$ rpki-client -vvf rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.mft File: 89C86114565777DCA20A0F5E5C3319F12FC1DC5A.mft (raw, json) Hash identifier: sO55QJxLVEiGZCnSB3+SVUjZ2dto4R0xgj/ho485KSI= Subject key identifier: EE:6D:BA:6A:D7:F2:B9:DC:17:D2:4A:60:C4:C7:17:EF:7F:4D:81:74 Authority key identifier: 89:C8:61:14:56:57:77:DC:A2:0A:0F:5E:5C:33:19:F1:2F:C1:DC:5A Certificate issuer: /CN=89C86114565777DCA20A0F5E5C3319F12FC1DC5A Certificate serial: 7A22586CBB23657A78E12A1C180CA7CC20ED90E9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.cer Subject info access: rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.mft Manifest number: 33 Signing time: Mon 20 Oct 2025 00:14:13 +0000 Manifest this update: Mon 20 Oct 2025 00:09:13 +0000 Manifest next update: Tue 21 Oct 2025 03:48:13 +0000 Files and hashes: 1: 89C86114565777DCA20A0F5E5C3319F12FC1DC5A.crl (hash: PmdGcXIxQBd2mN10ygqdwW0dl6fdHerTqncHinLoK00=) 2: 323830343a313631303a3a2f33322d313238203d3e20323633323635.roa (hash: K1COMczg1tyWr1KkstdQ5mm6NCYXFr4sfHYMy4HwQh8=) 3: 3137392e3130372e382e302f32312d3234203d3e20313938393439.roa (hash: Ijf3Xpr8Hy/fRH+JM/QvzOJbEJCXKWLRX6JEwAhLUoc=) 4: 3137392e3130372e382e302f32312d3332203d3e20323633323635.roa (hash: c4/eCnm11wf52KZhGuLppr4NQApA/XFR5cO8KT517dw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.crl rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:22:58:6c:bb:23:65:7a:78:e1:2a:1c:18:0c:a7:cc:20:ed:90:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89C86114565777DCA20A0F5E5C3319F12FC1DC5A Validity Not Before: Oct 20 00:09:13 2025 GMT Not After : Oct 21 03:48:13 2025 GMT Subject: CN=EE6DBA6AD7F2B9DC17D24A60C4C717EF7F4D8174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:72:83:d4:78:5e:d0:f0:aa:ad:fc:f1:b4:d5: 4b:76:7d:5b:55:54:ec:99:89:df:85:59:e9:b2:03: 7c:f1:9a:4b:7c:73:5b:d6:4e:9a:07:4e:a3:df:77: 4c:59:49:d8:2a:46:f1:c8:6b:12:35:96:59:7c:ff: 8a:d3:32:97:cd:df:09:a0:10:52:55:5b:01:3a:c3: 7e:21:98:1c:df:4e:69:12:d2:75:90:8f:21:42:87: 1f:3b:23:f2:92:c2:15:a7:ee:f6:26:4d:a1:94:7d: 05:e9:46:5c:03:89:74:b6:97:5f:30:a1:63:c7:2c: d8:33:b2:4b:c4:0d:3f:89:81:3e:5d:a7:98:93:ba: 52:b5:4c:14:8c:53:09:57:d1:fe:52:1b:81:78:5d: b1:a1:66:85:49:d5:dd:68:be:3a:56:ea:f1:b1:17: d2:13:14:d6:33:33:10:ea:a8:c6:4d:b1:04:f4:eb: b4:b8:bf:31:89:2d:15:ff:31:bf:11:e7:b0:4e:9d: 2d:5a:89:e0:83:c8:e8:f7:99:4f:c2:c0:9c:2a:b8: 2e:92:2e:5b:c6:2a:05:a8:36:18:68:1e:b6:1c:6e: d6:09:38:a8:6f:fc:6f:9e:ef:18:c9:f3:2c:fc:38: 9b:f0:68:09:aa:5a:58:d8:5d:d0:0e:87:05:76:eb: 52:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6D:BA:6A:D7:F2:B9:DC:17:D2:4A:60:C4:C7:17:EF:7F:4D:81:74 X509v3 Authority Key Identifier: keyid:89:C8:61:14:56:57:77:DC:A2:0A:0F:5E:5C:33:19:F1:2F:C1:DC:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:dd:72:b7:cd:7d:7a:bb:15:9a:c3:73:cd:85:4a:e7:5d:23: e5:b1:e3:e9:33:7e:75:9c:aa:ba:71:76:46:d1:0c:77:f5:6d: ab:f7:9a:f0:4e:ea:e1:eb:c9:83:22:f9:de:93:4a:96:cc:0d: 2c:84:6b:59:46:4f:1e:db:f8:0e:ab:a0:60:fd:4b:99:69:3e: 6f:85:f0:05:76:18:cd:43:cb:b1:4a:2d:24:12:47:30:c7:62: ca:a2:e7:92:19:c4:8e:d2:59:91:1f:ca:05:e4:84:14:c0:fd: b0:be:be:a3:c8:d3:11:19:73:67:18:21:35:d0:36:86:d8:8d: 04:4b:c7:47:98:f4:8d:3d:f6:dc:48:5d:95:84:ba:5f:bc:15: 73:d9:9d:13:a7:f0:ee:34:78:a9:2c:45:80:82:d1:89:03:84: c2:4b:86:7d:b2:c3:05:00:7e:31:3a:0c:8e:6d:49:6b:64:c3: 6e:90:40:c7:b1:88:d7:85:0b:75:42:d0:e9:2d:5a:89:73:52: e5:84:39:0e:e8:7a:fe:28:9b:77:aa:3e:b6:81:e3:a9:86:b2: c6:53:83:c7:64:bf:76:af:94:a8:5b:e8:b0:05:b2:d3:f6:73: d4:16:9c:4d:d2:9c:1d:ee:88:68:0d:11:4d:d9:7c:2e:9c:47: c7:b6:5c:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeiJYbLsjZXp44SocGAynzCDtkOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlDODYxMTQ1NjU3NzdEQ0EyMEEwRjVFNUMzMzE5RjEy RkMxREM1QTAeFw0yNTEwMjAwMDA5MTNaFw0yNTEwMjEwMzQ4MTNaMDMxMTAvBgNV BAMTKEVFNkRCQTZBRDdGMkI5REMxN0QyNEE2MEM0QzcxN0VGN0Y0RDgxNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWcoPUeF7Q8Kqt/PG01Ut2fVtV VOyZid+FWemyA3zxmkt8c1vWTpoHTqPfd0xZSdgqRvHIaxI1lll8/4rTMpfN3wmg EFJVWwE6w34hmBzfTmkS0nWQjyFChx87I/KSwhWn7vYmTaGUfQXpRlwDiXS2l18w oWPHLNgzskvEDT+JgT5dp5iTulK1TBSMUwlX0f5SG4F4XbGhZoVJ1d1ovjpW6vGx F9ITFNYzMxDqqMZNsQT067S4vzGJLRX/Mb8R57BOnS1aieCDyOj3mU/CwJwquC6S LlvGKgWoNhhoHrYcbtYJOKhv/G+e7xjJ8yz8OJvwaAmqWljYXdAOhwV261LFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7m26atfyudwX0kpgxMcX739NgXQwHwYDVR0j BBgwFoAUichhFFZXd9yiCg9eXDMZ8S/B3FowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHkybzU1MzdjQzZZY0NzQkFOOHZXTUJVNWFRTUpjNW16aEtCNHV0Tm1h VXovMC84OUM4NjExNDU2NTc3N0RDQTIwQTBGNUU1QzMzMTlGMTJGQzFEQzVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5Qzg2MTE0NTY1Nzc3RENB MjBBMEY1RTVDMzMxOUYxMkZDMURDNUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHkybzU1MzdjQzZZY0NzQkFOOHZXTUJVNWFRTUpjNW16aEtCNHV0Tm1hVXovMC84 OUM4NjExNDU2NTc3N0RDQTIwQTBGNUU1QzMzMTlGMTJGQzFEQzVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQN1yt819ersVmsNzzYVK510j5bHj6TN+dZyqunF2RtEMd/Vtq/ea8E7q4evJ gyL53pNKlswNLIRrWUZPHtv4DqugYP1LmWk+b4XwBXYYzUPLsUotJBJHMMdiyqLn khnEjtJZkR/KBeSEFMD9sL6+o8jTERlzZxghNdA2htiNBEvHR5j0jT323EhdlYS6 X7wVc9mdE6fw7jR4qSxFgILRiQOEwkuGfbLDBQB+MToMjm1Ja2TDbpBAx7GI14UL dULQ6S1aiXNS5YQ5Duh6/iibd6o+toHjqYayxlODx2S/dq+UqFvosAWy0/Zz1Bac TdKcHe6IaA0RTdl8LpxHx7Zc6A== -----END CERTIFICATE-----Generated at Mon Oct 20 09:08:29 2025 by rpki-client