$ rpki-client -vvf rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft File: 8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft (raw, json) Hash identifier: eb0DHbQvNo7DhjCVL2M9cobZlw4UVShniXN14L2db98= Subject key identifier: B0:5B:43:C6:0D:C7:2E:A3:95:3F:6F:78:E8:7F:F2:23:D6:68:60:68 Authority key identifier: 8A:87:3C:3D:C0:61:82:1F:FE:F1:C2:0E:64:84:51:B8:FE:64:6F:AE Certificate issuer: /CN=8A873C3DC061821FFEF1C20E648451B8FE646FAE Certificate serial: 25A6A1069483AC47C21DA5612D1E84B1C2F3F1FA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer Subject info access: rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft Manifest number: 0157 Signing time: Mon 20 Oct 2025 11:56:10 +0000 Manifest this update: Mon 20 Oct 2025 11:51:10 +0000 Manifest next update: Tue 21 Oct 2025 13:59:10 +0000 Files and hashes: 1: 8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl (hash: JN4bvAUn8irCUPMmp8XJfrcr/N0tSPBc7wkhgfwFJJ8=) 2: 323830343a393266383a3a2f33322d3438203d3e20323734373436.roa (hash: 5fhRq321I9L3kTTV+fwC5X89HSpGKCAld/CiGq3rZfQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a6:a1:06:94:83:ac:47:c2:1d:a5:61:2d:1e:84:b1:c2:f3:f1:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A873C3DC061821FFEF1C20E648451B8FE646FAE Validity Not Before: Oct 20 11:51:10 2025 GMT Not After : Oct 21 13:59:10 2025 GMT Subject: CN=B05B43C60DC72EA3953F6F78E87FF223D6686068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:24:7c:c3:69:55:93:81:1f:38:06:8d:ee:ed: 3f:4e:64:24:ad:53:43:d4:88:3d:06:52:21:1b:2a: 0a:47:f2:c4:bb:83:cb:4c:8b:71:bd:a6:47:50:70: c5:e2:47:2b:1e:dc:02:da:6c:cd:23:3b:de:36:e9: 05:d8:ee:e2:15:b8:6c:77:fc:cd:c3:8c:93:48:cb: 00:6a:b5:d4:4c:f2:73:f4:95:d6:55:77:a7:f3:7b: cd:64:3a:de:eb:7c:93:5c:ff:46:05:07:95:9f:a1: c6:73:ba:d0:5c:03:a0:da:92:07:30:b4:db:3d:42: fe:f8:ca:29:9b:a6:6f:7d:e1:d9:4d:c7:f3:46:03: 48:86:4c:ff:4d:df:5a:56:17:58:e4:8c:8f:33:32: 3a:f1:65:49:5f:b4:36:01:35:a8:22:ad:9f:b4:78: 14:5f:22:a9:bf:fa:9c:16:7d:f4:35:67:52:e9:11: ca:32:46:4c:2a:2c:cd:27:e1:3c:97:2c:29:bf:02: 96:c3:b1:9e:41:5b:f8:47:14:a2:a7:87:99:12:12: bd:7f:2e:fe:3c:77:1d:b1:4d:17:66:3b:08:9c:28: e0:4c:56:b5:32:48:5c:80:00:52:28:1f:5e:ee:b6: 14:0b:18:23:68:a4:d8:bb:c6:65:53:71:a7:6a:df: ce:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5B:43:C6:0D:C7:2E:A3:95:3F:6F:78:E8:7F:F2:23:D6:68:60:68 X509v3 Authority Key Identifier: keyid:8A:87:3C:3D:C0:61:82:1F:FE:F1:C2:0E:64:84:51:B8:FE:64:6F:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:45:0f:41:19:38:92:d9:35:01:55:9f:6b:9f:46:09:de:2e: df:e1:fd:ef:01:2e:45:9a:f2:56:1c:a5:e9:e4:c1:d4:13:57: 2d:12:ef:3a:d7:29:dd:1c:91:49:5f:69:32:2d:36:de:ad:f2: 25:04:04:06:0e:d2:e5:6a:47:ab:93:56:e3:f8:1c:a8:26:13: 93:78:7e:e0:1f:41:71:0a:c8:e0:a7:9d:bd:2f:30:92:aa:c5: 19:f3:b2:79:5d:55:60:0f:2c:9a:90:34:28:bd:54:5a:4a:f3: 13:b6:ae:f3:fa:ea:bf:d4:2f:cf:49:a8:d4:da:1d:e8:39:f7: 5c:25:6b:0c:5b:1e:52:16:fd:44:61:17:e3:b4:04:1d:aa:2b: c2:bb:70:15:22:37:b6:4a:9b:0d:a9:50:62:d1:1b:f2:66:f2: e9:b9:c9:2c:30:33:4c:ff:39:27:f3:24:23:88:d8:0b:03:d8: ff:04:10:d9:06:87:c9:7a:19:69:f6:29:9b:69:52:d3:4f:4d: 95:d0:fd:b5:04:43:eb:05:a0:fc:34:d3:e4:2d:a8:6e:1b:ab: ee:ab:aa:99:7b:e0:98:b5:5e:11:24:88:ba:e3:04:b7:ee:8f: 61:9a:d4:7c:28:9c:83:21:76:c2:10:ee:dd:9c:c5:a9:3b:df: 72:65:47:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJaahBpSDrEfCHaVhLR6EscLz8fowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4NzNDM0RDMDYxODIxRkZFRjFDMjBFNjQ4NDUxQjhG RTY0NkZBRTAeFw0yNTEwMjAxMTUxMTBaFw0yNTEwMjExMzU5MTBaMDMxMTAvBgNV BAMTKEIwNUI0M0M2MERDNzJFQTM5NTNGNkY3OEU4N0ZGMjIzRDY2ODYwNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeJHzDaVWTgR84Bo3u7T9OZCSt U0PUiD0GUiEbKgpH8sS7g8tMi3G9pkdQcMXiRyse3ALabM0jO9426QXY7uIVuGx3 /M3DjJNIywBqtdRM8nP0ldZVd6fze81kOt7rfJNc/0YFB5WfocZzutBcA6Dakgcw tNs9Qv74yimbpm994dlNx/NGA0iGTP9N31pWF1jkjI8zMjrxZUlftDYBNagirZ+0 eBRfIqm/+pwWffQ1Z1LpEcoyRkwqLM0n4TyXLCm/ApbDsZ5BW/hHFKKnh5kSEr1/ Lv48dx2xTRdmOwicKOBMVrUySFyAAFIoH17uthQLGCNopNi7xmVTcadq384dAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsFtDxg3HLqOVP2946H/yI9ZoYGgwHwYDVR0j BBgwFoAUioc8PcBhgh/+8cIOZIRRuP5kb64wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXpRNHhzTm1KcnU1WWFkaUhCOGgxYWVGNUdTcEtzZ0JzdllTNmFLQTFh a2UvMC84QTg3M0MzREMwNjE4MjFGRkVGMUMyMEU2NDg0NTFCOEZFNjQ2RkFFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBODczQzNEQzA2MTgyMUZG RUYxQzIwRTY0ODQ1MUI4RkU2NDZGQUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXpRNHhzTm1KcnU1WWFkaUhCOGgxYWVGNUdTcEtzZ0JzdllTNmFLQTFha2UvMC84 QTg3M0MzREMwNjE4MjFGRkVGMUMyMEU2NDg0NTFCOEZFNjQ2RkFFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArkUPQRk4ktk1AVWfa59GCd4u3+H97wEuRZryVhyl6eTB1BNXLRLvOtcp3RyR SV9pMi023q3yJQQEBg7S5WpHq5NW4/gcqCYTk3h+4B9BcQrI4KedvS8wkqrFGfOy eV1VYA8smpA0KL1UWkrzE7au8/rqv9Qvz0mo1Nod6Dn3XCVrDFseUhb9RGEX47QE HaorwrtwFSI3tkqbDalQYtEb8mby6bnJLDAzTP85J/MkI4jYCwPY/wQQ2QaHyXoZ afYpm2lS009NldD9tQRD6wWg/DTT5C2obhur7quqmXvgmLVeESSIuuMEt+6PYZrU fCicgyF2whDu3ZzFqTvfcmVHjg== -----END CERTIFICATE-----Generated at Mon Oct 20 16:12:31 2025 by rpki-client