$ rpki-client -vvf rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft File: 8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft (raw, json) Hash identifier: oDndTdszfI0ZythmTQUi0S4fIcbaDzuGmEgvhrUggp0= Subject key identifier: 7F:CF:11:0D:F2:92:C7:08:38:E8:E0:26:12:3D:79:22:52:92:FF:59 Authority key identifier: 8A:F0:30:45:F9:CB:7B:61:29:FF:D8:D6:A2:4F:2E:9E:06:72:D1:00 Certificate issuer: /CN=8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100 Certificate serial: 7453AC859461AF1353DB847FE1EE411E4273018D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer Subject info access: rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft Manifest number: 8D Signing time: Tue 04 Nov 2025 23:01:38 +0000 Manifest this update: Tue 04 Nov 2025 22:56:38 +0000 Manifest next update: Thu 06 Nov 2025 03:00:38 +0000 Files and hashes: 1: 8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.crl (hash: 1VNgu0/G3nRKK3Pu8GtehbkfJADIa5Qt0Eaf02w8dV4=) 2: 3138312e3233322e3137362e302f32322d3234203d3e20323731353136.roa (hash: +mkXeaWBvETVR9EqVxiUxNimAV0s2kSfzpDbh9PMIJU=) 3: 3139312e3234322e34342e302f32322d3234203d3e20323731353136.roa (hash: C5MjkKI8WR8yW/gmqOUvb7uzWMbYZ7XJCuts3sWaP28=) 4: 3139312e3234322e34322e302f32332d3234203d3e20323731353136.roa (hash: GWBpEjifIF3zr0IPEjZ4U9RGMhXuCxOIRrwP6DNm48E=) 5: 323830343a376363303a3a2f33322d3438203d3e20323731353136.roa (hash: Y/bFQxEmatak+WdOEDmNCXV81gJbtzwfxCaukWu+JC8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.crl rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:53:ac:85:94:61:af:13:53:db:84:7f:e1:ee:41:1e:42:73:01:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100 Validity Not Before: Nov 4 22:56:38 2025 GMT Not After : Nov 6 03:00:38 2025 GMT Subject: CN=7FCF110DF292C70838E8E026123D79225292FF59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9d:03:57:52:1b:18:83:ab:14:b0:48:0c:76: 50:62:90:3f:dd:a1:cc:08:15:ea:c2:be:79:8b:88: 05:88:86:71:21:65:23:aa:58:23:6b:94:3d:af:98: e1:bf:be:08:b9:f7:04:97:4d:83:85:ee:45:e9:42: a7:db:65:b6:e6:29:0a:d9:d0:e7:ff:70:0e:c5:a2: f9:6e:31:7a:5c:f8:69:0c:c8:fc:c6:6f:28:5a:c8: 47:b1:67:1c:85:a9:ef:fc:f7:34:30:43:36:a8:f9: e1:4e:bd:8e:95:c5:a3:be:ed:2a:0a:71:98:73:b9: fe:9c:36:67:da:58:32:f8:41:3a:3e:e2:2c:0c:f0: c7:ac:48:94:ea:7a:ed:bc:c4:41:a1:e4:10:bc:9c: eb:d9:3d:02:02:1e:1d:6a:75:03:1c:dc:e7:5b:aa: e8:df:ef:29:25:1d:d9:d2:1b:92:b2:7f:be:34:90: d8:66:73:05:24:66:2a:9e:9e:53:21:f4:9c:71:7d: 75:23:a8:ee:83:28:9b:70:d6:b7:89:55:f1:76:e7: d0:d9:63:ad:02:d5:de:ba:6f:d4:7b:be:db:df:a8: e1:d1:58:65:21:a1:b7:db:71:56:69:6e:6e:6a:7b: 5c:51:b9:11:27:a1:cc:41:a0:db:cc:fe:28:74:ef: 24:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CF:11:0D:F2:92:C7:08:38:E8:E0:26:12:3D:79:22:52:92:FF:59 X509v3 Authority Key Identifier: keyid:8A:F0:30:45:F9:CB:7B:61:29:FF:D8:D6:A2:4F:2E:9E:06:72:D1:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:99:9c:ab:5a:dd:ed:af:73:fa:1e:1f:29:91:0a:cf:89:40: 65:70:d7:46:6f:10:bd:53:d8:03:16:96:78:07:de:20:59:c4: 6a:b5:26:47:69:15:1e:6c:35:80:2a:3d:b4:ed:df:eb:a7:d4: 9a:20:57:ce:1c:b9:d6:98:4e:01:45:4e:79:85:37:6c:78:63: eb:0f:9e:cd:cc:fa:61:05:76:3e:6f:b2:05:c7:a8:20:3c:6c: a4:51:3e:c3:88:5d:5b:72:7d:5e:3b:ea:7a:65:12:47:f4:2b: f6:53:69:6a:97:8a:3a:3e:c9:1b:b5:17:78:1f:93:7a:a4:77: 47:e9:27:bb:f7:55:13:6b:b9:17:f0:db:6e:56:2f:3d:34:d8: 50:ab:92:27:78:82:5c:3e:e0:d8:a5:44:8e:8c:10:ca:d4:e9: 91:3f:4b:9e:6b:c7:d3:4b:5d:19:74:ed:f6:8d:3c:ac:e2:5b: 42:80:94:83:fc:ec:bf:ce:14:45:d2:1a:dc:af:83:ad:49:b4: 32:53:cd:0c:e0:a5:19:02:06:ac:7f:a4:a0:a6:6a:0f:2e:48: b6:d8:78:dd:6f:94:2b:38:22:a7:b2:5d:df:ec:30:36:ad:a8: 0e:66:e1:4f:a6:ce:e3:b1:a4:4c:5d:d9:cf:4a:86:02:dc:0d: f7:40:c4:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdFOshZRhrxNT24R/4e5BHkJzAY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMDMwNDVGOUNCN0I2MTI5RkZEOEQ2QTI0RjJFOUUw NjcyRDEwMDAeFw0yNTExMDQyMjU2MzhaFw0yNTExMDYwMzAwMzhaMDMxMTAvBgNV BAMTKDdGQ0YxMTBERjI5MkM3MDgzOEU4RTAyNjEyM0Q3OTIyNTI5MkZGNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChnQNXUhsYg6sUsEgMdlBikD/d ocwIFerCvnmLiAWIhnEhZSOqWCNrlD2vmOG/vgi59wSXTYOF7kXpQqfbZbbmKQrZ 0Of/cA7FovluMXpc+GkMyPzGbyhayEexZxyFqe/89zQwQzao+eFOvY6VxaO+7SoK cZhzuf6cNmfaWDL4QTo+4iwM8MesSJTqeu28xEGh5BC8nOvZPQICHh1qdQMc3Odb qujf7yklHdnSG5Kyf740kNhmcwUkZiqenlMh9JxxfXUjqO6DKJtw1reJVfF259DZ Y60C1d66b9R7vtvfqOHRWGUhobfbcVZpbm5qe1xRuREnocxBoNvM/ih07yRfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUf88RDfKSxwg46OAmEj15IlKS/1kwHwYDVR0j BBgwFoAUivAwRfnLe2Ep/9jWok8ungZy0QAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWtKcm9ZUFpyakJZdXJrQjFMSzhESk5NQmtKMlJodDZUdG5SY1R4a3Rx bmIvMC84QUYwMzA0NUY5Q0I3QjYxMjlGRkQ4RDZBMjRGMkU5RTA2NzJEMTAwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBRjAzMDQ1RjlDQjdCNjEy OUZGRDhENkEyNEYyRTlFMDY3MkQxMDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWtKcm9ZUFpyakJZdXJrQjFMSzhESk5NQmtKMlJodDZUdG5SY1R4a3RxbmIvMC84 QUYwMzA0NUY5Q0I3QjYxMjlGRkQ4RDZBMjRGMkU5RTA2NzJEMTAwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKpmcq1rd7a9z+h4fKZEKz4lAZXDXRm8QvVPYAxaWeAfeIFnEarUmR2kVHmw1 gCo9tO3f66fUmiBXzhy51phOAUVOeYU3bHhj6w+ezcz6YQV2Pm+yBceoIDxspFE+ w4hdW3J9XjvqemUSR/Qr9lNpapeKOj7JG7UXeB+TeqR3R+knu/dVE2u5F/DbblYv PTTYUKuSJ3iCXD7g2KVEjowQytTpkT9LnmvH00tdGXTt9o08rOJbQoCUg/zsv84U RdIa3K+DrUm0MlPNDOClGQIGrH+koKZqDy5Itth43W+UKzgip7Jd3+wwNq2oDmbh T6bO47GkTF3Zz0qGAtwN90DEPg== -----END CERTIFICATE-----Generated at Wed Nov 5 19:26:55 2025 by rpki-client