$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft File: 8AD497903AB3566443C9C794694A61EFE427FA7A.mft (raw, json) Hash identifier: mqR7lHU1arlZLGW61QzPA7FSkhz+LzQ4ag1PKQLUWS4= Subject key identifier: AF:55:24:1A:ED:8E:98:C1:56:64:1E:CC:83:2E:9C:ED:EB:90:C7:C8 Authority key identifier: 8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A Certificate issuer: /CN=8AD497903AB3566443C9C794694A61EFE427FA7A Certificate serial: 563C99F21352794C6B19C049BC34AD1C27A53DD2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft Manifest number: 02F5 Signing time: Mon 20 Oct 2025 01:33:47 +0000 Manifest this update: Mon 20 Oct 2025 01:28:47 +0000 Manifest next update: Tue 21 Oct 2025 02:18:47 +0000 Files and hashes: 1: 323830343a383630343a3a2f33332d3333203d3e20323732363134.roa (hash: Cx4646zrPKq6xD6iBJPkGxFHe6jY6KpJK0fDkBl/7Jo=) 2: 323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa (hash: ORpItz/kBb3bXBiU/q9Su7SYmZ2oQTmI/c9DsHZIB4Q=) 3: 323830343a383630343a3a2f33322d3332203d3e20323732363134.roa (hash: UuJdu9oNRzQAzqGiZTO4vBqCVsMzpdiamCVuQEkL6sg=) 4: 8AD497903AB3566443C9C794694A61EFE427FA7A.crl (hash: X7XAtBZGCbpGCQHzKDqFXo5GEjRYm6ZToNlaGJYUzg8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:3c:99:f2:13:52:79:4c:6b:19:c0:49:bc:34:ad:1c:27:a5:3d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AD497903AB3566443C9C794694A61EFE427FA7A Validity Not Before: Oct 20 01:28:47 2025 GMT Not After : Oct 21 02:18:47 2025 GMT Subject: CN=AF55241AED8E98C156641ECC832E9CEDEB90C7C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:52:25:55:f0:6c:36:98:7d:71:38:47:be:ee: 1c:ac:79:85:59:76:3a:b2:f5:72:41:03:7c:0f:3d: fa:56:0c:75:a2:48:99:88:bf:86:d5:3f:8f:96:5d: c4:02:13:97:13:a6:a6:4e:e6:77:1b:40:b5:eb:6b: cd:79:e7:e2:f3:e2:5c:a8:66:db:03:41:10:9f:d0: 76:ef:ba:03:8b:42:ce:96:a4:76:45:06:94:c3:04: 4a:be:98:5f:20:79:ce:06:f8:dd:9d:e7:fb:6a:90: b8:29:db:ca:14:f9:ee:8d:8e:95:fb:30:30:68:a5: 0e:03:9c:08:41:d9:82:98:bf:2b:e9:7f:1d:49:ed: 02:bb:cf:cf:dc:20:63:28:e4:b2:d1:46:49:1a:31: 69:38:45:ba:b8:58:8d:ce:ed:1e:8a:9d:91:71:45: e6:41:fe:a7:5e:5c:a9:94:24:fd:82:eb:63:b1:f8: 88:4b:cc:38:ca:cc:1e:2f:f8:3b:ec:d0:0b:cb:2a: 53:8d:e6:e1:58:b9:82:b1:47:f6:09:cf:8c:52:38: de:21:d8:b0:7c:97:2f:2b:20:f3:2e:9b:55:c6:b7: fe:2f:c5:74:8f:a1:0f:5b:0d:b2:77:93:3c:a2:6d: d0:bc:ae:e3:f9:8c:e0:d5:92:f1:f1:43:49:5d:cd: b4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:55:24:1A:ED:8E:98:C1:56:64:1E:CC:83:2E:9C:ED:EB:90:C7:C8 X509v3 Authority Key Identifier: keyid:8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ea:1a:d0:86:2b:f7:49:33:6c:18:0a:41:76:ac:88:25:f9: c3:ab:84:1f:ab:ae:c2:05:bb:b1:a0:38:2e:2f:27:75:3c:a0: fe:bf:f4:f3:a3:7f:f1:1a:12:5d:12:f6:7a:55:ab:82:09:39: 02:b6:31:a2:8e:9a:49:50:6a:b5:d1:bd:f5:5a:6f:4d:14:3d: 2a:dc:38:65:87:65:6a:66:bd:5e:a5:ca:41:4d:50:ff:7e:00: a5:75:fe:a4:63:6c:09:73:e4:1f:8f:78:f9:d0:9e:02:2c:62: a2:08:af:6e:5b:73:d2:4c:dc:f3:b7:15:38:9b:f4:74:1b:51: ff:51:0f:8f:93:43:35:dc:1d:07:5b:94:b6:7c:57:56:85:47: 29:3c:b7:dd:04:61:ae:79:ee:32:b0:a9:91:44:d6:eb:57:79: bd:ed:74:c5:d6:5c:72:10:7a:1b:8b:3f:6b:ee:23:70:83:6f: fd:61:da:21:3c:33:8a:3a:ce:9d:cf:f5:b6:79:57:5f:e9:df: cc:09:b5:1a:c8:b1:47:7b:50:c6:43:46:c7:d1:93:a2:12:88: 1e:be:51:d5:ca:6a:b3:18:16:f6:82:e5:eb:2b:68:04:94:77: f2:0c:df:01:ed:62:49:60:be:15:05:ac:83:93:ec:1a:9e:4d: 00:62:b6:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVjyZ8hNSeUxrGcBJvDStHCelPdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFENDk3OTAzQUIzNTY2NDQzQzlDNzk0Njk0QTYxRUZF NDI3RkE3QTAeFw0yNTEwMjAwMTI4NDdaFw0yNTEwMjEwMjE4NDdaMDMxMTAvBgNV BAMTKEFGNTUyNDFBRUQ4RTk4QzE1NjY0MUVDQzgzMkU5Q0VERUI5MEM3QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFUiVV8Gw2mH1xOEe+7hyseYVZ djqy9XJBA3wPPfpWDHWiSJmIv4bVP4+WXcQCE5cTpqZO5ncbQLXra8155+Lz4lyo ZtsDQRCf0HbvugOLQs6WpHZFBpTDBEq+mF8gec4G+N2d5/tqkLgp28oU+e6NjpX7 MDBopQ4DnAhB2YKYvyvpfx1J7QK7z8/cIGMo5LLRRkkaMWk4Rbq4WI3O7R6KnZFx ReZB/qdeXKmUJP2C62Ox+IhLzDjKzB4v+Dvs0AvLKlON5uFYuYKxR/YJz4xSON4h 2LB8ly8rIPMum1XGt/4vxXSPoQ9bDbJ3kzyibdC8ruP5jODVkvHxQ0ldzbSjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUr1UkGu2OmMFWZB7Mgy6c7euQx8gwHwYDVR0j BBgwFoAUitSXkDqzVmRDyceUaUph7+Qn+nowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFl5NGFKTVB2emFja2tMSGc0azlvSEhIWjdnam5FcmtRUEpVYXN2cDZh bk4vMS84QUQ0OTc5MDNBQjM1NjY0NDNDOUM3OTQ2OTRBNjFFRkU0MjdGQTdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBRDQ5NzkwM0FCMzU2NjQ0 M0M5Qzc5NDY5NEE2MUVGRTQyN0ZBN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFl5NGFKTVB2emFja2tMSGc0azlvSEhIWjdnam5FcmtRUEpVYXN2cDZhbk4vMS84 QUQ0OTc5MDNBQjM1NjY0NDNDOUM3OTQ2OTRBNjFFRkU0MjdGQTdBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY+oa0IYr90kzbBgKQXasiCX5w6uEH6uuwgW7saA4Li8ndTyg/r/086N/8RoS XRL2elWrggk5ArYxoo6aSVBqtdG99VpvTRQ9Ktw4ZYdlama9XqXKQU1Q/34ApXX+ pGNsCXPkH494+dCeAixiogivbltz0kzc87cVOJv0dBtR/1EPj5NDNdwdB1uUtnxX VoVHKTy33QRhrnnuMrCpkUTW61d5ve10xdZcchB6G4s/a+4jcINv/WHaITwzijrO nc/1tnlXX+nfzAm1GsixR3tQxkNGx9GTohKIHr5R1cpqsxgW9oLl6ytoBJR38gzf Ae1iSWC+FQWsg5PsGp5NAGK2iA== -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:08 2025 by rpki-client