$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft File: 89F33609E2B118C8ED9A105548D2D01FD6E38729.mft (raw, json) Hash identifier: fpLTZptOGklfQXNb0xXELOvZVayYrKiNGQr4i4SQ8oA= Subject key identifier: D7:50:60:57:70:4E:28:39:BA:1D:BD:E8:B0:58:2E:E0:D2:CF:D5:F1 Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 Certificate issuer: /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Certificate serial: 5544898359A831BF22507F267A8CA58061E044DD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft Manifest number: 0303 Signing time: Wed 05 Nov 2025 00:16:38 +0000 Manifest this update: Wed 05 Nov 2025 00:11:38 +0000 Manifest next update: Thu 06 Nov 2025 00:47:38 +0000 Files and hashes: 1: 89F33609E2B118C8ED9A105548D2D01FD6E38729.crl (hash: pLGcc4BGztBiMQLZeua+jWG0xRQvCGL8SlqFQEHqKqI=) 2: 3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa (hash: bMO8E7JDP414YIw6qvyG05VpeLGja7y87JGV9snRtok=) 3: 3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa (hash: 91gQ1OFtC7i3YwbFOdgAOt94iN2xUARUXKGh62+Ssos=) 4: 323830343a313263303a3a2f33322d3438203d3e20323633343936.roa (hash: yCRnKe7Cfo4f5weE5YMpi/ZO3/1Psrg+aJlLbswl12Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:44:89:83:59:a8:31:bf:22:50:7f:26:7a:8c:a5:80:61:e0:44:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Validity Not Before: Nov 5 00:11:38 2025 GMT Not After : Nov 6 00:47:38 2025 GMT Subject: CN=D7506057704E2839BA1DBDE8B0582EE0D2CFD5F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:95:18:e5:2e:6f:43:ba:cf:80:b9:86:53:b8: f6:e6:f3:95:25:b5:8a:39:43:6e:2a:dc:3a:92:1d: 85:15:be:25:13:d2:8c:d7:c0:2a:24:a5:24:52:90: 87:f7:02:ed:69:00:42:6d:70:0f:e0:b0:67:6d:ad: 13:57:f1:03:ba:17:28:aa:14:87:35:b5:19:24:e5: bb:ae:51:ef:64:01:e4:9d:9c:4c:5f:18:ff:49:fc: 86:b2:3c:cb:1a:d4:5e:b0:fb:d4:a7:52:ea:96:59: f0:74:bc:42:7e:c5:de:d3:e4:08:7e:b4:bd:81:98: 27:3b:ec:2e:8e:a9:4a:92:04:92:f2:c8:40:6c:e0: 3a:09:5b:27:d3:76:31:c8:2c:01:eb:8d:40:b5:79: e6:cc:a9:59:c6:b8:d2:f0:9c:89:0d:2d:aa:4a:6c: 04:73:b7:5c:69:a9:02:59:42:9f:9c:03:d5:eb:6e: 75:8c:a0:31:25:72:1b:1e:d3:32:51:0e:3c:9f:fc: 40:04:57:eb:05:77:22:ff:d9:e4:f5:d6:92:36:e1: 34:07:86:4a:63:38:7c:16:14:10:af:ef:03:a3:c8: 01:9f:85:dd:32:e8:76:36:e7:ac:65:08:64:c7:c6: 47:30:52:fe:cd:58:19:f0:44:a7:ab:67:c0:dc:b1: 04:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:50:60:57:70:4E:28:39:BA:1D:BD:E8:B0:58:2E:E0:D2:CF:D5:F1 X509v3 Authority Key Identifier: keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:c0:b0:d1:e0:56:9a:41:b9:4a:54:3c:e7:88:f8:24:b6:46: 3a:dc:c3:47:6e:16:10:aa:1e:3a:53:70:56:af:f3:d1:1e:0f: c5:bf:4c:9d:37:56:d5:82:a3:74:e5:25:ec:18:08:be:f6:b2: e8:b4:bc:2d:64:e3:da:af:63:a3:98:b9:76:08:60:59:dc:32: 38:b1:84:cd:1b:f3:63:da:ca:eb:3f:46:3f:25:7e:6c:98:da: 33:bd:3a:2b:b9:47:06:b9:77:94:0b:e6:45:1a:1a:ea:e9:c9: 83:96:1e:fc:6d:6f:13:68:68:f3:67:de:47:79:b5:56:f0:ef: ec:a8:2b:15:94:9a:b8:4a:b2:a7:6d:ad:82:b9:dd:45:98:9a: c5:f9:cc:95:0a:58:18:51:60:25:83:db:86:01:8e:99:40:85: a1:8f:f7:4c:f3:d5:e8:51:a1:86:1e:ea:14:bd:15:86:fe:d0: 78:fe:bb:cb:eb:4a:f1:88:85:ed:f3:00:41:e0:8d:a0:f5:34: 9e:f4:40:33:f0:91:d0:97:47:b7:64:f4:c4:64:4f:20:6b:21: a2:5d:35:44:9e:b0:a4:e0:fb:62:99:28:aa:4b:94:5b:b3:ef: 0f:db:1c:dc:b8:1b:08:f7:14:2f:46:3e:d8:81:d7:cd:9a:c8: d0:e0:00:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVUSJg1moMb8iUH8meoylgGHgRN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlGMzM2MDlFMkIxMThDOEVEOUExMDU1NDhEMkQwMUZE NkUzODcyOTAeFw0yNTExMDUwMDExMzhaFw0yNTExMDYwMDQ3MzhaMDMxMTAvBgNV BAMTKEQ3NTA2MDU3NzA0RTI4MzlCQTFEQkRFOEIwNTgyRUUwRDJDRkQ1RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWlRjlLm9Dus+AuYZTuPbm85Ul tYo5Q24q3DqSHYUVviUT0ozXwCokpSRSkIf3Au1pAEJtcA/gsGdtrRNX8QO6Fyiq FIc1tRkk5buuUe9kAeSdnExfGP9J/IayPMsa1F6w+9SnUuqWWfB0vEJ+xd7T5Ah+ tL2BmCc77C6OqUqSBJLyyEBs4DoJWyfTdjHILAHrjUC1eebMqVnGuNLwnIkNLapK bARzt1xpqQJZQp+cA9XrbnWMoDElchse0zJRDjyf/EAEV+sFdyL/2eT11pI24TQH hkpjOHwWFBCv7wOjyAGfhd0y6HY256xlCGTHxkcwUv7NWBnwRKerZ8DcsQRXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU11BgV3BOKDm6Hb3osFgu4NLP1fEwHwYDVR0j BBgwFoAUifM2CeKxGMjtmhBVSNLQH9bjhykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4 ekUvMS84OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RjMzNjA5RTJCMTE4QzhF RDlBMTA1NTQ4RDJEMDFGRDZFMzg3MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4ekUvMS84 OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN8Cw0eBWmkG5SlQ854j4JLZGOtzDR24WEKoeOlNwVq/z0R4Pxb9MnTdW1YKj dOUl7BgIvvay6LS8LWTj2q9jo5i5dghgWdwyOLGEzRvzY9rK6z9GPyV+bJjaM706 K7lHBrl3lAvmRRoa6unJg5Ye/G1vE2ho82feR3m1VvDv7KgrFZSauEqyp22tgrnd RZiaxfnMlQpYGFFgJYPbhgGOmUCFoY/3TPPV6FGhhh7qFL0Vhv7QeP67y+tK8YiF 7fMAQeCNoPU0nvRAM/CR0JdHt2T0xGRPIGshol01RJ6wpOD7YpkoqkuUW7PvD9sc 3LgbCPcUL0Y+2IHXzZrI0OAAzQ== -----END CERTIFICATE-----Generated at Wed Nov 5 16:09:47 2025 by rpki-client