$ rpki-client -vvf rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.mft File: 08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.mft (raw, json) Hash identifier: 34mwfJTfQ1R9iDIHuQEMBF6/IU+UXlNwiFfANNLzif4= Subject key identifier: 81:7B:22:1F:C1:3D:9E:EB:9A:EC:46:45:D3:AD:C8:2C:FD:A1:83:FA Authority key identifier: 08:B9:66:62:A0:C7:D8:4F:F2:8C:AF:0B:BA:C1:54:78:F1:C8:9C:04 Certificate issuer: /CN=08B96662A0C7D84FF28CAF0BBAC15478F1C89C04 Certificate serial: 3C4504B55695B965E64E42D8548852D29F7BE79C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.cer Subject info access: rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.mft Manifest number: 45 Signing time: Mon 03 Nov 2025 18:03:06 +0000 Manifest this update: Mon 03 Nov 2025 17:58:06 +0000 Manifest next update: Tue 04 Nov 2025 20:53:06 +0000 Files and hashes: 1: 323830343a326332343a3a2f33322d3438203d3e20323635313938.roa (hash: CKYKtj7HbYq0VNZyORgpw1NAhn542ZQmRyRkfj1klj0=) 2: 08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.crl (hash: t85NmbT/lAjX0E806cy+YTR1bCWZKTANh++fJgTehvY=) 3: 3137302e3233332e3232382e302f32322d3234203d3e20323635313938.roa (hash: MuQbLzIZuSpWyERvK+xI40C/X/vVd+MF6mc7CZ2hyGQ=) 4: 3136372e3235302e32382e302f32322d3234203d3e20323635313938.roa (hash: YEqvvyzJGN5LO2fLpb8POiDwE8qrg6EfwJuPfZGaG2Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.crl rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 20:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:45:04:b5:56:95:b9:65:e6:4e:42:d8:54:88:52:d2:9f:7b:e7:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08B96662A0C7D84FF28CAF0BBAC15478F1C89C04 Validity Not Before: Nov 3 17:58:06 2025 GMT Not After : Nov 4 20:53:06 2025 GMT Subject: CN=817B221FC13D9EEB9AEC4645D3ADC82CFDA183FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9d:ec:5d:04:70:35:29:6d:90:70:7f:03:b0: b1:ff:a6:1b:a0:58:57:d8:c2:b8:77:e3:0e:18:db: a4:01:cd:1f:59:f3:97:37:df:c6:3e:79:7c:b0:94: 81:81:b7:47:ea:39:ae:42:3e:a2:12:bc:be:8b:b8: a4:a6:ee:63:4f:ca:ef:13:98:af:2b:c6:58:4a:05: a9:ae:ca:f7:5c:10:a5:3f:11:28:b8:a8:97:d7:8c: 89:da:02:0a:aa:db:4c:40:65:35:8d:b7:2e:da:0a: a7:b1:93:3a:44:6d:cd:40:36:8c:f5:c0:50:22:c7: 41:0e:a6:37:8e:a5:14:eb:28:ae:53:37:b0:79:13: 30:14:75:c6:89:00:bb:d2:f8:97:dc:db:cf:28:fd: 6c:ac:02:ca:90:9d:31:5a:b7:27:7b:e1:91:a6:60: 34:a8:2d:be:c5:8c:1c:9c:ba:47:e0:9d:94:d3:48: e8:7c:e5:3b:04:23:9e:e8:e1:85:f3:a1:23:fa:37: 53:24:53:16:34:5a:1f:21:af:03:31:89:09:ac:03: 3b:28:fc:bb:31:22:6b:40:ea:e5:28:da:e8:90:32: 79:dc:1a:1b:3f:1b:bb:22:8c:48:d1:00:cb:04:8c: 0e:cd:b9:ab:52:9b:3f:bc:85:72:ec:d1:eb:23:f5: bd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7B:22:1F:C1:3D:9E:EB:9A:EC:46:45:D3:AD:C8:2C:FD:A1:83:FA X509v3 Authority Key Identifier: keyid:08:B9:66:62:A0:C7:D8:4F:F2:8C:AF:0B:BA:C1:54:78:F1:C8:9C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:cf:51:5c:c4:fc:82:cc:74:e3:fc:57:c1:dd:75:33:c2:92: 77:85:2a:08:ba:78:e7:1e:20:10:66:93:82:ad:51:3a:44:9a: 9e:00:54:38:0b:11:78:2d:c6:ee:92:1f:d3:a2:f3:38:46:5a: 29:05:ff:f3:59:30:a6:46:90:f2:c6:d4:de:20:ef:95:c2:f5: 10:4e:75:10:dc:02:76:7c:e4:19:2e:e0:c4:60:fc:9d:b6:65: 5f:3a:b4:91:68:45:c1:71:85:a4:c7:3d:86:6d:28:af:95:8a: 3e:8d:c9:a9:b7:88:38:c8:53:3e:0c:aa:f5:13:18:53:e3:f5: f9:82:43:1e:19:b1:b3:6d:5d:7e:44:4c:17:a5:47:78:2d:91: ab:9f:ed:38:cc:62:fc:df:ec:cc:ef:1b:bf:4b:a0:8a:0d:fc: 68:0a:96:e9:db:b8:cf:29:9d:47:09:4c:88:f7:da:5b:bc:58: 8f:8e:d6:a1:95:69:11:32:ff:2a:36:00:69:d6:4b:11:12:d7: ed:a7:37:c5:2f:87:ad:47:e4:8a:d4:4e:ae:4f:97:4f:66:50: a3:e4:8c:31:89:b3:3a:c8:3a:1f:a5:a3:f1:51:e5:04:29:72: 66:74:07:59:87:ff:db:b6:8a:9f:43:8e:7a:05:50:05:5a:9e: 21:14:31:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPEUEtVaVuWXmTkLYVIhS0p9755wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhCOTY2NjJBMEM3RDg0RkYyOENBRjBCQkFDMTU0NzhG MUM4OUMwNDAeFw0yNTExMDMxNzU4MDZaFw0yNTExMDQyMDUzMDZaMDMxMTAvBgNV BAMTKDgxN0IyMjFGQzEzRDlFRUI5QUVDNDY0NUQzQURDODJDRkRBMTgzRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtnexdBHA1KW2QcH8DsLH/phug WFfYwrh34w4Y26QBzR9Z85c338Y+eXywlIGBt0fqOa5CPqISvL6LuKSm7mNPyu8T mK8rxlhKBamuyvdcEKU/ESi4qJfXjInaAgqq20xAZTWNty7aCqexkzpEbc1ANoz1 wFAix0EOpjeOpRTrKK5TN7B5EzAUdcaJALvS+Jfc288o/WysAsqQnTFatyd74ZGm YDSoLb7FjBycukfgnZTTSOh85TsEI57o4YXzoSP6N1MkUxY0Wh8hrwMxiQmsAzso /LsxImtA6uUo2uiQMnncGhs/G7sijEjRAMsEjA7NuatSmz+8hXLs0esj9b3tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgXsiH8E9nuua7EZF063ILP2hg/owHwYDVR0j BBgwFoAUCLlmYqDH2E/yjK8LusFUePHInAQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWF5SlRtZHBNY3ljUUV1VnFlRVo1dWZGMWlrZUtGcVVNU2NXUHN4TXpm M2UvMC8wOEI5NjY2MkEwQzdEODRGRjI4Q0FGMEJCQUMxNTQ3OEYxQzg5QzA0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4Qjk2NjYyQTBDN0Q4NEZG MjhDQUYwQkJBQzE1NDc4RjFDODlDMDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWF5SlRtZHBNY3ljUUV1VnFlRVo1dWZGMWlrZUtGcVVNU2NXUHN4TXpmM2UvMC8w OEI5NjY2MkEwQzdEODRGRjI4Q0FGMEJCQUMxNTQ3OEYxQzg5QzA0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADM9RXMT8gsx04/xXwd11M8KSd4UqCLp45x4gEGaTgq1ROkSangBUOAsReC3G 7pIf06LzOEZaKQX/81kwpkaQ8sbU3iDvlcL1EE51ENwCdnzkGS7gxGD8nbZlXzq0 kWhFwXGFpMc9hm0or5WKPo3JqbeIOMhTPgyq9RMYU+P1+YJDHhmxs21dfkRMF6VH eC2Rq5/tOMxi/N/szO8bv0ugig38aAqW6du4zymdRwlMiPfaW7xYj47WoZVpETL/ KjYAadZLERLX7ac3xS+HrUfkitROrk+XT2ZQo+SMMYmzOsg6H6Wj8VHlBClyZnQH WYf/27aKn0OOegVQBVqeIRQxYw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:39:55 2025 by rpki-client