$ rpki-client -vvf rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft File: 8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft (raw, json) Hash identifier: IXSLs0zQR99CbBLpBX2Q3/g9ZSp4qsWrocHw53uCNxg= Subject key identifier: 11:20:98:93:D5:5C:86:74:78:46:A6:E8:3B:D9:1B:F8:A6:6A:B3:49 Authority key identifier: 8A:87:3C:3D:C0:61:82:1F:FE:F1:C2:0E:64:84:51:B8:FE:64:6F:AE Certificate issuer: /CN=8A873C3DC061821FFEF1C20E648451B8FE646FAE Certificate serial: 6E84B7E6E4C7AB95588F1B091A818A02BDB74174 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer Subject info access: rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft Manifest number: 0169 Signing time: Mon 03 Nov 2025 08:23:34 +0000 Manifest this update: Mon 03 Nov 2025 08:18:34 +0000 Manifest next update: Tue 04 Nov 2025 08:32:34 +0000 Files and hashes: 1: 8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl (hash: euD/GQOc9eTP9rtQYwNWQpcpgdBxewOBbieBemEb/KI=) 2: 323830343a393266383a3a2f33322d3438203d3e20323734373436.roa (hash: 5fhRq321I9L3kTTV+fwC5X89HSpGKCAld/CiGq3rZfQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 08:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:84:b7:e6:e4:c7:ab:95:58:8f:1b:09:1a:81:8a:02:bd:b7:41:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A873C3DC061821FFEF1C20E648451B8FE646FAE Validity Not Before: Nov 3 08:18:34 2025 GMT Not After : Nov 4 08:32:34 2025 GMT Subject: CN=11209893D55C86747846A6E83BD91BF8A66AB349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9d:f0:ab:8b:c5:57:ae:70:ad:9c:bb:ac:13: b7:4c:51:63:2e:0f:b1:ff:ac:25:57:bd:b8:1b:6b: 35:43:c9:bf:e6:28:5d:0a:67:c2:41:4c:2a:57:3e: 71:18:50:ad:e3:6c:e2:be:e9:26:5d:be:1b:0d:b2: 87:85:a3:31:16:bf:6f:06:2c:70:31:80:02:3f:7b: f7:43:5c:ff:63:61:ce:33:53:bd:01:d5:63:19:ee: bd:20:fc:21:e3:dd:de:eb:f0:45:61:e5:4f:56:4c: d8:f0:b3:41:f5:61:28:31:1e:49:22:ff:cf:fa:cb: 65:ee:85:0f:b8:92:eb:dc:26:32:b0:c5:b8:e4:96: 7c:29:b5:e6:18:6c:ad:ae:ab:c2:13:e1:c8:e6:3c: 24:43:bb:57:6e:02:40:dc:ee:17:c6:d6:3b:0e:48: 86:e7:2e:81:25:c7:82:98:b5:4f:52:f3:5a:ea:f7: 1c:2f:ed:80:c1:87:41:4c:4b:a1:79:f7:0b:45:e2: 2c:3f:e1:50:65:fe:f0:e8:31:ca:87:ad:7d:b5:3f: 14:9c:39:0e:72:24:67:b3:82:66:54:f6:4a:bc:b9: e2:2b:73:70:1a:06:d7:c1:51:f3:c4:5f:3d:9c:fc: f1:90:06:47:05:46:1c:ad:50:05:7d:db:34:9c:d3: 11:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:20:98:93:D5:5C:86:74:78:46:A6:E8:3B:D9:1B:F8:A6:6A:B3:49 X509v3 Authority Key Identifier: keyid:8A:87:3C:3D:C0:61:82:1F:FE:F1:C2:0E:64:84:51:B8:FE:64:6F:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5d:f6:d6:e4:fa:17:2d:72:24:97:29:4e:2a:1c:3f:58:20: 0c:6e:47:f0:a1:4e:38:bd:9c:b7:a2:f2:1a:3e:1c:91:dc:a8: 83:be:f3:f4:92:0e:a5:c8:5d:f4:f8:1c:4d:ce:b4:43:3c:09: fc:fa:43:62:1e:27:e7:c3:50:bb:9b:d2:d2:a3:5c:91:ae:9c: e0:27:ad:11:df:9a:ee:cf:a8:7f:e9:d5:80:f5:02:a1:78:25: 0a:e8:74:66:7d:53:9d:7f:54:e4:41:2e:e9:23:cf:64:78:51: e4:76:60:09:df:ef:e5:b5:8d:cb:60:2b:c2:e1:2b:e4:37:1e: 1f:a6:a5:67:eb:f3:cf:7f:2e:b9:e6:d3:a3:a8:48:a2:15:db: cd:ba:c4:99:24:8d:e7:68:4a:68:e6:93:7c:2a:10:49:00:12: 08:b0:0d:05:25:01:af:ed:04:b5:cf:6b:a0:e2:1e:52:da:8b: de:af:6c:0e:be:25:d6:47:b9:ed:a0:a6:9d:97:7c:13:73:43: c8:f1:22:17:1c:29:ce:bf:05:0b:09:90:8a:33:5c:a6:06:13: 35:5b:2c:64:82:5b:b2:61:3d:50:b2:a8:54:80:be:47:a3:fb: be:cd:6a:66:0e:e2:26:f6:5a:01:b7:43:59:74:f1:52:9c:9d: e4:04:9a:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUboS35uTHq5VYjxsJGoGKAr23QXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4NzNDM0RDMDYxODIxRkZFRjFDMjBFNjQ4NDUxQjhG RTY0NkZBRTAeFw0yNTExMDMwODE4MzRaFw0yNTExMDQwODMyMzRaMDMxMTAvBgNV BAMTKDExMjA5ODkzRDU1Qzg2NzQ3ODQ2QTZFODNCRDkxQkY4QTY2QUIzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/nfCri8VXrnCtnLusE7dMUWMu D7H/rCVXvbgbazVDyb/mKF0KZ8JBTCpXPnEYUK3jbOK+6SZdvhsNsoeFozEWv28G LHAxgAI/e/dDXP9jYc4zU70B1WMZ7r0g/CHj3d7r8EVh5U9WTNjws0H1YSgxHkki /8/6y2XuhQ+4kuvcJjKwxbjklnwpteYYbK2uq8IT4cjmPCRDu1duAkDc7hfG1jsO SIbnLoElx4KYtU9S81rq9xwv7YDBh0FMS6F59wtF4iw/4VBl/vDoMcqHrX21PxSc OQ5yJGezgmZU9kq8ueIrc3AaBtfBUfPEXz2c/PGQBkcFRhytUAV92zSc0xGZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUESCYk9VchnR4RqboO9kb+KZqs0kwHwYDVR0j BBgwFoAUioc8PcBhgh/+8cIOZIRRuP5kb64wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXpRNHhzTm1KcnU1WWFkaUhCOGgxYWVGNUdTcEtzZ0JzdllTNmFLQTFh a2UvMC84QTg3M0MzREMwNjE4MjFGRkVGMUMyMEU2NDg0NTFCOEZFNjQ2RkFFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBODczQzNEQzA2MTgyMUZG RUYxQzIwRTY0ODQ1MUI4RkU2NDZGQUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXpRNHhzTm1KcnU1WWFkaUhCOGgxYWVGNUdTcEtzZ0JzdllTNmFLQTFha2UvMC84 QTg3M0MzREMwNjE4MjFGRkVGMUMyMEU2NDg0NTFCOEZFNjQ2RkFFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnl321uT6Fy1yJJcpTiocP1ggDG5H8KFOOL2ct6LyGj4ckdyog77z9JIOpchd 9PgcTc60QzwJ/PpDYh4n58NQu5vS0qNcka6c4CetEd+a7s+of+nVgPUCoXglCuh0 Zn1TnX9U5EEu6SPPZHhR5HZgCd/v5bWNy2ArwuEr5DceH6alZ+vzz38uuebTo6hI ohXbzbrEmSSN52hKaOaTfCoQSQASCLANBSUBr+0Etc9roOIeUtqL3q9sDr4l1ke5 7aCmnZd8E3NDyPEiFxwpzr8FCwmQijNcpgYTNVssZIJbsmE9ULKoVIC+R6P7vs1q Zg7iJvZaAbdDWXTxUpyd5ASa7g== -----END CERTIFICATE-----Generated at Mon Nov 3 12:32:08 2025 by rpki-client