$ rpki-client -vvf rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft File: 8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft (raw, json) Hash identifier: zWiOja9xqkn9FN8agB50zv+IVJl6adR6ZqA9mKTVQdk= Subject key identifier: 90:11:63:A5:8B:E9:D3:1B:C6:66:E1:5C:DA:81:BA:5A:C1:8C:4B:FF Authority key identifier: 8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F Certificate issuer: /CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F Certificate serial: 279FE6989A9291B041604F62D353ACD000795992 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer Subject info access: rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft Manifest number: D0 Signing time: Mon 20 Oct 2025 03:48:38 +0000 Manifest this update: Mon 20 Oct 2025 03:43:38 +0000 Manifest next update: Tue 21 Oct 2025 06:53:38 +0000 Files and hashes: 1: 3137302e3233382e3234382e302f32322d3332203d3e20323633393539.roa (hash: 9vkM44Why6sGQcMypDT8T8Q9VtBz4wbE97cshJxXhpQ=) 2: 323830343a323836303a3a2f33322d313238203d3e20323633393539.roa (hash: oVXD5VaDUqeD9Go0IkrJ158heEh4rOl0USTusw94FRI=) 3: 3133382e3235352e37322e302f32322d3332203d3e20323633393539.roa (hash: waEFhBe+SjRSqQswDzUJGqZm7m+XO9yIfZZm4YTlyYw=) 4: 8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl (hash: t4Xq5F1463Fn5B+WIt9Yqblv3Q0EjBQ1QIBnwROoV34=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:9f:e6:98:9a:92:91:b0:41:60:4f:62:d3:53:ac:d0:00:79:59:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F Validity Not Before: Oct 20 03:43:38 2025 GMT Not After : Oct 21 06:53:38 2025 GMT Subject: CN=901163A58BE9D31BC666E15CDA81BA5AC18C4BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:88:d7:9b:6c:25:95:16:ee:43:10:98:ac: 75:9f:34:fa:97:a7:36:49:0e:bf:e3:59:cd:02:d1: 1a:fe:07:4d:56:91:f8:72:c3:b8:e7:45:10:b4:a9: 42:3c:82:ea:2f:d8:f0:80:3d:64:bd:98:6d:27:98: ed:89:23:1a:59:19:df:0f:94:04:30:b9:2b:88:da: d6:09:f8:f3:2c:74:f4:93:d0:e5:9c:3b:2e:a2:ca: c2:65:68:f3:51:78:9e:c4:d8:1a:60:28:26:3d:22: 3d:17:7a:a8:0d:cb:4c:70:69:5b:93:1c:2b:85:87: 26:27:a6:77:61:c0:e3:f7:14:cc:7d:a3:90:4a:54: 28:21:0b:fd:89:3e:15:44:92:0b:7b:8d:76:7c:39: 8a:a3:1c:c7:db:18:04:d3:65:1c:59:74:76:d4:5c: 3f:1d:5a:d0:8e:64:eb:4c:a5:df:31:f4:45:19:b2: b5:ca:20:49:cd:5f:6d:2f:c3:94:67:b1:4d:fc:3b: 8a:f0:ce:4f:76:75:be:a2:f0:db:9b:09:17:e0:2c: 00:05:86:8f:55:95:4c:fa:5c:5a:a0:48:88:84:18: 26:f6:d8:71:c5:d7:15:b4:ce:d6:ed:74:5f:af:68: f9:e2:71:a5:19:9e:4f:12:d2:b9:09:eb:63:d7:47: da:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:11:63:A5:8B:E9:D3:1B:C6:66:E1:5C:DA:81:BA:5A:C1:8C:4B:FF X509v3 Authority Key Identifier: keyid:8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:be:77:dc:7c:8d:86:cf:b8:26:30:f3:3e:b6:0c:ea:4c:3c: 2c:af:0c:4a:4f:cc:44:76:49:19:56:56:1a:d7:dd:e1:5a:00: ea:75:39:b7:6c:c0:81:00:2c:85:12:58:64:9b:06:5f:21:bb: 1b:97:78:cf:00:2d:9d:84:7c:d3:cb:22:b0:51:e8:ca:c2:71: 6b:07:59:d2:a3:2a:be:a6:89:5e:28:a2:d7:97:3a:9c:4e:d9: b2:21:3b:36:01:3e:6c:0d:88:9f:38:88:9e:14:25:5a:fa:0e: 67:e4:59:32:37:1b:19:24:65:34:69:05:bb:3c:74:b1:fa:7a: fd:2c:99:71:32:2a:4a:02:71:c9:2a:af:65:4d:9f:8f:e7:f8: c8:9c:db:d3:1b:80:80:cd:c9:c8:5b:9e:68:12:7f:7b:e9:21: e6:84:aa:92:da:05:bf:2c:69:e0:c7:40:63:03:23:b7:cd:04: ae:7e:85:65:89:7e:18:8c:ae:2a:1a:35:65:52:78:df:a1:79: 72:f2:34:07:d0:0b:be:9a:81:89:e9:38:b5:4f:3c:6f:78:1b: ea:bd:9d:ed:c6:ea:03:c0:1c:89:14:eb:ba:d6:cf:22:bf:81: 03:a5:cf:43:aa:42:bf:41:71:c4:93:10:a9:63:5f:1c:48:11: 6e:9e:e5:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ5/mmJqSkbBBYE9i01Os0AB5WZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCNUEyNTE2RjcxM0NGRkU5RDE1MDRFNzlBNEJEM0I5 QUZCMEEwRjAeFw0yNTEwMjAwMzQzMzhaFw0yNTEwMjEwNjUzMzhaMDMxMTAvBgNV BAMTKDkwMTE2M0E1OEJFOUQzMUJDNjY2RTE1Q0RBODFCQTVBQzE4QzRCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4o4jXm2wllRbuQxCYrHWfNPqX pzZJDr/jWc0C0Rr+B01Wkfhyw7jnRRC0qUI8guov2PCAPWS9mG0nmO2JIxpZGd8P lAQwuSuI2tYJ+PMsdPST0OWcOy6iysJlaPNReJ7E2BpgKCY9Ij0XeqgNy0xwaVuT HCuFhyYnpndhwOP3FMx9o5BKVCghC/2JPhVEkgt7jXZ8OYqjHMfbGATTZRxZdHbU XD8dWtCOZOtMpd8x9EUZsrXKIEnNX20vw5RnsU38O4rwzk92db6i8NubCRfgLAAF ho9VlUz6XFqgSIiEGCb22HHF1xW0ztbtdF+vaPnicaUZnk8S0rkJ62PXR9onAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkBFjpYvp0xvGZuFc2oG6WsGMS/8wHwYDVR0j BBgwFoAUjLWiUW9xPP/p0VBOeaS9O5r7Cg8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVhGemVkeXJZTExBSG1YQmFmSzdDSzNqcHRNb2ZvN0gxbVNDV1FQUjVN YUMvMC84Q0I1QTI1MTZGNzEzQ0ZGRTlEMTUwNEU3OUE0QkQzQjlBRkIwQTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQjVBMjUxNkY3MTNDRkZF OUQxNTA0RTc5QTRCRDNCOUFGQjBBMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVhGemVkeXJZTExBSG1YQmFmSzdDSzNqcHRNb2ZvN0gxbVNDV1FQUjVNYUMvMC84 Q0I1QTI1MTZGNzEzQ0ZGRTlEMTUwNEU3OUE0QkQzQjlBRkIwQTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANL533HyNhs+4JjDzPrYM6kw8LK8MSk/MRHZJGVZWGtfd4VoA6nU5t2zAgQAs hRJYZJsGXyG7G5d4zwAtnYR808sisFHoysJxawdZ0qMqvqaJXiii15c6nE7ZsiE7 NgE+bA2InziInhQlWvoOZ+RZMjcbGSRlNGkFuzx0sfp6/SyZcTIqSgJxySqvZU2f j+f4yJzb0xuAgM3JyFueaBJ/e+kh5oSqktoFvyxp4MdAYwMjt80Ern6FZYl+GIyu Kho1ZVJ436F5cvI0B9ALvpqBiek4tU88b3gb6r2d7cbqA8AciRTrutbPIr+BA6XP Q6pCv0FxxJMQqWNfHEgRbp7lQQ== -----END CERTIFICATE-----Generated at Mon Oct 20 21:37:19 2025 by rpki-client