$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft File: 8AD497903AB3566443C9C794694A61EFE427FA7A.mft (raw, json) Hash identifier: EWp45n2ZTphYyb7u1WPXitJGNOgt8+0Mz3QoZBMlHo4= Subject key identifier: 64:48:8A:2D:85:F1:33:B6:78:BE:83:47:43:27:82:E3:74:70:E5:3A Authority key identifier: 8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A Certificate issuer: /CN=8AD497903AB3566443C9C794694A61EFE427FA7A Certificate serial: 580BE91F3142ABA224471FF9035D6648BC6740B3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft Manifest number: 030A Signing time: Tue 04 Nov 2025 17:35:57 +0000 Manifest this update: Tue 04 Nov 2025 17:30:57 +0000 Manifest next update: Wed 05 Nov 2025 20:37:57 +0000 Files and hashes: 1: 8AD497903AB3566443C9C794694A61EFE427FA7A.crl (hash: nxX1r6tjoALArsXODfCjqufSzpbIKNrJ8Ot0iOuqVGw=) 2: 323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa (hash: ORpItz/kBb3bXBiU/q9Su7SYmZ2oQTmI/c9DsHZIB4Q=) 3: 323830343a383630343a3a2f33332d3333203d3e20323732363134.roa (hash: Cx4646zrPKq6xD6iBJPkGxFHe6jY6KpJK0fDkBl/7Jo=) 4: 323830343a383630343a3a2f33322d3332203d3e20323732363134.roa (hash: UuJdu9oNRzQAzqGiZTO4vBqCVsMzpdiamCVuQEkL6sg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:0b:e9:1f:31:42:ab:a2:24:47:1f:f9:03:5d:66:48:bc:67:40:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AD497903AB3566443C9C794694A61EFE427FA7A Validity Not Before: Nov 4 17:30:57 2025 GMT Not After : Nov 5 20:37:57 2025 GMT Subject: CN=64488A2D85F133B678BE8347432782E37470E53A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b5:a5:96:20:41:d2:ea:d2:f8:aa:23:f2:9f: 8d:32:b1:08:63:2b:62:35:0c:50:41:70:9e:a2:6f: 8a:a8:f9:8f:07:5f:ce:31:70:2f:e9:d1:1c:0e:ee: e3:d6:24:ff:d7:78:63:0c:f4:8f:06:50:dc:23:65: a6:c5:6e:34:72:b4:a5:5f:5e:cc:9f:62:f8:90:2c: 04:86:4f:56:ec:91:1f:3c:cb:88:b0:3c:10:7e:d1: 6c:fe:16:00:5c:b5:c2:df:16:49:65:a9:a5:45:0b: a6:b9:fc:a6:61:cd:21:67:7b:2a:68:4b:13:65:3f: 7c:91:32:96:61:2c:90:de:df:24:1f:13:23:e8:ce: db:df:3c:05:38:e1:7c:3c:86:de:49:d7:77:48:b0: 0e:13:f8:d3:a5:57:8d:27:d5:b8:d8:15:46:61:80: 1e:91:31:39:b7:45:3b:9d:d6:96:46:b2:08:ba:a3: 5a:b6:f3:1f:db:25:bd:d8:23:0b:7e:b2:88:d7:b1: 57:ec:97:dd:84:f7:61:42:a1:4f:56:53:c6:10:60: bc:51:a0:3d:3a:ce:73:16:36:30:18:4a:e4:64:76: ee:a4:7b:5a:48:53:28:23:28:25:ca:ea:85:9d:9e: 19:e0:f5:bf:2e:e1:f4:dc:50:ef:fa:45:8d:0d:46: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:48:8A:2D:85:F1:33:B6:78:BE:83:47:43:27:82:E3:74:70:E5:3A X509v3 Authority Key Identifier: keyid:8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:9e:42:e8:e5:37:cc:72:58:3d:02:ff:1c:4b:82:26:77:bb: eb:12:d9:1b:bf:71:c9:14:48:df:49:04:54:48:1c:e7:00:db: 7b:20:2d:65:ab:e8:b3:1f:83:76:89:73:78:c3:27:76:68:ce: c6:9f:57:64:57:0d:4a:92:b3:20:8e:5b:1d:a1:ad:f2:fe:16: b2:4c:a5:d5:b2:c0:e4:46:32:59:ab:ed:4d:a1:fb:e4:eb:94: 3d:2e:95:bc:e2:05:66:96:df:c9:83:94:28:1b:40:a5:d9:62: 5a:80:8c:ce:ba:80:b7:75:63:96:a4:7b:80:33:10:14:81:98: 84:4b:a1:1f:a6:f5:5f:7b:36:3b:df:18:08:22:cc:6a:9d:08: d4:60:e2:fe:b7:ac:60:e9:4e:c4:b2:49:52:5c:50:54:a2:5f: 2c:87:32:01:3a:04:33:dc:19:2b:72:52:99:f8:c8:51:e1:79: e9:17:8a:79:f8:1f:11:85:7d:4f:9f:50:16:a9:85:cd:a0:38: 89:0f:36:1b:88:f5:1d:aa:e9:80:3a:d1:a4:c5:51:03:10:57: bc:0f:01:a0:af:a7:65:c2:8b:88:00:1d:1a:26:d0:50:40:86: 7d:e4:69:25:7b:a8:3f:ad:bc:66:4c:34:4e:eb:2d:3a:25:f1: f0:cd:6f:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWAvpHzFCq6IkRx/5A11mSLxnQLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFENDk3OTAzQUIzNTY2NDQzQzlDNzk0Njk0QTYxRUZF NDI3RkE3QTAeFw0yNTExMDQxNzMwNTdaFw0yNTExMDUyMDM3NTdaMDMxMTAvBgNV BAMTKDY0NDg4QTJEODVGMTMzQjY3OEJFODM0NzQzMjc4MkUzNzQ3MEU1M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZtaWWIEHS6tL4qiPyn40ysQhj K2I1DFBBcJ6ib4qo+Y8HX84xcC/p0RwO7uPWJP/XeGMM9I8GUNwjZabFbjRytKVf XsyfYviQLASGT1bskR88y4iwPBB+0Wz+FgBctcLfFkllqaVFC6a5/KZhzSFneypo SxNlP3yRMpZhLJDe3yQfEyPoztvfPAU44Xw8ht5J13dIsA4T+NOlV40n1bjYFUZh gB6RMTm3RTud1pZGsgi6o1q28x/bJb3YIwt+sojXsVfsl92E92FCoU9WU8YQYLxR oD06znMWNjAYSuRkdu6ke1pIUygjKCXK6oWdnhng9b8u4fTcUO/6RY0NRidfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZEiKLYXxM7Z4voNHQyeC43Rw5TowHwYDVR0j BBgwFoAUitSXkDqzVmRDyceUaUph7+Qn+nowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFl5NGFKTVB2emFja2tMSGc0azlvSEhIWjdnam5FcmtRUEpVYXN2cDZh bk4vMS84QUQ0OTc5MDNBQjM1NjY0NDNDOUM3OTQ2OTRBNjFFRkU0MjdGQTdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBRDQ5NzkwM0FCMzU2NjQ0 M0M5Qzc5NDY5NEE2MUVGRTQyN0ZBN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFl5NGFKTVB2emFja2tMSGc0azlvSEhIWjdnam5FcmtRUEpVYXN2cDZhbk4vMS84 QUQ0OTc5MDNBQjM1NjY0NDNDOUM3OTQ2OTRBNjFFRkU0MjdGQTdBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQZ5C6OU3zHJYPQL/HEuCJne76xLZG79xyRRI30kEVEgc5wDbeyAtZavosx+D dolzeMMndmjOxp9XZFcNSpKzII5bHaGt8v4Wskyl1bLA5EYyWavtTaH75OuUPS6V vOIFZpbfyYOUKBtApdliWoCMzrqAt3VjlqR7gDMQFIGYhEuhH6b1X3s2O98YCCLM ap0I1GDi/resYOlOxLJJUlxQVKJfLIcyAToEM9wZK3JSmfjIUeF56ReKefgfEYV9 T59QFqmFzaA4iQ82G4j1HarpgDrRpMVRAxBXvA8BoK+nZcKLiAAdGibQUECGfeRp JXuoP628Zkw0TustOiXx8M1v6A== -----END CERTIFICATE-----Generated at Wed Nov 5 05:16:58 2025 by rpki-client