$ rpki-client -vvf rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft File: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft (raw, json) Hash identifier: 6eLHixsPf6phiesr3GIL5tTiWnfJ24mYIjeokSKaHAM= Subject key identifier: 2D:CA:60:D0:02:1F:1D:05:D0:04:8B:A4:DA:C4:5F:54:7F:8F:8B:F8 Authority key identifier: B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF Certificate issuer: /CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF Certificate serial: 6A5FD3D55E738CBAB9CB44B24435C5538F5460C4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer Subject info access: rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft Manifest number: 0301 Signing time: Thu 06 Nov 2025 23:02:56 +0000 Manifest this update: Thu 06 Nov 2025 22:57:56 +0000 Manifest next update: Sat 08 Nov 2025 00:04:56 +0000 Files and hashes: 1: 323830343a333039383a3a2f33322d313238203d3e20323634393633.roa (hash: 4YQCFpXPUhsLFUTDrQm1z410pZXkHXYKu3uwdvZnJS4=) 2: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl (hash: Q8jRM07WZnekojB+uulpA5Gzly2bYIUbcE1Jq/OR4NY=) 3: 3137302e302e36382e302f32322d3332203d3e20323634393633.roa (hash: BTbjmwjyqpdTKLLMQI6z/WnAE87x4tBFK6JSAunFNdI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 00:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5f:d3:d5:5e:73:8c:ba:b9:cb:44:b2:44:35:c5:53:8f:54:60:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF Validity Not Before: Nov 6 22:57:56 2025 GMT Not After : Nov 8 00:04:56 2025 GMT Subject: CN=2DCA60D0021F1D05D0048BA4DAC45F547F8F8BF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f4:09:84:ad:e9:e5:eb:65:98:39:7e:a7:5e: 46:a3:2d:d6:cf:a6:ec:b1:f8:ba:bf:da:01:e6:66: e9:d5:74:cf:66:c8:12:6a:45:81:2b:40:8a:e6:1c: 6f:24:80:18:04:a3:6c:04:62:87:29:77:f9:13:83: 9a:be:7b:01:4f:bf:9c:6b:05:4a:db:e6:fa:c2:b2: bd:6b:59:74:8d:1b:ed:59:2a:e3:2d:c3:3d:7b:e8: 34:e1:77:35:e1:78:77:3d:55:06:39:54:3b:81:61: 32:79:2b:9a:70:41:b3:11:2e:d5:ce:5e:44:79:28: 61:af:c3:40:04:1d:e5:4f:b4:32:82:5f:34:8f:c9: fd:8d:55:95:1d:70:3c:f0:84:5b:7a:19:4d:b7:5c: 32:0b:18:75:c1:8a:e5:7c:1c:7c:7b:da:48:ea:ec: 74:aa:d6:d2:cc:67:95:43:e2:01:d0:48:58:67:62: 0c:31:61:4d:30:b2:f2:92:5d:19:56:9d:33:85:4c: 9d:0f:93:98:bd:45:d6:cd:92:45:2e:48:3b:32:bd: a5:36:e9:2a:47:41:f7:ec:af:91:70:6f:0b:f3:11: 81:a9:74:f3:5d:d0:a0:4e:c0:17:64:84:1d:9f:64: f1:3b:5d:90:97:79:ea:a6:80:1a:b9:0d:ee:2e:af: 51:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CA:60:D0:02:1F:1D:05:D0:04:8B:A4:DA:C4:5F:54:7F:8F:8B:F8 X509v3 Authority Key Identifier: keyid:B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ac:18:e3:65:91:60:4c:c5:98:60:ba:c3:04:56:e7:b9:00: df:6b:bc:78:85:0f:26:e4:5c:0f:7c:59:f1:56:26:60:cb:c8: 80:a0:d8:2c:c0:6c:ea:ad:28:0d:45:4b:62:89:42:dd:f0:ff: 74:71:ff:17:e0:37:26:e5:72:8f:86:8b:8e:09:34:54:f3:eb: 96:3e:24:dd:1a:1f:88:e0:ca:35:25:ce:0d:29:f6:1a:d0:56: 74:cc:2b:69:13:5c:fc:e9:82:da:91:10:c7:b0:47:0d:49:10: 09:49:1e:cb:3d:28:99:b5:89:fe:0e:34:9c:90:fb:b3:3b:41: 1b:e3:1e:7c:f6:5a:81:08:37:0e:2f:81:8a:4e:04:5f:28:e8: ab:99:3b:4a:d1:10:05:6b:4f:75:45:c1:da:e7:5b:8b:c5:aa: f4:aa:96:0f:0b:d8:8f:c7:a9:6c:b6:18:fe:36:68:d2:ef:27: 6d:c8:76:5a:ea:4a:1c:a1:6e:4f:85:a2:03:19:e3:05:d6:48: 69:db:c8:2a:53:d6:6b:9d:12:7d:68:77:4f:6d:1c:74:a3:cb: bb:be:39:ef:15:b0:1e:d2:f7:c2:37:55:ff:79:6c:58:52:2b: dc:db:68:2f:51:ae:e0:e8:87:d2:dc:18:bf:ec:98:96:17:64: 4f:35:c0:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUal/T1V5zjLq5y0SyRDXFU49UYMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBRjAwODQzQzkwMjRCNjhBRTNFQzQzMzFFNzUzQjdC MkI0MjJERjAeFw0yNTExMDYyMjU3NTZaFw0yNTExMDgwMDA0NTZaMDMxMTAvBgNV BAMTKDJEQ0E2MEQwMDIxRjFEMDVEMDA0OEJBNERBQzQ1RjU0N0Y4RjhCRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9AmErenl62WYOX6nXkajLdbP puyx+Lq/2gHmZunVdM9myBJqRYErQIrmHG8kgBgEo2wEYocpd/kTg5q+ewFPv5xr BUrb5vrCsr1rWXSNG+1ZKuMtwz176DThdzXheHc9VQY5VDuBYTJ5K5pwQbMRLtXO XkR5KGGvw0AEHeVPtDKCXzSPyf2NVZUdcDzwhFt6GU23XDILGHXBiuV8HHx72kjq 7HSq1tLMZ5VD4gHQSFhnYgwxYU0wsvKSXRlWnTOFTJ0Pk5i9RdbNkkUuSDsyvaU2 6SpHQffsr5FwbwvzEYGpdPNd0KBOwBdkhB2fZPE7XZCXeeqmgBq5De4ur1FZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULcpg0AIfHQXQBIuk2sRfVH+Pi/gwHwYDVR0j BBgwFoAUuK8AhDyQJLaK4+xDMedTt7K0It8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFR5aDNHWkNGYmJBWXBOSDFrWG9IeHhpdEphV1lXUjRQM1BvZzJONUJy UkgvMS9COEFGMDA4NDNDOTAyNEI2OEFFM0VDNDMzMUU3NTNCN0IyQjQyMkRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4QUYwMDg0M0M5MDI0QjY4 QUUzRUM0MzMxRTc1M0I3QjJCNDIyREYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFR5aDNHWkNGYmJBWXBOSDFrWG9IeHhpdEphV1lXUjRQM1BvZzJONUJyUkgvMS9C OEFGMDA4NDNDOTAyNEI2OEFFM0VDNDMzMUU3NTNCN0IyQjQyMkRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM6wY42WRYEzFmGC6wwRW57kA32u8eIUPJuRcD3xZ8VYmYMvIgKDYLMBs6q0o DUVLYolC3fD/dHH/F+A3JuVyj4aLjgk0VPPrlj4k3RofiODKNSXODSn2GtBWdMwr aRNc/OmC2pEQx7BHDUkQCUkeyz0ombWJ/g40nJD7sztBG+MefPZagQg3Di+Bik4E Xyjoq5k7StEQBWtPdUXB2udbi8Wq9KqWDwvYj8epbLYY/jZo0u8nbch2WupKHKFu T4WiAxnjBdZIadvIKlPWa50SfWh3T20cdKPLu7457xWwHtL3wjdV/3lsWFIr3Nto L1Gu4OiH0twYv+yYlhdkTzXA9w== -----END CERTIFICATE-----Generated at Fri Nov 7 04:36:56 2025 by rpki-client