$ rpki-client -vvf rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.mft File: 8DC9BF1ADE379959593FC137298AB5F7F113CA41.mft (raw, json) Hash identifier: lccYfA4fUgGGLmAXFV7ahOaQm4KOQCCvsoXg0zL4HLU= Subject key identifier: A5:2A:61:91:4D:D7:75:F3:59:C2:9F:61:01:39:B4:97:77:5D:7F:9A Authority key identifier: 8D:C9:BF:1A:DE:37:99:59:59:3F:C1:37:29:8A:B5:F7:F1:13:CA:41 Certificate issuer: /CN=8DC9BF1ADE379959593FC137298AB5F7F113CA41 Certificate serial: 6C55B0A374FC6CF2F5901DF021B67EFDF3852B28 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC9BF1ADE379959593FC137298AB5F7F113CA41.cer Subject info access: rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.mft Manifest number: CE Signing time: Mon 03 Nov 2025 10:11:28 +0000 Manifest this update: Mon 03 Nov 2025 10:06:28 +0000 Manifest next update: Tue 04 Nov 2025 12:06:28 +0000 Files and hashes: 1: 8DC9BF1ADE379959593FC137298AB5F7F113CA41.crl (hash: LkYfeLtmHdV6sT74mdbMIC0NzFyMwWd54a2uDN1aRZk=) 2: 323830343a326631303a3a2f33322d313238203d3e20323634383639.roa (hash: haGQzrr28ZiQjHzuCQOTrEMszBlmFytBSTZxEBxcvlY=) 3: 3136382e3230352e3231362e302f32322d3332203d3e20323634383639.roa (hash: GbLn53lVwmZV/KM9ZK4ywi7kXxK/ooiAIOAwJLgXDDA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.crl rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC9BF1ADE379959593FC137298AB5F7F113CA41.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:55:b0:a3:74:fc:6c:f2:f5:90:1d:f0:21:b6:7e:fd:f3:85:2b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC9BF1ADE379959593FC137298AB5F7F113CA41 Validity Not Before: Nov 3 10:06:28 2025 GMT Not After : Nov 4 12:06:28 2025 GMT Subject: CN=A52A61914DD775F359C29F610139B497775D7F9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:00:47:5b:85:df:57:2d:04:cc:fe:79:db: fb:a3:c5:75:41:5f:c1:a9:0c:6e:ac:1a:20:12:74: 61:99:e2:d3:9d:88:f4:f2:cf:6f:de:48:fc:8e:22: 68:02:48:08:69:13:1c:73:c7:ea:aa:8e:8c:15:22: 76:38:dd:2a:3d:74:da:b1:f7:2a:cd:f7:cb:8d:35: a2:4b:54:58:94:d9:8d:f8:e8:f2:28:18:2b:0c:6a: 92:83:b5:ed:d1:73:7f:e9:ae:98:e7:4e:8f:09:ff: 26:e2:f9:1e:a7:b5:7b:49:53:58:55:ed:4b:96:75: ad:e0:01:b6:5f:70:ab:7e:1a:3c:ea:0d:2e:8f:e0: c7:f2:33:eb:31:5b:7d:40:c5:f3:3f:00:d8:37:86: 24:52:ae:f3:8b:25:22:5e:d0:97:96:01:51:86:36: 2c:82:41:b3:d9:05:8f:c9:18:be:88:12:a0:4b:51: 86:ae:d1:aa:2a:e2:b7:c9:d2:89:d2:1f:fd:3e:64: d3:db:93:27:1b:33:bc:31:c2:6d:bc:11:8e:5a:c9: 7d:b6:f7:55:85:e0:d3:01:12:15:40:b2:7e:4d:3d: da:d5:10:25:cd:79:ac:2e:61:ed:52:1b:36:ce:bd: 05:ec:1a:48:8d:48:73:78:b8:e2:d2:39:7a:33:9c: 72:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2A:61:91:4D:D7:75:F3:59:C2:9F:61:01:39:B4:97:77:5D:7F:9A X509v3 Authority Key Identifier: keyid:8D:C9:BF:1A:DE:37:99:59:59:3F:C1:37:29:8A:B5:F7:F1:13:CA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC9BF1ADE379959593FC137298AB5F7F113CA41.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b2:8e:c6:29:48:7a:20:84:29:88:25:cd:61:25:b6:2e:ea: 74:46:63:7b:2f:e4:f7:16:30:8e:dd:4c:8c:b5:62:46:8c:9b: e9:0a:59:70:2e:d5:d0:c9:29:ef:70:96:5e:98:73:f5:d8:fb: 94:3a:db:5e:19:b7:56:ce:03:d3:30:2f:32:91:ba:a2:9e:ab: 2b:5b:b9:4b:73:00:d7:c8:73:59:df:32:a0:7d:0f:e9:d3:8a: 4d:24:f4:6d:b6:b0:0f:49:ad:86:38:21:4b:f3:a6:94:aa:d0: f1:79:f7:a2:75:43:5a:28:26:6b:68:c6:30:0e:86:96:12:7f: 2f:bb:01:51:0c:42:5c:d5:f8:44:8b:d0:04:a3:7e:b3:ea:8e: 71:c2:79:b9:b8:1b:a9:49:1c:41:c8:4e:b2:c1:8b:f3:a5:e0: 4f:f9:cc:01:1f:e0:36:d0:a6:4f:27:ae:6c:17:8a:72:9d:37: 7e:8a:1a:5c:6b:ee:3c:46:f3:4d:b7:72:34:48:51:d0:11:83: d8:aa:e3:ae:26:20:1e:32:c2:b1:7e:4f:11:b5:9d:f7:3e:f7: b2:b3:9f:de:10:de:5f:01:35:4c:6d:52:18:a1:f6:4d:9d:27: c9:bf:ae:6a:40:b7:10:b5:9f:a5:a4:1c:11:4f:ab:3f:3d:27: d9:22:4e:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbFWwo3T8bPL1kB3wIbZ+/fOFKygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDOUJGMUFERTM3OTk1OTU5M0ZDMTM3Mjk4QUI1RjdG MTEzQ0E0MTAeFw0yNTExMDMxMDA2MjhaFw0yNTExMDQxMjA2MjhaMDMxMTAvBgNV BAMTKEE1MkE2MTkxNERENzc1RjM1OUMyOUY2MTAxMzlCNDk3Nzc1RDdGOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvOgBHW4XfVy0EzP552/ujxXVB X8GpDG6sGiASdGGZ4tOdiPTyz2/eSPyOImgCSAhpExxzx+qqjowVInY43So9dNqx 9yrN98uNNaJLVFiU2Y346PIoGCsMapKDte3Rc3/prpjnTo8J/ybi+R6ntXtJU1hV 7UuWda3gAbZfcKt+GjzqDS6P4MfyM+sxW31AxfM/ANg3hiRSrvOLJSJe0JeWAVGG NiyCQbPZBY/JGL6IEqBLUYau0aoq4rfJ0onSH/0+ZNPbkycbM7wxwm28EY5ayX22 91WF4NMBEhVAsn5NPdrVECXNeawuYe1SGzbOvQXsGkiNSHN4uOLSOXoznHLDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpSphkU3XdfNZwp9hATm0l3ddf5owHwYDVR0j BBgwFoAUjcm/Gt43mVlZP8E3KYq19/ETykEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjQzUFFXdXBRMktzTWJRcXFSMll0V3VBYzI4TldyWEQxNzZwTHM0R0tv RWYvMC84REM5QkYxQURFMzc5OTU5NTkzRkMxMzcyOThBQjVGN0YxMTNDQTQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEQzlCRjFBREUzNzk5NTk1 OTNGQzEzNzI5OEFCNUY3RjExM0NBNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NjQzUFFXdXBRMktzTWJRcXFSMll0V3VBYzI4TldyWEQxNzZwTHM0R0tvRWYvMC84 REM5QkYxQURFMzc5OTU5NTkzRkMxMzcyOThBQjVGN0YxMTNDQTQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcrKOxilIeiCEKYglzWElti7qdEZjey/k9xYwjt1MjLViRoyb6QpZcC7V0Mkp 73CWXphz9dj7lDrbXhm3Vs4D0zAvMpG6op6rK1u5S3MA18hzWd8yoH0P6dOKTST0 bbawD0mthjghS/OmlKrQ8Xn3onVDWigma2jGMA6GlhJ/L7sBUQxCXNX4RIvQBKN+ s+qOccJ5ubgbqUkcQchOssGL86XgT/nMAR/gNtCmTyeubBeKcp03fooaXGvuPEbz TbdyNEhR0BGD2KrjriYgHjLCsX5PEbWd9z73srOf3hDeXwE1TG1SGKH2TZ0nyb+u akC3ELWfpaQcEU+rPz0n2SJOqA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:39:58 2025 by rpki-client