$ rpki-client -vvf rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft File: 8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft (raw, json) Hash identifier: Iaz5pBvtGM6NN2WlvtiO1/SENzlTtJ8VvnsZxOdSWTs= Subject key identifier: 00:6D:96:76:BA:0A:A6:84:F3:2D:72:D8:11:97:FC:21:20:4D:3B:79 Authority key identifier: 8A:E3:3D:76:F6:C9:FC:9D:0B:0F:F7:F5:54:C3:51:92:71:D1:C8:38 Certificate issuer: /CN=8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838 Certificate serial: 622BAF64FFACEDE86310E6B0C35B07E86D76AD8F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft Manifest number: 2D Signing time: Tue 04 Nov 2025 12:59:19 +0000 Manifest this update: Tue 04 Nov 2025 12:54:19 +0000 Manifest next update: Wed 05 Nov 2025 14:50:19 +0000 Files and hashes: 1: 8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.crl (hash: uCkMGq8q6m5DXEm2mbmzsF/5cFx7Xnxol04OV/EdXCs=) 2: 3139302e3130392e39382e302f32342d3234203d3e20323731323232.roa (hash: 4BJu53rKTMN1pl6CAz+q6eWZttl5HIejDJqVkTRBNw8=) 3: 3139302e3130392e39392e302f32342d3234203d3e20323731323232.roa (hash: wHlU3sTFbjAA4O7WdhVkKwAR5dednQvUfHubbR1dvf8=) 4: 3139302e3130392e39362e302f32332d3233203d3e20323731323232.roa (hash: eS5+BzUz/P8gDxELe1obBXuVHdIgN6UEEqiN1aXBrk4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.crl rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:2b:af:64:ff:ac:ed:e8:63:10:e6:b0:c3:5b:07:e8:6d:76:ad:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838 Validity Not Before: Nov 4 12:54:19 2025 GMT Not After : Nov 5 14:50:19 2025 GMT Subject: CN=006D9676BA0AA684F32D72D81197FC21204D3B79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:66:dc:ae:80:a4:dd:ae:38:9d:69:a9:6e:48: 0a:b6:51:f0:d1:16:99:c2:36:3d:76:ae:37:1b:50: 7b:e3:a0:69:e7:78:35:27:4f:f3:f0:fb:db:52:12: 2b:59:20:9f:42:40:db:01:46:8d:2c:96:79:5a:60: db:1d:8c:e6:9c:1d:dd:09:94:ee:20:c6:d5:9d:d8: d2:c7:30:9a:85:b8:34:e8:0a:90:e7:fe:be:20:71: 69:6b:6c:88:93:fa:39:50:a2:f6:3c:38:c7:68:e0: ef:18:5e:7a:46:cd:e9:fa:64:36:18:84:6d:8f:82: 8d:fd:65:71:00:29:37:66:ee:08:6a:e0:73:e6:f0: 35:ea:d0:6e:84:63:65:77:61:34:0d:51:6c:49:92: 42:af:78:25:67:0b:fd:9a:fd:43:f0:e5:a4:6d:c8: 4c:ee:d2:91:15:b6:0d:10:00:ec:48:63:67:88:9f: 8b:fc:91:14:ba:25:7e:87:5b:14:fc:eb:26:03:79: b1:04:dc:87:6e:a3:91:76:5b:bb:f5:6a:cb:2d:15: df:2b:11:e7:51:30:28:fe:78:1b:6a:a1:80:25:e7: e6:76:63:b5:d7:de:b0:98:72:8b:3c:25:28:ae:cc: be:4a:04:dd:22:76:47:59:40:f5:a6:da:28:42:35: f2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6D:96:76:BA:0A:A6:84:F3:2D:72:D8:11:97:FC:21:20:4D:3B:79 X509v3 Authority Key Identifier: keyid:8A:E3:3D:76:F6:C9:FC:9D:0B:0F:F7:F5:54:C3:51:92:71:D1:C8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:aa:35:2b:79:14:1b:50:7f:92:e3:58:53:f4:de:40:21:23: 7b:4f:79:f0:41:76:ff:2b:95:a8:f0:f0:7e:75:aa:8c:e4:6f: 1d:26:87:23:35:00:ac:7c:c5:1e:e5:79:02:6a:f3:30:d4:3c: d0:fc:38:5e:7a:b3:f4:d8:d0:8b:f4:43:ab:1e:c3:75:09:7e: 1c:c2:50:92:be:9d:01:fd:57:da:7c:8c:75:3c:74:aa:74:82: 67:5f:ac:35:42:a6:38:02:f5:e2:80:06:7c:72:6a:3e:7c:09: f8:9a:e1:23:9b:33:fd:ba:81:60:8c:68:23:8b:a9:1b:1c:1d: 3e:9a:ed:ba:80:58:96:9c:9a:69:32:71:2d:fe:0b:bb:4d:69: 81:e7:d0:a1:3c:35:11:21:50:ea:4e:f8:68:49:90:29:fc:84: 99:93:9a:87:db:99:b9:c7:13:d3:9d:0d:00:f1:01:72:6c:9f: 92:e0:89:0f:d7:77:93:a9:ea:09:2c:74:4c:b4:e4:a5:76:5d: ed:f5:73:71:f0:5b:0d:58:72:f4:11:52:39:3f:55:9e:0e:3f: 9f:57:4f:a2:4e:47:f6:87:76:0e:95:1f:9f:42:95:19:f1:9f: 65:97:db:70:07:91:a8:d4:61:0c:31:29:ed:e3:11:a1:dd:a4: 94:4b:56:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYiuvZP+s7ehjEOaww1sH6G12rY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFMzNENzZGNkM5RkM5RDBCMEZGN0Y1NTRDMzUxOTI3 MUQxQzgzODAeFw0yNTExMDQxMjU0MTlaFw0yNTExMDUxNDUwMTlaMDMxMTAvBgNV BAMTKDAwNkQ5Njc2QkEwQUE2ODRGMzJENzJEODExOTdGQzIxMjA0RDNCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFZtyugKTdrjidaaluSAq2UfDR FpnCNj12rjcbUHvjoGnneDUnT/Pw+9tSEitZIJ9CQNsBRo0slnlaYNsdjOacHd0J lO4gxtWd2NLHMJqFuDToCpDn/r4gcWlrbIiT+jlQovY8OMdo4O8YXnpGzen6ZDYY hG2Pgo39ZXEAKTdm7ghq4HPm8DXq0G6EY2V3YTQNUWxJkkKveCVnC/2a/UPw5aRt yEzu0pEVtg0QAOxIY2eIn4v8kRS6JX6HWxT86yYDebEE3Iduo5F2W7v1asstFd8r EedRMCj+eBtqoYAl5+Z2Y7XX3rCYcos8JSiuzL5KBN0idkdZQPWm2ihCNfLnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAG2WdroKpoTzLXLYEZf8ISBNO3kwHwYDVR0j BBgwFoAUiuM9dvbJ/J0LD/f1VMNRknHRyDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQm5zNlQ1TTl0UlNGd1c2d1Z1d0diNTVNU1RqOW1SdnRieW1tWm9CM3dz enYvMC84QUUzM0Q3NkY2QzlGQzlEMEIwRkY3RjU1NEMzNTE5MjcxRDFDODM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBRTMzRDc2RjZDOUZDOUQw QjBGRjdGNTU0QzM1MTkyNzFEMUM4MzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qm5zNlQ1TTl0UlNGd1c2d1Z1d0diNTVNU1RqOW1SdnRieW1tWm9CM3dzenYvMC84 QUUzM0Q3NkY2QzlGQzlEMEIwRkY3RjU1NEMzNTE5MjcxRDFDODM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo6o1K3kUG1B/kuNYU/TeQCEje0958EF2/yuVqPDwfnWqjORvHSaHIzUArHzF HuV5AmrzMNQ80Pw4Xnqz9NjQi/RDqx7DdQl+HMJQkr6dAf1X2nyMdTx0qnSCZ1+s NUKmOAL14oAGfHJqPnwJ+JrhI5sz/bqBYIxoI4upGxwdPprtuoBYlpyaaTJxLf4L u01pgefQoTw1ESFQ6k74aEmQKfyEmZOah9uZuccT050NAPEBcmyfkuCJD9d3k6nq CSx0TLTkpXZd7fVzcfBbDVhy9BFSOT9Vng4/n1dPok5H9od2DpUfn0KVGfGfZZfb cAeRqNRhDDEp7eMRod2klEtW2A== -----END CERTIFICATE-----Generated at Wed Nov 5 04:07:35 2025 by rpki-client