$ rpki-client -vvf rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft File: 8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft (raw, json) Hash identifier: bM2zTzC5oThcO6SAuQBTS2wUdnI0yxDCOmXQsS9X0T8= Subject key identifier: 7B:E8:3C:12:3C:30:41:B2:8A:66:8A:08:05:36:62:7B:A6:DC:88:82 Authority key identifier: 8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F Certificate issuer: /CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F Certificate serial: 217E4790C4E30017FCD1DE78CE5F988848B17106 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer Subject info access: rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft Manifest number: E5 Signing time: Wed 05 Nov 2025 06:25:19 +0000 Manifest this update: Wed 05 Nov 2025 06:20:19 +0000 Manifest next update: Thu 06 Nov 2025 07:46:19 +0000 Files and hashes: 1: 3137302e3233382e3234382e302f32322d3332203d3e20323633393539.roa (hash: 9vkM44Why6sGQcMypDT8T8Q9VtBz4wbE97cshJxXhpQ=) 2: 323830343a323836303a3a2f33322d313238203d3e20323633393539.roa (hash: oVXD5VaDUqeD9Go0IkrJ158heEh4rOl0USTusw94FRI=) 3: 8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl (hash: ETYaXZnsYVg7e8om1YICxsf5e6LXq2dyNeZ3Ew+OmeY=) 4: 3133382e3235352e37322e302f32322d3332203d3e20323633393539.roa (hash: waEFhBe+SjRSqQswDzUJGqZm7m+XO9yIfZZm4YTlyYw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:7e:47:90:c4:e3:00:17:fc:d1:de:78:ce:5f:98:88:48:b1:71:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F Validity Not Before: Nov 5 06:20:19 2025 GMT Not After : Nov 6 07:46:19 2025 GMT Subject: CN=7BE83C123C3041B28A668A080536627BA6DC8882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:db:f7:d4:20:be:d4:1b:54:8e:d4:88:20:f9: 8c:01:d9:8b:53:c7:b5:b8:dc:8b:bc:48:53:5c:2b: b4:a7:19:e1:b6:de:3d:95:05:e5:b7:57:9e:b2:06: 5b:13:81:9c:af:bd:26:25:f9:9a:8f:74:60:e6:4a: 09:bb:2b:38:51:36:5e:6f:1a:b3:d6:aa:df:ba:9f: 2f:76:a9:27:39:47:3b:90:a1:ef:08:ac:3c:df:af: c7:4b:5d:d9:51:85:b7:3d:de:9b:73:04:5b:82:c4: a0:8b:5b:85:37:4f:ce:62:26:6b:3a:61:2f:e2:d4: 47:39:d8:b3:60:b2:bf:27:f5:52:ff:41:31:91:c1: 6f:6c:47:16:df:19:e7:88:24:49:38:0b:5c:32:e4: b9:8b:b5:98:c2:1d:e2:17:ab:f7:d3:d4:17:2b:b2: 1e:96:1d:9f:1c:c6:e4:37:fb:de:0c:da:4c:4c:30: 43:0b:3d:49:21:dd:87:14:4f:7a:f1:b4:5a:82:e1: 75:38:24:62:0e:1f:ff:2e:f8:03:2a:4a:58:90:81: 16:b2:83:db:ff:e4:94:2c:b2:1f:f0:99:b2:da:02: 1c:91:6f:62:64:ce:db:03:15:c7:80:18:99:7a:11: 1d:13:3a:2d:8d:3f:f5:7c:b6:d4:91:40:40:7d:c2: e3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E8:3C:12:3C:30:41:B2:8A:66:8A:08:05:36:62:7B:A6:DC:88:82 X509v3 Authority Key Identifier: keyid:8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:81:74:b0:7e:73:60:16:e3:c1:6f:6b:10:0d:f9:db:76:60: 72:89:d3:d2:87:20:0a:4e:2b:8d:53:8b:f9:e4:a8:f1:62:4b: ce:9f:c7:66:06:0c:42:f2:b5:dc:aa:14:e2:ee:e9:71:ea:a4: 25:de:91:d8:4b:16:5d:b2:36:be:30:b8:c5:28:82:df:42:06: 59:06:6e:2b:3b:68:1c:be:ef:55:f7:c2:43:bf:ed:95:35:dc: 76:0d:3f:3b:4b:9f:ee:e2:f5:8a:45:e2:6f:65:cd:3e:77:a8: 52:12:1e:a7:f9:12:fb:81:b2:49:fd:9b:a4:60:c2:5a:bc:29: 21:79:9b:95:f0:6e:02:be:a2:19:c9:5a:80:4d:5a:97:98:27: e5:88:63:8b:f6:4e:08:17:c0:47:e2:ee:47:56:55:bd:dc:3b: 82:0c:b3:3f:11:3b:da:ba:02:da:2f:2c:63:85:1e:6d:eb:7f: 7e:2a:be:18:e2:e8:28:a1:08:d1:7f:70:04:67:12:11:d2:b3: 14:fd:79:4e:f7:54:a1:a0:71:2f:fd:a6:c5:fd:4c:ec:08:4d: 70:3b:ad:b9:9d:76:85:e2:25:c3:0d:81:c0:a8:e9:f5:3d:59: 90:36:22:73:34:da:bb:f4:3c:0a:58:8d:06:73:38:ef:a0:9f: 07:b8:7d:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIX5HkMTjABf80d54zl+YiEixcQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCNUEyNTE2RjcxM0NGRkU5RDE1MDRFNzlBNEJEM0I5 QUZCMEEwRjAeFw0yNTExMDUwNjIwMTlaFw0yNTExMDYwNzQ2MTlaMDMxMTAvBgNV BAMTKDdCRTgzQzEyM0MzMDQxQjI4QTY2OEEwODA1MzY2MjdCQTZEQzg4ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2/fUIL7UG1SO1Igg+YwB2YtT x7W43Iu8SFNcK7SnGeG23j2VBeW3V56yBlsTgZyvvSYl+ZqPdGDmSgm7KzhRNl5v GrPWqt+6ny92qSc5RzuQoe8IrDzfr8dLXdlRhbc93ptzBFuCxKCLW4U3T85iJms6 YS/i1Ec52LNgsr8n9VL/QTGRwW9sRxbfGeeIJEk4C1wy5LmLtZjCHeIXq/fT1Bcr sh6WHZ8cxuQ3+94M2kxMMEMLPUkh3YcUT3rxtFqC4XU4JGIOH/8u+AMqSliQgRay g9v/5JQssh/wmbLaAhyRb2JkztsDFceAGJl6ER0TOi2NP/V8ttSRQEB9wuORAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUe+g8EjwwQbKKZooIBTZie6bciIIwHwYDVR0j BBgwFoAUjLWiUW9xPP/p0VBOeaS9O5r7Cg8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVhGemVkeXJZTExBSG1YQmFmSzdDSzNqcHRNb2ZvN0gxbVNDV1FQUjVN YUMvMC84Q0I1QTI1MTZGNzEzQ0ZGRTlEMTUwNEU3OUE0QkQzQjlBRkIwQTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQjVBMjUxNkY3MTNDRkZF OUQxNTA0RTc5QTRCRDNCOUFGQjBBMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVhGemVkeXJZTExBSG1YQmFmSzdDSzNqcHRNb2ZvN0gxbVNDV1FQUjVNYUMvMC84 Q0I1QTI1MTZGNzEzQ0ZGRTlEMTUwNEU3OUE0QkQzQjlBRkIwQTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADoF0sH5zYBbjwW9rEA3523ZgconT0ocgCk4rjVOL+eSo8WJLzp/HZgYMQvK1 3KoU4u7pceqkJd6R2EsWXbI2vjC4xSiC30IGWQZuKztoHL7vVffCQ7/tlTXcdg0/ O0uf7uL1ikXib2XNPneoUhIep/kS+4GySf2bpGDCWrwpIXmblfBuAr6iGclagE1a l5gn5Yhji/ZOCBfAR+LuR1ZVvdw7ggyzPxE72roC2i8sY4Uebet/fiq+GOLoKKEI 0X9wBGcSEdKzFP15TvdUoaBxL/2mxf1M7AhNcDutuZ12heIlww2BwKjp9T1ZkDYi czTau/Q8CliNBnM476CfB7h9bA== -----END CERTIFICATE-----Generated at Wed Nov 5 21:27:36 2025 by rpki-client