$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft (raw, json) Hash identifier: yT13VeAzaTBHDpDqc89OBq3RwO3mmu8WOGSwNyu6QtA= Subject key identifier: CD:1F:0F:56:94:7E:4E:92:65:A8:DD:FF:78:C3:4A:EA:DB:51:CB:47 Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE Certificate issuer: /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Certificate serial: 56A6291FA79E1766738EF48FA27911A2FD4915F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft Manifest number: 02FC Signing time: Wed 05 Nov 2025 03:14:10 +0000 Manifest this update: Wed 05 Nov 2025 03:09:10 +0000 Manifest next update: Thu 06 Nov 2025 03:43:10 +0000 Files and hashes: 1: 3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (hash: 9lrgdFqXcmk1aveRypR0nwRoxN6RAu5lewGudgo7m5A=) 2: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (hash: daKi2XN6iI/5shlbC2ws+WpCE+eRSaaM95sbtBClTTE=) 3: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl (hash: GdJAgGBNYtxHls2rjPxJkECBzQerWl2olazHkCwG+Rk=) 4: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (hash: o5soZhe+dlhemRC6K331qQOeiYKJedndqQuOLBx6nRk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a6:29:1f:a7:9e:17:66:73:8e:f4:8f:a2:79:11:a2:fd:49:15:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Validity Not Before: Nov 5 03:09:10 2025 GMT Not After : Nov 6 03:43:10 2025 GMT Subject: CN=CD1F0F56947E4E9265A8DDFF78C34AEADB51CB47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:21:e1:42:31:a5:d8:0d:74:5a:af:e8:02:af: aa:02:53:60:9b:fa:80:86:cd:2b:d5:df:f4:e3:04: 9e:c7:50:28:d6:ee:79:be:3d:91:cf:f4:e6:85:78: 9c:72:2e:c4:73:50:b4:8b:bb:ce:d4:6f:6b:af:6a: 85:80:3d:c3:f0:90:e0:29:22:03:83:cc:c1:75:de: eb:1e:50:f2:1f:76:25:85:8b:1b:5c:b5:fe:d8:fb: 65:5e:15:f8:b5:93:2b:f7:36:2b:e7:93:81:7c:6c: c8:d9:34:43:85:13:0b:3a:83:4c:e4:e6:12:5c:80: e7:2c:a2:26:b1:eb:1b:d0:26:e3:78:97:b1:8c:2a: b2:3e:6f:fc:5d:aa:eb:48:87:09:b0:bf:64:11:91: 5d:ad:73:cd:31:03:d7:ce:f4:3d:c5:bb:5f:b2:45: b9:77:c2:c6:c2:d5:30:c1:b3:9e:c5:b7:9f:60:45: e2:40:1b:6b:7e:9d:65:7b:45:93:00:ce:db:a9:a5: 00:38:de:14:24:61:55:cf:9e:bf:6c:86:64:75:4f: d1:51:1e:08:b8:7b:84:89:53:44:4f:52:84:65:d3: 66:20:8c:e3:a0:16:46:2c:4c:84:b2:e9:7a:71:7f: 9a:4f:88:b1:7f:b5:f1:e1:be:2a:5c:a1:7f:dc:36: 16:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1F:0F:56:94:7E:4E:92:65:A8:DD:FF:78:C3:4A:EA:DB:51:CB:47 X509v3 Authority Key Identifier: keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ba:98:78:64:fb:90:6c:de:ac:95:f9:3c:92:e7:c7:23:92: 0b:6a:d5:99:91:60:7f:44:7f:ef:2f:0a:7b:05:9a:90:9d:49: e3:14:02:6e:ef:e0:6b:82:fc:f6:50:99:ea:50:26:dc:0f:0e: 81:09:b8:51:6f:fd:d9:fd:ae:73:49:38:86:f4:db:2f:c6:d6: 9a:47:55:40:b8:c5:af:b7:1f:30:b2:3d:35:22:1d:ad:46:f0: da:22:9d:58:ee:56:f1:39:6f:ea:b7:c3:c6:46:e3:a0:27:c2: db:ec:c5:aa:39:54:23:a3:8a:e9:7c:11:d6:f5:13:6e:c6:00: ec:31:ed:d3:90:f7:8c:27:33:49:1d:a2:14:2e:4a:67:a8:a3: 4e:a2:bb:6c:c6:79:e6:42:19:3c:b7:15:60:b5:bc:c2:e7:a5: 7a:53:c4:9d:c0:10:e7:05:c7:16:6f:15:09:97:3a:d5:bc:a6: b4:44:50:21:64:58:d9:65:65:b5:ef:6d:2e:ac:91:89:33:dd: 8a:da:11:07:92:10:b5:8c:f2:1b:5c:45:67:00:b6:7e:9f:71: 6e:d3:08:b5:b3:1c:e4:71:3f:3c:8c:56:e4:01:dd:4c:93:dd: 8c:fe:f8:81:b9:83:3e:97:27:17:93:a1:f9:3d:c0:f9:a3:43: 8f:bc:f3:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVqYpH6eeF2ZzjvSPonkRov1JFfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRTlDOTBFQkM1MDgyRjgwMjA1NUVGQUE2MzYwQzY2 MUJGODVDRTAeFw0yNTExMDUwMzA5MTBaFw0yNTExMDYwMzQzMTBaMDMxMTAvBgNV BAMTKENEMUYwRjU2OTQ3RTRFOTI2NUE4RERGRjc4QzM0QUVBREI1MUNCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlIeFCMaXYDXRar+gCr6oCU2Cb +oCGzSvV3/TjBJ7HUCjW7nm+PZHP9OaFeJxyLsRzULSLu87Ub2uvaoWAPcPwkOAp IgODzMF13useUPIfdiWFixtctf7Y+2VeFfi1kyv3Nivnk4F8bMjZNEOFEws6g0zk 5hJcgOcsoiax6xvQJuN4l7GMKrI+b/xdqutIhwmwv2QRkV2tc80xA9fO9D3Fu1+y Rbl3wsbC1TDBs57Ft59gReJAG2t+nWV7RZMAztuppQA43hQkYVXPnr9shmR1T9FR Hgi4e4SJU0RPUoRl02YgjOOgFkYsTISy6Xpxf5pPiLF/tfHhvipcoX/cNhadAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzR8PVpR+TpJlqN3/eMNK6ttRy0cwHwYDVR0j BBgwFoAUi66ckOvFCC+AIFXvqmNgxmG/hc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNL ODUvMS84QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQUU5QzkwRUJDNTA4MkY4 MDIwNTVFRkFBNjM2MEM2NjFCRjg1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNLODUvMS84 QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoLqYeGT7kGzerJX5PJLnxyOSC2rVmZFgf0R/7y8KewWakJ1J4xQCbu/ga4L8 9lCZ6lAm3A8OgQm4UW/92f2uc0k4hvTbL8bWmkdVQLjFr7cfMLI9NSIdrUbw2iKd WO5W8Tlv6rfDxkbjoCfC2+zFqjlUI6OK6XwR1vUTbsYA7DHt05D3jCczSR2iFC5K Z6ijTqK7bMZ55kIZPLcVYLW8wuelelPEncAQ5wXHFm8VCZc61bymtERQIWRY2WVl te9tLqyRiTPditoRB5IQtYzyG1xFZwC2fp9xbtMItbMc5HE/PIxW5AHdTJPdjP74 gbmDPpcnF5Oh+T3A+aNDj7zzUA== -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:34 2025 by rpki-client