$ rpki-client -vvf rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft File: 8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft (raw, json) Hash identifier: VS6RbYnvL/9/jzEljtfOh45i4xt26EG3KvH0eo6CQrc= Subject key identifier: 1C:9B:01:06:17:84:66:68:1E:43:6F:22:E0:FE:80:1A:8B:07:4D:CC Authority key identifier: 8B:8B:1C:29:5E:F2:38:6F:8F:2B:BD:18:93:D8:D1:64:EE:B2:41:DA Certificate issuer: /CN=8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA Certificate serial: 484E5094A1B6CCF9D06747D295D2D92471359DAC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft Manifest number: 6E Signing time: Mon 03 Nov 2025 01:25:58 +0000 Manifest this update: Mon 03 Nov 2025 01:20:58 +0000 Manifest next update: Tue 04 Nov 2025 03:29:58 +0000 Files and hashes: 1: 323830343a383533343a3a2f33322d3338203d3e20323732353634.roa (hash: EXXu8EMk/fv/VXBhnb0eG75OE0+K8FDQRp8W4/VB/yA=) 2: AS272564.asa (hash: dJc1wuN6t7JkVdQRM/03T5SoGEkIN/qpvYr408ZvyRU=) 3: 8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.crl (hash: xydMrZ/30inFNnTTcB7bt5xX18zvhEm7w8qZsAffasE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.crl rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:4e:50:94:a1:b6:cc:f9:d0:67:47:d2:95:d2:d9:24:71:35:9d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA Validity Not Before: Nov 3 01:20:58 2025 GMT Not After : Nov 4 03:29:58 2025 GMT Subject: CN=1C9B0106178466681E436F22E0FE801A8B074DCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:f3:c8:15:b1:8d:04:19:43:d9:4f:55:cb:cb: 49:70:17:97:f0:28:9c:92:8b:00:ee:30:99:2e:c2: 79:e3:a4:88:d4:62:dc:fb:71:4a:5d:5a:70:1f:33: dc:10:62:73:33:ba:39:7b:46:7f:8b:14:d1:41:aa: 76:5a:d8:90:77:ac:3c:61:2f:d7:59:98:45:d6:4b: 0f:a4:6a:60:35:20:a0:73:4c:b1:66:af:d0:db:e5: 9a:e9:ee:56:5a:91:d1:49:0b:1c:a6:4e:15:dd:6c: 86:57:c9:4e:fd:78:79:8f:13:8d:80:15:4e:49:36: da:09:2f:9a:9e:01:37:d1:55:5b:46:23:1e:ff:35: ed:5c:90:71:e4:ca:1e:5c:70:04:94:38:39:e3:5a: 34:a2:01:e6:5c:d5:dc:eb:c2:a3:7f:6b:59:2f:ed: c8:88:cd:bc:21:a8:6c:41:fe:c6:47:d0:18:51:5a: 0a:5b:fe:2e:f1:7a:ce:69:03:89:87:39:a8:50:cf: ec:bf:b4:37:66:b0:d2:69:1b:9a:cc:50:f2:06:39: a5:e7:a3:88:a6:4f:1a:b7:e7:69:2c:ee:12:60:09: 35:5b:ff:a1:82:8e:0e:a1:27:69:9e:c3:8d:8a:0c: 59:da:39:2b:61:8a:a7:01:78:bf:e1:28:bc:23:b2: f7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9B:01:06:17:84:66:68:1E:43:6F:22:E0:FE:80:1A:8B:07:4D:CC X509v3 Authority Key Identifier: keyid:8B:8B:1C:29:5E:F2:38:6F:8F:2B:BD:18:93:D8:D1:64:EE:B2:41:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:6b:82:bd:35:f6:09:b3:f4:07:1f:6e:0f:2f:1a:0a:ef:49: d5:f2:c8:a1:f3:b4:bc:7d:9b:42:8b:fb:e1:e5:8b:af:d4:81: b1:23:7f:4d:80:d1:05:95:8e:75:18:db:2a:11:bd:2d:6a:7b: 6c:3e:36:74:e0:65:1b:0d:0d:f8:0f:7d:d5:8a:81:54:03:41: d5:73:18:75:58:91:ff:e0:4e:c9:48:21:fe:23:e6:8b:41:bd: 6a:0d:ac:02:3b:f6:af:39:d4:bf:58:f2:35:85:55:31:53:5f: af:50:92:4a:c9:0d:d0:cd:1e:d5:50:05:f6:c6:b1:00:56:25: 9c:7d:11:f5:1c:32:0a:eb:51:ba:5e:d1:e6:b8:22:c6:83:85: 35:bf:65:5c:bf:55:21:fa:78:c5:2f:3c:94:48:7a:53:c3:3f: 55:46:50:14:b1:5f:59:20:f6:40:e1:8b:02:c2:84:0d:ad:1b: 72:82:4c:57:f6:38:71:94:42:da:fd:b8:93:19:3b:7b:07:31: 4a:95:a9:3e:ba:77:04:7d:28:91:73:78:e1:0d:bb:85:58:cc: c1:4f:7e:7a:a9:f5:4d:a9:56:9c:52:96:ab:94:3d:d3:42:67: 20:39:80:7c:4f:24:a0:19:6f:da:54:d9:26:a0:2a:d3:4a:dd: 1f:1e:28:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSE5QlKG2zPnQZ0fSldLZJHE1nawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI4QjFDMjk1RUYyMzg2RjhGMkJCRDE4OTNEOEQxNjRF RUIyNDFEQTAeFw0yNTExMDMwMTIwNThaFw0yNTExMDQwMzI5NThaMDMxMTAvBgNV BAMTKDFDOUIwMTA2MTc4NDY2NjgxRTQzNkYyMkUwRkU4MDFBOEIwNzREQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD388gVsY0EGUPZT1XLy0lwF5fw KJySiwDuMJkuwnnjpIjUYtz7cUpdWnAfM9wQYnMzujl7Rn+LFNFBqnZa2JB3rDxh L9dZmEXWSw+kamA1IKBzTLFmr9Db5Zrp7lZakdFJCxymThXdbIZXyU79eHmPE42A FU5JNtoJL5qeATfRVVtGIx7/Ne1ckHHkyh5ccASUODnjWjSiAeZc1dzrwqN/a1kv 7ciIzbwhqGxB/sZH0BhRWgpb/i7xes5pA4mHOahQz+y/tDdmsNJpG5rMUPIGOaXn o4imTxq352ks7hJgCTVb/6GCjg6hJ2mew42KDFnaOSthiqcBeL/hKLwjsvcjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHJsBBheEZmgeQ28i4P6AGosHTcwwHwYDVR0j BBgwFoAUi4scKV7yOG+PK70Yk9jRZO6yQdowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2E2WHlKSjY1a3gyRFd0VFFhdWlGb3ZBUjl2Q0NzWG5yd1JlOG5HOTNE amQvMC84QjhCMUMyOTVFRjIzODZGOEYyQkJEMTg5M0Q4RDE2NEVFQjI0MURBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCOEIxQzI5NUVGMjM4NkY4 RjJCQkQxODkzRDhEMTY0RUVCMjQxREEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2E2WHlKSjY1a3gyRFd0VFFhdWlGb3ZBUjl2Q0NzWG5yd1JlOG5HOTNEamQvMC84 QjhCMUMyOTVFRjIzODZGOEYyQkJEMTg5M0Q4RDE2NEVFQjI0MURBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgWuCvTX2CbP0Bx9uDy8aCu9J1fLIofO0vH2bQov74eWLr9SBsSN/TYDRBZWO dRjbKhG9LWp7bD42dOBlGw0N+A991YqBVANB1XMYdViR/+BOyUgh/iPmi0G9ag2s Ajv2rznUv1jyNYVVMVNfr1CSSskN0M0e1VAF9saxAFYlnH0R9RwyCutRul7R5rgi xoOFNb9lXL9VIfp4xS88lEh6U8M/VUZQFLFfWSD2QOGLAsKEDa0bcoJMV/Y4cZRC 2v24kxk7ewcxSpWpPrp3BH0okXN44Q27hVjMwU9+eqn1TalWnFKWq5Q900JnIDmA fE8koBlv2lTZJqAq00rdHx4oHg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:09 2025 by rpki-client