$ rpki-client -vvf rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft File: 89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft (raw, json) Hash identifier: Q+xdGaSpFkY//yVvGH9a85dThiCWXKLoTgRZhBgpWn8= Subject key identifier: B0:89:10:7D:30:14:02:AC:4F:16:EA:2B:38:C1:85:38:D9:DE:16:E5 Authority key identifier: 89:50:97:69:EB:59:5B:A2:7F:C5:B8:20:8C:FB:0D:05:C3:9E:2B:D3 Certificate issuer: /CN=89509769EB595BA27FC5B8208CFB0D05C39E2BD3 Certificate serial: 48C65F48B1B542E6E7958AA3032058976E76DF85 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.cer Subject info access: rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft Manifest number: 025B Signing time: Tue 04 Nov 2025 17:06:37 +0000 Manifest this update: Tue 04 Nov 2025 17:01:37 +0000 Manifest next update: Wed 05 Nov 2025 21:01:37 +0000 Files and hashes: 1: 89509769EB595BA27FC5B8208CFB0D05C39E2BD3.crl (hash: wMk8EqGB3OK128QATuxWaZ9fF5jTNRdWsOsvXBhZH6U=) 2: 3138312e3139312e3132302e302f32322d3234203d3e20323636303035.roa (hash: EsP4rJuhkvpcUehCNgBteatlRFZDM/gl+dekoYRZ47w=) 3: 323830343a343132303a3a2f33322d3438203d3e20323636303035.roa (hash: nV97SVNkRbxmRecxwSjjFv2+2auwsWvuzIfOnil1acc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.crl rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 21:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c6:5f:48:b1:b5:42:e6:e7:95:8a:a3:03:20:58:97:6e:76:df:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89509769EB595BA27FC5B8208CFB0D05C39E2BD3 Validity Not Before: Nov 4 17:01:37 2025 GMT Not After : Nov 5 21:01:37 2025 GMT Subject: CN=B089107D301402AC4F16EA2B38C18538D9DE16E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ff:96:e8:79:f8:51:60:e6:a7:b2:69:57:f2: 59:99:e8:5e:89:92:ca:0f:0f:52:d7:2e:39:4c:46: ec:ed:d5:47:2a:ad:8e:5c:27:bb:f9:7c:8e:b5:a7: 8f:06:2b:ec:ed:60:0d:4e:98:70:3e:b3:39:80:eb: 43:ff:ba:f1:c4:fd:3e:79:3f:71:08:b6:53:5c:bb: 74:e5:8f:42:98:6d:c2:35:6a:95:42:19:2e:18:77: 94:a1:47:d3:b8:35:0f:b7:5a:01:2c:fb:ae:ce:e1: 13:97:c0:24:2c:5a:74:41:58:5c:0e:0b:db:25:ee: 2e:bc:30:7f:bf:81:28:01:1e:85:2f:97:8f:ea:87: 18:58:3d:b5:e1:fb:9b:ce:45:34:55:07:91:42:4e: a3:a7:c3:4a:b0:e7:50:85:e6:66:38:6f:18:bf:ad: 5b:06:57:27:b3:64:aa:08:40:c2:b4:50:7f:9c:ef: ae:f7:04:b4:80:94:32:70:97:97:41:9f:fe:04:29: 9f:6b:f5:97:bb:58:9e:d9:4a:48:6e:06:4b:4e:79: aa:e6:6a:d9:aa:3c:40:e1:8f:59:de:36:3f:d1:47: c8:eb:56:ce:a8:61:8f:a9:3f:5a:e7:b0:f5:d4:bf: 11:7b:0a:3e:4f:32:aa:8f:9f:2b:40:e0:b3:e2:6d: b7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:89:10:7D:30:14:02:AC:4F:16:EA:2B:38:C1:85:38:D9:DE:16:E5 X509v3 Authority Key Identifier: keyid:89:50:97:69:EB:59:5B:A2:7F:C5:B8:20:8C:FB:0D:05:C3:9E:2B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:08:5d:2e:dc:b5:5e:43:17:04:9c:85:83:29:f5:91:a8:cc: b9:f4:b8:78:2d:63:a7:44:a4:39:11:bc:e5:62:05:ae:5a:ee: 89:51:e2:4e:d8:81:8e:d1:5b:5a:29:06:b7:65:9c:76:fd:7a: fd:2c:d6:a1:5b:8c:33:89:5b:74:d8:b9:05:11:f7:c1:87:4d: 44:a5:a8:5e:fb:58:71:ac:40:85:eb:a9:4c:2f:7f:85:e1:a7: 25:b7:4e:86:b3:7e:91:a9:af:aa:33:db:ba:0e:30:60:9b:2d: f5:86:d6:20:19:f3:72:af:5e:29:ac:9c:3e:09:81:cb:da:7e: 39:57:cd:fe:f0:1f:f4:0c:c0:f8:d3:98:45:b5:82:a2:5e:30: fa:13:3f:ab:e0:85:95:74:a7:5a:e8:d6:33:2e:34:48:37:31: 3d:e4:cc:6e:ef:83:30:40:f0:5b:b5:6c:83:a8:e9:9d:ca:14: 9d:48:2a:57:11:2a:5a:8f:42:64:bb:c7:2f:de:99:15:0b:fb: f8:6b:20:a8:e1:22:35:de:9c:35:b9:3d:fa:2a:b4:15:85:95: 55:8f:80:fb:dd:cf:22:fb:ba:1d:14:74:5e:7d:c2:00:98:51: 02:24:2a:b2:65:03:cf:aa:c2:6c:8b:84:9e:30:be:de:d6:c0: 85:62:06:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSMZfSLG1QubnlYqjAyBYl25234UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1MDk3NjlFQjU5NUJBMjdGQzVCODIwOENGQjBEMDVD MzlFMkJEMzAeFw0yNTExMDQxNzAxMzdaFw0yNTExMDUyMTAxMzdaMDMxMTAvBgNV BAMTKEIwODkxMDdEMzAxNDAyQUM0RjE2RUEyQjM4QzE4NTM4RDlERTE2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/5boefhRYOansmlX8lmZ6F6J ksoPD1LXLjlMRuzt1UcqrY5cJ7v5fI61p48GK+ztYA1OmHA+szmA60P/uvHE/T55 P3EItlNcu3Tlj0KYbcI1apVCGS4Yd5ShR9O4NQ+3WgEs+67O4ROXwCQsWnRBWFwO C9sl7i68MH+/gSgBHoUvl4/qhxhYPbXh+5vORTRVB5FCTqOnw0qw51CF5mY4bxi/ rVsGVyezZKoIQMK0UH+c7673BLSAlDJwl5dBn/4EKZ9r9Ze7WJ7ZSkhuBktOearm atmqPEDhj1neNj/RR8jrVs6oYY+pP1rnsPXUvxF7Cj5PMqqPnytA4LPibbfNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsIkQfTAUAqxPFuorOMGFONneFuUwHwYDVR0j BBgwFoAUiVCXaetZW6J/xbggjPsNBcOeK9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHZjQXg3VWtuTFpZakhkbUFIVlFoTHNBSDdHNmoyYlVkUzltTWF5dWti NXQvMC84OTUwOTc2OUVCNTk1QkEyN0ZDNUI4MjA4Q0ZCMEQwNUMzOUUyQkQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5NTA5NzY5RUI1OTVCQTI3 RkM1QjgyMDhDRkIwRDA1QzM5RTJCRDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHZjQXg3VWtuTFpZakhkbUFIVlFoTHNBSDdHNmoyYlVkUzltTWF5dWtiNXQvMC84 OTUwOTc2OUVCNTk1QkEyN0ZDNUI4MjA4Q0ZCMEQwNUMzOUUyQkQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhQhdLty1XkMXBJyFgyn1kajMufS4eC1jp0SkORG85WIFrlruiVHiTtiBjtFb WikGt2Wcdv16/SzWoVuMM4lbdNi5BRH3wYdNRKWoXvtYcaxAheupTC9/heGnJbdO hrN+kamvqjPbug4wYJst9YbWIBnzcq9eKaycPgmBy9p+OVfN/vAf9AzA+NOYRbWC ol4w+hM/q+CFlXSnWujWMy40SDcxPeTMbu+DMEDwW7Vsg6jpncoUnUgqVxEqWo9C ZLvHL96ZFQv7+GsgqOEiNd6cNbk9+iq0FYWVVY+A+93PIvu6HRR0Xn3CAJhRAiQq smUDz6rCbIuEnjC+3tbAhWIGMA== -----END CERTIFICATE-----Generated at Wed Nov 5 06:52:41 2025 by rpki-client