$ rpki-client -vvf rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/8238EB7EFD442CD17FEB767C5F74049E1AC52979.mft File: 8238EB7EFD442CD17FEB767C5F74049E1AC52979.mft (raw, json) Hash identifier: 7LbNUzlfbCK/SiM3lwhtdKDB95hQ61epk6j5haB/v0c= Subject key identifier: 39:20:59:23:D1:DD:E5:BA:A3:3F:56:E7:93:CC:BB:D7:5E:82:2C:D1 Authority key identifier: 82:38:EB:7E:FD:44:2C:D1:7F:EB:76:7C:5F:74:04:9E:1A:C5:29:79 Certificate issuer: /CN=8238EB7EFD442CD17FEB767C5F74049E1AC52979 Certificate serial: 78545C3034ABA1E812DF6F8A9D724EF1FA606E00 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238EB7EFD442CD17FEB767C5F74049E1AC52979.cer Subject info access: rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/8238EB7EFD442CD17FEB767C5F74049E1AC52979.mft Manifest number: 30 Signing time: Wed 05 Nov 2025 12:14:08 +0000 Manifest this update: Wed 05 Nov 2025 12:09:08 +0000 Manifest next update: Thu 06 Nov 2025 13:28:08 +0000 Files and hashes: 1: 3133382e3131382e34302e302f32322d3332203d3e20323634323539.roa (hash: CGMYCuwpCuvrB1zGBmuoqGdhnBezP8PhYrcw93PKOrM=) 2: 323830343a323531343a3a2f33322d313238203d3e20323634323539.roa (hash: fUn/l07CRsywaYrCwb4RVxAOCaDF+ZRnC3DlcyedirY=) 3: 8238EB7EFD442CD17FEB767C5F74049E1AC52979.crl (hash: z30xL7FQzE1TV+j8GYBk8/uui345DOOv7U7LVpskoKc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/8238EB7EFD442CD17FEB767C5F74049E1AC52979.crl rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/8238EB7EFD442CD17FEB767C5F74049E1AC52979.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238EB7EFD442CD17FEB767C5F74049E1AC52979.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 13:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:54:5c:30:34:ab:a1:e8:12:df:6f:8a:9d:72:4e:f1:fa:60:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8238EB7EFD442CD17FEB767C5F74049E1AC52979 Validity Not Before: Nov 5 12:09:08 2025 GMT Not After : Nov 6 13:28:08 2025 GMT Subject: CN=39205923D1DDE5BAA33F56E793CCBBD75E822CD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:31:79:bc:0f:41:6a:8c:aa:39:f9:04:6e:ab: d3:c3:67:71:d7:7a:17:2a:a9:21:1f:78:9c:02:14: 7c:12:2f:2a:00:e8:c4:89:e7:d4:ea:06:f8:68:1f: c3:71:be:a9:d0:00:1b:11:cb:06:d5:20:97:90:9c: cc:e5:ea:e9:17:33:27:38:35:8c:36:ec:c6:a4:6b: 3a:18:73:81:fa:88:46:10:5b:1e:51:16:e7:da:c9: f6:19:98:73:b4:3d:5e:af:db:eb:6b:06:d0:79:0f: 4a:e5:7c:40:b7:e9:85:1f:5e:50:17:74:5c:be:b8: 89:5c:a0:6b:29:9e:80:5e:a1:53:80:84:af:95:cf: 09:69:f3:d1:12:e7:bd:18:79:13:dd:81:00:e4:b8: 8a:91:bf:6c:2e:40:c3:f9:bc:db:7f:33:26:8f:89: c3:33:ad:ee:d0:2b:8f:6c:4a:be:a7:2a:8b:95:02: 27:b1:0f:c4:3f:14:e2:46:43:70:98:65:60:6b:52: f7:99:c8:a5:d6:aa:ac:07:90:13:48:83:9d:35:76: e9:14:4c:02:84:2e:15:b2:0d:7e:05:56:6c:92:83: 0a:df:3a:38:8d:50:f7:5d:82:62:6d:ea:bd:9b:13: d8:ef:18:ce:e1:3f:31:90:63:3e:f9:55:f7:5b:aa: 30:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:20:59:23:D1:DD:E5:BA:A3:3F:56:E7:93:CC:BB:D7:5E:82:2C:D1 X509v3 Authority Key Identifier: keyid:82:38:EB:7E:FD:44:2C:D1:7F:EB:76:7C:5F:74:04:9E:1A:C5:29:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/8238EB7EFD442CD17FEB767C5F74049E1AC52979.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238EB7EFD442CD17FEB767C5F74049E1AC52979.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/8238EB7EFD442CD17FEB767C5F74049E1AC52979.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:01:f3:4e:67:13:03:68:8c:88:d4:81:b4:ff:45:64:95:ef: 36:dd:80:40:ab:b9:99:3a:55:fe:b8:22:01:87:ff:9a:93:a6: c3:39:1e:73:b2:df:0d:fb:83:fb:09:19:3c:91:b8:1a:ae:a2: 1c:cc:fc:c9:d8:37:4b:ca:fe:58:0d:b0:31:f7:0c:2b:eb:f4: 96:bf:4d:f5:fd:98:50:ae:38:bc:19:c1:f0:76:73:13:80:37: 8b:51:93:a1:69:5a:c8:26:3f:2a:0c:48:a7:25:79:1d:ca:0a: a2:dd:7a:0e:ff:6b:41:a5:73:d7:bd:cc:d7:76:fa:41:4d:72: eb:5d:74:1e:ad:93:e1:97:42:6f:d1:cc:b7:60:10:66:6f:d3: 11:93:33:bb:33:47:e1:92:69:f6:1b:57:c4:5b:24:24:75:0d: 01:67:63:7b:2b:2e:c2:17:19:96:d5:c0:0a:d8:20:43:d3:90: f5:0e:9d:c7:dd:a9:92:fd:2d:cd:a9:bb:82:19:5a:2d:80:0e: b7:98:9a:d2:90:98:bc:29:62:ec:73:31:90:ef:41:ba:27:c0: 53:ae:85:72:d8:51:46:11:6f:ad:fb:7f:f2:1a:f2:8f:1b:37: af:15:a3:53:a0:bf:b6:74:ae:ae:65:84:7b:7e:6f:bd:28:7f: 2b:9f:6d:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeFRcMDSroegS32+KnXJO8fpgbgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIzOEVCN0VGRDQ0MkNEMTdGRUI3NjdDNUY3NDA0OUUx QUM1Mjk3OTAeFw0yNTExMDUxMjA5MDhaFw0yNTExMDYxMzI4MDhaMDMxMTAvBgNV BAMTKDM5MjA1OTIzRDFEREU1QkFBMzNGNTZFNzkzQ0NCQkQ3NUU4MjJDRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAMXm8D0FqjKo5+QRuq9PDZ3HX ehcqqSEfeJwCFHwSLyoA6MSJ59TqBvhoH8NxvqnQABsRywbVIJeQnMzl6ukXMyc4 NYw27MakazoYc4H6iEYQWx5RFufayfYZmHO0PV6v2+trBtB5D0rlfEC36YUfXlAX dFy+uIlcoGspnoBeoVOAhK+Vzwlp89ES570YeRPdgQDkuIqRv2wuQMP5vNt/MyaP icMzre7QK49sSr6nKouVAiexD8Q/FOJGQ3CYZWBrUveZyKXWqqwHkBNIg501dukU TAKELhWyDX4FVmySgwrfOjiNUPddgmJt6r2bE9jvGM7hPzGQYz75VfdbqjCFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOSBZI9Hd5bqjP1bnk8y7116CLNEwHwYDVR0j BBgwFoAUgjjrfv1ELNF/63Z8X3QEnhrFKXkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlcyZldFY3lKOTRKQkNad2p3R0R6ZUNhV0NNTVp4OHUxV0h2cndoTHc5 RFovMC84MjM4RUI3RUZENDQyQ0QxN0ZFQjc2N0M1Rjc0MDQ5RTFBQzUyOTc5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgyMzhFQjdFRkQ0NDJDRDE3 RkVCNzY3QzVGNzQwNDlFMUFDNTI5NzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlcyZldFY3lKOTRKQkNad2p3R0R6ZUNhV0NNTVp4OHUxV0h2cndoTHc5RFovMC84 MjM4RUI3RUZENDQyQ0QxN0ZFQjc2N0M1Rjc0MDQ5RTFBQzUyOTc5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhwHzTmcTA2iMiNSBtP9FZJXvNt2AQKu5mTpV/rgiAYf/mpOmwzkec7LfDfuD +wkZPJG4Gq6iHMz8ydg3S8r+WA2wMfcMK+v0lr9N9f2YUK44vBnB8HZzE4A3i1GT oWlayCY/KgxIpyV5HcoKot16Dv9rQaVz173M13b6QU1y6110Hq2T4ZdCb9HMt2AQ Zm/TEZMzuzNH4ZJp9htXxFskJHUNAWdjeysuwhcZltXACtggQ9OQ9Q6dx92pkv0t zam7ghlaLYAOt5ia0pCYvCli7HMxkO9BuifAU66FcthRRhFvrft/8hryjxs3rxWj U6C/tnSurmWEe35vvSh/K59tEw== -----END CERTIFICATE-----Generated at Wed Nov 5 16:05:57 2025 by rpki-client