$ rpki-client -vvf rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.mft File: 8FB0A435AA71965FD7774887BFE0AE34E6E39B03.mft (raw, json) Hash identifier: gATrdWkchnkBqgAxBi9YHbNNtJnZXvZIqHcKFIO+UaE= Subject key identifier: E8:94:06:7D:B7:3C:B2:11:A9:A1:CD:F6:24:BD:DC:EA:6B:98:30:49 Authority key identifier: 8F:B0:A4:35:AA:71:96:5F:D7:77:48:87:BF:E0:AE:34:E6:E3:9B:03 Certificate issuer: /CN=8FB0A435AA71965FD7774887BFE0AE34E6E39B03 Certificate serial: 059A4B1643AA7AF008C98B5A7A7EB284FC79C803 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer Subject info access: rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.mft Manifest number: 01AF Signing time: Wed 05 Nov 2025 03:34:58 +0000 Manifest this update: Wed 05 Nov 2025 03:29:58 +0000 Manifest next update: Thu 06 Nov 2025 03:40:58 +0000 Files and hashes: 1: 8FB0A435AA71965FD7774887BFE0AE34E6E39B03.crl (hash: lQLQxUTaeqak/jr8KP954nCn0j0fqcz13Gr2XXvQqY4=) 2: 3138362e3232372e3132302e302f32322d3332203d3e203532353631.roa (hash: GtLkDg3wYRo9LCNErZPLF0N9pCC3m5KYWWINzSDvNuo=) 3: 3137372e38362e37362e302f32322d3332203d3e203532353631.roa (hash: QRserbK/scIlzLXUy++gwmtfiw9pjm1gqJ/e7qEGk3A=) 4: 323830343a6538633a3a2f33322d313238203d3e203532353631.roa (hash: Gg0q3DfxZmPhnkRQl6LHy4NCAkw8MG/Fy3pAAefnQHk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.crl rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:9a:4b:16:43:aa:7a:f0:08:c9:8b:5a:7a:7e:b2:84:fc:79:c8:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB0A435AA71965FD7774887BFE0AE34E6E39B03 Validity Not Before: Nov 5 03:29:58 2025 GMT Not After : Nov 6 03:40:58 2025 GMT Subject: CN=E894067DB73CB211A9A1CDF624BDDCEA6B983049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:95:ba:1c:60:0b:c4:81:47:7c:26:0d:b6: 9c:56:5f:32:f8:63:4a:12:8a:d9:4e:b3:22:0d:f8: ee:c0:93:ac:c9:2d:e7:76:ab:0f:2f:6e:10:22:79: e1:15:a8:19:eb:23:01:bd:10:60:8d:c1:d1:4e:fd: 8b:68:a6:41:d3:f9:22:11:90:77:e7:7b:94:b6:52: c1:54:d1:15:26:9d:f2:e4:68:89:cc:e0:3c:6c:2c: 82:b6:dc:d0:f9:24:3e:26:61:a0:03:46:dd:39:3f: c9:9b:14:f3:56:01:2a:72:81:a8:29:f4:6b:7f:b6: cd:0d:08:ad:89:15:07:8d:2a:2e:e4:b3:c2:6f:87: ff:72:89:33:ce:e9:9f:54:7f:37:08:da:98:b7:7f: e4:59:fb:69:c6:42:63:8c:73:dd:3e:d4:dc:3c:28: 42:1d:38:1c:d7:bf:a1:0f:21:c7:05:fc:2f:55:dd: 17:40:3c:68:f3:45:68:e4:11:24:a5:c3:af:1b:e3: c7:06:b0:cf:04:6e:f5:96:ab:09:ba:4e:ad:78:73: 60:6d:94:e5:8f:da:c6:bf:06:51:98:ed:f0:57:9f: ea:02:4f:16:a9:51:95:42:ff:04:73:e7:27:26:55: 6b:3f:6c:08:8e:4c:5b:96:8b:d9:26:e3:c8:df:40: 5f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:94:06:7D:B7:3C:B2:11:A9:A1:CD:F6:24:BD:DC:EA:6B:98:30:49 X509v3 Authority Key Identifier: keyid:8F:B0:A4:35:AA:71:96:5F:D7:77:48:87:BF:E0:AE:34:E6:E3:9B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:ae:fe:3a:1e:9c:dc:d3:4b:8c:16:5a:1e:47:f5:20:83:84: 19:55:e9:cb:20:3d:5b:a0:d1:15:93:93:a6:a5:e2:f4:f0:52: 2d:44:46:8d:f6:49:a6:9f:ec:a9:48:91:1b:e6:0b:ab:2d:6d: 79:c6:41:90:6f:f2:f7:1b:12:6e:28:1c:00:5b:0b:70:9f:53: 6c:86:7f:97:41:bb:49:f9:3b:d5:22:12:46:90:06:b6:5e:ed: 4c:69:e5:94:77:b3:be:99:d1:99:bb:76:35:15:88:c2:b4:2e: 32:dd:e2:65:8c:e1:44:be:24:a6:48:88:0b:2b:34:ba:86:c1: cf:06:cf:8f:83:a3:d9:05:ba:90:ab:65:9f:19:24:d0:2d:27: 11:6b:4a:e8:7e:4c:26:ed:34:85:58:e5:e7:c5:d9:78:41:d0: d7:4f:3a:3e:e1:58:65:8f:86:62:57:c3:9e:d3:d4:16:a6:be: 41:f8:46:0d:1b:df:2d:19:50:e9:d1:5a:1d:d4:35:86:1a:d9: 02:15:f4:fc:7d:aa:a1:c1:c6:a0:29:e9:54:a7:b3:50:a6:27: 4b:70:6d:55:c3:46:02:a4:79:f1:67:61:cb:e0:aa:f9:5b:24: 60:fa:f7:90:dc:85:bb:0a:b7:d4:1a:0c:43:20:0d:23:37:1e: 34:8e:22:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBZpLFkOqevAIyYtaen6yhPx5yAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMEE0MzVBQTcxOTY1RkQ3Nzc0ODg3QkZFMEFFMzRF NkUzOUIwMzAeFw0yNTExMDUwMzI5NThaFw0yNTExMDYwMzQwNThaMDMxMTAvBgNV BAMTKEU4OTQwNjdEQjczQ0IyMTFBOUExQ0RGNjI0QkREQ0VBNkI5ODMwNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy7ZW6HGALxIFHfCYNtpxWXzL4 Y0oSitlOsyIN+O7Ak6zJLed2qw8vbhAieeEVqBnrIwG9EGCNwdFO/YtopkHT+SIR kHfne5S2UsFU0RUmnfLkaInM4DxsLIK23ND5JD4mYaADRt05P8mbFPNWASpygagp 9Gt/ts0NCK2JFQeNKi7ks8Jvh/9yiTPO6Z9UfzcI2pi3f+RZ+2nGQmOMc90+1Nw8 KEIdOBzXv6EPIccF/C9V3RdAPGjzRWjkESSlw68b48cGsM8EbvWWqwm6Tq14c2Bt lOWP2sa/BlGY7fBXn+oCTxapUZVC/wRz5ycmVWs/bAiOTFuWi9km48jfQF8bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6JQGfbc8shGpoc32JL3c6muYMEkwHwYDVR0j BBgwFoAUj7CkNapxll/Xd0iHv+CuNObjmwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNnAyZm5TV1JkMlRGb2V6am11a3NoRWFCMVN0MWVKYXNEUTVLd2NLUTZm VE0vMC84RkIwQTQzNUFBNzE5NjVGRDc3NzQ4ODdCRkUwQUUzNEU2RTM5QjAzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGQjBBNDM1QUE3MTk2NUZE Nzc3NDg4N0JGRTBBRTM0RTZFMzlCMDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NnAyZm5TV1JkMlRGb2V6am11a3NoRWFCMVN0MWVKYXNEUTVLd2NLUTZmVE0vMC84 RkIwQTQzNUFBNzE5NjVGRDc3NzQ4ODdCRkUwQUUzNEU2RTM5QjAzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwK7+Oh6c3NNLjBZaHkf1IIOEGVXpyyA9W6DRFZOTpqXi9PBSLURGjfZJpp/s qUiRG+YLqy1tecZBkG/y9xsSbigcAFsLcJ9TbIZ/l0G7Sfk71SISRpAGtl7tTGnl lHezvpnRmbt2NRWIwrQuMt3iZYzhRL4kpkiICys0uobBzwbPj4Oj2QW6kKtlnxkk 0C0nEWtK6H5MJu00hVjl58XZeEHQ1086PuFYZY+GYlfDntPUFqa+QfhGDRvfLRlQ 6dFaHdQ1hhrZAhX0/H2qocHGoCnpVKezUKYnS3BtVcNGAqR58Wdhy+Cq+VskYPr3 kNyFuwq31BoMQyANIzceNI4iLA== -----END CERTIFICATE-----Generated at Wed Nov 5 07:54:15 2025 by rpki-client