$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft File: 8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft (raw, json) Hash identifier: jUOn5qxX1uLsqWDXYE54pGuBrQDhFN96x2WpojPrXtg= Subject key identifier: 9B:35:E2:4B:61:DF:5C:B8:13:2A:89:6D:6A:BE:85:1E:2E:97:BC:71 Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC Certificate issuer: /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC Certificate serial: 5626B16B6130D2C18F524F03F59D7A80669A01AB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft Manifest number: 0269 Signing time: Wed 05 Nov 2025 02:03:10 +0000 Manifest this update: Wed 05 Nov 2025 01:58:10 +0000 Manifest next update: Thu 06 Nov 2025 03:41:10 +0000 Files and hashes: 1: 8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl (hash: qjTIiZHkbjLrrLTDOr8RjmA+nhK7POSHSPD+WhrtVKQ=) 2: 3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa (hash: 78++bmMlB0Bovi7AyiX7x6vYCK0aaHsx+gF5MCimEZY=) 3: 3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa (hash: jjkK6I+oxF27Zn+hFNgeO1Co4NAnpp1C7qu8FLGYa5c=) 4: 3136382e39302e302e302f32322d3332203d3e203631363738.roa (hash: j1nslom0e916eBzyw+5Vl34iuI8TAS5aLHgLgLAY4IU=) 5: 3138312e3139312e3230302e302f32322d3332203d3e203631363738.roa (hash: R+lJ3l7UdjCU7kkCR68kGkR301UIjRYBugRziVPE9yM=) 6: 3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa (hash: iUhuZCqf+gxZqO/cM6ScZTXsH+jrXHXlfnCWGA2Il7o=) 7: 323830343a316364343a3a2f33322d313238203d3e203631363738.roa (hash: 6JWd5mE5VskzKa06dOehuRC38l54iLZvDm8ktJiyfoo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:26:b1:6b:61:30:d2:c1:8f:52:4f:03:f5:9d:7a:80:66:9a:01:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC Validity Not Before: Nov 5 01:58:10 2025 GMT Not After : Nov 6 03:41:10 2025 GMT Subject: CN=9B35E24B61DF5CB8132A896D6ABE851E2E97BC71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:00:ad:84:18:fb:bd:2c:04:a6:22:8c:6b: ff:95:0d:4b:70:b3:a0:d0:9d:0e:6a:60:3f:04:d5: 3f:45:f3:f4:04:14:74:97:0c:80:9b:4a:59:1f:87: b8:83:ad:d5:56:df:fe:96:fa:0a:72:eb:0d:a3:2e: 54:7a:27:91:d3:71:5b:f5:f1:5e:46:39:14:7a:e8: c6:58:84:5a:4a:31:c5:48:6f:c9:52:3b:34:09:cc: d1:46:0a:a5:fa:29:d1:a7:56:3f:48:dc:c8:9c:82: 24:eb:c8:db:ac:a0:db:8b:16:4f:68:be:80:4e:8c: ab:cf:17:56:13:a4:c2:1f:89:20:ee:09:eb:76:b6: 6c:82:cd:47:0d:da:2f:cb:40:27:c2:28:bd:50:ac: a7:f2:f5:74:f9:2d:fd:78:bb:da:26:75:61:35:c7: db:5b:16:b9:5d:c6:0f:b3:a9:e1:06:f3:6a:74:e0: 49:38:19:2e:1e:00:66:79:a8:ae:b1:da:63:03:53: f9:59:b5:58:02:2c:73:28:98:c0:52:bf:83:c3:2a: 47:1c:2c:62:aa:3c:51:93:e5:50:a2:1d:ec:b0:76: fe:92:24:dd:f4:52:23:9d:ea:68:62:ed:6f:3b:46: 02:b4:8d:56:5f:eb:d4:88:c3:e9:7d:3f:5b:3a:4d: b3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:35:E2:4B:61:DF:5C:B8:13:2A:89:6D:6A:BE:85:1E:2E:97:BC:71 X509v3 Authority Key Identifier: keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b2:df:9c:7a:44:0b:4c:6d:b4:64:c6:f7:da:61:32:ac:6b: 2f:b4:04:fa:ff:20:12:d0:28:1f:36:49:63:14:63:30:e3:64: 7a:d6:7b:cf:26:7f:83:85:b8:11:03:ed:e2:97:dc:90:6c:30: 88:91:f9:1b:e9:2c:f6:5b:35:21:03:71:38:4c:dc:81:3a:89: 98:16:e4:42:d0:87:30:1d:fe:2a:93:71:de:c5:cf:9a:59:98: bd:62:c0:5b:d2:90:3f:73:4c:be:ff:84:9f:18:20:f5:f3:43: c1:a2:3b:e6:62:58:16:b7:04:e0:16:e2:8c:c1:46:17:d9:39: d2:60:bd:81:23:65:21:35:e3:81:29:ac:c9:97:05:ed:38:ed: cc:c9:53:36:30:bd:eb:fa:53:4a:b6:85:48:fb:9f:fa:8e:14: 11:20:b9:56:01:2b:ef:23:ed:e3:86:eb:c3:81:c5:e8:30:6b: ef:77:d4:5e:a2:04:44:0d:f3:0e:ef:f1:c0:c9:47:71:cf:d4: 51:3f:80:2d:27:96:7e:5d:f3:01:5a:be:1c:10:2d:6b:ff:b9: 8c:73:49:76:ba:95:b0:47:41:c8:06:04:7b:a7:cb:a0:54:79: 9f:b3:3e:94:77:4f:47:4b:94:fb:4c:64:b4:53:ae:95:58:eb: 16:1a:dd:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUViaxa2Ew0sGPUk8D9Z16gGaaAaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU1MkM2QTlCRUFENzlEQzk1MEY5REE1NjBDNTMwRjI4 QkM2RkNEQzAeFw0yNTExMDUwMTU4MTBaFw0yNTExMDYwMzQxMTBaMDMxMTAvBgNV BAMTKDlCMzVFMjRCNjFERjVDQjgxMzJBODk2RDZBQkU4NTFFMkU5N0JDNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8bgCthBj7vSwEpiKMa/+VDUtw s6DQnQ5qYD8E1T9F8/QEFHSXDICbSlkfh7iDrdVW3/6W+gpy6w2jLlR6J5HTcVv1 8V5GORR66MZYhFpKMcVIb8lSOzQJzNFGCqX6KdGnVj9I3MicgiTryNusoNuLFk9o voBOjKvPF1YTpMIfiSDuCet2tmyCzUcN2i/LQCfCKL1QrKfy9XT5Lf14u9omdWE1 x9tbFrldxg+zqeEG82p04Ek4GS4eAGZ5qK6x2mMDU/lZtVgCLHMomMBSv4PDKkcc LGKqPFGT5VCiHeywdv6SJN30UiOd6mhi7W87RgK0jVZf69SIw+l9P1s6TbP5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmzXiS2HfXLgTKoltar6FHi6XvHEwHwYDVR0j BBgwFoAUjlLGqb6tedyVD52lYMUw8ovG/NwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy azkvMC84RTUyQzZBOUJFQUQ3OURDOTUwRjlEQTU2MEM1MzBGMjhCQzZGQ0RDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNTJDNkE5QkVBRDc5REM5 NTBGOURBNTYwQzUzMEYyOEJDNkZDREMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3YyazkvMC84 RTUyQzZBOUJFQUQ3OURDOTUwRjlEQTU2MEM1MzBGMjhCQzZGQ0RDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ7LfnHpEC0xttGTG99phMqxrL7QE+v8gEtAoHzZJYxRjMONketZ7zyZ/g4W4 EQPt4pfckGwwiJH5G+ks9ls1IQNxOEzcgTqJmBbkQtCHMB3+KpNx3sXPmlmYvWLA W9KQP3NMvv+Enxgg9fNDwaI75mJYFrcE4BbijMFGF9k50mC9gSNlITXjgSmsyZcF 7TjtzMlTNjC96/pTSraFSPuf+o4UESC5VgEr7yPt44brw4HF6DBr73fUXqIERA3z Du/xwMlHcc/UUT+ALSeWfl3zAVq+HBAta/+5jHNJdrqVsEdByAYEe6fLoFR5n7M+ lHdPR0uU+0xktFOulVjrFhrdng== -----END CERTIFICATE-----Generated at Wed Nov 5 19:49:59 2025 by rpki-client