$ rpki-client -vvf rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.mft File: 8544A9CC4138899210F47B6BBCDAD75CB97A5C52.mft (raw, json) Hash identifier: 0HfvsOvQv1DXnya1gI3ZhYQA/vbGTetcl8ZlwMPiFZs= Subject key identifier: DF:55:E3:18:8B:5E:CB:27:E1:F3:67:44:D6:44:F7:B9:83:32:1B:8A Authority key identifier: 85:44:A9:CC:41:38:89:92:10:F4:7B:6B:BC:DA:D7:5C:B9:7A:5C:52 Certificate issuer: /CN=8544A9CC4138899210F47B6BBCDAD75CB97A5C52 Certificate serial: 2EBAF7729FE6C6D7117410CB5E3E3BB40E527FB8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.cer Subject info access: rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.mft Manifest number: 02B6 Signing time: Tue 04 Nov 2025 17:18:28 +0000 Manifest this update: Tue 04 Nov 2025 17:13:28 +0000 Manifest next update: Wed 05 Nov 2025 18:42:28 +0000 Files and hashes: 1: 34352e3138332e3232382e302f32322d3234203d3e20323639323933.roa (hash: Y23ZIbI4Vi75rkjsjaf47hCGA+dE/+4AajDHVcFKg/g=) 2: 8544A9CC4138899210F47B6BBCDAD75CB97A5C52.crl (hash: fFmEAThFIzAWW64LGSFEMCNVYmbaBz1asmbCtEXRZn8=) 3: 323830343a363236303a3a2f33322d3438203d3e20323639323933.roa (hash: /XxPLVlxlhorb57ETNwYhEdJb2sRyamQK9/a2hcnEms=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.crl rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 18:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ba:f7:72:9f:e6:c6:d7:11:74:10:cb:5e:3e:3b:b4:0e:52:7f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8544A9CC4138899210F47B6BBCDAD75CB97A5C52 Validity Not Before: Nov 4 17:13:28 2025 GMT Not After : Nov 5 18:42:28 2025 GMT Subject: CN=DF55E3188B5ECB27E1F36744D644F7B983321B8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:c1:03:d6:38:82:d1:7b:f7:05:27:d9:89: 66:60:a7:70:d1:4e:e2:85:e5:b1:e2:7e:1d:86:f6: df:77:04:6f:2e:67:62:ac:e8:f7:d5:5a:66:ff:31: f9:31:1f:7f:e9:b6:0a:0b:7e:37:1b:fb:9c:03:ff: 99:b8:f6:56:71:81:97:2a:fe:bf:88:82:91:3b:2f: be:f5:a1:ea:6e:95:f1:b0:2a:86:be:12:cc:1b:d5: 8b:20:89:b7:e3:8d:b3:12:a5:45:d6:38:9e:b4:5e: db:d4:29:2d:b2:14:e0:f8:4c:cf:4f:51:c3:b1:42: de:b3:71:01:4b:aa:85:8e:18:c0:a9:d9:1a:0a:4d: 2c:e0:eb:af:dd:b0:6f:4b:be:d3:dd:0e:19:b5:d7: 59:2f:c2:49:4d:c2:a7:fd:fe:80:95:e8:e3:b5:77: 24:5e:7c:63:5d:7a:78:97:1f:48:e3:18:98:39:8d: 8a:05:11:a6:99:8b:5d:d8:b6:54:84:11:74:df:f7: 0c:a6:8a:63:63:b2:48:7a:ca:8b:3d:a8:04:41:84: 70:cc:96:cd:25:80:e8:2b:67:39:93:a1:61:f0:45: 2e:1a:ae:f3:d7:97:fb:4b:bb:37:44:46:5f:4f:ee: 3d:fc:86:4c:63:de:7e:29:49:89:a0:de:75:bf:bc: 4a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:55:E3:18:8B:5E:CB:27:E1:F3:67:44:D6:44:F7:B9:83:32:1B:8A X509v3 Authority Key Identifier: keyid:85:44:A9:CC:41:38:89:92:10:F4:7B:6B:BC:DA:D7:5C:B9:7A:5C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:70:36:3c:bd:91:48:fc:bd:1b:c8:cb:0e:51:42:ed:f4:f7: 07:84:40:ff:22:2c:5e:68:30:f0:ef:6a:14:13:e4:6d:44:98: 2b:d4:4a:66:69:f1:7f:3f:7a:c8:9d:8d:0c:71:41:0b:6a:06: e9:aa:19:82:2f:dc:fe:d6:99:4e:76:72:5c:c8:6e:19:90:db: 6a:75:c9:63:65:dd:c3:80:4a:3e:5c:ee:8c:0c:26:80:6e:3a: e7:b1:1e:36:73:14:87:4b:e3:5b:aa:9a:de:01:ce:97:c5:32: bd:96:ef:01:24:1d:61:9d:d8:48:94:bf:d7:e8:cd:bf:88:55: e5:be:d5:47:39:fb:d7:e3:b9:2a:9e:b5:34:55:e8:81:1a:b5: f2:90:9b:df:6b:51:bf:45:bc:ff:ac:df:d5:9f:96:d7:2a:f7: 30:61:a8:54:a6:78:01:d8:e3:fe:e4:87:1b:6a:c0:bc:a6:13: 87:e0:d6:74:bf:58:e9:f1:7e:d7:f4:c4:97:86:f7:7e:cc:55: 51:b4:69:87:97:15:b5:0a:1f:86:48:dd:71:97:1a:fb:40:a9: c0:46:41:83:9e:0f:31:1e:8a:0f:b1:a6:77:b1:a6:bf:3b:5f: ba:1d:59:76:02:ad:d5:1f:40:ec:63:39:01:73:c8:99:8b:39: f2:97:a5:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULrr3cp/mxtcRdBDLXj47tA5Sf7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU0NEE5Q0M0MTM4ODk5MjEwRjQ3QjZCQkNEQUQ3NUNC OTdBNUM1MjAeFw0yNTExMDQxNzEzMjhaFw0yNTExMDUxODQyMjhaMDMxMTAvBgNV BAMTKERGNTVFMzE4OEI1RUNCMjdFMUYzNjc0NEQ2NDRGN0I5ODMzMjFCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSnsED1jiC0Xv3BSfZiWZgp3DR TuKF5bHifh2G9t93BG8uZ2Ks6PfVWmb/MfkxH3/ptgoLfjcb+5wD/5m49lZxgZcq /r+IgpE7L771oepulfGwKoa+Eswb1YsgibfjjbMSpUXWOJ60XtvUKS2yFOD4TM9P UcOxQt6zcQFLqoWOGMCp2RoKTSzg66/dsG9LvtPdDhm111kvwklNwqf9/oCV6OO1 dyRefGNdeniXH0jjGJg5jYoFEaaZi13YtlSEEXTf9wymimNjskh6yos9qARBhHDM ls0lgOgrZzmToWHwRS4arvPXl/tLuzdERl9P7j38hkxj3n4pSYmg3nW/vEq3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU31XjGIteyyfh82dE1kT3uYMyG4owHwYDVR0j BBgwFoAUhUSpzEE4iZIQ9HtrvNrXXLl6XFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVBDY3FmMXFNalUxN3VtOFR2ckZobXBGZDhIREs5UTM3OGFHQW1aZThl VFkvMC84NTQ0QTlDQzQxMzg4OTkyMTBGNDdCNkJCQ0RBRDc1Q0I5N0E1QzUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1NDRBOUNDNDEzODg5OTIx MEY0N0I2QkJDREFENzVDQjk3QTVDNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVBDY3FmMXFNalUxN3VtOFR2ckZobXBGZDhIREs5UTM3OGFHQW1aZThlVFkvMC84 NTQ0QTlDQzQxMzg4OTkyMTBGNDdCNkJCQ0RBRDc1Q0I5N0E1QzUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhHA2PL2RSPy9G8jLDlFC7fT3B4RA/yIsXmgw8O9qFBPkbUSYK9RKZmnxfz96 yJ2NDHFBC2oG6aoZgi/c/taZTnZyXMhuGZDbanXJY2Xdw4BKPlzujAwmgG4657Ee NnMUh0vjW6qa3gHOl8UyvZbvASQdYZ3YSJS/1+jNv4hV5b7VRzn71+O5Kp61NFXo gRq18pCb32tRv0W8/6zf1Z+W1yr3MGGoVKZ4Adjj/uSHG2rAvKYTh+DWdL9Y6fF+ 1/TEl4b3fsxVUbRph5cVtQofhkjdcZca+0CpwEZBg54PMR6KD7Gmd7Gmvztfuh1Z dgKt1R9A7GM5AXPImYs58pelwA== -----END CERTIFICATE-----Generated at Wed Nov 5 11:46:57 2025 by rpki-client