$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft File: 89F33609E2B118C8ED9A105548D2D01FD6E38729.mft (raw, json) Hash identifier: hWSxM/Y6VM1n2mFxcfJLBQqrGClXqrz+pQLP6PBNW2k= Subject key identifier: 78:06:AB:50:2C:52:8D:49:42:98:62:F2:6B:87:B3:63:0E:42:78:0E Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 Certificate issuer: /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Certificate serial: 3C817628583B9943C696C630158B3D7853828E4F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft Manifest number: 0301 Signing time: Mon 03 Nov 2025 12:51:37 +0000 Manifest this update: Mon 03 Nov 2025 12:46:37 +0000 Manifest next update: Tue 04 Nov 2025 15:05:37 +0000 Files and hashes: 1: 89F33609E2B118C8ED9A105548D2D01FD6E38729.crl (hash: qj+gYgkcsjQZUbd0jrUDm208Aijtcul1XY8jYEtnYP8=) 2: 323830343a313263303a3a2f33322d3438203d3e20323633343936.roa (hash: yCRnKe7Cfo4f5weE5YMpi/ZO3/1Psrg+aJlLbswl12Y=) 3: 3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa (hash: bMO8E7JDP414YIw6qvyG05VpeLGja7y87JGV9snRtok=) 4: 3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa (hash: 91gQ1OFtC7i3YwbFOdgAOt94iN2xUARUXKGh62+Ssos=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 15:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:81:76:28:58:3b:99:43:c6:96:c6:30:15:8b:3d:78:53:82:8e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Validity Not Before: Nov 3 12:46:37 2025 GMT Not After : Nov 4 15:05:37 2025 GMT Subject: CN=7806AB502C528D49429862F26B87B3630E42780E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:20:97:9c:d7:be:0e:a8:fc:3b:57:5c:f1: 5a:fd:08:55:00:99:36:8c:63:03:a4:88:98:f0:bd: 60:ed:c2:bf:6d:7e:2c:b3:41:c4:8b:f6:22:20:c0: 0e:ca:5f:f0:e8:8f:67:51:74:65:5b:6e:b0:a1:ba: 4b:14:01:a9:87:a5:34:97:3e:cc:fb:b4:0f:00:f6: 0b:ca:97:5e:c2:7c:e3:ca:55:09:6e:e5:bc:b3:2b: 5a:bd:61:c9:ae:36:b4:8b:fe:4a:33:57:27:2a:d0: b2:d2:e5:a1:fc:22:de:04:0c:14:39:e9:27:c2:23: c1:5d:cb:9b:1f:9e:59:81:62:44:5b:d5:f4:92:2d: 4e:0d:01:ae:d1:3b:0a:fb:23:c0:7e:ad:5a:8f:e4: be:d6:40:a4:5f:82:c6:ff:d0:dd:6c:97:6f:ad:70: e1:c3:c1:92:e1:e9:3f:8d:29:af:5e:3e:41:c8:a7: 43:30:be:ff:2a:0c:bc:5e:63:f6:1a:d5:22:12:e6: e6:36:26:b3:9f:2d:06:2a:64:47:19:8d:ca:88:b8: 39:07:b4:5d:2e:fe:59:e3:a4:e1:c7:39:0c:de:fc: 4c:b2:47:03:1a:8f:31:05:14:a6:fa:5a:2c:a1:cc: c6:ab:4f:63:25:f4:fc:4f:96:1d:03:d1:05:46:c6: 77:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:06:AB:50:2C:52:8D:49:42:98:62:F2:6B:87:B3:63:0E:42:78:0E X509v3 Authority Key Identifier: keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e5:3c:39:8e:d3:f4:a0:1e:53:c2:3f:74:e5:79:29:ec:77: 1f:13:1a:0e:56:6a:9f:f5:5d:ad:e0:46:3a:b2:85:06:cc:ad: 7b:4b:99:af:44:92:23:d5:a6:82:a7:6a:6e:24:cb:9f:1d:6e: 91:95:95:d9:60:a9:12:d4:48:bb:10:7c:21:a5:17:99:2d:e9: 37:1a:32:5b:77:7a:c9:42:74:d9:11:d6:3d:6d:3c:8a:70:07: 71:21:20:b0:75:e3:35:28:f9:0e:c5:9b:d4:47:a2:b1:5b:78: 15:eb:68:db:92:27:89:98:ec:2c:5d:b2:d8:26:ab:35:fb:3d: 7b:4a:67:10:b1:b1:13:cf:f1:ab:64:5a:cc:65:c8:f9:20:ac: 76:e6:c9:e4:c3:34:93:85:b2:24:00:45:20:a1:12:bc:df:5d: 72:39:68:41:e5:d5:d3:b7:53:48:34:f8:71:3c:2f:dd:0f:f1: d8:24:f5:4b:c5:c4:ff:9e:59:10:dd:12:77:a7:5a:29:f8:95: ef:e8:03:6b:78:fa:6e:47:15:1b:1b:e0:45:d8:1f:c1:9d:58: b5:85:a7:5e:f9:1d:73:b4:57:8d:70:37:84:2c:13:74:63:fd: 79:e7:40:45:2a:1e:65:fd:47:e7:71:f3:f6:39:b2:72:fd:c1: 68:77:95:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPIF2KFg7mUPGlsYwFYs9eFOCjk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlGMzM2MDlFMkIxMThDOEVEOUExMDU1NDhEMkQwMUZE NkUzODcyOTAeFw0yNTExMDMxMjQ2MzdaFw0yNTExMDQxNTA1MzdaMDMxMTAvBgNV BAMTKDc4MDZBQjUwMkM1MjhENDk0Mjk4NjJGMjZCODdCMzYzMEU0Mjc4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsbSCXnNe+Dqj8O1dc8Vr9CFUA mTaMYwOkiJjwvWDtwr9tfiyzQcSL9iIgwA7KX/Doj2dRdGVbbrChuksUAamHpTSX Psz7tA8A9gvKl17CfOPKVQlu5byzK1q9YcmuNrSL/kozVycq0LLS5aH8It4EDBQ5 6SfCI8Fdy5sfnlmBYkRb1fSSLU4NAa7ROwr7I8B+rVqP5L7WQKRfgsb/0N1sl2+t cOHDwZLh6T+NKa9ePkHIp0Mwvv8qDLxeY/Ya1SIS5uY2JrOfLQYqZEcZjcqIuDkH tF0u/lnjpOHHOQze/EyyRwMajzEFFKb6WiyhzMarT2Ml9PxPlh0D0QVGxnfPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUeAarUCxSjUlCmGLya4ezYw5CeA4wHwYDVR0j BBgwFoAUifM2CeKxGMjtmhBVSNLQH9bjhykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4 ekUvMS84OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RjMzNjA5RTJCMTE4QzhF RDlBMTA1NTQ4RDJEMDFGRDZFMzg3MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4ekUvMS84 OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq+U8OY7T9KAeU8I/dOV5Kex3HxMaDlZqn/VdreBGOrKFBsyte0uZr0SSI9Wm gqdqbiTLnx1ukZWV2WCpEtRIuxB8IaUXmS3pNxoyW3d6yUJ02RHWPW08inAHcSEg sHXjNSj5DsWb1EeisVt4Feto25IniZjsLF2y2CarNfs9e0pnELGxE8/xq2RazGXI +SCsdubJ5MM0k4WyJABFIKESvN9dcjloQeXV07dTSDT4cTwv3Q/x2CT1S8XE/55Z EN0Sd6daKfiV7+gDa3j6bkcVGxvgRdgfwZ1YtYWnXvkdc7RXjXA3hCwTdGP9eedA RSoeZf1H53Hz9jmycv3BaHeVhQ== -----END CERTIFICATE-----Generated at Tue Nov 4 06:21:01 2025 by rpki-client