$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft File: 8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft (raw, json) Hash identifier: YXUFUL9/4UtFe1eWmCTGOeckhvPxEwQwjqDI4XzTlfw= Subject key identifier: F3:38:94:E9:A0:C9:3C:D4:74:0F:66:15:03:BB:44:08:A7:C7:5D:CB Authority key identifier: 8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4 Certificate issuer: /CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4 Certificate serial: 34F5059F52F611FE0D4DA85039B06F264C252904 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer Subject info access: rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft Manifest number: 02FB Signing time: Mon 03 Nov 2025 15:09:24 +0000 Manifest this update: Mon 03 Nov 2025 15:04:24 +0000 Manifest next update: Tue 04 Nov 2025 17:56:24 +0000 Files and hashes: 1: 3139312e362e3233322e302f32312d3332203d3e203238363339.roa (hash: lAWXcHvJQEUJBKmNh5txL8VNqKKsnauGkIpzuQASyX0=) 2: 8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl (hash: QQ4fHvENdVFy6e9ve5Fu2UgIIFJFVFzGkbQmAs2x7Yc=) 3: 3137372e3132392e36382e302f32322d3332203d3e203238363339.roa (hash: mqYkp/M5f+kccLNtX9h2J9BSkR7/JgMayBLUCzNiahs=) 4: 323830343a6464303a3a2f33322d313238203d3e203238363339.roa (hash: WQoboyImui1okPybhUmMkwRTPTqA4Wr/K4QTuEd2D6g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 17:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f5:05:9f:52:f6:11:fe:0d:4d:a8:50:39:b0:6f:26:4c:25:29:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4 Validity Not Before: Nov 3 15:04:24 2025 GMT Not After : Nov 4 17:56:24 2025 GMT Subject: CN=F33894E9A0C93CD4740F661503BB4408A7C75DCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c7:24:4e:49:0d:5f:c3:90:81:b4:4d:b5:fb: 85:14:43:24:15:7a:ba:d9:a4:11:89:93:73:f6:3f: 6d:ad:c4:55:a1:43:cf:9f:f3:22:b9:21:9a:30:fc: 43:b9:ae:52:b4:91:eb:59:e9:1c:bc:69:14:54:b8: 8a:91:6a:d7:96:4a:b7:e3:7d:f1:d0:aa:83:65:cc: 07:11:e6:bf:cd:48:36:01:9e:a8:01:26:6d:f0:f7: 16:9a:b8:84:c4:de:d2:08:9c:c2:05:08:64:ac:b6: 92:55:ae:e9:4f:ae:51:8e:06:e4:16:91:08:83:55: 66:18:2d:03:2e:3d:a7:0f:34:80:96:6f:8c:f6:bb: eb:e6:26:19:56:07:bd:5c:22:c3:30:4f:cf:20:a9: f6:5e:99:5d:7c:76:aa:b7:8e:86:da:2a:69:7d:e1: 2d:7a:ca:cf:03:c0:28:46:3a:29:fb:b2:d5:e9:e6: 35:26:91:d2:55:95:a2:1b:cd:c3:22:ba:29:ca:22: ce:30:f1:6e:ef:5a:dd:36:22:07:42:47:46:d7:00: 8c:8a:fe:84:52:9e:cc:6f:54:fa:a0:03:a5:fa:88: 0d:84:d3:25:fe:fb:59:44:1b:95:6d:64:6d:b1:bb: 89:45:4c:a5:a0:93:66:6f:b9:82:1a:35:bf:3f:39: 04:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:38:94:E9:A0:C9:3C:D4:74:0F:66:15:03:BB:44:08:A7:C7:5D:CB X509v3 Authority Key Identifier: keyid:8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:34:0f:d2:d9:a1:b4:06:cd:fa:21:37:e7:f3:a9:9a:2f:4b: 5c:f6:b2:b7:e2:e5:5b:52:c2:7e:de:c4:86:c5:fa:9e:28:e8: 57:c7:a6:8f:61:d3:1e:d2:24:cb:4f:6c:f3:0a:40:3c:b4:b9: 6e:18:cd:84:aa:fc:53:40:60:b3:0c:af:cf:73:60:1a:ab:df: 84:4d:a7:03:be:85:f5:3d:99:d3:b2:20:19:d9:29:2a:5a:8d: de:7a:23:0c:a5:d5:95:9f:af:8f:70:70:23:70:85:f1:5a:b8: b3:8d:88:0f:fe:e5:6a:ff:cd:64:be:bb:57:8e:40:05:87:7a: e8:75:9b:82:ba:16:8d:61:2f:4a:23:7a:e2:b2:dd:47:c3:ab: 8e:8f:a9:0d:64:d8:6d:24:76:d9:5c:52:1e:5b:2d:9d:45:53: f2:4b:f2:ae:9a:02:83:fd:29:68:6b:3b:2c:0f:aa:77:c2:19: 11:03:01:d6:a4:8d:9f:ec:fb:69:35:06:9c:37:58:f2:b3:25: b2:ca:c7:e1:52:ed:fb:da:5c:99:4e:ee:2d:c5:d7:11:58:49: bf:47:6d:85:b4:7e:03:0a:e0:26:30:e4:71:5a:71:be:78:4b: 02:f4:39:04:a8:70:53:53:49:8f:16:fe:31:d7:91:e4:91:0f: fd:6e:d6:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNPUFn1L2Ef4NTahQObBvJkwlKQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU3MzE2Q0E5MDdGM0Q0NjkyOUFGRjZEREY1NjU1REJC NTNBQkRDNDAeFw0yNTExMDMxNTA0MjRaFw0yNTExMDQxNzU2MjRaMDMxMTAvBgNV BAMTKEYzMzg5NEU5QTBDOTNDRDQ3NDBGNjYxNTAzQkI0NDA4QTdDNzVEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChxyROSQ1fw5CBtE21+4UUQyQV errZpBGJk3P2P22txFWhQ8+f8yK5IZow/EO5rlK0ketZ6Ry8aRRUuIqRateWSrfj ffHQqoNlzAcR5r/NSDYBnqgBJm3w9xaauITE3tIInMIFCGSstpJVrulPrlGOBuQW kQiDVWYYLQMuPacPNICWb4z2u+vmJhlWB71cIsMwT88gqfZemV18dqq3jobaKml9 4S16ys8DwChGOin7stXp5jUmkdJVlaIbzcMiuinKIs4w8W7vWt02IgdCR0bXAIyK /oRSnsxvVPqgA6X6iA2E0yX++1lEG5VtZG2xu4lFTKWgk2ZvuYIaNb8/OQSdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8ziU6aDJPNR0D2YVA7tECKfHXcswHwYDVR0j BBgwFoAUjnMWypB/PUaSmv9t31ZV27U6vcQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXlEMWVEeDZxS3hFY1VqOHJ1YThRTUs4QmZ2dkFqU25zV1JRcDN1clBO WGovMS84RTczMTZDQTkwN0YzRDQ2OTI5QUZGNkRERjU2NTVEQkI1M0FCREM0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNzMxNkNBOTA3RjNENDY5 MjlBRkY2RERGNTY1NURCQjUzQUJEQzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXlEMWVEeDZxS3hFY1VqOHJ1YThRTUs4QmZ2dkFqU25zV1JRcDN1clBOWGovMS84 RTczMTZDQTkwN0YzRDQ2OTI5QUZGNkRERjU2NTVEQkI1M0FCREM0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeDQP0tmhtAbN+iE35/Opmi9LXPayt+LlW1LCft7EhsX6nijoV8emj2HTHtIk y09s8wpAPLS5bhjNhKr8U0Bgswyvz3NgGqvfhE2nA76F9T2Z07IgGdkpKlqN3noj DKXVlZ+vj3BwI3CF8Vq4s42ID/7lav/NZL67V45ABYd66HWbgroWjWEvSiN64rLd R8Orjo+pDWTYbSR22VxSHlstnUVT8kvyrpoCg/0paGs7LA+qd8IZEQMB1qSNn+z7 aTUGnDdY8rMlssrH4VLt+9pcmU7uLcXXEVhJv0dthbR+AwrgJjDkcVpxvnhLAvQ5 BKhwU1NJjxb+MdeR5JEP/W7W6A== -----END CERTIFICATE-----Generated at Tue Nov 4 05:03:51 2025 by rpki-client