$ rpki-client -vvf rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft File: 8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft (raw, json) Hash identifier: aujkjTLnLvMyP3vUWRVcGAuq7J6i5Q5EWjeEdYa1QO0= Subject key identifier: CF:22:77:48:5F:87:7D:76:B6:ED:CC:33:79:2C:96:31:3E:BF:B3:FB Authority key identifier: 8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F Certificate issuer: /CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F Certificate serial: 787F18FE650B7FD877B75446B3AFC5FF0ED5D30C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer Subject info access: rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft Manifest number: E2 Signing time: Mon 03 Nov 2025 00:40:15 +0000 Manifest this update: Mon 03 Nov 2025 00:35:15 +0000 Manifest next update: Tue 04 Nov 2025 02:14:15 +0000 Files and hashes: 1: 8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl (hash: B2RoVYomaMMtbx3yA6ACXRc6BsNWlaeBKlCuWgDUPno=) 2: 3133382e3235352e37322e302f32322d3332203d3e20323633393539.roa (hash: waEFhBe+SjRSqQswDzUJGqZm7m+XO9yIfZZm4YTlyYw=) 3: 323830343a323836303a3a2f33322d313238203d3e20323633393539.roa (hash: oVXD5VaDUqeD9Go0IkrJ158heEh4rOl0USTusw94FRI=) 4: 3137302e3233382e3234382e302f32322d3332203d3e20323633393539.roa (hash: 9vkM44Why6sGQcMypDT8T8Q9VtBz4wbE97cshJxXhpQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 02:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7f:18:fe:65:0b:7f:d8:77:b7:54:46:b3:af:c5:ff:0e:d5:d3:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F Validity Not Before: Nov 3 00:35:15 2025 GMT Not After : Nov 4 02:14:15 2025 GMT Subject: CN=CF2277485F877D76B6EDCC33792C96313EBFB3FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8a:63:c2:fe:35:e2:ad:5a:79:a9:e4:80:1c: b4:09:69:00:53:19:0d:a1:a7:75:59:fa:61:10:e3: 8f:49:3c:a5:d6:30:2f:ed:c8:e3:dd:fa:66:d1:e3: a9:de:86:e2:93:30:8a:47:05:5e:db:e0:7b:4c:41: 96:82:91:57:a4:19:08:55:b8:48:39:aa:2b:8b:2b: ed:46:81:98:13:ab:75:0b:b3:2d:e6:a3:0a:6e:80: 7d:1d:f6:60:28:1f:7a:9e:7d:85:e0:1c:64:58:d5: 7a:8c:a0:db:13:04:ad:ef:d3:18:2a:32:75:87:60: 6b:35:e0:b2:fd:a2:c6:d3:ed:2c:24:04:69:c0:db: cd:f2:81:b6:fc:44:6b:6c:2c:e2:b1:1b:0c:76:9f: 53:ad:7d:d9:7c:b4:76:51:4d:c6:07:5d:0d:96:87: 81:e3:59:35:83:91:cd:db:4d:91:8a:53:74:69:d2: 5b:c2:17:08:b2:6c:4f:a8:89:66:cc:8d:df:59:ab: 86:fa:98:50:e9:61:b2:72:54:99:c2:31:24:2d:3e: 3a:8c:12:cf:3a:70:78:5b:6e:cb:9b:70:ec:03:a6: 51:e3:ed:ad:8b:4c:65:8d:ff:a5:a0:a4:6e:9b:2d: bc:25:a9:1a:53:5c:4a:1d:92:63:95:6d:85:af:28: 00:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:22:77:48:5F:87:7D:76:B6:ED:CC:33:79:2C:96:31:3E:BF:B3:FB X509v3 Authority Key Identifier: keyid:8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:46:3f:cc:67:72:2c:cc:69:fe:81:73:7a:ba:fe:a7:0b:c9: e5:a9:e8:cf:9f:52:a2:d3:c3:1e:82:9c:17:e6:0b:41:b4:e4: d3:16:c9:95:4d:4f:56:82:66:73:9c:25:4e:90:00:b0:97:d3: e8:e6:84:b7:ef:51:d5:a1:2e:56:36:ff:2a:54:a6:28:4a:fe: ad:ea:81:10:9a:b2:b1:b0:f1:19:5a:fe:85:c9:dd:ae:c1:de: 2a:de:81:a5:53:a8:53:1b:5b:5f:e3:d5:c9:f6:9f:3a:a9:41: 7f:fa:e2:fc:58:9d:e5:eb:2c:9c:0f:3a:dc:3a:0e:41:fd:f5: 9a:3c:1c:fe:8e:49:d6:ed:37:05:e1:2c:43:6d:e4:dc:9b:8f: 19:19:b2:2a:b9:04:44:c7:0b:86:af:9a:10:aa:1a:a2:7a:47: 8b:7c:86:45:fe:41:1a:c9:0e:c1:79:c4:dc:7e:e5:d3:34:09: e4:d9:c1:ff:e8:05:44:b6:91:d3:83:9c:d7:4f:90:5d:d1:21: ce:ff:0f:91:56:ca:d1:a7:30:20:d7:44:07:aa:c3:6e:90:9e: c0:c3:24:21:c8:02:64:96:08:3e:f4:7c:e3:7e:ec:9b:85:63: de:57:2d:42:56:df:67:5f:61:4c:60:aa:66:b2:27:2a:3d:82: 8b:f8:42:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeH8Y/mULf9h3t1RGs6/F/w7V0wwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCNUEyNTE2RjcxM0NGRkU5RDE1MDRFNzlBNEJEM0I5 QUZCMEEwRjAeFw0yNTExMDMwMDM1MTVaFw0yNTExMDQwMjE0MTVaMDMxMTAvBgNV BAMTKENGMjI3NzQ4NUY4NzdENzZCNkVEQ0MzMzc5MkM5NjMxM0VCRkIzRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeimPC/jXirVp5qeSAHLQJaQBT GQ2hp3VZ+mEQ449JPKXWMC/tyOPd+mbR46nehuKTMIpHBV7b4HtMQZaCkVekGQhV uEg5qiuLK+1GgZgTq3ULsy3mowpugH0d9mAoH3qefYXgHGRY1XqMoNsTBK3v0xgq MnWHYGs14LL9osbT7SwkBGnA283ygbb8RGtsLOKxGwx2n1Otfdl8tHZRTcYHXQ2W h4HjWTWDkc3bTZGKU3Rp0lvCFwiybE+oiWbMjd9Zq4b6mFDpYbJyVJnCMSQtPjqM Es86cHhbbsubcOwDplHj7a2LTGWN/6WgpG6bLbwlqRpTXEodkmOVbYWvKADfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzyJ3SF+HfXa27cwzeSyWMT6/s/swHwYDVR0j BBgwFoAUjLWiUW9xPP/p0VBOeaS9O5r7Cg8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVhGemVkeXJZTExBSG1YQmFmSzdDSzNqcHRNb2ZvN0gxbVNDV1FQUjVN YUMvMC84Q0I1QTI1MTZGNzEzQ0ZGRTlEMTUwNEU3OUE0QkQzQjlBRkIwQTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQjVBMjUxNkY3MTNDRkZF OUQxNTA0RTc5QTRCRDNCOUFGQjBBMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVhGemVkeXJZTExBSG1YQmFmSzdDSzNqcHRNb2ZvN0gxbVNDV1FQUjVNYUMvMC84 Q0I1QTI1MTZGNzEzQ0ZGRTlEMTUwNEU3OUE0QkQzQjlBRkIwQTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlUY/zGdyLMxp/oFzerr+pwvJ5anoz59SotPDHoKcF+YLQbTk0xbJlU1PVoJm c5wlTpAAsJfT6OaEt+9R1aEuVjb/KlSmKEr+reqBEJqysbDxGVr+hcndrsHeKt6B pVOoUxtbX+PVyfafOqlBf/ri/Fid5essnA863DoOQf31mjwc/o5J1u03BeEsQ23k 3JuPGRmyKrkERMcLhq+aEKoaonpHi3yGRf5BGskOwXnE3H7l0zQJ5NnB/+gFRLaR 04Oc10+QXdEhzv8PkVbK0acwINdEB6rDbpCewMMkIcgCZJYIPvR8437sm4Vj3lct QlbfZ19hTGCqZrInKj2Ci/hCPA== -----END CERTIFICATE-----Generated at Mon Nov 3 05:41:55 2025 by rpki-client