$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft File: 89F33609E2B118C8ED9A105548D2D01FD6E38729.mft (raw, json) Hash identifier: YRxmBMjJUDLepLWrHsHssIohaNW7yXyiAJvvPGeUhLw= Subject key identifier: 11:1B:F4:C8:A1:42:10:4B:83:F7:CD:27:EC:E6:55:7D:56:93:53:77 Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 Certificate issuer: /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Certificate serial: 4839A6EDA313FC4728A9C27BD9871A788317FD48 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft Manifest number: 02C4 Signing time: Wed 17 Sep 2025 20:58:50 +0000 Manifest this update: Wed 17 Sep 2025 20:53:50 +0000 Manifest next update: Thu 18 Sep 2025 23:28:50 +0000 Files and hashes: 1: 323830343a313263303a3a2f33322d3438203d3e20323633343936.roa (hash: yCRnKe7Cfo4f5weE5YMpi/ZO3/1Psrg+aJlLbswl12Y=) 2: 3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa (hash: 91gQ1OFtC7i3YwbFOdgAOt94iN2xUARUXKGh62+Ssos=) 3: 3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa (hash: bMO8E7JDP414YIw6qvyG05VpeLGja7y87JGV9snRtok=) 4: 89F33609E2B118C8ED9A105548D2D01FD6E38729.crl (hash: lFjEiNA42ctrSjWQTtSEeEf2XU4T/dJgK5XtJlWmP+4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Sep 2025 23:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:39:a6:ed:a3:13:fc:47:28:a9:c2:7b:d9:87:1a:78:83:17:fd:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Validity Not Before: Sep 17 20:53:50 2025 GMT Not After : Sep 18 23:28:50 2025 GMT Subject: CN=111BF4C8A142104B83F7CD27ECE6557D56935377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:20:1f:db:45:8b:ba:87:95:d7:d5:c6:93:6d: 00:ea:2e:51:e1:4f:61:f3:08:4e:23:c4:17:92:73: 0f:1a:40:d3:62:56:55:6f:78:14:00:3a:f8:f2:37: 30:fb:39:0d:16:a4:04:bf:2d:09:2d:c3:6e:05:d9: 7b:0a:8d:64:2a:a9:42:0b:8d:17:9a:f2:c1:44:62: 18:05:44:ae:92:b3:46:f4:dc:fa:5c:0b:d1:ed:a6: 0e:23:7f:72:81:f4:2e:ef:da:b1:43:69:0b:6b:97: c5:03:e1:34:a2:4f:47:bf:90:95:52:6e:24:c1:67: 6e:f4:2e:6f:7a:0b:c7:b6:62:a8:3d:7a:4c:0a:4c: 97:fb:0f:62:7a:cc:84:42:0a:70:46:d1:15:1c:68: 5b:b6:bf:a8:df:81:01:65:50:62:be:3e:2b:66:4f: 1c:0a:ee:bd:61:21:a0:2a:fe:4d:50:01:8e:7b:f8: c2:6b:47:b7:30:fd:a6:18:8b:af:7f:6b:15:64:75: b7:56:db:c4:cc:f8:7d:aa:ba:85:24:cc:9c:3f:bc: 44:88:6c:f0:2b:c2:4a:41:b1:21:23:ca:f1:4f:ce: b6:ea:6b:2f:f0:61:64:3b:61:8f:80:7b:d0:f5:6d: 32:c9:ab:1d:7c:ee:d5:91:eb:a0:fb:5a:cd:b6:5e: 49:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1B:F4:C8:A1:42:10:4B:83:F7:CD:27:EC:E6:55:7D:56:93:53:77 X509v3 Authority Key Identifier: keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:38:80:f7:93:5a:f5:01:34:94:8c:89:e8:aa:37:1c:1d:59: d2:e3:af:f8:b1:29:1b:00:f2:a9:cc:0c:f9:70:76:e2:6d:58: 25:f6:74:53:78:ca:48:65:35:3d:7a:cf:c2:63:c0:f2:41:4e: ff:c7:83:3f:89:b8:a1:9f:11:82:3a:b8:6a:fb:b1:0f:52:8f: 63:54:31:cf:ab:f8:33:99:17:e2:01:22:78:4a:e1:fd:26:35: 0b:0c:83:50:b3:53:9f:50:b4:49:8b:5b:db:6d:52:a5:ef:d7: 48:b0:fb:1d:40:dc:b8:fa:01:7d:54:59:84:86:88:9b:60:90: d9:33:0b:e1:1e:cf:31:dc:84:60:3e:54:5e:de:7c:ce:61:b3: d3:94:05:a5:a8:6a:a2:d3:b1:f2:da:b2:4d:f2:3e:e3:82:88: 84:29:a5:50:af:c0:38:56:76:01:8b:47:8e:3b:82:5e:96:af: 38:95:b1:ae:f3:34:8a:71:fd:e9:73:72:0e:b1:18:6c:89:b0: d3:e4:94:b4:73:4f:9c:65:a1:03:65:0f:11:33:37:ae:23:3a: 28:4e:74:64:92:1a:04:70:37:15:93:88:53:d0:9f:19:60:d8: 7e:c3:71:f7:72:3f:a3:a7:a7:b8:44:14:f3:d3:95:01:cb:bb: 96:56:56:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSDmm7aMT/EcoqcJ72YcaeIMX/UgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlGMzM2MDlFMkIxMThDOEVEOUExMDU1NDhEMkQwMUZE NkUzODcyOTAeFw0yNTA5MTcyMDUzNTBaFw0yNTA5MTgyMzI4NTBaMDMxMTAvBgNV BAMTKDExMUJGNEM4QTE0MjEwNEI4M0Y3Q0QyN0VDRTY1NTdENTY5MzUzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpIB/bRYu6h5XX1caTbQDqLlHh T2HzCE4jxBeScw8aQNNiVlVveBQAOvjyNzD7OQ0WpAS/LQktw24F2XsKjWQqqUIL jRea8sFEYhgFRK6Ss0b03PpcC9Htpg4jf3KB9C7v2rFDaQtrl8UD4TSiT0e/kJVS biTBZ270Lm96C8e2Yqg9ekwKTJf7D2J6zIRCCnBG0RUcaFu2v6jfgQFlUGK+Pitm TxwK7r1hIaAq/k1QAY57+MJrR7cw/aYYi69/axVkdbdW28TM+H2quoUkzJw/vESI bPArwkpBsSEjyvFPzrbqay/wYWQ7YY+Ae9D1bTLJqx187tWR66D7Ws22XkkhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUERv0yKFCEEuD980n7OZVfVaTU3cwHwYDVR0j BBgwFoAUifM2CeKxGMjtmhBVSNLQH9bjhykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4 ekUvMS84OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RjMzNjA5RTJCMTE4QzhF RDlBMTA1NTQ4RDJEMDFGRDZFMzg3MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4ekUvMS84 OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgjiA95Na9QE0lIyJ6Ko3HB1Z0uOv+LEpGwDyqcwM+XB24m1YJfZ0U3jKSGU1 PXrPwmPA8kFO/8eDP4m4oZ8Rgjq4avuxD1KPY1Qxz6v4M5kX4gEieErh/SY1CwyD ULNTn1C0SYtb221Spe/XSLD7HUDcuPoBfVRZhIaIm2CQ2TML4R7PMdyEYD5UXt58 zmGz05QFpahqotOx8tqyTfI+44KIhCmlUK/AOFZ2AYtHjjuCXpavOJWxrvM0inH9 6XNyDrEYbImw0+SUtHNPnGWhA2UPETM3riM6KE50ZJIaBHA3FZOIU9CfGWDYfsNx 93I/o6enuEQU89OVAcu7llZWTw== -----END CERTIFICATE-----Generated at Thu Sep 18 07:28:09 2025 by rpki-client