$ rpki-client -vvf rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.mft File: 89C86114565777DCA20A0F5E5C3319F12FC1DC5A.mft (raw, json) Hash identifier: N2oqJ9rUNGO5/7nCqiQdbaouWNGD47o5EUvD9qLC2Fg= Subject key identifier: 20:DC:89:AF:74:50:86:58:A7:EC:1E:F0:4C:E4:19:C3:73:50:12:54 Authority key identifier: 89:C8:61:14:56:57:77:DC:A2:0A:0F:5E:5C:33:19:F1:2F:C1:DC:5A Certificate issuer: /CN=89C86114565777DCA20A0F5E5C3319F12FC1DC5A Certificate serial: 6D6F2B35DA2B4D95AA9F425D56A4E1B250313A27 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.cer Subject info access: rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.mft Manifest number: 45 Signing time: Mon 03 Nov 2025 03:50:06 +0000 Manifest this update: Mon 03 Nov 2025 03:45:06 +0000 Manifest next update: Tue 04 Nov 2025 06:32:06 +0000 Files and hashes: 1: 3137392e3130372e382e302f32312d3332203d3e20323633323635.roa (hash: c4/eCnm11wf52KZhGuLppr4NQApA/XFR5cO8KT517dw=) 2: 89C86114565777DCA20A0F5E5C3319F12FC1DC5A.crl (hash: EtSFoJ9I0Mee6VFOjr1ptOC0m8qGMPb0aWuBxZddrb0=) 3: 3137392e3130372e382e302f32312d3234203d3e20313938393439.roa (hash: Ijf3Xpr8Hy/fRH+JM/QvzOJbEJCXKWLRX6JEwAhLUoc=) 4: 323830343a313631303a3a2f33322d313238203d3e20323633323635.roa (hash: K1COMczg1tyWr1KkstdQ5mm6NCYXFr4sfHYMy4HwQh8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.crl rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 06:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6f:2b:35:da:2b:4d:95:aa:9f:42:5d:56:a4:e1:b2:50:31:3a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89C86114565777DCA20A0F5E5C3319F12FC1DC5A Validity Not Before: Nov 3 03:45:06 2025 GMT Not After : Nov 4 06:32:06 2025 GMT Subject: CN=20DC89AF74508658A7EC1EF04CE419C373501254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:18:c6:bf:74:85:54:b7:cf:3d:42:a0:91:db: af:f6:7d:5c:b6:0a:71:8d:af:a3:c1:79:28:c2:ef: 82:d7:25:81:2a:f9:14:2a:a5:35:01:bd:2b:ad:05: 82:a3:30:a2:dc:68:3d:af:2e:1f:c6:ff:07:1d:73: f9:c0:22:a3:b1:a7:c5:34:ea:22:78:b0:30:be:6f: 73:c8:bf:bd:93:cd:59:cd:8c:71:a5:97:98:6a:12: ff:c8:27:1e:a3:c5:79:7f:a4:2e:fe:bc:c2:8e:71: 61:32:0f:15:70:85:8a:24:2d:5f:ff:db:ec:76:9a: f7:55:8c:3e:51:a9:1d:26:ec:57:31:95:a7:24:00: a7:b5:34:31:33:5e:61:59:47:28:00:e1:47:f3:4a: 5b:7f:96:7f:1f:29:e2:c1:23:6d:ce:93:b8:06:99: d1:4d:8b:2c:66:e5:42:59:a7:27:83:77:de:b5:2b: 72:f9:0c:c6:49:cc:3a:69:45:a0:c2:ee:37:e7:ac: 5e:90:d2:29:f0:d1:bc:04:76:9f:db:1e:62:73:23: 98:06:ae:27:5d:d6:d3:a4:b3:ec:36:a4:dc:66:5c: 30:96:6a:45:bd:d1:1c:7b:b0:b6:01:de:00:33:f9: bb:2e:cf:c7:dd:87:41:07:14:f4:53:59:e1:89:07: 40:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DC:89:AF:74:50:86:58:A7:EC:1E:F0:4C:E4:19:C3:73:50:12:54 X509v3 Authority Key Identifier: keyid:89:C8:61:14:56:57:77:DC:A2:0A:0F:5E:5C:33:19:F1:2F:C1:DC:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:87:96:79:07:4a:86:99:1d:7c:f8:36:ab:d8:39:51:92:54: c6:be:48:fa:c9:af:53:6b:a6:29:59:44:92:e5:e3:fa:f3:92: dc:0f:b0:1d:99:5b:b5:ee:b6:52:85:a3:f4:26:93:9e:1a:4d: 42:5b:3b:22:ad:e9:d8:ef:21:b2:32:99:46:33:6e:40:dc:15: 11:63:1f:79:7f:c7:24:a5:d3:a9:db:b5:1f:21:cb:22:d2:3e: 63:7e:08:ac:14:0d:99:c5:9a:39:23:32:7b:e0:3b:1c:50:46: 81:83:ee:2a:30:cb:9e:4e:36:7f:ce:5b:d8:be:51:68:a1:9b: c1:42:40:bb:bf:74:7e:9b:1c:0c:bc:9c:b4:1b:f1:4c:98:9e: e3:61:91:21:4c:9d:9f:dd:ba:0c:33:30:48:1d:62:32:6d:07: a6:2f:06:47:2f:47:e9:68:a2:e5:bb:db:5c:83:54:a9:4b:5b: 6e:24:f5:b4:25:67:ef:af:27:b5:58:42:7b:1a:9c:46:8d:2a: c6:f9:8a:a9:07:8c:80:04:7b:22:77:f8:0a:38:4f:df:e5:ed: 7f:b8:09:9b:8b:71:b0:a5:88:f6:8c:18:f0:83:05:ac:17:d6: 64:3a:6e:9f:3e:6e:6f:cb:5f:b6:96:0b:1b:e9:12:b3:08:59: f0:70:24:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbW8rNdorTZWqn0JdVqThslAxOicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlDODYxMTQ1NjU3NzdEQ0EyMEEwRjVFNUMzMzE5RjEy RkMxREM1QTAeFw0yNTExMDMwMzQ1MDZaFw0yNTExMDQwNjMyMDZaMDMxMTAvBgNV BAMTKDIwREM4OUFGNzQ1MDg2NThBN0VDMUVGMDRDRTQxOUMzNzM1MDEyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMGMa/dIVUt889QqCR26/2fVy2 CnGNr6PBeSjC74LXJYEq+RQqpTUBvSutBYKjMKLcaD2vLh/G/wcdc/nAIqOxp8U0 6iJ4sDC+b3PIv72TzVnNjHGll5hqEv/IJx6jxXl/pC7+vMKOcWEyDxVwhYokLV// 2+x2mvdVjD5RqR0m7FcxlackAKe1NDEzXmFZRygA4UfzSlt/ln8fKeLBI23Ok7gG mdFNiyxm5UJZpyeDd961K3L5DMZJzDppRaDC7jfnrF6Q0inw0bwEdp/bHmJzI5gG ridd1tOks+w2pNxmXDCWakW90Rx7sLYB3gAz+bsuz8fdh0EHFPRTWeGJB0D9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUINyJr3RQhlin7B7wTOQZw3NQElQwHwYDVR0j BBgwFoAUichhFFZXd9yiCg9eXDMZ8S/B3FowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHkybzU1MzdjQzZZY0NzQkFOOHZXTUJVNWFRTUpjNW16aEtCNHV0Tm1h VXovMC84OUM4NjExNDU2NTc3N0RDQTIwQTBGNUU1QzMzMTlGMTJGQzFEQzVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5Qzg2MTE0NTY1Nzc3RENB MjBBMEY1RTVDMzMxOUYxMkZDMURDNUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHkybzU1MzdjQzZZY0NzQkFOOHZXTUJVNWFRTUpjNW16aEtCNHV0Tm1hVXovMC84 OUM4NjExNDU2NTc3N0RDQTIwQTBGNUU1QzMzMTlGMTJGQzFEQzVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPIeWeQdKhpkdfPg2q9g5UZJUxr5I+smvU2umKVlEkuXj+vOS3A+wHZlbte62 UoWj9CaTnhpNQls7Iq3p2O8hsjKZRjNuQNwVEWMfeX/HJKXTqdu1HyHLItI+Y34I rBQNmcWaOSMye+A7HFBGgYPuKjDLnk42f85b2L5RaKGbwUJAu790fpscDLyctBvx TJie42GRIUydn926DDMwSB1iMm0Hpi8GRy9H6Wii5bvbXINUqUtbbiT1tCVn768n tVhCexqcRo0qxvmKqQeMgAR7Inf4CjhP3+Xtf7gJm4txsKWI9owY8IMFrBfWZDpu nz5ub8tftpYLG+kSswhZ8HAkEw== -----END CERTIFICATE-----Generated at Mon Nov 3 18:52:56 2025 by rpki-client