNpkehJ47 P2nFCbpcG5/i15PRMTxtz0oDPocpQHszFjBO/YumRt8+s04R2X+sxyZjwY5zeoZt pjo+aXIEWS1iIeRQ0UbGq0EyVHQwcZmn37Tx4vtPgSz4ovfNHpG9U9usRS+f4+QF EaIjHQfHJ2YgJ62lwwEyqj/zqVaJIYREIn5dynCSoDcwf0DXLyb3mvOU2WSg/0Xa 40Mf4GX0VagShQeBN6KMvbdq7A== -----END CERTIFICATE-----Generated at Wed Nov 5 04:28:02 2025 by rpki-client