$ rpki-client -vvf rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft File: 8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft (raw, json) Hash identifier: S3m+NKumk1sOM6j1WRZdKSDR8IkjwRp2Ludura1af20= Subject key identifier: 62:27:1E:97:C1:27:A8:2B:A9:86:84:A2:A1:14:A4:6F:CB:0D:25:31 Authority key identifier: 8B:89:FD:11:7F:F5:2A:01:99:DB:C5:00:2C:1B:C7:D4:4E:20:4A:D2 Certificate issuer: /CN=8B89FD117FF52A0199DBC5002C1BC7D44E204AD2 Certificate serial: 0A71A943C07AB7A7F5BA95B42F832D308F0C76A0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft Manifest number: 7A Signing time: Tue 04 Nov 2025 12:27:25 +0000 Manifest this update: Tue 04 Nov 2025 12:22:25 +0000 Manifest next update: Wed 05 Nov 2025 13:20:25 +0000 Files and hashes: 1: 34352e3233352e3133322e302f32322d3234203d3e20323637343232.roa (hash: fwixdrQWEPst8s+eVaUhnE8mUnCaPHjzEVa6AGdzW3U=) 2: 323830343a346434633a3a2f33322d3438203d3e20323637343232.roa (hash: TSp4pb28CDc3CmgAqNWTUzj2tUUPyBdgJJeYPfOIRjg=) 3: 8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.crl (hash: +GkQ1ClmWDCj9e7rRlRLyeixlOF5knhoWHwsZSHwH/k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.crl rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 13:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:71:a9:43:c0:7a:b7:a7:f5:ba:95:b4:2f:83:2d:30:8f:0c:76:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B89FD117FF52A0199DBC5002C1BC7D44E204AD2 Validity Not Before: Nov 4 12:22:25 2025 GMT Not After : Nov 5 13:20:25 2025 GMT Subject: CN=62271E97C127A82BA98684A2A114A46FCB0D2531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:08:b5:55:e7:a0:54:70:06:c5:03:da:c6: 45:ee:c2:af:5b:06:32:66:7e:8c:ff:29:3c:24:cf: e3:21:47:27:23:75:54:de:b7:b6:8b:58:a0:5c:c8: a7:71:56:54:91:91:84:e8:37:ce:c5:d8:fb:60:35: 21:7b:aa:93:44:a0:d0:7f:88:51:22:4b:35:41:6b: bc:80:7d:dc:07:e5:f7:65:eb:9f:88:00:e5:64:02: 1d:5a:77:3c:2d:78:a3:a2:cc:e7:5f:c4:16:70:2a: 6d:a6:49:28:bf:76:72:34:98:4f:86:fe:ba:27:69: fa:80:27:6e:e1:1c:5e:15:a0:99:b7:62:4d:cd:7a: 82:79:b2:d6:52:6e:53:eb:b0:82:97:62:ae:1d:b6: bb:f9:56:bd:99:63:ff:68:63:0e:21:23:74:d1:56: 74:5d:42:34:2e:0a:b2:d0:8f:a3:e2:6b:2b:f0:04: 27:9d:ef:47:75:dc:6b:5d:56:d6:e6:8a:b5:ad:20: 46:87:72:a4:08:b6:13:b7:b9:49:1b:a4:1e:c5:29: 37:02:28:04:65:b6:97:bb:6c:83:de:75:ab:76:d6: d5:25:ff:c9:47:ce:d8:7c:23:61:b1:50:c6:f7:14: ae:7f:60:76:ca:33:90:84:b3:a3:ba:48:74:ec:3e: 2c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:27:1E:97:C1:27:A8:2B:A9:86:84:A2:A1:14:A4:6F:CB:0D:25:31 X509v3 Authority Key Identifier: keyid:8B:89:FD:11:7F:F5:2A:01:99:DB:C5:00:2C:1B:C7:D4:4E:20:4A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a8:9e:6f:ce:9b:92:82:17:e7:12:f7:d4:48:b7:f9:ca:fb: 90:53:3c:56:8d:87:9d:95:06:4f:3a:69:37:d9:66:af:0d:4f: 0e:25:e7:13:13:6f:1e:eb:61:9c:84:f0:91:75:50:42:1f:25: 8d:7a:3e:c3:cc:f4:1c:c1:9f:ad:8d:4c:58:48:b7:db:f1:26: ae:ae:22:04:4f:ec:0e:bd:a9:d7:56:89:6f:27:34:8f:55:07: dd:70:21:85:e0:e0:cc:4a:30:b4:00:b8:43:5a:3e:bb:61:dc: 72:71:0a:f5:2f:76:49:97:7c:9a:22:16:3e:7f:d9:2c:47:ce: e3:5b:07:5d:40:9c:e3:2a:59:48:cc:8b:2d:ac:0c:c0:b7:ce: 94:ea:db:86:fd:ec:3c:33:6c:c6:8a:da:3e:a3:21:67:40:39: 5d:0b:d4:29:43:27:d7:77:ef:25:6d:88:0b:fc:99:c7:0d:8e: 19:4b:9e:ab:fb:ef:35:1b:a4:78:b9:95:1e:63:5e:54:fa:52: df:c0:1f:24:3c:20:9f:ba:c5:20:51:5d:d1:99:55:d3:eb:02: 29:13:d5:0b:37:b5:c3:ba:b5:55:6f:93:95:d0:c8:65:af:c8: af:40:91:58:98:c3:16:21:4a:7b:b3:a3:9a:1f:6a:a1:84:1d: 3b:fe:06:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCnGpQ8B6t6f1upW0L4MtMI8MdqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI4OUZEMTE3RkY1MkEwMTk5REJDNTAwMkMxQkM3RDQ0 RTIwNEFEMjAeFw0yNTExMDQxMjIyMjVaFw0yNTExMDUxMzIwMjVaMDMxMTAvBgNV BAMTKDYyMjcxRTk3QzEyN0E4MkJBOTg2ODRBMkExMTRBNDZGQ0IwRDI1MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuVwi1VeegVHAGxQPaxkXuwq9b BjJmfoz/KTwkz+MhRycjdVTet7aLWKBcyKdxVlSRkYToN87F2PtgNSF7qpNEoNB/ iFEiSzVBa7yAfdwH5fdl65+IAOVkAh1adzwteKOizOdfxBZwKm2mSSi/dnI0mE+G /ronafqAJ27hHF4VoJm3Yk3NeoJ5stZSblPrsIKXYq4dtrv5Vr2ZY/9oYw4hI3TR VnRdQjQuCrLQj6PiayvwBCed70d13GtdVtbmirWtIEaHcqQIthO3uUkbpB7FKTcC KARltpe7bIPedat21tUl/8lHzth8I2GxUMb3FK5/YHbKM5CEs6O6SHTsPixPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYicel8EnqCuphoSioRSkb8sNJTEwHwYDVR0j BBgwFoAUi4n9EX/1KgGZ28UALBvH1E4gStIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVFwczk4Z1U0dm5wV0V1WDZQVGFab2JVVEZ4VEtQTXJlQnVZSFJoMmdm TDEvMC84Qjg5RkQxMTdGRjUyQTAxOTlEQkM1MDAyQzFCQzdENDRFMjA0QUQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCODlGRDExN0ZGNTJBMDE5 OURCQzUwMDJDMUJDN0Q0NEUyMDRBRDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVFwczk4Z1U0dm5wV0V1WDZQVGFab2JVVEZ4VEtQTXJlQnVZSFJoMmdmTDEvMC84 Qjg5RkQxMTdGRjUyQTAxOTlEQkM1MDAyQzFCQzdENDRFMjA0QUQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACKieb86bkoIX5xL31Ei3+cr7kFM8Vo2HnZUGTzppN9lmrw1PDiXnExNvHuth nITwkXVQQh8ljXo+w8z0HMGfrY1MWEi32/Emrq4iBE/sDr2p11aJbyc0j1UH3XAh heDgzEowtAC4Q1o+u2HccnEK9S92SZd8miIWPn/ZLEfO41sHXUCc4ypZSMyLLawM wLfOlOrbhv3sPDNsxoraPqMhZ0A5XQvUKUMn13fvJW2IC/yZxw2OGUueq/vvNRuk eLmVHmNeVPpS38AfJDwgn7rFIFFd0ZlV0+sCKRPVCze1w7q1VW+TldDIZa/Ir0CR WJjDFiFKe7Ojmh9qoYQdO/4G9g== -----END CERTIFICATE-----Generated at Wed Nov 5 02:36:56 2025 by rpki-client