$ rpki-client -vvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft File: 89B059C223BA0AD41E99D2508292698CA59D4D51.mft (raw, json) Hash identifier: 1qKv4PmhMll8fpZoIpcyqg++hMhTm9dRauAulHlkcsY= Subject key identifier: 20:71:F3:F5:17:24:FA:7B:41:3C:0A:23:07:4B:5B:8E:27:43:A2:12 Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51 Certificate issuer: /CN=89B059C223BA0AD41E99D2508292698CA59D4D51 Certificate serial: 2382B74A910406CF3B0FF4DCDD10F91F8C40EF22 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft Manifest number: 0304 Signing time: Tue 04 Nov 2025 13:58:29 +0000 Manifest this update: Tue 04 Nov 2025 13:53:29 +0000 Manifest next update: Wed 05 Nov 2025 14:10:29 +0000 Files and hashes: 1: 89B059C223BA0AD41E99D2508292698CA59D4D51.crl (hash: +bu0HRdV0H8+zbpwOHl4+oPNThSQZX7cXfUPqE+OpFc=) 2: 3138362e3139332e302e302f32302d3234203d3e203533313334.roa (hash: /70Xr3zykjbquC5V98sp30trWq/8fdvVv+jPi4H5f5s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 14:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:82:b7:4a:91:04:06:cf:3b:0f:f4:dc:dd:10:f9:1f:8c:40:ef:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51 Validity Not Before: Nov 4 13:53:29 2025 GMT Not After : Nov 5 14:10:29 2025 GMT Subject: CN=2071F3F51724FA7B413C0A23074B5B8E2743A212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a4:62:a6:61:ad:e9:f9:ca:d4:70:0b:35:d4: b0:d6:e8:cf:ba:89:a1:fc:46:15:3e:93:53:e6:35: a8:d7:3b:39:25:51:ce:96:c9:c6:bc:d2:de:5e:9f: 94:b0:f7:30:fb:ef:8a:3c:eb:f6:c4:e0:95:dd:d3: 45:ee:43:cb:ad:5c:87:ab:df:74:ff:68:33:e7:ed: ac:8d:9a:c6:62:c7:73:dd:9d:d5:b7:32:32:ea:23: 1e:e8:8c:b0:ab:b9:89:c6:c3:cb:6f:70:5a:51:f3: 13:b0:ec:46:2a:25:72:71:f8:3a:3d:86:b2:dd:8e: a1:c0:9f:46:75:db:7d:ba:c9:02:ec:4d:1c:af:d9: 68:17:4d:24:fb:fd:b9:cf:1d:35:3c:f9:53:4f:4d: f9:6c:37:34:37:68:17:a6:c6:5e:ef:ef:d4:3d:87: 59:31:f7:f3:96:6e:f7:9a:12:85:42:44:c9:4b:30: 88:5a:b0:6e:7d:9c:79:29:ee:2e:16:2f:90:cc:19: 1d:4f:a1:96:44:8f:84:3a:a3:a3:05:da:35:f3:16: 41:46:0e:0d:e5:97:ea:19:12:56:fe:47:b6:ae:2b: 15:ae:cc:87:af:03:d7:7e:b4:62:01:8d:88:a5:1a: 2e:d6:52:29:35:c3:56:e0:6a:53:91:a5:e4:f4:b3: 0c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:71:F3:F5:17:24:FA:7B:41:3C:0A:23:07:4B:5B:8E:27:43:A2:12 X509v3 Authority Key Identifier: keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:9e:2a:8c:15:77:07:8b:fd:94:b7:7f:d6:64:80:ca:2f:9a: 36:aa:63:45:eb:54:48:c2:7e:c7:e4:e1:20:ff:93:ac:1e:96: 90:96:a3:e1:86:be:2d:2e:5c:2e:3c:e3:a5:fc:db:68:40:00: 91:f2:4f:a0:77:3c:58:55:7a:01:d6:83:9f:35:8b:31:8a:01: d1:26:b7:c3:01:b7:5c:2e:6c:97:f1:d7:f4:1a:c4:d4:2d:a2: 8e:cd:ae:73:eb:7c:6a:9a:fb:97:11:fd:9c:bc:80:66:84:eb: 7f:fa:d2:0b:1b:10:96:6e:3b:cf:33:3f:2e:4b:d7:a8:0e:9a: 1f:95:ff:51:e3:77:4b:29:79:96:39:51:78:de:ac:a3:8d:35: df:38:44:e6:42:e3:a3:ad:5a:52:ca:6a:b2:01:cd:cc:7e:5e: 6f:4b:c2:96:03:41:33:1b:bb:6a:33:45:0c:3d:55:e5:bb:4c: 03:a3:c5:7f:ee:4f:9a:ac:ce:2f:10:03:d1:ee:9f:d2:90:6b: f7:be:bc:dd:b6:93:3e:1f:de:f5:f2:32:b9:7d:71:1e:e2:84: 71:e7:c4:20:29:e9:99:8a:18:f7:6f:80:6e:e6:75:13:60:21: b9:0e:a6:8c:4b:89:c0:da:f1:49:af:f2:38:41:a6:df:c8:3e: 40:d2:ad:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI4K3SpEEBs87D/Tc3RD5H4xA7yIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCMDU5QzIyM0JBMEFENDFFOTlEMjUwODI5MjY5OENB NTlENEQ1MTAeFw0yNTExMDQxMzUzMjlaFw0yNTExMDUxNDEwMjlaMDMxMTAvBgNV BAMTKDIwNzFGM0Y1MTcyNEZBN0I0MTNDMEEyMzA3NEI1QjhFMjc0M0EyMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCppGKmYa3p+crUcAs11LDW6M+6 iaH8RhU+k1PmNajXOzklUc6Wyca80t5en5Sw9zD774o86/bE4JXd00XuQ8utXIer 33T/aDPn7ayNmsZix3PdndW3MjLqIx7ojLCruYnGw8tvcFpR8xOw7EYqJXJx+Do9 hrLdjqHAn0Z12326yQLsTRyv2WgXTST7/bnPHTU8+VNPTflsNzQ3aBemxl7v79Q9 h1kx9/OWbveaEoVCRMlLMIhasG59nHkp7i4WL5DMGR1PoZZEj4Q6o6MF2jXzFkFG Dg3ll+oZElb+R7auKxWuzIevA9d+tGIBjYilGi7WUik1w1bgalORpeT0swy3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIHHz9Rck+ntBPAojB0tbjidDohIwHwYDVR0j BBgwFoAUibBZwiO6CtQemdJQgpJpjKWdTVEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRn eGUvMS84OUIwNTlDMjIzQkEwQUQ0MUU5OUQyNTA4MjkyNjk4Q0E1OUQ0RDUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5QjA1OUMyMjNCQTBBRDQx RTk5RDI1MDgyOTI2OThDQTU5RDRENTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRneGUvMS84 OUIwNTlDMjIzQkEwQUQ0MUU5OUQyNTA4MjkyNjk4Q0E1OUQ0RDUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE54qjBV3B4v9lLd/1mSAyi+aNqpjRetUSMJ+x+ThIP+TrB6WkJaj4Ya+LS5c LjzjpfzbaEAAkfJPoHc8WFV6AdaDnzWLMYoB0Sa3wwG3XC5sl/HX9BrE1C2ijs2u c+t8apr7lxH9nLyAZoTrf/rSCxsQlm47zzM/LkvXqA6aH5X/UeN3Syl5ljlReN6s o4013zhE5kLjo61aUspqsgHNzH5eb0vClgNBMxu7ajNFDD1V5btMA6PFf+5PmqzO LxAD0e6f0pBr97683baTPh/e9fIyuX1xHuKEcefEICnpmYoY92+AbuZ1E2AhuQ6m jEuJwNrxSa/yOEGm38g+QNKtTw== -----END CERTIFICATE-----Generated at Wed Nov 5 02:42:28 2025 by rpki-client