$ rpki-client -vvf rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.mft File: 8132D5957E193240246C2622115FA8F1706B3CE2.mft (raw, json) Hash identifier: Mcw80+CLMNk0aMJc4zxd25UQnp+Z5Ar/yWovTAzy44c= Subject key identifier: B7:FB:A0:2E:25:DA:94:2B:88:09:2E:1D:7A:53:59:A1:F0:7B:00:34 Authority key identifier: 81:32:D5:95:7E:19:32:40:24:6C:26:22:11:5F:A8:F1:70:6B:3C:E2 Certificate issuer: /CN=8132D5957E193240246C2622115FA8F1706B3CE2 Certificate serial: 6620C1CCA2D295B1D6EBE2050095F5300DB7922F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer Subject info access: rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.mft Manifest number: 02D8 Signing time: Wed 05 Nov 2025 09:00:00 +0000 Manifest this update: Wed 05 Nov 2025 08:55:00 +0000 Manifest next update: Thu 06 Nov 2025 09:00:00 +0000 Files and hashes: 1: 3134332e302e3131322e302f32322d3234203d3e20323632393935.roa (hash: pwu/iHNpAXXJjTDXQxoptOawxovjCQYxUguuWsM1i3I=) 2: 323830343a3964303a3a2f33322d3438203d3e20323632393935.roa (hash: tMsMFYZcDGgxLlAz93XzzIggQ8A+5Kkr/FmAstWbKmc=) 3: 3138362e3231392e3137362e302f32312d3234203d3e20323632393935.roa (hash: wgzu3oQYqqS+ij1OmA+LYi4+3pGKNzrfme9W6XcEX6Y=) 4: 8132D5957E193240246C2622115FA8F1706B3CE2.crl (hash: OnrTP6/qBmN4rg1iHJtWtzzO9zhNPzenxwQ+vJH58gg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.crl rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:20:c1:cc:a2:d2:95:b1:d6:eb:e2:05:00:95:f5:30:0d:b7:92:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8132D5957E193240246C2622115FA8F1706B3CE2 Validity Not Before: Nov 5 08:55:00 2025 GMT Not After : Nov 12 09:00:00 2025 GMT Subject: CN=3082010A0282010100AC67A2817CBCE8F6E10B4D18CE078433FDB6B9CEAF52C0B344699F6B7FD02599C272B24326096CC6F5723735A178FE2BD4FF450B64C92A5C2D5C9768A9BE54F4AB158F22FBDA75D97C12395A5EAF4A8212BC3BF67FE26A25D6A1029A7C57C91842D0441B78D0F45E627697D30599B237703C93C32492766B4ACBA38CE014ACA59C8FEDD9F47C68B1317C00F1E9EC0FA31CC60F37A4DB19788883B94DDCAF22AB7F5A27152FB2F638B47A37EA9162421011FBA4453D8666B21DCD7345735063109F1FF9BEB219E8379B7B28137BDD3CA4F11B39AE89E74241A4217974274CD648CA86E3166CF600D7AD08FAA4C141A4F359057E74A12283B005839B4E949F1FC10203010001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:a2:81:7c:bc:e8:f6:e1:0b:4d:18:ce:07: 84:33:fd:b6:b9:ce:af:52:c0:b3:44:69:9f:6b:7f: d0:25:99:c2:72:b2:43:26:09:6c:c6:f5:72:37:35: a1:78:fe:2b:d4:ff:45:0b:64:c9:2a:5c:2d:5c:97: 68:a9:be:54:f4:ab:15:8f:22:fb:da:75:d9:7c:12: 39:5a:5e:af:4a:82:12:bc:3b:f6:7f:e2:6a:25:d6: a1:02:9a:7c:57:c9:18:42:d0:44:1b:78:d0:f4:5e: 62:76:97:d3:05:99:b2:37:70:3c:93:c3:24:92:76: 6b:4a:cb:a3:8c:e0:14:ac:a5:9c:8f:ed:d9:f4:7c: 68:b1:31:7c:00:f1:e9:ec:0f:a3:1c:c6:0f:37:a4: db:19:78:88:83:b9:4d:dc:af:22:ab:7f:5a:27:15: 2f:b2:f6:38:b4:7a:37:ea:91:62:42:10:11:fb:a4: 45:3d:86:66:b2:1d:cd:73:45:73:50:63:10:9f:1f: f9:be:b2:19:e8:37:9b:7b:28:13:7b:dd:3c:a4:f1: 1b:39:ae:89:e7:42:41:a4:21:79:74:27:4c:d6:48: ca:86:e3:16:6c:f6:00:d7:ad:08:fa:a4:c1:41:a4: f3:59:05:7e:74:a1:22:83:b0:05:83:9b:4e:94:9f: 1f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FB:A0:2E:25:DA:94:2B:88:09:2E:1D:7A:53:59:A1:F0:7B:00:34 X509v3 Authority Key Identifier: keyid:81:32:D5:95:7E:19:32:40:24:6C:26:22:11:5F:A8:F1:70:6B:3C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ec:b3:f7:ff:53:85:78:47:31:89:69:79:f4:76:0b:f0:af: a6:88:fd:a8:f9:9c:80:6f:45:d3:fd:23:95:74:8e:a4:2e:81: 2a:f8:e6:8d:e0:49:f1:f6:cb:28:40:a7:ca:90:75:5e:42:01: 91:e8:ed:fc:b3:4f:95:88:54:e9:1a:4f:08:33:35:55:ec:47: ce:8b:3e:59:84:51:0b:0b:05:a2:a9:ab:d4:1c:e5:a9:08:6a: f8:3c:58:ab:7d:5e:71:f9:31:c5:d6:8c:3e:38:c5:ac:52:04: 5f:7b:68:b8:bc:87:99:61:8f:da:95:b3:58:03:3d:fb:d0:33: 4f:cb:1e:04:f1:05:07:d0:77:ab:da:42:c2:44:f9:d6:1c:23: b9:d1:d1:44:7e:30:2f:53:47:a5:81:3c:53:ce:60:0b:b2:04: 39:aa:71:5c:91:cc:71:e2:7a:54:74:2e:d0:6c:31:f3:de:18: f3:ee:a3:04:45:2b:82:d7:f9:7c:81:a2:4a:46:98:10:a6:7e: 40:39:3c:9c:c9:68:74:6c:a1:ad:f4:06:84:c9:a1:72:a9:df: d3:54:78:88:79:cd:f0:3b:e5:e0:64:a4:b0:40:9b:21:e1:e9: 68:b6:f0:b0:21:b3:cd:11:02:0c:48:34:0b:de:35:78:d6:fb: 24:4b:68:cd -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUZiDBzKLSlbHW6+IFAJX1MA23ki8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEzMkQ1OTU3RTE5MzI0MDI0NkMyNjIyMTE1RkE4RjE3 MDZCM0NFMjAeFw0yNTExMDUwODU1MDBaFw0yNTExMTIwOTAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUM2N0EyODE3Q0JDRThGNkUx MEI0RDE4Q0UwNzg0MzNGREI2QjlDRUFGNTJDMEIzNDQ2OTlGNkI3RkQwMjU5OUMy NzJCMjQzMjYwOTZDQzZGNTcyMzczNUExNzhGRTJCRDRGRjQ1MEI2NEM5MkE1QzJE NUM5NzY4QTlCRTU0RjRBQjE1OEYyMkZCREE3NUQ5N0MxMjM5NUE1RUFGNEE4MjEy QkMzQkY2N0ZFMjZBMjVENkExMDI5QTdDNTdDOTE4NDJEMDQ0MUI3OEQwRjQ1RTYy NzY5N0QzMDU5OUIyMzc3MDNDOTNDMzI0OTI3NjZCNEFDQkEzOENFMDE0QUNBNTlD OEZFREQ5RjQ3QzY4QjEzMTdDMDBGMUU5RUMwRkEzMUNDNjBGMzdBNERCMTk3ODg4 ODNCOTRERENBRjIyQUI3RjVBMjcxNTJGQjJGNjM4QjQ3QTM3RUE5MTYyNDIxMDEx RkJBNDQ1M0Q4NjY2QjIxRENENzM0NTczNTA2MzEwOUYxRkY5QkVCMjE5RTgzNzlC N0IyODEzN0JERDNDQTRGMTFCMzlBRTg5RTc0MjQxQTQyMTc5NzQyNzRDRDY0OENB ODZFMzE2NkNGNjAwRDdBRDA4RkFBNEMxNDFBNEYzNTkwNTdFNzRBMTIyODNCMDA1 ODM5QjRFOTQ5RjFGQzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEArGeigXy86PbhC00YzgeEM/22uc6vUsCzRGmfa3/QJZnCcrJDJgls xvVyNzWheP4r1P9FC2TJKlwtXJdoqb5U9KsVjyL72nXZfBI5Wl6vSoISvDv2f+Jq JdahApp8V8kYQtBEG3jQ9F5idpfTBZmyN3A8k8MkknZrSsujjOAUrKWcj+3Z9Hxo sTF8APHp7A+jHMYPN6TbGXiIg7lN3K8iq39aJxUvsvY4tHo36pFiQhAR+6RFPYZm sh3Nc0VzUGMQnx/5vrIZ6DebeygTe908pPEbOa6J50JBpCF5dCdM1kjKhuMWbPYA 160I+qTBQaTzWQV+dKEig7AFg5tOlJ8fwQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FLf7oC4l2pQriAkuHXpTWaHwewA0MB8GA1UdIwQYMBaAFIEy1ZV+GTJAJGwmIhFf qPFwazziMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJwTFc0Qk13bkhuUDli V0VVMkc5MllveWFLQmRqVFp6RlFNNnloSFQ5bko0LzEvODEzMkQ1OTU3RTE5MzI0 MDI0NkMyNjIyMTE1RkE4RjE3MDZCM0NFMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS84MTMyRDU5NTdFMTkzMjQwMjQ2QzI2MjIxMTVGQThGMTcwNkIz Q0UyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJwTFc0Qk13bkhuUDliV0VVMkc5 MllveWFLQmRqVFp6RlFNNnloSFQ5bko0LzEvODEzMkQ1OTU3RTE5MzI0MDI0NkMy NjIyMTE1RkE4RjE3MDZCM0NFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADLss/f/U4V4RzGJaXn0dgvw r6aI/aj5nIBvRdP9I5V0jqQugSr45o3gSfH2yyhAp8qQdV5CAZHo7fyzT5WIVOka TwgzNVXsR86LPlmEUQsLBaKpq9Qc5akIavg8WKt9XnH5McXWjD44xaxSBF97aLi8 h5lhj9qVs1gDPfvQM0/LHgTxBQfQd6vaQsJE+dYcI7nR0UR+MC9TR6WBPFPOYAuy BDmqcVyRzHHielR0LtBsMfPeGPPuowRFK4LX+XyBokpGmBCmfkA5PJzJaHRsoa30 BoTJoXKp39NUeIh5zfA75eBkpLBAmyHh6Wi28LAhs80RAgxINAveNXjW+yRLaM0= -----END CERTIFICATE-----Generated at Wed Nov 5 14:44:48 2025 by rpki-client