$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft (raw, json) Hash identifier: J94NaHLMqvRcI9g3PHBLZnxZt8Or3C1K+wxzLjiGKhc= Subject key identifier: 09:C6:A1:3A:C5:B7:6B:41:B1:5E:8A:08:73:3C:DD:82:C9:25:9E:AC Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE Certificate issuer: /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Certificate serial: 7688CEADBB1939A84E28EC5FBF924B2AFCA74322 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft Manifest number: 02FA Signing time: Mon 03 Nov 2025 13:24:01 +0000 Manifest this update: Mon 03 Nov 2025 13:19:01 +0000 Manifest next update: Tue 04 Nov 2025 16:00:01 +0000 Files and hashes: 1: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl (hash: 16jaSIVnuGwgZnJgPZq18Lk9VO8WKOgbuND/ENPy/qo=) 2: 3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (hash: 9lrgdFqXcmk1aveRypR0nwRoxN6RAu5lewGudgo7m5A=) 3: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (hash: daKi2XN6iI/5shlbC2ws+WpCE+eRSaaM95sbtBClTTE=) 4: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (hash: o5soZhe+dlhemRC6K331qQOeiYKJedndqQuOLBx6nRk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 16:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:88:ce:ad:bb:19:39:a8:4e:28:ec:5f:bf:92:4b:2a:fc:a7:43:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Validity Not Before: Nov 3 13:19:01 2025 GMT Not After : Nov 4 16:00:01 2025 GMT Subject: CN=09C6A13AC5B76B41B15E8A08733CDD82C9259EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ae:bf:fa:c8:2b:ed:b4:46:56:d5:fe:3c:6f: 24:62:8d:68:e6:b4:46:10:20:a7:a2:d0:12:ee:55: 13:cb:bf:e9:5b:89:fb:3a:ce:ef:ef:91:0e:70:b4: 1d:9b:18:35:b0:d9:d5:ce:bf:f4:a3:8c:7b:99:90: bc:3b:01:9a:32:ac:00:49:c7:b1:8e:30:61:13:70: 68:af:35:3f:e5:dc:bb:f0:51:2f:44:63:a6:d0:0c: d9:5f:87:79:f9:6c:9a:a6:79:a4:96:d0:8f:ee:ea: 97:ab:f1:27:74:b3:37:3e:ac:b6:9d:5e:9b:11:50: 7b:5a:1d:41:0b:54:2a:4f:f5:c4:c9:9f:f0:9b:52: 4b:cc:38:d5:f8:57:8f:14:41:d8:b6:f6:c5:af:66: 1c:f9:54:af:9f:ee:a5:b6:39:d3:a1:68:8e:42:6b: 07:ad:0d:84:8a:b2:b0:35:0e:d4:55:ba:53:b4:08: 65:87:50:72:9b:3c:c9:55:e8:1e:4b:14:5e:b6:5e: 18:77:96:8b:7b:cf:ad:af:92:0c:a1:28:70:2e:3a: a2:24:a9:72:dd:98:aa:d3:b0:07:1e:39:d5:81:d8: f7:9f:75:86:2d:98:2b:8e:e0:a0:79:1d:98:aa:46: ef:cd:2b:16:27:79:cb:f3:01:82:b2:17:df:d2:b2: 07:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C6:A1:3A:C5:B7:6B:41:B1:5E:8A:08:73:3C:DD:82:C9:25:9E:AC X509v3 Authority Key Identifier: keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:bb:60:67:a2:93:fe:b9:4c:96:3e:87:87:57:89:a3:2f:77: 14:79:dc:94:87:92:cc:ad:d9:a7:6d:c7:9f:89:4e:7b:15:c2: 5f:0a:98:3d:f2:6b:48:ad:af:d0:f3:7b:b3:a3:2b:c6:a8:26: e0:f6:fe:f3:ed:78:a9:d6:67:ea:6a:6d:ef:52:a1:69:0f:d3: a4:89:c8:07:2e:3a:13:d5:e4:c7:73:99:7e:06:1a:66:1f:d4: af:9c:9f:a3:d2:c3:97:a9:0e:f9:59:52:26:e7:4f:c2:46:eb: 12:a2:d3:c3:51:f8:aa:26:6b:33:84:a7:93:12:44:2a:a5:72: 1c:f5:0e:ce:c9:b3:e6:63:32:ee:d9:44:8b:40:a9:d9:b1:f0: 8b:18:8d:2b:f8:7b:7e:ff:49:51:08:08:63:fc:e4:30:a0:6b: d4:f2:14:a9:09:97:15:ab:84:10:df:b3:fd:4b:32:d9:39:c8: 49:a4:a8:a1:61:fb:5a:3b:74:7f:3e:69:19:4f:cf:02:13:fe: d9:1a:5e:80:c8:63:9e:fe:ba:04:aa:38:14:29:2d:74:b7:02: e0:98:c0:8c:13:9c:3d:4b:e7:a0:6f:9f:17:0f:d5:e7:bd:28: 92:ed:a8:66:dd:fb:a3:7d:85:ca:37:25:f0:32:cd:fd:57:6f: 63:87:b4:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdojOrbsZOahOKOxfv5JLKvynQyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRTlDOTBFQkM1MDgyRjgwMjA1NUVGQUE2MzYwQzY2 MUJGODVDRTAeFw0yNTExMDMxMzE5MDFaFw0yNTExMDQxNjAwMDFaMDMxMTAvBgNV BAMTKDA5QzZBMTNBQzVCNzZCNDFCMTVFOEEwODczM0NERDgyQzkyNTlFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrrr/6yCvttEZW1f48byRijWjm tEYQIKei0BLuVRPLv+lbifs6zu/vkQ5wtB2bGDWw2dXOv/SjjHuZkLw7AZoyrABJ x7GOMGETcGivNT/l3LvwUS9EY6bQDNlfh3n5bJqmeaSW0I/u6per8Sd0szc+rLad XpsRUHtaHUELVCpP9cTJn/CbUkvMONX4V48UQdi29sWvZhz5VK+f7qW2OdOhaI5C awetDYSKsrA1DtRVulO0CGWHUHKbPMlV6B5LFF62Xhh3lot7z62vkgyhKHAuOqIk qXLdmKrTsAceOdWB2PefdYYtmCuO4KB5HZiqRu/NKxYnecvzAYKyF9/SsgcnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCcahOsW3a0GxXooIczzdgsklnqwwHwYDVR0j BBgwFoAUi66ckOvFCC+AIFXvqmNgxmG/hc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNL ODUvMS84QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQUU5QzkwRUJDNTA4MkY4 MDIwNTVFRkFBNjM2MEM2NjFCRjg1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNLODUvMS84 QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD7tgZ6KT/rlMlj6Hh1eJoy93FHnclIeSzK3Zp23Hn4lOexXCXwqYPfJrSK2v 0PN7s6Mrxqgm4Pb+8+14qdZn6mpt71KhaQ/TpInIBy46E9Xkx3OZfgYaZh/Ur5yf o9LDl6kO+VlSJudPwkbrEqLTw1H4qiZrM4SnkxJEKqVyHPUOzsmz5mMy7tlEi0Cp 2bHwixiNK/h7fv9JUQgIY/zkMKBr1PIUqQmXFauEEN+z/Usy2TnISaSooWH7Wjt0 fz5pGU/PAhP+2RpegMhjnv66BKo4FCktdLcC4JjAjBOcPUvnoG+fFw/V570oku2o Zt37o32Fyjcl8DLN/VdvY4e0Jg== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:52 2025 by rpki-client