$ rpki-client -vvf rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.mft File: B85CAE3AAD278302E7E84DE574CABFB2535CBC59.mft (raw, json) Hash identifier: toej2+N3tugYs6YpR3eUzh3tUrLvfc4fLbKW2rMp8is= Subject key identifier: D9:63:09:F5:67:BD:F2:EB:AB:FA:BD:0D:6F:CC:D3:59:99:05:E6:7B Authority key identifier: B8:5C:AE:3A:AD:27:83:02:E7:E8:4D:E5:74:CA:BF:B2:53:5C:BC:59 Certificate issuer: /CN=B85CAE3AAD278302E7E84DE574CABFB2535CBC59 Certificate serial: 36C49514DCD8F2BFF62044C13AD3C3094F1B33F4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.cer Subject info access: rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.mft Manifest number: 8F Signing time: Tue 04 Nov 2025 10:34:56 +0000 Manifest this update: Tue 04 Nov 2025 10:29:56 +0000 Manifest next update: Wed 05 Nov 2025 14:27:56 +0000 Files and hashes: 1: 323830343a316362343a3a2f33322d313238203d3e203631363730.roa (hash: vLY5+bxCcSz9keEk/hNNs2BxL9cgGA7sHwehEwHEaD8=) 2: 3133312e3130302e3130342e302f32322d3332203d3e203631363730.roa (hash: WDt8RKT06PvFDXQ0UcocBAidzkP7Us+T/mJ5qfkFAu0=) 3: B85CAE3AAD278302E7E84DE574CABFB2535CBC59.crl (hash: rf0NzSC5JDexMqn3PcRVmsDKUWA4oMNmb2PjXEdc/tg=) 4: 3230312e3134382e3136342e302f32322d3332203d3e203631363730.roa (hash: M+aeOuYcirPnGN/Ap75nXooikFZUJurf7i6P4Zse/x4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.crl rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 14:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c4:95:14:dc:d8:f2:bf:f6:20:44:c1:3a:d3:c3:09:4f:1b:33:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B85CAE3AAD278302E7E84DE574CABFB2535CBC59 Validity Not Before: Nov 4 10:29:56 2025 GMT Not After : Nov 5 14:27:56 2025 GMT Subject: CN=D96309F567BDF2EBABFABD0D6FCCD3599905E67B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:f4:a0:b4:9b:12:ae:db:ef:ea:3f:32:26: ef:0f:64:b4:f0:10:c4:ba:ce:89:29:22:41:c6:80: 37:fd:22:07:94:b2:e4:ce:13:50:28:00:75:f0:76: 3a:e1:3c:42:12:ed:5d:6b:8d:e9:9d:84:f7:7f:87: 75:ab:cc:84:aa:44:d7:88:3a:2b:f9:31:38:6f:27: af:08:73:2d:43:10:71:bd:42:fe:4c:10:84:d8:76: f2:f6:a7:c0:a6:a5:1b:8c:33:e2:11:a8:b1:db:8e: ac:c1:ad:77:82:45:d3:54:f1:47:0b:79:db:72:07: cc:0f:24:5e:27:8e:60:93:55:4a:02:c9:ec:2c:fe: d5:6e:c2:b1:51:a0:d7:dd:19:da:35:1c:13:4e:88: 28:92:1a:96:a4:3a:c3:b9:a5:e7:69:b2:7c:b3:91: 92:fb:d4:c8:59:bd:dc:38:74:4b:48:0e:e1:79:96: 05:56:52:9f:9c:99:26:63:23:65:5e:a3:bb:d1:25: 58:ba:a7:23:88:a6:db:34:8d:22:83:6d:64:55:05: 22:e8:90:a0:f2:c1:c8:dd:e3:bd:74:88:34:e4:1c: 84:42:4d:db:fe:94:95:c5:bf:b3:07:8c:6d:10:3c: bb:8f:59:d5:f6:d1:8d:0a:d6:61:18:ab:05:f7:c0: 85:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:63:09:F5:67:BD:F2:EB:AB:FA:BD:0D:6F:CC:D3:59:99:05:E6:7B X509v3 Authority Key Identifier: keyid:B8:5C:AE:3A:AD:27:83:02:E7:E8:4D:E5:74:CA:BF:B2:53:5C:BC:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:03:71:bd:95:79:28:29:8c:a2:33:52:4d:d0:59:c3:c8:ed: f9:3e:3c:c3:65:1a:ed:57:f0:bb:5e:0b:bd:26:3c:44:32:17: d7:81:7d:f0:ab:53:d2:8a:d3:2d:d4:97:26:7f:53:17:f0:15: a3:cc:06:fe:85:dd:5e:ea:2a:09:fd:65:05:9e:b9:d3:c7:5f: 14:3b:2b:8a:2b:21:eb:19:35:4b:cd:7d:4f:40:55:a5:ff:5d: a5:f8:f4:07:5c:34:3a:d6:e9:ff:70:0a:a9:03:fb:5c:b0:23: a7:fd:8c:15:52:aa:43:74:9e:52:07:0d:2f:d5:c3:62:93:46: ff:1b:ae:87:73:0d:99:52:a7:3a:47:7a:4a:60:0a:25:9c:e0: 2e:61:06:58:9d:a6:b0:17:2e:cb:22:a9:2e:e5:a4:fd:de:6e: 41:c5:ef:2a:ed:f0:8d:c9:b5:71:91:fb:d1:23:a5:3c:3a:ca: 5c:ff:f4:12:b8:14:de:64:a6:2f:3b:dd:41:72:1d:2c:74:7f: 33:3f:01:38:0a:b0:83:04:fb:41:b5:ce:13:3e:7d:f2:2f:bb: 1a:3e:99:3a:68:a4:87:e7:ea:59:cb:9c:81:64:92:ec:56:d1: 04:88:5b:0d:63:ab:36:66:1b:18:33:13:6d:04:6f:37:1a:89: 3c:d2:4a:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNsSVFNzY8r/2IETBOtPDCU8bM/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg1Q0FFM0FBRDI3ODMwMkU3RTg0REU1NzRDQUJGQjI1 MzVDQkM1OTAeFw0yNTExMDQxMDI5NTZaFw0yNTExMDUxNDI3NTZaMDMxMTAvBgNV BAMTKEQ5NjMwOUY1NjdCREYyRUJBQkZBQkQwRDZGQ0NEMzU5OTkwNUU2N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9HfSgtJsSrtvv6j8yJu8PZLTw EMS6zokpIkHGgDf9IgeUsuTOE1AoAHXwdjrhPEIS7V1rjemdhPd/h3WrzISqRNeI Oiv5MThvJ68Icy1DEHG9Qv5MEITYdvL2p8CmpRuMM+IRqLHbjqzBrXeCRdNU8UcL edtyB8wPJF4njmCTVUoCyews/tVuwrFRoNfdGdo1HBNOiCiSGpakOsO5pedpsnyz kZL71MhZvdw4dEtIDuF5lgVWUp+cmSZjI2Veo7vRJVi6pyOIpts0jSKDbWRVBSLo kKDywcjd4710iDTkHIRCTdv+lJXFv7MHjG0QPLuPWdX20Y0K1mEYqwX3wIVdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2WMJ9We98uur+r0Nb8zTWZkF5nswHwYDVR0j BBgwFoAUuFyuOq0ngwLn6E3ldMq/slNcvFkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFVoTm1DZnBWVUJBQ21qTUw4bXc5R2hVOHNaTlJXbnpiQnRCaVNKRFlk cVovMC9CODVDQUUzQUFEMjc4MzAyRTdFODRERTU3NENBQkZCMjUzNUNCQzU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4NUNBRTNBQUQyNzgzMDJF N0U4NERFNTc0Q0FCRkIyNTM1Q0JDNTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFVoTm1DZnBWVUJBQ21qTUw4bXc5R2hVOHNaTlJXbnpiQnRCaVNKRFlkcVovMC9C ODVDQUUzQUFEMjc4MzAyRTdFODRERTU3NENBQkZCMjUzNUNCQzU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMANxvZV5KCmMojNSTdBZw8jt+T48w2Ua7Vfwu14LvSY8RDIX14F98KtT0orT LdSXJn9TF/AVo8wG/oXdXuoqCf1lBZ6508dfFDsriish6xk1S819T0BVpf9dpfj0 B1w0Otbp/3AKqQP7XLAjp/2MFVKqQ3SeUgcNL9XDYpNG/xuuh3MNmVKnOkd6SmAK JZzgLmEGWJ2msBcuyyKpLuWk/d5uQcXvKu3wjcm1cZH70SOlPDrKXP/0ErgU3mSm LzvdQXIdLHR/Mz8BOAqwgwT7QbXOEz598i+7Gj6ZOmikh+fqWcucgWSS7FbRBIhb DWOrNmYbGDMTbQRvNxqJPNJKgg== -----END CERTIFICATE-----Generated at Wed Nov 5 06:18:15 2025 by rpki-client