$ rpki-client -vvf rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.mft File: 8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.mft (raw, json) Hash identifier: c4irbt0FLdC6/kMOy9DgFffH7YyV2PtQX9DNS/PV6Xo= Subject key identifier: 0D:61:0E:65:8C:50:D4:F3:A2:6E:4F:E6:A3:0F:11:23:9C:E5:12:C1 Authority key identifier: 8B:9F:6B:2C:98:7C:ED:F2:C0:A5:81:37:E8:5C:DB:B7:67:9E:6B:B0 Certificate issuer: /CN=8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0 Certificate serial: 2E2C1475330B082E155ACFEE8274AD3FDDA7B5F1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.cer Subject info access: rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.mft Manifest number: 25 Signing time: Mon 03 Nov 2025 01:46:55 +0000 Manifest this update: Mon 03 Nov 2025 01:41:55 +0000 Manifest next update: Tue 04 Nov 2025 02:36:55 +0000 Files and hashes: 1: 34352e3137302e3133372e302f32342d3234203d3e20323733333131.roa (hash: xJ1/xwhDeT/nk0Rr/KZSIn5XGX1IHarJIhB6lmq9MGQ=) 2: 323830343a386338383a3a2f33322d3438203d3e20323733333131.roa (hash: kwEv7gErYcASIrf6NWAJrxKoKHj5dipmcUm6QyhK6V8=) 3: 8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.crl (hash: 1mBJ+XRIqH3Awbq5azttXZQc5BLT+Ilao2jDlhaF3+A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.crl rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 02:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:2c:14:75:33:0b:08:2e:15:5a:cf:ee:82:74:ad:3f:dd:a7:b5:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0 Validity Not Before: Nov 3 01:41:55 2025 GMT Not After : Nov 4 02:36:55 2025 GMT Subject: CN=0D610E658C50D4F3A26E4FE6A30F11239CE512C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ae:b2:30:df:62:c7:85:c8:7e:70:2f:01:45: 69:2a:df:0a:08:a0:ec:10:ee:00:93:0b:40:45:21: 79:1b:70:c1:69:f1:dc:4a:eb:3b:67:de:78:d3:aa: 6d:93:bd:4e:28:f6:78:34:d5:22:36:c7:26:96:9e: 44:a9:b7:34:82:67:25:c4:69:8a:1a:4e:82:12:0c: f9:e4:ae:54:03:be:66:b0:82:03:ed:08:1c:18:eb: a9:d3:b5:cc:76:21:3c:1e:4b:79:98:0e:b4:6f:18: a0:a9:2a:23:63:8b:1d:73:54:7c:31:2e:2d:f1:97: 36:c3:3a:e7:59:dd:08:ba:83:ae:8d:32:cb:13:8e: 4b:09:f5:42:6d:90:18:ef:87:f4:bb:7c:80:b1:d7: 38:00:34:56:84:c6:de:20:53:6c:ab:be:4c:38:bb: 29:da:e5:18:cf:ec:90:05:95:a2:51:c8:53:ea:1b: a9:a7:19:e4:49:e4:35:bb:1a:0d:c9:3c:d4:36:ec: 39:77:81:20:48:86:e0:d4:06:b6:86:91:78:25:e0: e0:27:86:fa:96:54:c7:b6:af:89:95:8f:b7:6f:ae: 67:55:57:24:ac:a4:a3:3b:1c:50:ac:cf:58:3f:fc: b0:9c:dd:ba:cc:10:10:84:f2:80:c8:b7:ec:12:53: d1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:61:0E:65:8C:50:D4:F3:A2:6E:4F:E6:A3:0F:11:23:9C:E5:12:C1 X509v3 Authority Key Identifier: keyid:8B:9F:6B:2C:98:7C:ED:F2:C0:A5:81:37:E8:5C:DB:B7:67:9E:6B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3e:cd:27:8d:66:b6:1e:63:85:5c:c1:9d:5d:10:42:a9:e0: 48:b1:a8:8c:d3:f1:d9:a0:d8:d4:e2:da:25:3f:bc:1a:ec:98: d5:0c:ca:62:8d:7d:58:c3:f9:6f:b0:96:dd:1a:30:13:00:a1: 4e:bc:9b:1b:be:89:3e:39:a1:a9:78:2d:bb:04:de:54:46:1d: 1b:9a:e3:0d:65:01:42:e2:2d:61:0a:17:15:e0:0f:89:ec:b7: 09:69:2f:a8:fc:a6:ee:16:3c:f2:1f:a9:00:51:5f:c1:79:42: 71:5d:db:2b:f8:c9:e4:6c:b7:2c:21:ce:47:36:4e:28:27:8b: 9f:e4:d1:a3:6c:f3:2c:fb:31:ad:eb:9c:e4:3c:45:62:2f:ae: a6:bd:42:f0:e0:0c:69:3c:f5:fa:8c:5f:5d:1e:d9:da:d1:4e: ab:53:8d:1c:1c:e1:6d:5b:cb:dc:95:b7:9c:b9:93:ab:99:27: a3:8c:0a:7a:66:f0:65:0c:e8:d7:01:9d:82:25:0e:96:84:1c: c2:c9:5d:5b:5a:d0:76:ac:7b:d3:d2:78:3a:9a:c2:a5:9e:01: 7e:af:07:4a:11:12:e4:9b:95:cb:f8:cf:b1:7c:0c:86:19:5b: 81:49:5d:8d:5b:75:65:06:54:8e:90:92:1c:fb:3d:d9:bb:0b: 64:38:80:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULiwUdTMLCC4VWs/ugnStP92ntfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI5RjZCMkM5ODdDRURGMkMwQTU4MTM3RTg1Q0RCQjc2 NzlFNkJCMDAeFw0yNTExMDMwMTQxNTVaFw0yNTExMDQwMjM2NTVaMDMxMTAvBgNV BAMTKDBENjEwRTY1OEM1MEQ0RjNBMjZFNEZFNkEzMEYxMTIzOUNFNTEyQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDarrIw32LHhch+cC8BRWkq3woI oOwQ7gCTC0BFIXkbcMFp8dxK6ztn3njTqm2TvU4o9ng01SI2xyaWnkSptzSCZyXE aYoaToISDPnkrlQDvmawggPtCBwY66nTtcx2ITweS3mYDrRvGKCpKiNjix1zVHwx Li3xlzbDOudZ3Qi6g66NMssTjksJ9UJtkBjvh/S7fICx1zgANFaExt4gU2yrvkw4 uyna5RjP7JAFlaJRyFPqG6mnGeRJ5DW7Gg3JPNQ27Dl3gSBIhuDUBraGkXgl4OAn hvqWVMe2r4mVj7dvrmdVVySspKM7HFCsz1g//LCc3brMEBCE8oDIt+wSU9EvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDWEOZYxQ1POibk/mow8RI5zlEsEwHwYDVR0j BBgwFoAUi59rLJh87fLApYE36Fzbt2eea7AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHozeWlqRDFCQmhpU0ZQN2RXOEZzR2hzTTNGckZ2RW1ETDljQmFtSlJI VEMvMC84QjlGNkIyQzk4N0NFREYyQzBBNTgxMzdFODVDREJCNzY3OUU2QkIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCOUY2QjJDOTg3Q0VERjJD MEE1ODEzN0U4NUNEQkI3Njc5RTZCQjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHozeWlqRDFCQmhpU0ZQN2RXOEZzR2hzTTNGckZ2RW1ETDljQmFtSlJIVEMvMC84 QjlGNkIyQzk4N0NFREYyQzBBNTgxMzdFODVDREJCNzY3OUU2QkIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADz7NJ41mth5jhVzBnV0QQqngSLGojNPx2aDY1OLaJT+8GuyY1QzKYo19WMP5 b7CW3RowEwChTrybG76JPjmhqXgtuwTeVEYdG5rjDWUBQuItYQoXFeAPiey3CWkv qPym7hY88h+pAFFfwXlCcV3bK/jJ5Gy3LCHORzZOKCeLn+TRo2zzLPsxreuc5DxF Yi+upr1C8OAMaTz1+oxfXR7Z2tFOq1ONHBzhbVvL3JW3nLmTq5kno4wKembwZQzo 1wGdgiUOloQcwsldW1rQdqx709J4OprCpZ4Bfq8HShES5JuVy/jPsXwMhhlbgUld jVt1ZQZUjpCSHPs92bsLZDiAdA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:07:52 2025 by rpki-client