$ rpki-client -vvf rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft File: 8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft (raw, json) Hash identifier: udK7ybUHLcacNMeKigDBFXB6Jy4ZlSulk7U0aOPxMvs= Subject key identifier: D6:E4:50:9F:ED:4E:A0:F8:67:DB:7A:60:EF:7E:7C:D6:3F:E9:BA:19 Authority key identifier: 8A:11:41:64:BB:A9:BC:4B:3A:50:A7:29:11:6B:C7:57:4D:2C:D6:EF Certificate issuer: /CN=8A114164BBA9BC4B3A50A729116BC7574D2CD6EF Certificate serial: 2E210E45DF24416E09DE3C51FC2744D065B032FA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer Subject info access: rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft Manifest number: 0305 Signing time: Tue 04 Nov 2025 21:31:05 +0000 Manifest this update: Tue 04 Nov 2025 21:26:05 +0000 Manifest next update: Wed 05 Nov 2025 23:49:05 +0000 Files and hashes: 1: 3139302e38392e34382e302f32322d3234203d3e20323730333535.roa (hash: SLEHFECRXQmMYbYlcQhzLdJpI1AWkv5FBYpLZmL4zfY=) 2: 323830343a366162383a3a2f33322d3438203d3e20323730333535.roa (hash: mZN4AszSQT36UMwFtHkIGpU8mMiqKNrNGykEzvf6hdU=) 3: 8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl (hash: BB5O0o/rvu/x1Ta8LzeeHT5soarpvvd5kMmeMl8gN1w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 23:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:21:0e:45:df:24:41:6e:09:de:3c:51:fc:27:44:d0:65:b0:32:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A114164BBA9BC4B3A50A729116BC7574D2CD6EF Validity Not Before: Nov 4 21:26:05 2025 GMT Not After : Nov 5 23:49:05 2025 GMT Subject: CN=D6E4509FED4EA0F867DB7A60EF7E7CD63FE9BA19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:be:f5:7f:44:cf:66:ab:14:d0:ee:a5:16: bc:32:bc:cc:41:56:cf:98:28:fd:36:ba:02:e5:9c: 0b:01:d2:2a:bc:6d:d6:00:16:e1:e3:ea:0d:ae:0a: d4:05:3a:c4:14:3d:64:b4:71:39:ad:5d:d9:24:db: 11:7b:c8:3d:20:2b:12:a8:f2:b0:45:90:16:d1:46: 30:e9:93:da:76:23:23:75:d7:9d:3f:6a:66:e6:03: d8:7b:8b:20:a6:aa:b7:46:b4:82:75:57:0e:f2:a5: 3a:d1:bb:f4:f6:c1:7b:cc:44:d5:f9:da:ca:92:3f: c0:26:22:ef:d4:07:af:37:43:b4:cf:2e:20:06:4f: e4:cf:cb:8e:0f:5d:cb:28:69:ed:84:3c:bb:1a:0e: 4b:84:1a:0d:e7:dc:ef:78:f2:e6:d2:e5:54:00:3f: a3:dd:3d:83:2c:95:fa:9c:92:b1:16:37:71:8e:cc: 7c:b4:3d:a3:4e:05:a9:4e:be:30:d0:ca:8b:60:c3: 8e:05:b6:26:68:16:e5:d1:03:cd:1f:d9:79:95:a2: 0e:94:69:2f:9a:00:80:65:32:4d:f8:1a:69:3f:8c: e2:9b:93:20:ab:c3:b3:0f:1f:45:ad:10:47:02:aa: c6:83:c1:90:e8:a1:64:11:40:ee:06:3b:7f:de:6e: 34:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E4:50:9F:ED:4E:A0:F8:67:DB:7A:60:EF:7E:7C:D6:3F:E9:BA:19 X509v3 Authority Key Identifier: keyid:8A:11:41:64:BB:A9:BC:4B:3A:50:A7:29:11:6B:C7:57:4D:2C:D6:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c7:ff:de:49:8f:6e:7b:e3:74:6f:89:b1:23:f5:a2:88:30: ee:9a:ae:f4:f4:85:31:92:7a:2c:40:0c:73:e4:e1:a3:b2:f7: e5:1b:99:75:5a:48:9d:41:ef:ec:2e:fc:1e:b1:28:b5:25:be: 16:51:b7:11:a8:99:f7:86:ed:6b:c3:7e:fc:c5:f9:e2:a8:44: ed:81:44:10:05:31:7d:f5:ae:7f:e0:25:3e:fd:99:f6:76:7b: 3d:1d:c6:c3:72:6c:2b:97:76:d5:f8:38:6d:c0:18:a0:ac:8d: ed:c9:12:ea:17:83:6a:95:16:40:d2:76:72:c4:0f:a9:32:29: f4:fb:4a:d7:b9:f9:69:2d:11:61:01:78:3b:9b:b5:60:4c:90: be:bf:8a:0b:2d:a9:b6:4c:b5:1d:5d:45:87:a0:7c:41:75:56: e5:de:7d:23:ef:61:05:ba:2d:64:65:59:d5:82:8c:bf:5c:02: 27:8e:7f:7f:73:5f:c1:fc:ab:e4:46:48:03:78:24:e8:ff:c0: be:49:09:3a:b1:3e:a0:74:fb:cd:cc:cc:83:0a:2f:cf:68:6e: 50:83:90:eb:70:11:4d:05:c1:57:2d:74:8f:66:27:a0:78:1e: 2b:7d:24:23:22:84:47:44:a4:e4:aa:8c:f7:34:24:41:28:28: ea:68:2b:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULiEORd8kQW4J3jxR/CdE0GWwMvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEExMTQxNjRCQkE5QkM0QjNBNTBBNzI5MTE2QkM3NTc0 RDJDRDZFRjAeFw0yNTExMDQyMTI2MDVaFw0yNTExMDUyMzQ5MDVaMDMxMTAvBgNV BAMTKEQ2RTQ1MDlGRUQ0RUEwRjg2N0RCN0E2MEVGN0U3Q0Q2M0ZFOUJBMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bL71f0TPZqsU0O6lFrwyvMxB Vs+YKP02ugLlnAsB0iq8bdYAFuHj6g2uCtQFOsQUPWS0cTmtXdkk2xF7yD0gKxKo 8rBFkBbRRjDpk9p2IyN1150/ambmA9h7iyCmqrdGtIJ1Vw7ypTrRu/T2wXvMRNX5 2sqSP8AmIu/UB683Q7TPLiAGT+TPy44PXcsoae2EPLsaDkuEGg3n3O948ubS5VQA P6PdPYMslfqckrEWN3GOzHy0PaNOBalOvjDQyotgw44FtiZoFuXRA80f2XmVog6U aS+aAIBlMk34Gmk/jOKbkyCrw7MPH0WtEEcCqsaDwZDooWQRQO4GO3/ebjR7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1uRQn+1OoPhn23pg73581j/puhkwHwYDVR0j BBgwFoAUihFBZLupvEs6UKcpEWvHV00s1u8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkdRY2pTYjNQeDZNMW1wM3pSbkhhaDl6TVFBYllNQ2FRVktpdHFqc290 YVEvMS84QTExNDE2NEJCQTlCQzRCM0E1MEE3MjkxMTZCQzc1NzREMkNENkVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBMTE0MTY0QkJBOUJDNEIz QTUwQTcyOTExNkJDNzU3NEQyQ0Q2RUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkdRY2pTYjNQeDZNMW1wM3pSbkhhaDl6TVFBYllNQ2FRVktpdHFqc290YVEvMS84 QTExNDE2NEJCQTlCQzRCM0E1MEE3MjkxMTZCQzc1NzREMkNENkVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMcf/3kmPbnvjdG+JsSP1oogw7pqu9PSFMZJ6LEAMc+Tho7L35RuZdVpInUHv 7C78HrEotSW+FlG3EaiZ94bta8N+/MX54qhE7YFEEAUxffWuf+AlPv2Z9nZ7PR3G w3JsK5d21fg4bcAYoKyN7ckS6heDapUWQNJ2csQPqTIp9PtK17n5aS0RYQF4O5u1 YEyQvr+KCy2ptky1HV1Fh6B8QXVW5d59I+9hBbotZGVZ1YKMv1wCJ45/f3Nfwfyr 5EZIA3gk6P/AvkkJOrE+oHT7zczMgwovz2huUIOQ63ARTQXBVy10j2YnoHgeK30k IyKER0Sk5KqM9zQkQSgo6mgrkw== -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:02 2025 by rpki-client