$ rpki-client -vvf rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/8AADD188AC6055C83858C9DCC9664A031A56321F.mft File: 8AADD188AC6055C83858C9DCC9664A031A56321F.mft (raw, json) Hash identifier: h5YzU7juCAi0NqNh7BaagJGuF2Wd3ipdlL+00NU0T0I= Subject key identifier: 16:DC:0F:CE:83:14:78:13:73:29:D9:04:79:8E:54:9E:B6:E5:5A:1D Authority key identifier: 8A:AD:D1:88:AC:60:55:C8:38:58:C9:DC:C9:66:4A:03:1A:56:32:1F Certificate issuer: /CN=8AADD188AC6055C83858C9DCC9664A031A56321F Certificate serial: 7B3114F8D7C56961BE2F615C8D6F9A2FEE2AB98C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AADD188AC6055C83858C9DCC9664A031A56321F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/8AADD188AC6055C83858C9DCC9664A031A56321F.mft Manifest number: 2A Signing time: Mon 03 Nov 2025 00:26:18 +0000 Manifest this update: Mon 03 Nov 2025 00:21:18 +0000 Manifest next update: Tue 04 Nov 2025 03:19:18 +0000 Files and hashes: 1: 8AADD188AC6055C83858C9DCC9664A031A56321F.crl (hash: u4+9ikLW6NvCCV2j+fUVtMuSFPZV9WIKQKt75BcfVCY=) 2: 323830343a393232383a3a2f33322d3438203d3e20323734363933.roa (hash: 04IQDmDRpCD0zNqyapqIg6PDPhcbFRutYhKpxVuuZ1w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/8AADD188AC6055C83858C9DCC9664A031A56321F.crl rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/8AADD188AC6055C83858C9DCC9664A031A56321F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AADD188AC6055C83858C9DCC9664A031A56321F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:31:14:f8:d7:c5:69:61:be:2f:61:5c:8d:6f:9a:2f:ee:2a:b9:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AADD188AC6055C83858C9DCC9664A031A56321F Validity Not Before: Nov 3 00:21:18 2025 GMT Not After : Nov 4 03:19:18 2025 GMT Subject: CN=16DC0FCE831478137329D904798E549EB6E55A1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c7:bd:38:ab:95:14:1c:96:aa:9c:4d:ff:7b: 08:e4:74:27:3e:a0:c7:6d:f0:99:f2:e9:31:65:40: 88:6d:40:47:2b:03:89:89:9e:6c:89:de:1f:25:69: d8:cd:cf:ef:c1:3c:16:0a:2a:db:c5:7b:7d:83:4b: 76:d4:70:c8:37:1b:8d:ad:f5:2f:e4:1f:fd:16:4f: 27:43:cd:04:16:93:a4:cc:c5:ca:b0:35:cd:b8:ac: 13:cc:ca:65:91:ad:6a:1e:c1:99:e9:07:8c:6d:c6: a7:04:2a:86:ed:24:97:31:42:b7:df:91:0e:c5:d7: 28:f4:d4:37:92:82:4f:4b:56:9d:56:42:8b:93:9f: e7:2b:33:2c:96:b5:04:06:a6:34:8f:24:1d:97:5d: 71:49:40:48:0c:ae:06:47:71:cf:3c:9b:dc:19:5d: e9:41:33:1d:ec:e2:e3:a7:64:30:dc:9e:bd:4c:55: fe:f7:66:cc:84:2f:70:55:04:b1:53:4e:88:70:8c: e5:eb:4a:1d:49:42:b1:47:77:34:51:19:07:f1:db: 27:ba:d4:03:59:d4:dd:63:0e:8f:6d:1f:d7:b9:10: ad:ef:f0:31:2e:12:aa:8a:a7:82:47:fc:15:17:54: 7c:28:cb:4f:5d:cc:31:dd:5a:58:34:de:d0:7a:5b: 2d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DC:0F:CE:83:14:78:13:73:29:D9:04:79:8E:54:9E:B6:E5:5A:1D X509v3 Authority Key Identifier: keyid:8A:AD:D1:88:AC:60:55:C8:38:58:C9:DC:C9:66:4A:03:1A:56:32:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/8AADD188AC6055C83858C9DCC9664A031A56321F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AADD188AC6055C83858C9DCC9664A031A56321F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/8AADD188AC6055C83858C9DCC9664A031A56321F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c5:16:0c:53:69:47:20:1b:6c:7e:f4:ed:3b:8a:c2:dc:af: 6f:cf:e5:45:14:0b:2e:77:ef:96:8b:26:40:47:62:cd:ee:d1: e1:3a:c1:64:a3:59:d1:1b:97:3f:57:1a:40:e7:bb:7b:8d:4d: 65:75:2e:33:2a:b7:64:42:7e:58:d7:96:fe:ee:4d:2c:1e:55: 12:91:ef:33:b2:d5:31:9e:0a:3e:d5:fd:5a:ff:a0:09:d8:0f: d0:2b:f4:e5:62:1e:23:f4:45:21:8d:d2:04:39:f7:f2:73:a5: 36:f8:35:fa:1e:07:61:ed:4b:62:9c:5c:c7:43:d5:10:c6:fe: fd:80:77:d7:1b:a9:1e:b5:f1:79:cd:80:65:b1:68:cc:d2:0b: 26:0f:8e:30:f8:07:8b:18:a7:62:22:d0:5b:69:85:94:1a:95: 12:14:db:1f:1b:15:4d:5f:48:d9:2c:2b:ab:a4:af:53:22:d2: ea:52:9f:af:f8:00:fb:fe:d4:a8:20:a6:82:0a:20:15:6c:5f: 29:7e:95:36:90:0d:51:67:90:06:19:00:e4:2b:a7:ae:45:8a: 0d:48:a9:db:25:7a:52:1e:3c:e2:2b:b2:01:0d:82:53:b8:b7: 5f:53:5a:0d:ae:cd:62:2a:05:5a:1e:0f:07:40:a5:78:44:09: be:97:b0:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUezEU+NfFaWG+L2FcjW+aL+4quYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFBREQxODhBQzYwNTVDODM4NThDOURDQzk2NjRBMDMx QTU2MzIxRjAeFw0yNTExMDMwMDIxMThaFw0yNTExMDQwMzE5MThaMDMxMTAvBgNV BAMTKDE2REMwRkNFODMxNDc4MTM3MzI5RDkwNDc5OEU1NDlFQjZFNTVBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgx704q5UUHJaqnE3/ewjkdCc+ oMdt8Jny6TFlQIhtQEcrA4mJnmyJ3h8ladjNz+/BPBYKKtvFe32DS3bUcMg3G42t 9S/kH/0WTydDzQQWk6TMxcqwNc24rBPMymWRrWoewZnpB4xtxqcEKobtJJcxQrff kQ7F1yj01DeSgk9LVp1WQouTn+crMyyWtQQGpjSPJB2XXXFJQEgMrgZHcc88m9wZ XelBMx3s4uOnZDDcnr1MVf73ZsyEL3BVBLFTTohwjOXrSh1JQrFHdzRRGQfx2ye6 1ANZ1N1jDo9tH9e5EK3v8DEuEqqKp4JH/BUXVHwoy09dzDHdWlg03tB6Wy1FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFtwPzoMUeBNzKdkEeY5UnrblWh0wHwYDVR0j BBgwFoAUiq3RiKxgVcg4WMncyWZKAxpWMh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0NwV2dkWFpRTEFNSEM4V1JoOUFBYmhtTlNpamR0R3k4eWc2blJQUzZV UXkvMC84QUFERDE4OEFDNjA1NUM4Mzg1OEM5RENDOTY2NEEwMzFBNTYzMjFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBQUREMTg4QUM2MDU1Qzgz ODU4QzlEQ0M5NjY0QTAzMUE1NjMyMUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0NwV2dkWFpRTEFNSEM4V1JoOUFBYmhtTlNpamR0R3k4eWc2blJQUzZVUXkvMC84 QUFERDE4OEFDNjA1NUM4Mzg1OEM5RENDOTY2NEEwMzFBNTYzMjFGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZMUWDFNpRyAbbH707TuKwtyvb8/lRRQLLnfvlosmQEdize7R4TrBZKNZ0RuX P1caQOe7e41NZXUuMyq3ZEJ+WNeW/u5NLB5VEpHvM7LVMZ4KPtX9Wv+gCdgP0Cv0 5WIeI/RFIY3SBDn38nOlNvg1+h4HYe1LYpxcx0PVEMb+/YB31xupHrXxec2AZbFo zNILJg+OMPgHixinYiLQW2mFlBqVEhTbHxsVTV9I2Swrq6SvUyLS6lKfr/gA+/7U qCCmggogFWxfKX6VNpANUWeQBhkA5CunrkWKDUip2yV6Uh484iuyAQ2CU7i3X1Na Da7NYioFWh4PB0CleEQJvpewYA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:05:51 2025 by rpki-client