$ rpki-client -vvf rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft File: 8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft (raw, json) Hash identifier: nM8GN3YWWW2GYbOppLXpk64Rwx1gf5ZyNDfVAa8BV7w= Subject key identifier: BE:79:0F:88:5B:A1:98:B9:39:36:9B:1F:E3:80:D6:FE:F4:54:A5:61 Authority key identifier: 8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10 Certificate issuer: /CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810 Certificate serial: 0774FFFDBF26D6720DDD00237EADAC32470F6848 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer Subject info access: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft Manifest number: 0285 Signing time: Wed 05 Nov 2025 06:24:34 +0000 Manifest this update: Wed 05 Nov 2025 06:19:34 +0000 Manifest next update: Thu 06 Nov 2025 06:41:34 +0000 Files and hashes: 1: 323830343a313735633a3a2f33322d313238203d3e20323633313430.roa (hash: LcxgBvhys26dh3eN+AkNblIZ169BBg5L/bmL0RHyz5I=) 2: 3136382e3230352e3134342e302f32322d3332203d3e20323633313430.roa (hash: bg8Dvb5gyNofKjWKDnAjbZaTOGuSl+Au6niFij0wNQI=) 3: 3139312e362e3134302e302f32322d3332203d3e20323633313430.roa (hash: YR3iwTv8fmQASNA9FOgQAa+ECLErkEz/btJcdJNxQ2k=) 4: 8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl (hash: FCzZE9dDrj44i7wwai8+l8mns8EeC4yVsttLLJoBTz0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:74:ff:fd:bf:26:d6:72:0d:dd:00:23:7e:ad:ac:32:47:0f:68:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810 Validity Not Before: Nov 5 06:19:34 2025 GMT Not After : Nov 6 06:41:34 2025 GMT Subject: CN=BE790F885BA198B939369B1FE380D6FEF454A561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:93:9f:57:48:bd:d3:9b:3d:02:e5:7f:6c:5f: b3:94:4d:66:06:89:d0:5d:a6:23:b0:65:74:d6:7f: e7:b3:3c:6e:66:84:6f:13:3f:ac:22:43:82:53:11: 65:fd:a4:fe:4c:0e:53:66:39:08:6d:33:7d:23:b2: ad:10:79:58:09:bc:55:86:4e:a7:ee:e6:74:38:a1: 73:12:b8:ae:36:6c:b7:37:ea:1f:88:d5:2d:bf:87: fd:49:86:53:4b:41:9e:1e:36:78:14:4c:53:33:3b: 0e:7a:8d:56:6d:92:28:03:e1:2f:22:65:bf:5e:2c: 13:fd:39:00:08:5f:4a:b5:11:78:c4:80:44:51:a8: f9:50:f0:d6:bb:38:68:70:d5:b1:25:47:a5:e2:bb: f0:2e:a5:ec:58:6f:ca:ec:b6:6f:30:e1:3b:3a:75: d4:c0:1b:1b:85:8a:fc:16:dd:43:c9:ea:a9:ff:77: 14:fe:a2:26:a7:39:82:e3:b8:85:ca:32:03:ff:70: 48:f6:59:2f:c1:50:08:cf:50:4d:17:ff:dd:92:56: 78:eb:82:3a:11:49:4b:7a:a9:86:91:3f:f5:c0:52: 89:cf:6d:e1:75:fe:78:d8:79:ba:67:e0:87:1c:57: 19:20:fc:b6:f3:79:e9:a6:5e:7c:f5:a3:ce:0d:d7: b1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:79:0F:88:5B:A1:98:B9:39:36:9B:1F:E3:80:D6:FE:F4:54:A5:61 X509v3 Authority Key Identifier: keyid:8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:94:ad:80:4a:b2:1d:8d:b5:c8:49:81:fb:e5:89:bb:c5:5d: e6:4f:7f:c7:c7:76:77:af:e8:a3:25:32:dc:36:a0:43:40:3d: fa:3c:66:64:e6:54:ff:36:56:69:ba:dc:54:13:d6:6e:58:cf: 8a:fd:52:d9:6a:49:ef:6f:35:8b:e4:6f:ee:14:2a:3d:ac:4b: 4e:75:03:66:c1:42:db:a5:a0:3f:9f:6a:d9:25:64:02:02:1f: 4e:37:b6:8d:a8:bf:33:1d:2a:b5:3b:c2:1c:b9:14:bc:f0:0e: 74:08:ef:f7:8e:19:fc:4c:9d:59:f7:5c:de:15:f6:cc:ec:c2: cc:6a:93:7c:06:60:e5:be:a3:d9:59:d8:d5:aa:23:ff:cb:94: 58:5d:48:c4:68:4e:28:f6:9f:b5:a6:61:7f:61:7e:8c:e3:7d: 64:4f:1e:fa:19:54:b4:49:fe:57:17:12:12:24:d0:1c:1d:34: 68:19:3e:ed:28:c3:bc:38:8d:ca:a3:43:fa:7f:64:c8:92:ae: a5:95:67:a6:63:b7:ce:d5:36:7d:49:d1:21:7a:2e:32:72:2d: 90:70:d4:29:12:85:c2:4e:90:6e:07:83:a3:60:61:9d:64:66: 0c:47:83:35:83:eb:c4:87:a2:0c:3f:2d:1a:31:00:a8:b7:5d: d0:a3:dc:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUB3T//b8m1nIN3QAjfq2sMkcPaEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYzMjdGRUZBNEU4Nzg4RkZDRkRDRDdDNkQxOTA2NDBG OEE2MjgxMDAeFw0yNTExMDUwNjE5MzRaFw0yNTExMDYwNjQxMzRaMDMxMTAvBgNV BAMTKEJFNzkwRjg4NUJBMTk4QjkzOTM2OUIxRkUzODBENkZFRjQ1NEE1NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqk59XSL3Tmz0C5X9sX7OUTWYG idBdpiOwZXTWf+ezPG5mhG8TP6wiQ4JTEWX9pP5MDlNmOQhtM30jsq0QeVgJvFWG Tqfu5nQ4oXMSuK42bLc36h+I1S2/h/1JhlNLQZ4eNngUTFMzOw56jVZtkigD4S8i Zb9eLBP9OQAIX0q1EXjEgERRqPlQ8Na7OGhw1bElR6Xiu/AupexYb8rstm8w4Ts6 ddTAGxuFivwW3UPJ6qn/dxT+oianOYLjuIXKMgP/cEj2WS/BUAjPUE0X/92SVnjr gjoRSUt6qYaRP/XAUonPbeF1/njYebpn4IccVxkg/LbzeemmXnz1o84N17FxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvnkPiFuhmLk5Npsf44DW/vRUpWEwHwYDVR0j BBgwFoAUjzJ/76ToeI/8/c18bRkGQPimKBAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnpWUjI5bmhrRkFyam0zYm9HNnhySkNWUFEzNmI1RGFlVnN5bjQ0U1p0 QUIvMC84RjMyN0ZFRkE0RTg3ODhGRkNGRENEN0M2RDE5MDY0MEY4QTYyODEwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGMzI3RkVGQTRFODc4OEZG Q0ZEQ0Q3QzZEMTkwNjQwRjhBNjI4MTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnpWUjI5bmhrRkFyam0zYm9HNnhySkNWUFEzNmI1RGFlVnN5bjQ0U1p0QUIvMC84 RjMyN0ZFRkE0RTg3ODhGRkNGRENEN0M2RDE5MDY0MEY4QTYyODEwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHpStgEqyHY21yEmB++WJu8Vd5k9/x8d2d6/ooyUy3DagQ0A9+jxmZOZU/zZW abrcVBPWbljPiv1S2WpJ7281i+Rv7hQqPaxLTnUDZsFC26WgP59q2SVkAgIfTje2 jai/Mx0qtTvCHLkUvPAOdAjv944Z/EydWfdc3hX2zOzCzGqTfAZg5b6j2VnY1aoj /8uUWF1IxGhOKPaftaZhf2F+jON9ZE8e+hlUtEn+VxcSEiTQHB00aBk+7SjDvDiN yqND+n9kyJKupZVnpmO3ztU2fUnRIXouMnItkHDUKRKFwk6QbgeDo2BhnWRmDEeD NYPrxIeiDD8tGjEAqLdd0KPclA== -----END CERTIFICATE-----Generated at Wed Nov 5 07:19:21 2025 by rpki-client