$ rpki-client -vvf rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft File: 8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft (raw, json) Hash identifier: ezKsLRgdp8liH4GE2TuUUGzk5bRkn/uFrMNSZo3lWzA= Subject key identifier: 9B:B3:48:70:DA:BC:0D:B9:DC:19:7A:C6:71:55:0E:22:FC:8F:E7:DB Authority key identifier: 8B:89:FD:11:7F:F5:2A:01:99:DB:C5:00:2C:1B:C7:D4:4E:20:4A:D2 Certificate issuer: /CN=8B89FD117FF52A0199DBC5002C1BC7D44E204AD2 Certificate serial: 4F00F37C0FA7FCB58353492F5CA59F3DCB994BA4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft Manifest number: 65 Signing time: Sun 19 Oct 2025 20:56:03 +0000 Manifest this update: Sun 19 Oct 2025 20:51:03 +0000 Manifest next update: Mon 20 Oct 2025 22:02:03 +0000 Files and hashes: 1: 34352e3233352e3133322e302f32322d3234203d3e20323637343232.roa (hash: fwixdrQWEPst8s+eVaUhnE8mUnCaPHjzEVa6AGdzW3U=) 2: 8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.crl (hash: bN3d+qkwb8gm4HsypwdjQFLC647nKlpxNUEHVGRUaOc=) 3: 323830343a346434633a3a2f33322d3438203d3e20323637343232.roa (hash: TSp4pb28CDc3CmgAqNWTUzj2tUUPyBdgJJeYPfOIRjg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.crl rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 22:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:00:f3:7c:0f:a7:fc:b5:83:53:49:2f:5c:a5:9f:3d:cb:99:4b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B89FD117FF52A0199DBC5002C1BC7D44E204AD2 Validity Not Before: Oct 19 20:51:03 2025 GMT Not After : Oct 20 22:02:03 2025 GMT Subject: CN=9BB34870DABC0DB9DC197AC671550E22FC8FE7DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:26:b6:d3:a6:7c:5e:f3:6c:b7:92:65:4f: ad:5d:46:2d:23:8f:0c:f5:ea:18:43:c1:84:e7:40: 43:43:a2:ac:e1:9c:0d:aa:e2:02:9d:50:ae:5a:19: 7e:38:72:85:47:fd:5a:3d:2f:f9:23:6f:45:17:76: aa:22:09:43:bb:cf:59:d0:ba:0b:31:f2:d6:fd:e2: 4c:32:22:c5:32:8a:5a:c1:f6:98:26:37:bf:5b:d2: 99:73:cd:45:bf:7e:11:75:cb:ae:56:96:f3:d8:1b: 77:8e:ca:b1:c2:1a:12:16:5f:6f:95:39:fd:6e:ea: 5f:fc:b1:e2:35:8c:ff:11:7f:b5:98:a7:f6:da:b9: ee:05:4c:b4:00:14:00:b2:81:8b:c2:f1:47:42:6b: 27:c3:b8:b8:20:a8:a5:4d:4e:6c:30:77:e8:c7:db: ec:e8:0d:09:e4:50:0f:f4:eb:0c:ae:fc:01:e1:3f: 51:74:48:c7:13:96:93:1b:75:a4:a2:24:87:83:29: 32:f0:30:59:3a:06:6f:c7:78:d7:99:11:42:85:17: 75:e4:39:15:ad:77:f8:bd:17:3a:41:38:71:e6:b4: c1:cd:22:d3:9c:b7:a0:33:77:9b:13:a2:78:0d:2d: 10:19:45:93:a6:ca:0c:07:7d:1a:89:7d:0e:fc:0c: 4c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B3:48:70:DA:BC:0D:B9:DC:19:7A:C6:71:55:0E:22:FC:8F:E7:DB X509v3 Authority Key Identifier: keyid:8B:89:FD:11:7F:F5:2A:01:99:DB:C5:00:2C:1B:C7:D4:4E:20:4A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:cc:88:75:0d:1f:f9:49:c8:a6:d6:34:ce:ee:ec:cb:3f:56: 27:3f:1d:81:67:84:09:d9:51:6f:6c:25:0a:01:ea:25:ad:01: ca:a3:3b:e4:51:a3:9d:3a:15:fe:89:01:bc:cb:31:a2:f5:42: 3d:f7:80:f0:81:07:2c:e6:79:e9:c7:98:7e:ec:75:bf:83:bf: 09:e6:06:5a:cc:a8:72:f7:b1:f0:88:5e:6a:4a:21:aa:c3:02: 8a:fa:0e:5f:60:83:f8:74:7d:9b:45:d6:84:7f:20:23:df:dd: 08:34:88:db:d2:9e:4f:bc:88:e2:c7:33:33:34:b8:d0:7c:6b: 00:d6:99:23:a2:ec:2f:ea:df:34:5d:1f:59:f2:2b:ad:25:4c: 38:b0:82:27:e6:b2:a3:ea:c0:9e:cb:37:17:c7:4b:5e:b5:e4: c6:f2:3b:91:38:b1:c3:e8:ef:ba:ef:7c:ab:4b:fb:0b:b5:24: f3:ea:12:f7:ca:ff:b7:78:b0:d6:dc:ae:d9:b9:ed:54:40:45: ee:99:98:a7:44:8b:39:40:fc:74:20:a6:a7:a2:eb:e3:a4:6f: 8a:02:8d:18:38:4b:be:53:e3:5c:d9:89:e5:d7:63:53:4d:1d: 70:d2:f5:b1:96:a8:8d:8b:9d:5e:29:8c:69:e3:e4:e6:ec:c4: 67:bc:bf:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTwDzfA+n/LWDU0kvXKWfPcuZS6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI4OUZEMTE3RkY1MkEwMTk5REJDNTAwMkMxQkM3RDQ0 RTIwNEFEMjAeFw0yNTEwMTkyMDUxMDNaFw0yNTEwMjAyMjAyMDNaMDMxMTAvBgNV BAMTKDlCQjM0ODcwREFCQzBEQjlEQzE5N0FDNjcxNTUwRTIyRkM4RkU3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0ya206Z8XvNst5JlT61dRi0j jwz16hhDwYTnQENDoqzhnA2q4gKdUK5aGX44coVH/Vo9L/kjb0UXdqoiCUO7z1nQ ugsx8tb94kwyIsUyilrB9pgmN79b0plzzUW/fhF1y65WlvPYG3eOyrHCGhIWX2+V Of1u6l/8seI1jP8Rf7WYp/baue4FTLQAFACygYvC8UdCayfDuLggqKVNTmwwd+jH 2+zoDQnkUA/06wyu/AHhP1F0SMcTlpMbdaSiJIeDKTLwMFk6Bm/HeNeZEUKFF3Xk ORWtd/i9FzpBOHHmtMHNItOct6Azd5sTongNLRAZRZOmygwHfRqJfQ78DExlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUm7NIcNq8DbncGXrGcVUOIvyP59swHwYDVR0j BBgwFoAUi4n9EX/1KgGZ28UALBvH1E4gStIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVFwczk4Z1U0dm5wV0V1WDZQVGFab2JVVEZ4VEtQTXJlQnVZSFJoMmdm TDEvMC84Qjg5RkQxMTdGRjUyQTAxOTlEQkM1MDAyQzFCQzdENDRFMjA0QUQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCODlGRDExN0ZGNTJBMDE5 OURCQzUwMDJDMUJDN0Q0NEUyMDRBRDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVFwczk4Z1U0dm5wV0V1WDZQVGFab2JVVEZ4VEtQTXJlQnVZSFJoMmdmTDEvMC84 Qjg5RkQxMTdGRjUyQTAxOTlEQkM1MDAyQzFCQzdENDRFMjA0QUQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa8yIdQ0f+UnIptY0zu7syz9WJz8dgWeECdlRb2wlCgHqJa0ByqM75FGjnToV /okBvMsxovVCPfeA8IEHLOZ56ceYfux1v4O/CeYGWsyocvex8IheakohqsMCivoO X2CD+HR9m0XWhH8gI9/dCDSI29KeT7yI4sczMzS40HxrANaZI6LsL+rfNF0fWfIr rSVMOLCCJ+ayo+rAnss3F8dLXrXkxvI7kTixw+jvuu98q0v7C7Uk8+oS98r/t3iw 1tyu2bntVEBF7pmYp0SLOUD8dCCmp6Lr46RvigKNGDhLvlPjXNmJ5ddjU00dcNL1 sZaojYudXimMaePk5uzEZ7y/rg== -----END CERTIFICATE-----Generated at Mon Oct 20 16:13:28 2025 by rpki-client