$ rpki-client -vvf rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.mft File: B85CAE3AAD278302E7E84DE574CABFB2535CBC59.mft (raw, json) Hash identifier: sPohL8oflbuCd12iHkyUstcyL0SKUbq4YtXSPPxhcY4= Subject key identifier: 1F:55:4E:8B:64:4C:2D:68:CA:7B:F9:19:4F:AA:F8:E3:25:A0:33:51 Authority key identifier: B8:5C:AE:3A:AD:27:83:02:E7:E8:4D:E5:74:CA:BF:B2:53:5C:BC:59 Certificate issuer: /CN=B85CAE3AAD278302E7E84DE574CABFB2535CBC59 Certificate serial: 0E957ABAE6CD87733CAC67DBAD57A336A1979027 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.cer Subject info access: rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.mft Manifest number: 8D Signing time: Sun 02 Nov 2025 22:31:57 +0000 Manifest this update: Sun 02 Nov 2025 22:26:57 +0000 Manifest next update: Mon 03 Nov 2025 22:53:57 +0000 Files and hashes: 1: 323830343a316362343a3a2f33322d313238203d3e203631363730.roa (hash: vLY5+bxCcSz9keEk/hNNs2BxL9cgGA7sHwehEwHEaD8=) 2: 3230312e3134382e3136342e302f32322d3332203d3e203631363730.roa (hash: M+aeOuYcirPnGN/Ap75nXooikFZUJurf7i6P4Zse/x4=) 3: B85CAE3AAD278302E7E84DE574CABFB2535CBC59.crl (hash: ZrTya87J/v9SfyQVrE/HA01mzFep30IXwRiwiXskQmI=) 4: 3133312e3130302e3130342e302f32322d3332203d3e203631363730.roa (hash: WDt8RKT06PvFDXQ0UcocBAidzkP7Us+T/mJ5qfkFAu0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.crl rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 22:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:95:7a:ba:e6:cd:87:73:3c:ac:67:db:ad:57:a3:36:a1:97:90:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B85CAE3AAD278302E7E84DE574CABFB2535CBC59 Validity Not Before: Nov 2 22:26:57 2025 GMT Not After : Nov 3 22:53:57 2025 GMT Subject: CN=1F554E8B644C2D68CA7BF9194FAAF8E325A03351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:ce:41:3f:56:07:8d:e4:ee:41:bc:b9:88: 5d:05:e7:6b:ad:55:7d:97:44:6b:38:b3:6f:0f:ae: 30:db:59:22:47:a3:21:8c:ae:0a:4a:3e:67:36:b6: 08:46:ec:15:11:09:2f:74:55:a2:9c:05:7f:3f:81: 7c:b3:d4:99:a2:1a:22:c9:fb:2e:e0:ac:1a:88:e0: d4:1a:40:8c:57:9d:82:28:2f:ec:d4:76:ba:a0:17: ab:6c:f1:59:9e:1e:ab:3c:eb:27:8b:df:57:54:92: d7:6b:c8:d3:fc:1b:4c:17:de:60:d3:f7:b5:28:17: d5:db:18:68:06:47:78:b8:0c:1e:bc:49:5e:c8:aa: cf:0d:ec:68:e2:d3:af:03:fe:16:04:0c:66:6c:f5: eb:e0:98:79:8d:29:5d:9d:55:3b:ce:41:cd:46:e7: 85:a6:36:eb:35:f8:d0:eb:99:1b:90:c4:fe:68:81: 83:c1:51:8f:19:e7:9f:d0:06:06:7e:ba:60:1c:e8: bb:a3:86:b5:45:65:f7:2d:e0:d5:88:a8:b1:93:59: 67:98:98:41:c6:75:af:20:9e:c2:fd:f1:0a:a4:98: 30:eb:7f:3d:31:41:12:7a:13:b0:2f:5f:8a:52:ed: 21:7a:15:c3:bc:7f:b3:56:08:58:1e:3d:a5:3a:99: 15:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:55:4E:8B:64:4C:2D:68:CA:7B:F9:19:4F:AA:F8:E3:25:A0:33:51 X509v3 Authority Key Identifier: keyid:B8:5C:AE:3A:AD:27:83:02:E7:E8:4D:E5:74:CA:BF:B2:53:5C:BC:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a9:74:0b:ae:8c:69:2c:c7:5d:77:e6:34:5f:ab:9e:33:df: b6:02:a8:a1:d3:59:26:55:c5:91:f0:61:cb:56:95:93:e4:83: 11:c4:32:c4:b4:fd:cb:84:00:a9:d9:2f:6a:14:ab:7c:54:fd: 68:ab:b4:da:1a:13:95:e9:1e:9f:1c:11:86:e1:eb:e4:b2:b3: 1c:18:e9:0f:aa:8e:7e:73:b0:5f:53:cd:58:da:6c:40:78:eb: 09:f5:de:f4:07:79:d5:f7:d4:59:c9:35:96:4d:6d:7d:54:50: 69:44:f1:88:1b:66:36:a6:7e:ac:79:90:ca:ef:fc:39:49:38: 77:33:08:74:46:a5:92:e0:b4:4c:9e:96:6c:fa:b9:5d:60:fa: 46:9b:bf:34:52:47:57:f6:13:d9:f4:a4:34:8a:cb:e6:84:a5: a7:1a:16:54:d5:30:62:b9:9f:e3:64:1a:49:09:25:4d:95:5d: 16:cb:1f:5f:3c:e2:ee:45:4d:7c:df:b1:d8:d7:82:36:98:e3: e9:25:85:c4:7b:c0:44:bf:53:2b:d5:d0:1b:ed:84:2e:b0:8f: e4:d3:84:e9:0c:ca:1f:93:22:b7:21:28:42:53:95:ed:0c:d7: 09:3a:4d:a0:c3:6b:62:4e:5e:65:cc:46:91:03:9f:8a:d8:e8: 8a:13:00:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDpV6uubNh3M8rGfbrVejNqGXkCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg1Q0FFM0FBRDI3ODMwMkU3RTg0REU1NzRDQUJGQjI1 MzVDQkM1OTAeFw0yNTExMDIyMjI2NTdaFw0yNTExMDMyMjUzNTdaMDMxMTAvBgNV BAMTKDFGNTU0RThCNjQ0QzJENjhDQTdCRjkxOTRGQUFGOEUzMjVBMDMzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7lM5BP1YHjeTuQby5iF0F52ut VX2XRGs4s28PrjDbWSJHoyGMrgpKPmc2tghG7BURCS90VaKcBX8/gXyz1JmiGiLJ +y7grBqI4NQaQIxXnYIoL+zUdrqgF6ts8VmeHqs86yeL31dUktdryNP8G0wX3mDT 97UoF9XbGGgGR3i4DB68SV7Iqs8N7Gji068D/hYEDGZs9evgmHmNKV2dVTvOQc1G 54WmNus1+NDrmRuQxP5ogYPBUY8Z55/QBgZ+umAc6LujhrVFZfct4NWIqLGTWWeY mEHGda8gnsL98QqkmDDrfz0xQRJ6E7AvX4pS7SF6FcO8f7NWCFgePaU6mRUhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUH1VOi2RMLWjKe/kZT6r44yWgM1EwHwYDVR0j BBgwFoAUuFyuOq0ngwLn6E3ldMq/slNcvFkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFVoTm1DZnBWVUJBQ21qTUw4bXc5R2hVOHNaTlJXbnpiQnRCaVNKRFlk cVovMC9CODVDQUUzQUFEMjc4MzAyRTdFODRERTU3NENBQkZCMjUzNUNCQzU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4NUNBRTNBQUQyNzgzMDJF N0U4NERFNTc0Q0FCRkIyNTM1Q0JDNTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFVoTm1DZnBWVUJBQ21qTUw4bXc5R2hVOHNaTlJXbnpiQnRCaVNKRFlkcVovMC9C ODVDQUUzQUFEMjc4MzAyRTdFODRERTU3NENBQkZCMjUzNUNCQzU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS6l0C66MaSzHXXfmNF+rnjPftgKoodNZJlXFkfBhy1aVk+SDEcQyxLT9y4QA qdkvahSrfFT9aKu02hoTlekenxwRhuHr5LKzHBjpD6qOfnOwX1PNWNpsQHjrCfXe 9Ad51ffUWck1lk1tfVRQaUTxiBtmNqZ+rHmQyu/8OUk4dzMIdEalkuC0TJ6WbPq5 XWD6Rpu/NFJHV/YT2fSkNIrL5oSlpxoWVNUwYrmf42QaSQklTZVdFssfXzzi7kVN fN+x2NeCNpjj6SWFxHvARL9TK9XQG+2ELrCP5NOE6QzKH5MityEoQlOV7QzXCTpN oMNrYk5eZcxGkQOfitjoihMAsQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:30 2025 by rpki-client