$ rpki-client -vvf rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft File: 8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft (raw, json) Hash identifier: hDcMHmjiHoiHbbvLUgpeZLs3ToFNE17aGtjtmizss5A= Subject key identifier: 1C:0A:55:B2:35:58:89:CF:5C:8A:49:22:40:07:F8:B5:E3:A9:E6:63 Authority key identifier: 8A:F0:30:45:F9:CB:7B:61:29:FF:D8:D6:A2:4F:2E:9E:06:72:D1:00 Certificate issuer: /CN=8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100 Certificate serial: 1D20E4F59569A71DFAB57938F46C7C65652DB43D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer Subject info access: rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft Manifest number: 8A Signing time: Sun 02 Nov 2025 18:51:32 +0000 Manifest this update: Sun 02 Nov 2025 18:46:32 +0000 Manifest next update: Mon 03 Nov 2025 20:35:32 +0000 Files and hashes: 1: 8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.crl (hash: 5YkqJ9H4XlhdcWdqjFJg90OmQRYr6CbU0PYx4M5Vj0Q=) 2: 3138312e3233322e3137362e302f32322d3234203d3e20323731353136.roa (hash: +mkXeaWBvETVR9EqVxiUxNimAV0s2kSfzpDbh9PMIJU=) 3: 323830343a376363303a3a2f33322d3438203d3e20323731353136.roa (hash: Y/bFQxEmatak+WdOEDmNCXV81gJbtzwfxCaukWu+JC8=) 4: 3139312e3234322e34322e302f32332d3234203d3e20323731353136.roa (hash: GWBpEjifIF3zr0IPEjZ4U9RGMhXuCxOIRrwP6DNm48E=) 5: 3139312e3234322e34342e302f32322d3234203d3e20323731353136.roa (hash: C5MjkKI8WR8yW/gmqOUvb7uzWMbYZ7XJCuts3sWaP28=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.crl rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 20:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:20:e4:f5:95:69:a7:1d:fa:b5:79:38:f4:6c:7c:65:65:2d:b4:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100 Validity Not Before: Nov 2 18:46:32 2025 GMT Not After : Nov 3 20:35:32 2025 GMT Subject: CN=1C0A55B2355889CF5C8A49224007F8B5E3A9E663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:04:9d:64:42:58:59:3d:8b:be:22:33:ec: f6:eb:e0:f3:0b:f4:8c:bd:e6:87:38:a5:b4:41:5d: 83:f7:5d:ab:1f:73:68:b7:83:03:70:bc:14:1f:9d: 4c:87:b9:76:ee:57:1e:a3:ee:e1:4b:00:6c:e9:f4: 42:d5:a2:dd:2d:71:bb:0b:32:a8:39:57:58:f5:3d: 2a:cc:52:65:1b:4f:9f:18:f0:8e:b2:f1:9b:2a:3e: 07:01:01:d9:8f:3e:74:cf:4b:e1:e3:a2:6e:15:7f: e5:43:1e:2b:65:81:2b:60:5c:f1:89:98:7b:82:a7: 91:1b:23:64:9d:f9:16:54:f8:0c:b7:db:3c:37:e3: d3:39:6f:02:f8:f4:b5:2e:b3:e9:d9:78:27:db:07: eb:53:dd:5a:ab:59:98:9b:0a:f9:92:51:d9:fe:ee: 13:b1:c3:2d:b1:30:bf:50:6b:9d:29:c2:bc:fc:59: 7c:53:84:df:7c:bc:51:03:ea:a7:34:fd:b7:00:48: 61:50:ea:2b:e6:c1:65:9e:94:7e:71:99:8e:9b:05: b7:a8:c4:53:9e:c4:35:1b:14:b4:93:70:23:9f:dd: e4:af:94:20:e1:f2:00:72:be:26:9f:c0:ab:27:08: 0a:61:81:2a:58:06:67:8a:d5:43:67:38:ab:4d:aa: f0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0A:55:B2:35:58:89:CF:5C:8A:49:22:40:07:F8:B5:E3:A9:E6:63 X509v3 Authority Key Identifier: keyid:8A:F0:30:45:F9:CB:7B:61:29:FF:D8:D6:A2:4F:2E:9E:06:72:D1:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:08:82:87:e8:a9:fd:a0:38:5c:97:19:4e:98:74:a5:4f:a6: 6d:1a:90:d8:e8:9c:62:4a:53:1c:6b:b5:d0:56:f2:a8:3c:75: ee:e6:56:14:51:36:c0:54:58:eb:1c:28:d7:33:7d:e2:c5:c9: a8:fb:12:f6:7d:14:be:d5:03:15:79:bc:7d:c3:9a:3d:3d:06: 04:2c:0e:4a:34:d6:e4:a1:0a:51:82:b2:ba:aa:88:b6:67:9a: a5:75:e1:a4:f8:ab:26:b8:13:d4:a4:bb:c8:16:92:5d:d4:d9: 6a:42:ac:36:7d:52:04:f4:47:9e:77:10:0b:c4:08:d2:8a:e9: 14:7a:c0:ea:2e:8f:ae:a0:d1:ca:b6:96:69:de:62:f9:45:de: 97:15:e1:bf:bd:c2:a1:92:a7:8c:ef:8b:70:a4:46:98:f6:b5: d8:23:fc:46:70:95:89:ce:0c:93:e0:62:57:7f:a7:c3:81:0f: 13:17:f7:eb:46:5b:ad:72:bd:ac:76:00:8f:d5:f5:67:2e:6c: b8:6e:aa:10:a0:29:a3:02:2d:11:cc:97:d9:33:5f:2f:c8:da: ab:46:d2:13:99:d9:eb:6d:7e:a7:38:e7:8b:90:85:39:19:57: e8:dc:89:92:bc:02:5b:4a:3b:50:ac:73:fa:09:02:5e:17:c7: 2a:77:a7:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHSDk9ZVppx36tXk49Gx8ZWUttD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMDMwNDVGOUNCN0I2MTI5RkZEOEQ2QTI0RjJFOUUw NjcyRDEwMDAeFw0yNTExMDIxODQ2MzJaFw0yNTExMDMyMDM1MzJaMDMxMTAvBgNV BAMTKDFDMEE1NUIyMzU1ODg5Q0Y1QzhBNDkyMjQwMDdGOEI1RTNBOUU2NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dASdZEJYWT2LviIz7Pbr4PML 9Iy95oc4pbRBXYP3Xasfc2i3gwNwvBQfnUyHuXbuVx6j7uFLAGzp9ELVot0tcbsL Mqg5V1j1PSrMUmUbT58Y8I6y8ZsqPgcBAdmPPnTPS+Hjom4Vf+VDHitlgStgXPGJ mHuCp5EbI2Sd+RZU+Ay32zw349M5bwL49LUus+nZeCfbB+tT3VqrWZibCvmSUdn+ 7hOxwy2xML9Qa50pwrz8WXxThN98vFED6qc0/bcASGFQ6ivmwWWelH5xmY6bBbeo xFOexDUbFLSTcCOf3eSvlCDh8gByviafwKsnCAphgSpYBmeK1UNnOKtNqvC7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHApVsjVYic9cikkiQAf4teOp5mMwHwYDVR0j BBgwFoAUivAwRfnLe2Ep/9jWok8ungZy0QAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWtKcm9ZUFpyakJZdXJrQjFMSzhESk5NQmtKMlJodDZUdG5SY1R4a3Rx bmIvMC84QUYwMzA0NUY5Q0I3QjYxMjlGRkQ4RDZBMjRGMkU5RTA2NzJEMTAwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBRjAzMDQ1RjlDQjdCNjEy OUZGRDhENkEyNEYyRTlFMDY3MkQxMDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWtKcm9ZUFpyakJZdXJrQjFMSzhESk5NQmtKMlJodDZUdG5SY1R4a3RxbmIvMC84 QUYwMzA0NUY5Q0I3QjYxMjlGRkQ4RDZBMjRGMkU5RTA2NzJEMTAwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoAiCh+ip/aA4XJcZTph0pU+mbRqQ2OicYkpTHGu10FbyqDx17uZWFFE2wFRY 6xwo1zN94sXJqPsS9n0UvtUDFXm8fcOaPT0GBCwOSjTW5KEKUYKyuqqItmeapXXh pPirJrgT1KS7yBaSXdTZakKsNn1SBPRHnncQC8QI0orpFHrA6i6PrqDRyraWad5i +UXelxXhv73CoZKnjO+LcKRGmPa12CP8RnCVic4Mk+BiV3+nw4EPExf360ZbrXK9 rHYAj9X1Zy5suG6qEKApowItEcyX2TNfL8jaq0bSE5nZ621+pzjni5CFORlX6NyJ krwCW0o7UKxz+gkCXhfHKnenuA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:49 2025 by rpki-client