$ rpki-client -vvf rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft File: 8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft (raw, json) Hash identifier: K0huMd9GL8Apxrjsd1l7Gls8iqwPHIWGDdgAFrqifgM= Subject key identifier: 82:A9:F3:D9:FD:B7:46:A4:03:D6:91:B0:52:AD:57:15:B7:A8:44:C1 Authority key identifier: 8B:89:FD:11:7F:F5:2A:01:99:DB:C5:00:2C:1B:C7:D4:4E:20:4A:D2 Certificate issuer: /CN=8B89FD117FF52A0199DBC5002C1BC7D44E204AD2 Certificate serial: 48EA48865DD4FCBBCB277D9726EDA89CA73CD32C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft Manifest number: 17 Signing time: Fri 22 Aug 2025 23:24:09 +0000 Manifest this update: Fri 22 Aug 2025 23:19:09 +0000 Manifest next update: Sat 23 Aug 2025 23:46:09 +0000 Files and hashes: 1: 34352e3233352e3133322e302f32322d3234203d3e20323637343232.roa (hash: fwixdrQWEPst8s+eVaUhnE8mUnCaPHjzEVa6AGdzW3U=) 2: 8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.crl (hash: z5Lk+YyAAW1ktw035rHFWQlIBRMN0JnaMP54xlaM/Uk=) 3: 323830343a346434633a3a2f33322d3438203d3e20323637343232.roa (hash: TSp4pb28CDc3CmgAqNWTUzj2tUUPyBdgJJeYPfOIRjg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.crl rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 23:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ea:48:86:5d:d4:fc:bb:cb:27:7d:97:26:ed:a8:9c:a7:3c:d3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B89FD117FF52A0199DBC5002C1BC7D44E204AD2 Validity Not Before: Aug 22 23:19:09 2025 GMT Not After : Aug 23 23:46:09 2025 GMT Subject: CN=82A9F3D9FDB746A403D691B052AD5715B7A844C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:bf:19:c3:a4:c4:ef:e4:d9:5a:7b:f5:60: d8:a6:22:06:f4:e1:e7:8c:0b:b6:1c:7e:38:23:48: 01:37:e1:a8:9b:04:30:1d:5a:94:77:b3:7e:a8:a5: 00:82:8d:08:ee:b8:e3:58:64:de:8b:43:ff:33:ce: ab:52:5e:3e:87:a4:6f:ff:31:02:74:78:06:70:d1: 29:78:62:ed:40:64:dc:c5:ff:34:ef:f9:ba:18:ca: d2:27:2d:e1:7a:a0:f0:f8:0a:af:06:09:4f:0a:7d: dc:b5:be:0c:a9:89:48:b3:0a:92:be:ff:fb:d8:b8: 6c:fc:0b:77:82:7a:30:18:a2:fb:08:e3:3f:06:d0: cf:5e:57:b3:fd:f4:f6:73:75:90:2d:f3:a3:46:89: d3:d3:55:00:55:07:d2:58:0c:58:75:8d:01:47:bd: a7:42:aa:85:99:88:41:70:1e:d1:6c:64:4a:5f:db: 11:fd:ec:af:ac:2c:6a:b8:e7:9f:37:f3:80:9a:e2: b9:04:c7:60:a2:c1:a2:ff:49:5a:06:f4:00:72:de: c1:1e:03:c0:aa:0d:df:52:62:10:eb:1f:a4:ef:8e: 66:83:e0:43:e2:cc:91:07:36:3c:f9:f7:54:1b:6e: f6:86:50:a8:2e:3a:9c:41:c0:24:b1:88:d6:28:02: b0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A9:F3:D9:FD:B7:46:A4:03:D6:91:B0:52:AD:57:15:B7:A8:44:C1 X509v3 Authority Key Identifier: keyid:8B:89:FD:11:7F:F5:2A:01:99:DB:C5:00:2C:1B:C7:D4:4E:20:4A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:2f:ba:52:78:ba:3a:13:d9:b9:f1:7c:f3:c9:77:1a:32:8f: 94:f7:e6:b7:41:80:83:83:e4:24:89:88:e5:43:88:4c:0d:16: 94:2d:f8:5c:29:e0:44:4b:6c:90:da:52:9c:e9:8c:b4:dc:91: b9:6f:3c:73:21:7a:48:70:a9:c9:d5:3f:20:02:bf:23:91:78: f9:43:af:2b:48:85:85:86:97:e6:34:9a:8d:7b:f5:0a:35:b7: b1:48:55:a3:af:16:f7:ee:ff:d3:84:ae:7e:17:84:b5:9d:ee: 1c:03:1e:1a:c5:eb:4d:6d:f1:01:b5:df:de:42:f6:63:41:c0: 52:96:39:2c:8f:ab:4c:08:10:b8:59:39:a0:15:3f:21:34:39: 3c:81:6a:03:19:97:84:df:c9:5a:29:ad:83:48:92:41:08:d9: c5:49:6b:49:3d:af:b7:c7:87:90:09:22:9c:c9:95:f4:8b:29: 3f:f1:ed:73:69:2e:77:81:f0:66:10:72:b8:37:5c:7a:81:c4: 55:91:aa:cd:6f:7e:29:b9:7d:7b:69:e7:a9:63:d5:39:fd:7b: 37:5c:0e:f4:64:36:fd:09:99:4c:ce:6d:a6:15:1d:73:a7:c2: e1:7e:d3:87:81:c7:4f:b5:f8:d2:c5:67:43:50:43:b1:1b:80: 6b:7e:1e:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSOpIhl3U/LvLJ32XJu2onKc80ywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI4OUZEMTE3RkY1MkEwMTk5REJDNTAwMkMxQkM3RDQ0 RTIwNEFEMjAeFw0yNTA4MjIyMzE5MDlaFw0yNTA4MjMyMzQ2MDlaMDMxMTAvBgNV BAMTKDgyQTlGM0Q5RkRCNzQ2QTQwM0Q2OTFCMDUyQUQ1NzE1QjdBODQ0QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqHb8Zw6TE7+TZWnv1YNimIgb0 4eeMC7YcfjgjSAE34aibBDAdWpR3s36opQCCjQjuuONYZN6LQ/8zzqtSXj6HpG// MQJ0eAZw0Sl4Yu1AZNzF/zTv+boYytInLeF6oPD4Cq8GCU8Kfdy1vgypiUizCpK+ //vYuGz8C3eCejAYovsI4z8G0M9eV7P99PZzdZAt86NGidPTVQBVB9JYDFh1jQFH vadCqoWZiEFwHtFsZEpf2xH97K+sLGq4558384Ca4rkEx2CiwaL/SVoG9ABy3sEe A8CqDd9SYhDrH6TvjmaD4EPizJEHNjz591QbbvaGUKguOpxBwCSxiNYoArB/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgqnz2f23RqQD1pGwUq1XFbeoRMEwHwYDVR0j BBgwFoAUi4n9EX/1KgGZ28UALBvH1E4gStIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVFwczk4Z1U0dm5wV0V1WDZQVGFab2JVVEZ4VEtQTXJlQnVZSFJoMmdm TDEvMC84Qjg5RkQxMTdGRjUyQTAxOTlEQkM1MDAyQzFCQzdENDRFMjA0QUQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCODlGRDExN0ZGNTJBMDE5 OURCQzUwMDJDMUJDN0Q0NEUyMDRBRDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVFwczk4Z1U0dm5wV0V1WDZQVGFab2JVVEZ4VEtQTXJlQnVZSFJoMmdmTDEvMC84 Qjg5RkQxMTdGRjUyQTAxOTlEQkM1MDAyQzFCQzdENDRFMjA0QUQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeC+6Uni6OhPZufF888l3GjKPlPfmt0GAg4PkJImI5UOITA0WlC34XCngREts kNpSnOmMtNyRuW88cyF6SHCpydU/IAK/I5F4+UOvK0iFhYaX5jSajXv1CjW3sUhV o68W9+7/04SufheEtZ3uHAMeGsXrTW3xAbXf3kL2Y0HAUpY5LI+rTAgQuFk5oBU/ ITQ5PIFqAxmXhN/JWimtg0iSQQjZxUlrST2vt8eHkAkinMmV9IspP/Htc2kud4Hw ZhByuDdceoHEVZGqzW9+Kbl9e2nnqWPVOf17N1wO9GQ2/QmZTM5tphUdc6fC4X7T h4HHT7X40sVnQ1BDsRuAa34eWg== -----END CERTIFICATE-----Generated at Sat Aug 23 10:30:40 2025 by rpki-client