$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft File: 8AD497903AB3566443C9C794694A61EFE427FA7A.mft (raw, json) Hash identifier: JzWZ3oO64p1skWT0vxgBbZKfTPy5EYQNE42mqMAu6VU= Subject key identifier: B9:D0:9C:53:35:80:31:5C:FF:87:D0:14:ED:21:78:79:5B:4B:5F:D4 Authority key identifier: 8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A Certificate issuer: /CN=8AD497903AB3566443C9C794694A61EFE427FA7A Certificate serial: 3248F546BBBD20FEB1A1BA6B916872055EAD2FD0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft Manifest number: 0308 Signing time: Mon 03 Nov 2025 06:45:20 +0000 Manifest this update: Mon 03 Nov 2025 06:40:20 +0000 Manifest next update: Tue 04 Nov 2025 07:57:20 +0000 Files and hashes: 1: 8AD497903AB3566443C9C794694A61EFE427FA7A.crl (hash: Mk2lXUJbWthA9+5CSJhw2n/3CzWwiLqu9eG45Ik+FvM=) 2: 323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa (hash: ORpItz/kBb3bXBiU/q9Su7SYmZ2oQTmI/c9DsHZIB4Q=) 3: 323830343a383630343a3a2f33322d3332203d3e20323732363134.roa (hash: UuJdu9oNRzQAzqGiZTO4vBqCVsMzpdiamCVuQEkL6sg=) 4: 323830343a383630343a3a2f33332d3333203d3e20323732363134.roa (hash: Cx4646zrPKq6xD6iBJPkGxFHe6jY6KpJK0fDkBl/7Jo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 07:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:48:f5:46:bb:bd:20:fe:b1:a1:ba:6b:91:68:72:05:5e:ad:2f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AD497903AB3566443C9C794694A61EFE427FA7A Validity Not Before: Nov 3 06:40:20 2025 GMT Not After : Nov 4 07:57:20 2025 GMT Subject: CN=B9D09C533580315CFF87D014ED2178795B4B5FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:79:af:d9:4a:a1:df:4e:1b:fe:17:94:3f:5f: 44:ff:80:52:07:5f:92:ca:f0:85:84:93:c0:b0:70: 0e:f4:5a:11:c5:83:c5:4d:55:6d:38:0d:b9:bc:5a: bd:11:31:b0:63:36:64:87:79:ce:2c:4b:fe:ed:94: 97:03:b6:ae:52:58:8f:a6:9b:f0:6f:da:d8:03:3b: 2f:63:c5:10:fd:53:3d:78:94:49:b9:14:6f:96:a5: 8f:cc:4b:fc:12:c5:d1:52:95:5c:c7:7e:1f:9e:34: d1:c7:80:1a:50:e3:d2:d6:35:14:92:d2:1c:e1:99: a5:e5:90:8a:4a:a4:a5:99:39:19:96:65:5a:fc:f4: cd:9e:cd:48:64:b7:48:0d:c0:98:9a:3e:ba:9a:d9: b3:86:eb:ba:a2:80:00:d1:13:d5:7b:d5:f1:75:19: 2f:97:fe:ea:00:cf:62:4e:a1:93:0c:c8:b7:09:ec: 38:12:1d:44:f7:0a:1b:8d:c6:3b:85:84:f0:6d:c1: 55:7c:9a:20:60:b3:ab:8b:29:c0:18:c0:46:be:b3: 15:da:4c:6b:68:9e:bb:68:42:24:98:05:1b:95:28: 67:31:ad:57:1d:25:ba:ec:fb:5c:2a:a4:d0:c6:33: 44:46:d5:56:ee:b9:8e:16:a5:94:16:c2:bb:e4:f2: 67:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D0:9C:53:35:80:31:5C:FF:87:D0:14:ED:21:78:79:5B:4B:5F:D4 X509v3 Authority Key Identifier: keyid:8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b7:29:c5:9d:ec:de:5e:4a:f1:04:3e:b3:dc:7f:b7:2e:98: 14:c7:aa:91:9f:63:65:09:ba:68:21:f5:72:a4:f6:5f:13:54: aa:4f:aa:f8:53:62:a7:75:b8:72:cc:8a:b0:37:8e:2d:03:3a: e0:0a:bb:ed:f2:bb:6b:a4:9a:d7:19:eb:64:ad:b1:e5:4d:84: c9:24:74:5f:ee:37:aa:83:4b:0f:31:5f:a0:23:40:10:cb:81: 84:06:5d:c2:d7:15:4f:67:b5:31:4d:e2:0a:1e:e9:4f:95:cc: 15:4b:6c:8a:db:5c:7a:36:10:49:79:55:7b:d4:23:ca:97:51: 32:25:7d:d3:81:6c:2a:34:43:b4:7e:29:b9:69:7f:f2:70:d2: c9:1c:5e:3c:0f:04:f0:bd:be:34:0b:86:64:3a:63:96:de:c1: 72:98:eb:bc:f8:90:01:86:ab:cb:0e:b8:ea:71:53:83:d0:95: 39:65:19:71:c2:7b:da:bd:21:fd:b9:36:71:67:3d:c4:62:e8: ef:d2:42:13:74:56:ba:cd:9d:9d:99:21:3f:58:d9:52:8c:ec: 25:81:e9:fc:6a:d5:38:cb:10:85:57:84:d7:cc:2e:4b:74:33: db:a8:b1:2f:d8:31:2e:c6:0d:ec:bf:b8:cb:4a:56:d4:0a:dc: 77:36:40:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMkj1Rru9IP6xobprkWhyBV6tL9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFENDk3OTAzQUIzNTY2NDQzQzlDNzk0Njk0QTYxRUZF NDI3RkE3QTAeFw0yNTExMDMwNjQwMjBaFw0yNTExMDQwNzU3MjBaMDMxMTAvBgNV BAMTKEI5RDA5QzUzMzU4MDMxNUNGRjg3RDAxNEVEMjE3ODc5NUI0QjVGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiea/ZSqHfThv+F5Q/X0T/gFIH X5LK8IWEk8CwcA70WhHFg8VNVW04Dbm8Wr0RMbBjNmSHec4sS/7tlJcDtq5SWI+m m/Bv2tgDOy9jxRD9Uz14lEm5FG+WpY/MS/wSxdFSlVzHfh+eNNHHgBpQ49LWNRSS 0hzhmaXlkIpKpKWZORmWZVr89M2ezUhkt0gNwJiaPrqa2bOG67qigADRE9V71fF1 GS+X/uoAz2JOoZMMyLcJ7DgSHUT3ChuNxjuFhPBtwVV8miBgs6uLKcAYwEa+sxXa TGtonrtoQiSYBRuVKGcxrVcdJbrs+1wqpNDGM0RG1VbuuY4WpZQWwrvk8mdlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUudCcUzWAMVz/h9AU7SF4eVtLX9QwHwYDVR0j BBgwFoAUitSXkDqzVmRDyceUaUph7+Qn+nowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFl5NGFKTVB2emFja2tMSGc0azlvSEhIWjdnam5FcmtRUEpVYXN2cDZh bk4vMS84QUQ0OTc5MDNBQjM1NjY0NDNDOUM3OTQ2OTRBNjFFRkU0MjdGQTdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBRDQ5NzkwM0FCMzU2NjQ0 M0M5Qzc5NDY5NEE2MUVGRTQyN0ZBN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFl5NGFKTVB2emFja2tMSGc0azlvSEhIWjdnam5FcmtRUEpVYXN2cDZhbk4vMS84 QUQ0OTc5MDNBQjM1NjY0NDNDOUM3OTQ2OTRBNjFFRkU0MjdGQTdBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWrcpxZ3s3l5K8QQ+s9x/ty6YFMeqkZ9jZQm6aCH1cqT2XxNUqk+q+FNip3W4 csyKsDeOLQM64Aq77fK7a6Sa1xnrZK2x5U2EySR0X+43qoNLDzFfoCNAEMuBhAZd wtcVT2e1MU3iCh7pT5XMFUtsittcejYQSXlVe9QjypdRMiV904FsKjRDtH4puWl/ 8nDSyRxePA8E8L2+NAuGZDpjlt7BcpjrvPiQAYaryw646nFTg9CVOWUZccJ72r0h /bk2cWc9xGLo79JCE3RWus2dnZkhP1jZUozsJYHp/GrVOMsQhVeE18wuS3Qz26ix L9gxLsYN7L+4y0pW1ArcdzZAFw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:29:32 2025 by rpki-client