$ rpki-client -vvf rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.mft File: 89C86114565777DCA20A0F5E5C3319F12FC1DC5A.mft (raw, json) Hash identifier: rIupet7QmzHyEdbFIQWctHtF6QJewml9skEKQQXPKOY= Subject key identifier: 25:5B:6D:A1:A0:27:24:BA:26:BA:15:1B:72:E5:47:D1:42:8C:DF:76 Authority key identifier: 89:C8:61:14:56:57:77:DC:A2:0A:0F:5E:5C:33:19:F1:2F:C1:DC:5A Certificate issuer: /CN=89C86114565777DCA20A0F5E5C3319F12FC1DC5A Certificate serial: 1C071D401D779291666041B15A1A5CC2D544B7E3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.cer Subject info access: rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.mft Manifest number: 46 Signing time: Mon 03 Nov 2025 22:35:26 +0000 Manifest this update: Mon 03 Nov 2025 22:30:26 +0000 Manifest next update: Wed 05 Nov 2025 01:35:26 +0000 Files and hashes: 1: 323830343a313631303a3a2f33322d313238203d3e20323633323635.roa (hash: K1COMczg1tyWr1KkstdQ5mm6NCYXFr4sfHYMy4HwQh8=) 2: 3137392e3130372e382e302f32312d3332203d3e20323633323635.roa (hash: c4/eCnm11wf52KZhGuLppr4NQApA/XFR5cO8KT517dw=) 3: 3137392e3130372e382e302f32312d3234203d3e20313938393439.roa (hash: Ijf3Xpr8Hy/fRH+JM/QvzOJbEJCXKWLRX6JEwAhLUoc=) 4: 89C86114565777DCA20A0F5E5C3319F12FC1DC5A.crl (hash: O3Lgw4YaCgi8nOwkcRC4iGLIKnuuNExbEXrzLeEN6WY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.crl rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 01:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:07:1d:40:1d:77:92:91:66:60:41:b1:5a:1a:5c:c2:d5:44:b7:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89C86114565777DCA20A0F5E5C3319F12FC1DC5A Validity Not Before: Nov 3 22:30:26 2025 GMT Not After : Nov 5 01:35:26 2025 GMT Subject: CN=255B6DA1A02724BA26BA151B72E547D1428CDF76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c5:38:2b:46:34:72:b8:27:53:4b:a3:26:e7: 71:54:0a:0a:4e:1f:03:b1:30:c0:00:88:23:d1:06: aa:c3:62:69:53:75:62:7a:5c:54:66:83:77:0d:23: 77:29:80:5a:88:33:10:2d:eb:29:de:97:81:a2:8e: 48:e1:89:09:2a:77:34:e9:8c:ad:b9:76:ce:73:3b: 94:8d:3f:2c:d5:b1:c2:b4:3b:50:84:c5:91:22:5e: 27:60:ff:81:4e:c7:7d:a1:54:5d:a3:b1:b7:e6:ce: d5:f6:50:55:65:18:9a:ad:b9:1e:67:04:40:f5:f6: 9a:81:30:9f:5c:aa:00:42:35:83:99:7f:dd:55:fc: d7:d5:c4:6e:d4:80:54:03:33:d0:10:98:1a:b6:82: a6:85:a4:50:0c:5d:0c:b4:2c:cc:53:0f:a7:63:86: 19:54:ee:8b:ff:3d:cd:23:b1:94:e5:ae:73:90:f5: 55:4d:06:d7:1a:6f:2e:ec:9b:bd:44:ff:be:35:73: dd:0e:d6:88:8b:24:3e:1e:b4:a5:dc:d2:a6:bd:f3: 4f:06:18:4c:d9:f0:d2:a6:87:03:35:eb:b9:c2:ce: ea:7c:ee:50:c7:75:e4:7d:7a:89:21:7f:6a:10:70: 1e:2e:ee:26:d5:04:29:b8:d8:85:78:c7:78:b3:41: 82:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5B:6D:A1:A0:27:24:BA:26:BA:15:1B:72:E5:47:D1:42:8C:DF:76 X509v3 Authority Key Identifier: keyid:89:C8:61:14:56:57:77:DC:A2:0A:0F:5E:5C:33:19:F1:2F:C1:DC:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:04:d6:1e:d0:7d:ed:b9:9a:7d:34:b1:53:f5:00:4a:09:30: d2:4d:ba:34:ab:c7:35:19:9d:95:38:6f:dd:61:5a:33:3a:e9: d4:93:c1:30:a1:c5:e3:6f:77:5d:f4:87:01:36:d4:1a:4f:cd: b3:21:45:51:96:29:91:6a:cc:30:3e:c8:be:db:9f:a2:62:43: f1:25:56:ea:66:1f:23:04:4f:87:1c:71:7c:cd:2d:44:7d:a6: fd:0e:66:fe:fe:a3:3c:ce:96:fa:48:c4:c7:cc:ac:ca:7f:36: 1e:2d:0b:b8:9b:3e:b9:37:44:7f:34:15:d4:22:34:4b:ea:82: 01:4f:ca:cd:8a:ab:2d:21:b4:4d:e8:30:a1:8f:7b:32:55:d1: 8a:0f:79:78:a1:d2:7a:8b:13:66:13:31:00:76:53:de:4a:6c: 36:40:3d:9b:f7:cc:20:84:36:13:3a:f6:c7:90:db:5f:c5:f5: 8c:31:0f:aa:1f:01:4a:60:fe:7d:48:90:55:53:78:51:73:c8: 4c:2d:b8:37:3b:8f:a8:3f:0b:44:11:a7:24:85:86:08:95:d5: 16:e8:32:cc:17:88:1f:c9:ca:32:03:14:09:f7:9c:6b:c8:7f: 2d:58:e0:da:ab:2c:18:91:47:d2:25:40:18:de:33:75:44:c4: 2e:a9:da:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHAcdQB13kpFmYEGxWhpcwtVEt+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlDODYxMTQ1NjU3NzdEQ0EyMEEwRjVFNUMzMzE5RjEy RkMxREM1QTAeFw0yNTExMDMyMjMwMjZaFw0yNTExMDUwMTM1MjZaMDMxMTAvBgNV BAMTKDI1NUI2REExQTAyNzI0QkEyNkJBMTUxQjcyRTU0N0QxNDI4Q0RGNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xTgrRjRyuCdTS6Mm53FUCgpO HwOxMMAAiCPRBqrDYmlTdWJ6XFRmg3cNI3cpgFqIMxAt6ynel4GijkjhiQkqdzTp jK25ds5zO5SNPyzVscK0O1CExZEiXidg/4FOx32hVF2jsbfmztX2UFVlGJqtuR5n BED19pqBMJ9cqgBCNYOZf91V/NfVxG7UgFQDM9AQmBq2gqaFpFAMXQy0LMxTD6dj hhlU7ov/Pc0jsZTlrnOQ9VVNBtcaby7sm71E/741c90O1oiLJD4etKXc0qa9808G GEzZ8NKmhwM167nCzup87lDHdeR9eokhf2oQcB4u7ibVBCm42IV4x3izQYKnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJVttoaAnJLomuhUbcuVH0UKM33YwHwYDVR0j BBgwFoAUichhFFZXd9yiCg9eXDMZ8S/B3FowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHkybzU1MzdjQzZZY0NzQkFOOHZXTUJVNWFRTUpjNW16aEtCNHV0Tm1h VXovMC84OUM4NjExNDU2NTc3N0RDQTIwQTBGNUU1QzMzMTlGMTJGQzFEQzVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5Qzg2MTE0NTY1Nzc3RENB MjBBMEY1RTVDMzMxOUYxMkZDMURDNUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHkybzU1MzdjQzZZY0NzQkFOOHZXTUJVNWFRTUpjNW16aEtCNHV0Tm1hVXovMC84 OUM4NjExNDU2NTc3N0RDQTIwQTBGNUU1QzMzMTlGMTJGQzFEQzVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxATWHtB97bmafTSxU/UASgkw0k26NKvHNRmdlThv3WFaMzrp1JPBMKHF4293 XfSHATbUGk/NsyFFUZYpkWrMMD7IvtufomJD8SVW6mYfIwRPhxxxfM0tRH2m/Q5m /v6jPM6W+kjEx8ysyn82Hi0LuJs+uTdEfzQV1CI0S+qCAU/KzYqrLSG0TegwoY97 MlXRig95eKHSeosTZhMxAHZT3kpsNkA9m/fMIIQ2Ezr2x5DbX8X1jDEPqh8BSmD+ fUiQVVN4UXPITC24NzuPqD8LRBGnJIWGCJXVFugyzBeIH8nKMgMUCfeca8h/LVjg 2qssGJFH0iVAGN4zdUTELqnaRA== -----END CERTIFICATE-----Generated at Tue Nov 4 10:05:31 2025 by rpki-client