$ rpki-client -vvf rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft File: 88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft (raw, json) Hash identifier: eKImj66cJXvEiieqveNvqm1Fcpb+FWrs8oC3dCsW88Q= Subject key identifier: CA:7B:E6:9A:5A:98:A5:AA:8D:E6:A3:5E:F0:9C:76:62:2F:C4:55:23 Authority key identifier: 88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A Certificate issuer: /CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A Certificate serial: 1CC3A580AAF182563172B12A90A217BF2739CBCA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft Manifest number: 2A Signing time: Tue 04 Nov 2025 11:27:14 +0000 Manifest this update: Tue 04 Nov 2025 11:22:14 +0000 Manifest next update: Wed 05 Nov 2025 14:02:14 +0000 Files and hashes: 1: 34352e3137352e3234342e302f32322d3234203d3e20313938393439.roa (hash: iSOokv3jMzPeBY9ADgHRNBxwlvxvdXV1IcX7gZrelOU=) 2: 88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl (hash: KPRWwshf0cLMsLrbcDjSQxD8Hn+q8MLa3g3rA15VbOI=) 3: 34352e3137352e3234342e302f32322d3332203d3e20323638393233.roa (hash: Qdy1QzKRsq9JYXWTrNZjwInIzn0toipLNQD8MA3MD+g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 14:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c3:a5:80:aa:f1:82:56:31:72:b1:2a:90:a2:17:bf:27:39:cb:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A Validity Not Before: Nov 4 11:22:14 2025 GMT Not After : Nov 5 14:02:14 2025 GMT Subject: CN=CA7BE69A5A98A5AA8DE6A35EF09C76622FC45523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:05:3c:f7:ab:94:dd:42:0f:dd:c3:5c:da:de: 46:01:a2:39:46:48:ca:00:da:b5:5b:f3:5c:5f:ed: 38:29:22:e3:00:49:98:e8:75:d3:20:c7:0b:5b:4b: 7e:c3:a5:72:49:9c:51:1c:2f:28:9f:af:15:ad:38: f1:69:55:a2:74:7a:a6:43:67:46:c0:f4:f1:58:69: fd:3d:63:55:0b:04:23:f9:9b:ee:5d:84:70:1c:d1: d3:23:47:f1:96:22:0f:e0:c0:6c:ad:8f:06:25:49: 1f:63:bb:a0:02:7a:e8:19:a6:84:4b:fd:82:9c:a7: 44:8e:d3:18:50:71:04:f7:0e:29:17:b0:fe:79:ab: 66:a8:f0:32:9d:07:b3:42:21:6b:bb:bb:9e:0a:4f: 33:51:6f:74:7a:34:3e:e3:b6:56:29:9d:d8:aa:7b: 65:33:6e:71:bb:67:bc:39:1e:0f:9e:1d:80:0b:cb: 6a:56:40:2b:07:00:53:e9:af:b4:68:38:3c:d1:8e: 56:9c:0b:28:81:04:01:3c:5b:b8:6e:f9:f3:96:2c: 33:fa:1f:91:05:02:02:40:ef:6f:fd:72:94:b6:85: 78:39:58:13:8a:64:6f:dc:34:3f:c2:6c:e4:0b:0b: cf:a9:89:7f:5e:7f:77:1e:4e:9c:da:67:e8:50:ad: 6d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7B:E6:9A:5A:98:A5:AA:8D:E6:A3:5E:F0:9C:76:62:2F:C4:55:23 X509v3 Authority Key Identifier: keyid:88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:29:64:3b:eb:2e:32:7e:13:0b:b3:a2:d2:25:08:e6:f9:4c: df:3f:e5:2e:e1:6b:20:98:7f:0d:92:f4:1a:76:46:4a:12:cc: d8:74:9a:5b:be:97:6c:0c:63:87:db:eb:a1:bf:0c:30:2b:bc: c6:aa:1c:47:e4:45:27:aa:ac:9a:a5:e0:1a:29:90:91:a6:1f: ad:a3:7b:2f:92:8b:7b:8a:12:97:8b:f3:0c:79:45:b7:f5:3e: 38:73:5e:ee:84:3e:e3:c9:37:91:13:03:11:9b:85:1b:0d:18: 8a:07:be:8f:aa:fa:a9:2f:04:38:5d:d0:46:19:c4:4a:56:fa: 80:4f:ff:08:e6:78:91:b2:12:f2:9c:ff:4a:62:6c:1b:48:4a: 89:21:cc:cf:7e:83:85:b9:0f:ec:ca:8d:6b:40:3d:cc:d3:bf: e4:51:8f:8a:b9:49:96:83:53:58:89:7f:67:41:00:b2:09:40: 07:2a:e5:64:85:4e:e3:62:cd:8e:da:8c:93:66:e2:4b:13:01: c4:ff:91:92:6e:74:66:3e:d9:0d:00:4c:1a:88:b1:e5:da:74: 29:97:cb:24:a1:5a:b3:17:e7:4f:89:eb:b1:38:91:79:4c:87: 5c:62:44:5c:de:c0:da:9d:13:80:5d:e2:75:25:09:20:3c:81: 33:15:88:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHMOlgKrxglYxcrEqkKIXvyc5y8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhEMUIyMDdENUFBOTcyODE3MzIwNEE4RENFQjhBQTZF NDVCQkMwQTAeFw0yNTExMDQxMTIyMTRaFw0yNTExMDUxNDAyMTRaMDMxMTAvBgNV BAMTKENBN0JFNjlBNUE5OEE1QUE4REU2QTM1RUYwOUM3NjYyMkZDNDU1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/BTz3q5TdQg/dw1za3kYBojlG SMoA2rVb81xf7TgpIuMASZjoddMgxwtbS37DpXJJnFEcLyifrxWtOPFpVaJ0eqZD Z0bA9PFYaf09Y1ULBCP5m+5dhHAc0dMjR/GWIg/gwGytjwYlSR9ju6ACeugZpoRL /YKcp0SO0xhQcQT3DikXsP55q2ao8DKdB7NCIWu7u54KTzNRb3R6ND7jtlYpndiq e2UzbnG7Z7w5Hg+eHYALy2pWQCsHAFPpr7RoODzRjlacCyiBBAE8W7hu+fOWLDP6 H5EFAgJA72/9cpS2hXg5WBOKZG/cND/CbOQLC8+piX9ef3ceTpzaZ+hQrW2TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUynvmmlqYpaqN5qNe8Jx2Yi/EVSMwHwYDVR0j BBgwFoAUiNGyB9WqlygXMgSo3OuKpuRbvAowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5nd1ZHcm9ma1V6enE1aTY2a1M3bXhwaW04ZmM4SGNxRWZRNkxubktl eFEvMC84OEQxQjIwN0Q1QUE5NzI4MTczMjA0QThEQ0VCOEFBNkU0NUJCQzBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4RDFCMjA3RDVBQTk3Mjgx NzMyMDRBOERDRUI4QUE2RTQ1QkJDMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OG5nd1ZHcm9ma1V6enE1aTY2a1M3bXhwaW04ZmM4SGNxRWZRNkxubktleFEvMC84 OEQxQjIwN0Q1QUE5NzI4MTczMjA0QThEQ0VCOEFBNkU0NUJCQzBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgSlkO+suMn4TC7Oi0iUI5vlM3z/lLuFrIJh/DZL0GnZGShLM2HSaW76XbAxj h9vrob8MMCu8xqocR+RFJ6qsmqXgGimQkaYfraN7L5KLe4oSl4vzDHlFt/U+OHNe 7oQ+48k3kRMDEZuFGw0Yige+j6r6qS8EOF3QRhnESlb6gE//COZ4kbIS8pz/SmJs G0hKiSHMz36DhbkP7MqNa0A9zNO/5FGPirlJloNTWIl/Z0EAsglAByrlZIVO42LN jtqMk2biSxMBxP+Rkm50Zj7ZDQBMGoix5dp0KZfLJKFasxfnT4nrsTiReUyHXGJE XN7A2p0TgF3idSUJIDyBMxWIAQ== -----END CERTIFICATE-----Generated at Wed Nov 5 03:37:46 2025 by rpki-client