$ rpki-client -vvf rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft File: 8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft (raw, json) Hash identifier: aTPKMSM7zwzJuCg2ZIgyFhpiCut6f/0sGbwqKUjv6SM= Subject key identifier: DA:48:6B:EA:C5:9B:B3:7C:C5:8A:99:5F:CF:40:8E:1F:0C:1C:8E:36 Authority key identifier: 8B:8B:1C:29:5E:F2:38:6F:8F:2B:BD:18:93:D8:D1:64:EE:B2:41:DA Certificate issuer: /CN=8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA Certificate serial: 676BDFDD6116F7F6FB3C53EC8FBF9104451FFE9A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft Manifest number: 70 Signing time: Tue 04 Nov 2025 12:35:54 +0000 Manifest this update: Tue 04 Nov 2025 12:30:54 +0000 Manifest next update: Wed 05 Nov 2025 14:35:54 +0000 Files and hashes: 1: 323830343a383533343a3a2f33322d3338203d3e20323732353634.roa (hash: EXXu8EMk/fv/VXBhnb0eG75OE0+K8FDQRp8W4/VB/yA=) 2: AS272564.asa (hash: dJc1wuN6t7JkVdQRM/03T5SoGEkIN/qpvYr408ZvyRU=) 3: 8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.crl (hash: 4CSSkVW4P2RzlJKK2hFFqykDg9YSzuHrgzhJgW1thxQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.crl rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 14:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:6b:df:dd:61:16:f7:f6:fb:3c:53:ec:8f:bf:91:04:45:1f:fe:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA Validity Not Before: Nov 4 12:30:54 2025 GMT Not After : Nov 5 14:35:54 2025 GMT Subject: CN=DA486BEAC59BB37CC58A995FCF408E1F0C1C8E36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fd:10:87:70:9d:6a:2d:99:79:de:2c:f9:a7: b2:bd:cd:98:3e:f8:95:52:02:34:87:6f:9a:3e:6f: 28:5d:7e:91:11:b4:da:87:32:ba:19:fb:84:15:3c: e7:80:3e:55:b5:07:33:23:8a:61:0f:f0:25:97:4c: de:e8:9d:86:8f:9b:9f:0a:c7:13:df:3d:49:12:39: 64:22:1a:9a:ce:62:d7:25:47:ef:52:52:0a:4e:07: ba:b0:81:d1:ed:ea:70:76:03:76:7f:66:32:33:e2: 37:ef:85:30:76:51:24:31:79:87:e7:84:f6:39:43: 2a:36:e7:da:5d:56:89:66:00:33:57:dc:c3:36:54: eb:60:fb:0d:2a:96:8a:92:9e:5e:c4:b5:72:0a:7e: 04:bd:c2:55:02:a4:64:ef:12:13:18:68:54:c3:88: 47:09:09:b2:30:69:e9:02:6e:08:e0:57:df:b0:56: 52:12:ba:38:68:ef:10:bb:85:81:8b:3d:73:77:f4: 55:27:80:2f:8b:8c:79:65:70:27:ba:b9:a8:f6:d2: ae:8f:08:d2:07:54:be:6b:21:d1:b0:51:37:bb:70: 1c:0a:c7:64:db:16:87:3e:b7:8a:e9:91:33:0a:85: 57:e2:7e:a6:29:29:d6:d5:8b:73:1d:ae:2f:62:10: 8c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:48:6B:EA:C5:9B:B3:7C:C5:8A:99:5F:CF:40:8E:1F:0C:1C:8E:36 X509v3 Authority Key Identifier: keyid:8B:8B:1C:29:5E:F2:38:6F:8F:2B:BD:18:93:D8:D1:64:EE:B2:41:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d5:4d:ce:eb:a4:db:f8:71:3a:69:70:4c:11:b7:84:3c:7f: 5c:ec:54:0b:91:31:a5:55:f4:64:55:75:2f:f6:e2:71:6c:fb: 09:45:e2:9b:51:5a:9d:ab:6d:34:ed:4c:1f:a0:e0:06:7d:76: d5:36:98:35:86:09:64:1f:e3:b0:de:db:bf:0e:18:2e:00:b4: 21:31:32:37:44:8b:33:65:30:54:61:66:9c:08:7f:21:c7:01: 1d:18:4f:c0:04:b3:d2:51:4d:a2:87:fa:75:4b:ae:2d:77:75: b8:2b:dd:66:1f:f8:58:a8:f1:b5:49:78:f4:e9:17:fa:1e:49: bc:9e:dd:b9:32:98:32:26:2f:34:c9:5b:4f:19:09:e0:41:b0: b7:b2:28:0f:7e:bc:c4:81:19:e3:75:a7:e2:10:a2:22:42:1b: 5e:aa:fb:14:6d:b9:57:ee:61:39:15:fd:ba:cb:f4:6c:bc:80: 12:3b:80:08:7a:93:94:8d:59:b4:aa:eb:76:5e:b8:e4:df:bd: 15:ab:2d:b5:24:56:0e:c7:e4:7e:71:65:45:02:b5:76:bf:b8: c3:a3:5f:77:08:6b:7c:ad:97:4c:5e:32:51:1f:f0:92:17:8a: 26:a5:07:56:36:77:eb:f4:66:43:a5:39:27:19:c6:ce:5f:ac: f0:0b:06:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ2vf3WEW9/b7PFPsj7+RBEUf/powDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI4QjFDMjk1RUYyMzg2RjhGMkJCRDE4OTNEOEQxNjRF RUIyNDFEQTAeFw0yNTExMDQxMjMwNTRaFw0yNTExMDUxNDM1NTRaMDMxMTAvBgNV BAMTKERBNDg2QkVBQzU5QkIzN0NDNThBOTk1RkNGNDA4RTFGMEMxQzhFMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/RCHcJ1qLZl53iz5p7K9zZg+ +JVSAjSHb5o+byhdfpERtNqHMroZ+4QVPOeAPlW1BzMjimEP8CWXTN7onYaPm58K xxPfPUkSOWQiGprOYtclR+9SUgpOB7qwgdHt6nB2A3Z/ZjIz4jfvhTB2USQxeYfn hPY5Qyo259pdVolmADNX3MM2VOtg+w0qloqSnl7EtXIKfgS9wlUCpGTvEhMYaFTD iEcJCbIwaekCbgjgV9+wVlISujho7xC7hYGLPXN39FUngC+LjHllcCe6uaj20q6P CNIHVL5rIdGwUTe7cBwKx2TbFoc+t4rpkTMKhVfifqYpKdbVi3Mdri9iEIwTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2khr6sWbs3zFiplfz0COHwwcjjYwHwYDVR0j BBgwFoAUi4scKV7yOG+PK70Yk9jRZO6yQdowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2E2WHlKSjY1a3gyRFd0VFFhdWlGb3ZBUjl2Q0NzWG5yd1JlOG5HOTNE amQvMC84QjhCMUMyOTVFRjIzODZGOEYyQkJEMTg5M0Q4RDE2NEVFQjI0MURBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCOEIxQzI5NUVGMjM4NkY4 RjJCQkQxODkzRDhEMTY0RUVCMjQxREEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2E2WHlKSjY1a3gyRFd0VFFhdWlGb3ZBUjl2Q0NzWG5yd1JlOG5HOTNEamQvMC84 QjhCMUMyOTVFRjIzODZGOEYyQkJEMTg5M0Q4RDE2NEVFQjI0MURBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYtVNzuuk2/hxOmlwTBG3hDx/XOxUC5ExpVX0ZFV1L/bicWz7CUXim1Fanatt NO1MH6DgBn121TaYNYYJZB/jsN7bvw4YLgC0ITEyN0SLM2UwVGFmnAh/IccBHRhP wASz0lFNoof6dUuuLXd1uCvdZh/4WKjxtUl49OkX+h5JvJ7duTKYMiYvNMlbTxkJ 4EGwt7IoD368xIEZ43Wn4hCiIkIbXqr7FG25V+5hORX9usv0bLyAEjuACHqTlI1Z tKrrdl645N+9FasttSRWDsfkfnFlRQK1dr+4w6NfdwhrfK2XTF4yUR/wkheKJqUH VjZ36/RmQ6U5JxnGzl+s8AsGLA== -----END CERTIFICATE-----Generated at Wed Nov 5 07:42:59 2025 by rpki-client