$ rpki-client -vvf rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.mft File: B8B20C736B5DAA6320C2EE3AB5844784B25934B1.mft (raw, json) Hash identifier: R2xvlB+ooCI1+L1gcCvB2+Ul7AmvnPcGWcShvHtk/14= Subject key identifier: 11:2D:05:17:24:06:75:3E:3C:5B:E0:1F:60:E3:5D:FE:1E:3C:2D:D7 Authority key identifier: B8:B2:0C:73:6B:5D:AA:63:20:C2:EE:3A:B5:84:47:84:B2:59:34:B1 Certificate issuer: /CN=B8B20C736B5DAA6320C2EE3AB5844784B25934B1 Certificate serial: 1FECB4BB24B5FF26EA7BE4C90630E10281E3C156 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.cer Subject info access: rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.mft Manifest number: 0141 Signing time: Thu 06 Nov 2025 00:57:44 +0000 Manifest this update: Thu 06 Nov 2025 00:52:44 +0000 Manifest next update: Fri 07 Nov 2025 01:10:44 +0000 Files and hashes: 1: 323830343a313266383a3a2f33322d3333203d3e20323633353037.roa (hash: vwGgTlrrFyt5firMtrTQfALNMm92bVVZAG13ex2vb5Q=) 2: 3139312e3234332e3133362e302f32322d3234203d3e20323633353037.roa (hash: Q5yrIvJXIrCbQV0arINt1JvJlC/x9ziPnV8RXJmZAQk=) 3: B8B20C736B5DAA6320C2EE3AB5844784B25934B1.crl (hash: aWWHE8WfniQCluXWjqdYgJ1dtHPB8SZQnWZtBkARYVc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.crl rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 07 Nov 2025 01:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ec:b4:bb:24:b5:ff:26:ea:7b:e4:c9:06:30:e1:02:81:e3:c1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8B20C736B5DAA6320C2EE3AB5844784B25934B1 Validity Not Before: Nov 6 00:52:44 2025 GMT Not After : Nov 7 01:10:44 2025 GMT Subject: CN=112D05172406753E3C5BE01F60E35DFE1E3C2DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:51:7c:b6:0c:72:56:46:e8:f5:0c:df:31:8c: 9c:f4:b4:d7:5c:99:6a:1a:bf:0d:b6:27:4a:d7:51: 48:15:f7:f4:17:d8:ac:53:75:96:dd:fd:cc:51:1d: 9b:55:50:3f:6e:6a:ef:59:c0:65:46:ab:ad:24:23: 77:db:cd:78:26:76:0c:07:15:e3:5c:03:9c:21:76: 3a:67:ae:6c:82:e7:c8:61:5c:e9:13:73:65:cf:75: 74:4a:cb:40:e1:10:e2:76:49:08:57:d6:a6:5e:cd: 08:82:24:8d:55:d8:62:3e:34:6b:af:04:05:69:b9: 11:fc:c4:d4:bb:5c:6b:5d:0d:e9:34:63:43:1b:9a: a6:fa:d2:50:9f:e3:58:d5:9a:aa:aa:75:81:c2:c6: 7f:3d:e5:6e:d9:25:30:91:9b:b4:36:ca:39:bf:ea: e0:59:61:00:06:dc:b0:11:bc:97:97:1d:60:f4:2d: 1a:8a:f9:6b:ba:2c:a4:f4:27:83:66:2b:8f:19:2b: eb:56:99:51:aa:37:45:40:da:73:a7:00:88:06:c0: 3a:e7:e6:78:e7:ed:5e:67:5b:ea:cd:e3:32:35:9d: 69:ef:d5:fc:be:50:9d:3e:b3:a4:e1:eb:59:8a:2d: 7f:94:de:42:13:e9:79:c2:67:a7:0d:84:61:78:44: 68:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2D:05:17:24:06:75:3E:3C:5B:E0:1F:60:E3:5D:FE:1E:3C:2D:D7 X509v3 Authority Key Identifier: keyid:B8:B2:0C:73:6B:5D:AA:63:20:C2:EE:3A:B5:84:47:84:B2:59:34:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:01:2a:a1:55:03:5f:53:0c:0b:d9:35:2e:8d:da:2a:1e:dd: 13:9b:66:ec:6e:d2:00:30:90:d1:33:f4:a0:58:ea:af:8a:2c: c4:f7:d6:29:fc:32:85:54:a5:0f:68:2d:dd:af:fc:94:a9:52: 29:a7:df:f1:21:b1:f1:96:e7:a6:bc:e8:89:c4:9e:7e:4f:c2: 52:25:6c:45:f4:69:21:e7:e9:b4:38:3a:8a:87:70:b4:1c:fc: bd:a3:47:25:6c:a3:6b:03:3d:4b:4d:f6:48:98:2e:02:17:29: d9:81:14:74:9c:ee:aa:04:47:72:ad:ad:12:33:58:44:9b:56: 4c:d3:d9:37:02:02:ba:8c:f8:8d:1c:3f:fe:92:12:ff:e5:c0: d1:d5:93:7f:52:66:e8:00:8f:c2:57:3e:7c:43:bc:a7:7e:db: 3e:f0:59:4a:06:b0:d9:50:54:f9:fe:f3:e8:7d:95:8c:0f:f6: a4:e1:bb:d7:24:7e:bf:35:84:6e:37:57:d1:46:d4:8e:3c:12: e2:a3:fd:94:38:f4:42:39:41:3d:22:9a:23:de:be:49:41:90: 3f:5a:d9:ec:2c:e8:47:b0:33:10:1f:43:8b:f8:5f:b6:f2:7f: 9b:5d:a4:30:ba:09:5c:9a:92:f9:5e:b5:46:dd:f9:eb:15:3e: 62:fb:bd:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUH+y0uyS1/ybqe+TJBjDhAoHjwVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhCMjBDNzM2QjVEQUE2MzIwQzJFRTNBQjU4NDQ3ODRC MjU5MzRCMTAeFw0yNTExMDYwMDUyNDRaFw0yNTExMDcwMTEwNDRaMDMxMTAvBgNV BAMTKDExMkQwNTE3MjQwNjc1M0UzQzVCRTAxRjYwRTM1REZFMUUzQzJERDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0UXy2DHJWRuj1DN8xjJz0tNdc mWoavw22J0rXUUgV9/QX2KxTdZbd/cxRHZtVUD9uau9ZwGVGq60kI3fbzXgmdgwH FeNcA5whdjpnrmyC58hhXOkTc2XPdXRKy0DhEOJ2SQhX1qZezQiCJI1V2GI+NGuv BAVpuRH8xNS7XGtdDek0Y0Mbmqb60lCf41jVmqqqdYHCxn895W7ZJTCRm7Q2yjm/ 6uBZYQAG3LARvJeXHWD0LRqK+Wu6LKT0J4NmK48ZK+tWmVGqN0VA2nOnAIgGwDrn 5njn7V5nW+rN4zI1nWnv1fy+UJ0+s6Th61mKLX+U3kIT6XnCZ6cNhGF4RGjvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUES0FFyQGdT48W+AfYONd/h48LdcwHwYDVR0j BBgwFoAUuLIMc2tdqmMgwu46tYRHhLJZNLEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDgyazNZYlFmRmpjaG40UUdpeDVDcGF4eEZnV2ZQdHAxbzVuWkY5U0g4 WHAvMC9COEIyMEM3MzZCNURBQTYzMjBDMkVFM0FCNTg0NDc4NEIyNTkzNEIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4QjIwQzczNkI1REFBNjMy MEMyRUUzQUI1ODQ0Nzg0QjI1OTM0QjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDgyazNZYlFmRmpjaG40UUdpeDVDcGF4eEZnV2ZQdHAxbzVuWkY5U0g4WHAvMC9C OEIyMEM3MzZCNURBQTYzMjBDMkVFM0FCNTg0NDc4NEIyNTkzNEIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQQEqoVUDX1MMC9k1Lo3aKh7dE5tm7G7SADCQ0TP0oFjqr4osxPfWKfwyhVSl D2gt3a/8lKlSKaff8SGx8ZbnprzoicSefk/CUiVsRfRpIefptDg6iodwtBz8vaNH JWyjawM9S032SJguAhcp2YEUdJzuqgRHcq2tEjNYRJtWTNPZNwICuoz4jRw//pIS /+XA0dWTf1Jm6ACPwlc+fEO8p37bPvBZSgaw2VBU+f7z6H2VjA/2pOG71yR+vzWE bjdX0UbUjjwS4qP9lDj0QjlBPSKaI96+SUGQP1rZ7CzoR7AzEB9Di/hftvJ/m12k MLoJXJqS+V61Rt356xU+Yvu9pw== -----END CERTIFICATE-----Generated at Thu Nov 6 04:42:45 2025 by rpki-client