$ rpki-client -vvf rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.mft File: 589266404FC4F49C44EDD95659918140330CBF03.mft (raw, json) Hash identifier: q0AgOa76sAKyGN/ITd3ghv7RyxNtwRHGh/CHBGSHFGk= Subject key identifier: D8:89:54:14:5A:B0:3D:91:55:8A:69:47:72:73:24:19:A5:8A:36:5E Authority key identifier: 58:92:66:40:4F:C4:F4:9C:44:ED:D9:56:59:91:81:40:33:0C:BF:03 Certificate issuer: /CN=589266404FC4F49C44EDD95659918140330CBF03 Certificate serial: 425711252D879CEAAAE63996784E90CC473BD20B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/589266404FC4F49C44EDD95659918140330CBF03.cer Subject info access: rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.mft Manifest number: 0159 Signing time: Wed 05 Nov 2025 07:49:33 +0000 Manifest this update: Wed 05 Nov 2025 07:44:33 +0000 Manifest next update: Thu 06 Nov 2025 09:10:33 +0000 Files and hashes: 1: 323830343a383261633a3a2f33322d3333203d3e20323732353333.roa (hash: aqW4fbZ2Swsr8gyeE1ICG/UZJuYSvpkYXFf5rpVyKeA=) 2: 589266404FC4F49C44EDD95659918140330CBF03.crl (hash: Kb45DASsZqtQSumAqrNvfB0kdEBuZCmwMwYXc4rCV+o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.crl rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/589266404FC4F49C44EDD95659918140330CBF03.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:57:11:25:2d:87:9c:ea:aa:e6:39:96:78:4e:90:cc:47:3b:d2:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589266404FC4F49C44EDD95659918140330CBF03 Validity Not Before: Nov 5 07:44:33 2025 GMT Not After : Nov 6 09:10:33 2025 GMT Subject: CN=D88954145AB03D91558A694772732419A58A365E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e7:33:3d:24:0b:92:b1:4a:cf:41:d6:18:38: fa:96:06:0b:e0:7a:79:70:fe:06:91:e7:75:43:0f: 23:cb:d7:aa:06:e7:73:55:00:c8:55:a9:51:41:ed: fd:5b:12:b6:ae:55:6c:5b:47:76:0e:4d:31:e2:da: 94:9e:80:ba:6a:96:64:3a:ca:a7:5a:be:e7:3e:70: d6:5c:b8:bf:d9:42:27:41:11:ea:9c:1d:08:08:c7: ad:47:c5:6a:7e:ca:27:65:b3:2e:cd:c6:51:76:8c: db:11:2d:5f:25:0b:e6:d8:33:45:49:f5:b4:c8:b5: cd:95:85:fa:5c:a3:ee:b7:f0:28:32:ff:d8:16:a6: 2c:71:f9:bf:77:f5:65:cb:40:5a:7a:e4:6c:74:d6: e5:37:41:78:9c:0a:c4:0e:bf:5b:73:68:48:31:08: c3:57:13:67:12:88:13:7b:c6:2a:1b:87:6e:2c:ec: d5:36:bd:9f:cd:8c:5c:48:2d:08:84:ae:88:28:2c: 19:e8:5c:4c:9a:ce:0a:f4:37:4a:40:a4:27:23:95: 93:54:fa:6a:a5:84:f6:71:2d:e2:8a:37:56:73:c5: 64:1f:6c:e7:fb:ce:b1:1a:e0:b7:bb:5e:79:2d:3f: 60:43:cc:ef:a4:a4:39:13:02:f1:e3:51:28:8f:6d: e2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:89:54:14:5A:B0:3D:91:55:8A:69:47:72:73:24:19:A5:8A:36:5E X509v3 Authority Key Identifier: keyid:58:92:66:40:4F:C4:F4:9C:44:ED:D9:56:59:91:81:40:33:0C:BF:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/589266404FC4F49C44EDD95659918140330CBF03.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:88:3c:e4:99:02:df:1a:6f:22:b4:b5:96:6d:d7:e1:a4:9e: dc:26:cb:05:e3:0c:63:6d:d9:8e:ac:0f:f4:a2:34:50:fb:a5: 3a:00:37:f7:45:fb:03:fe:3d:8b:c7:7b:f3:0a:dd:ac:39:ec: 36:1e:f3:f7:cd:8d:48:c1:eb:4e:4b:73:49:21:a5:10:c5:70: 6f:d8:e6:e0:2f:81:aa:18:5a:a2:f8:7b:eb:99:55:98:c0:b5: b6:81:02:5b:c8:e9:8e:6a:e3:d1:e2:92:55:a9:7c:32:40:30: e2:89:0c:63:02:ba:74:3b:2f:05:77:68:f1:e4:45:4e:a3:32: 89:75:23:23:cc:d5:80:50:37:2e:20:5d:b5:ef:14:9d:38:2f: 57:f7:3b:5d:36:3c:78:1b:9d:e0:18:23:e5:d7:4a:b9:1c:78: 27:32:39:e6:07:b8:86:c3:58:90:a6:a4:66:7e:73:30:8a:cd: 68:52:50:ff:14:f7:eb:18:b3:7a:93:59:42:6f:79:fc:a7:97: fd:73:db:6c:34:1e:f0:f3:c8:a6:6d:48:73:72:c7:45:5a:05: 50:f2:96:e3:74:ba:48:34:5e:4a:75:a8:bd:f5:ea:42:94:c8: 93:30:61:70:f7:58:59:95:ed:bb:05:df:db:b1:a7:a4:cc:5d: 8e:0b:1f:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQlcRJS2HnOqq5jmWeE6QzEc70gswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg5MjY2NDA0RkM0RjQ5QzQ0RUREOTU2NTk5MTgxNDAz MzBDQkYwMzAeFw0yNTExMDUwNzQ0MzNaFw0yNTExMDYwOTEwMzNaMDMxMTAvBgNV BAMTKEQ4ODk1NDE0NUFCMDNEOTE1NThBNjk0NzcyNzMyNDE5QTU4QTM2NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl5zM9JAuSsUrPQdYYOPqWBgvg enlw/gaR53VDDyPL16oG53NVAMhVqVFB7f1bErauVWxbR3YOTTHi2pSegLpqlmQ6 yqdavuc+cNZcuL/ZQidBEeqcHQgIx61HxWp+yidlsy7NxlF2jNsRLV8lC+bYM0VJ 9bTItc2Vhfpco+638Cgy/9gWpixx+b939WXLQFp65Gx01uU3QXicCsQOv1tzaEgx CMNXE2cSiBN7xiobh24s7NU2vZ/NjFxILQiErogoLBnoXEyazgr0N0pApCcjlZNU +mqlhPZxLeKKN1ZzxWQfbOf7zrEa4Le7XnktP2BDzO+kpDkTAvHjUSiPbeJBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2IlUFFqwPZFVimlHcnMkGaWKNl4wHwYDVR0j BBgwFoAUWJJmQE/E9JxE7dlWWZGBQDMMvwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHZiek1ZMWppTEVVZDJ6Z0hzSjVCUHVWc2lQd3pvb0VGSnpqMllIMVkz VHEvMC81ODkyNjY0MDRGQzRGNDlDNDRFREQ5NTY1OTkxODE0MDMzMENCRjAzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4OTI2NjQwNEZDNEY0OUM0 NEVERDk1NjU5OTE4MTQwMzMwQ0JGMDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHZiek1ZMWppTEVVZDJ6Z0hzSjVCUHVWc2lQd3pvb0VGSnpqMllIMVkzVHEvMC81 ODkyNjY0MDRGQzRGNDlDNDRFREQ5NTY1OTkxODE0MDMzMENCRjAzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY4g85JkC3xpvIrS1lm3X4aSe3CbLBeMMY23ZjqwP9KI0UPulOgA390X7A/49 i8d78wrdrDnsNh7z982NSMHrTktzSSGlEMVwb9jm4C+Bqhhaovh765lVmMC1toEC W8jpjmrj0eKSVal8MkAw4okMYwK6dDsvBXdo8eRFTqMyiXUjI8zVgFA3LiBdte8U nTgvV/c7XTY8eBud4Bgj5ddKuRx4JzI55ge4hsNYkKakZn5zMIrNaFJQ/xT36xiz epNZQm95/KeX/XPbbDQe8PPIpm1Ic3LHRVoFUPKW43S6SDReSnWovfXqQpTIkzBh cPdYWZXtuwXf27GnpMxdjgsf0w== -----END CERTIFICATE-----Generated at Wed Nov 5 13:15:11 2025 by rpki-client