$ rpki-client -vvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft File: 89B059C223BA0AD41E99D2508292698CA59D4D51.mft (raw, json) Hash identifier: qAA601dG9xn8DRn187yyrx4Fr8QGs+BdCGg4Hq8ewvM= Subject key identifier: 2D:6A:61:C0:B8:F5:66:A2:02:38:D6:F0:8F:F0:F4:93:92:7A:07:03 Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51 Certificate issuer: /CN=89B059C223BA0AD41E99D2508292698CA59D4D51 Certificate serial: 39D2D0BF4767F5DFDA7D070CE660D2A862985561 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft Manifest number: 02F0 Signing time: Mon 20 Oct 2025 11:05:43 +0000 Manifest this update: Mon 20 Oct 2025 11:00:43 +0000 Manifest next update: Tue 21 Oct 2025 12:07:43 +0000 Files and hashes: 1: 89B059C223BA0AD41E99D2508292698CA59D4D51.crl (hash: 6lgyx/JizpB76/GE8sv3BGnLTjivs7d5+fpoDqP+iKw=) 2: 3138362e3139332e302e302f32302d3234203d3e203533313334.roa (hash: /70Xr3zykjbquC5V98sp30trWq/8fdvVv+jPi4H5f5s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:d2:d0:bf:47:67:f5:df:da:7d:07:0c:e6:60:d2:a8:62:98:55:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51 Validity Not Before: Oct 20 11:00:43 2025 GMT Not After : Oct 21 12:07:43 2025 GMT Subject: CN=2D6A61C0B8F566A20238D6F08FF0F493927A0703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:0b:d9:06:21:e0:c5:e6:59:d5:43:db:a8: 13:63:4b:38:2f:a0:22:12:31:61:02:29:ce:5f:2c: bd:7b:e4:57:66:92:47:75:8b:b3:78:e3:ea:08:46: 2c:93:b8:0b:f9:08:1e:58:84:9b:da:bf:6d:30:b6: 0b:d7:b9:9f:c2:70:cf:90:03:4b:97:8e:97:08:9c: 86:4c:10:48:f0:0b:61:bb:3f:40:f3:91:2b:9e:44: 08:e7:02:ec:6f:68:1b:df:f1:6a:08:d9:a6:80:94: c7:45:f6:1c:d6:31:26:1f:1d:1b:ef:d2:8f:a8:33: 39:3f:95:15:a7:91:69:a5:52:75:69:02:26:35:7f: 50:d0:bf:b4:5b:97:ea:ba:46:83:aa:3c:89:4e:af: 23:ad:b5:c3:d4:47:b4:fd:48:a8:b6:6f:47:2a:85: ff:0b:7a:00:66:56:71:b5:16:e1:13:f8:08:f9:c3: ef:98:2a:62:88:7f:fc:01:61:16:59:b2:0c:40:4f: 9a:8b:c2:ba:88:67:10:59:80:bc:86:45:c1:2c:ea: 4f:b8:6a:18:16:1f:c0:77:85:d8:e6:1b:d1:09:e2: 6f:b9:e5:1d:84:c2:ed:74:cd:4b:e8:53:84:3d:47: 0f:9a:85:db:89:8c:cd:b7:77:6d:50:11:d5:4f:ee: 59:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6A:61:C0:B8:F5:66:A2:02:38:D6:F0:8F:F0:F4:93:92:7A:07:03 X509v3 Authority Key Identifier: keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a0:83:94:53:96:59:75:f5:dc:fe:e7:55:af:0a:bf:9d:53: 66:e2:a0:da:38:9a:38:52:ef:de:e5:72:c0:b3:49:10:2d:ed: f4:36:d2:8c:68:22:1a:58:70:e9:00:48:15:a9:fd:b7:b9:81: 4a:5e:9d:4b:86:ed:db:56:1d:3f:cd:ab:fd:3c:10:08:46:a2: 5a:ee:81:b6:4a:69:88:4c:5f:32:42:48:f9:03:b9:fe:08:bb: 36:21:21:4f:69:75:fc:14:0c:19:ca:39:7a:b8:f0:ef:f4:b4: a0:85:3d:49:84:5a:b4:08:95:95:bd:51:12:5c:74:3c:0b:a2: 92:89:09:b6:f3:7c:c4:f4:3c:d1:75:91:66:24:a9:e3:bc:d3: 58:86:99:98:ab:82:e4:3c:e6:63:3f:c7:e8:14:2e:83:0f:12: 67:6b:6a:df:cc:fc:22:cf:0e:b3:82:f1:b5:d1:b0:c7:5e:ee: af:8f:71:60:c4:cd:ec:3e:34:8e:db:8f:41:30:15:f2:fe:c4: 79:53:e1:38:0c:18:8d:f3:21:f4:6b:c3:f9:a4:56:41:09:ec: 78:46:88:8d:b8:1f:3e:80:af:50:80:8c:7d:71:2c:c2:e6:c1: 6b:62:95:a5:4c:fd:6f:21:a5:f3:90:ff:c4:35:e2:4e:bd:97: 87:60:07:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOdLQv0dn9d/afQcM5mDSqGKYVWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCMDU5QzIyM0JBMEFENDFFOTlEMjUwODI5MjY5OENB NTlENEQ1MTAeFw0yNTEwMjAxMTAwNDNaFw0yNTEwMjExMjA3NDNaMDMxMTAvBgNV BAMTKDJENkE2MUMwQjhGNTY2QTIwMjM4RDZGMDhGRjBGNDkzOTI3QTA3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAMgvZBiHgxeZZ1UPbqBNjSzgv oCISMWECKc5fLL175Fdmkkd1i7N44+oIRiyTuAv5CB5YhJvav20wtgvXuZ/CcM+Q A0uXjpcInIZMEEjwC2G7P0DzkSueRAjnAuxvaBvf8WoI2aaAlMdF9hzWMSYfHRvv 0o+oMzk/lRWnkWmlUnVpAiY1f1DQv7Rbl+q6RoOqPIlOryOttcPUR7T9SKi2b0cq hf8LegBmVnG1FuET+Aj5w++YKmKIf/wBYRZZsgxAT5qLwrqIZxBZgLyGRcEs6k+4 ahgWH8B3hdjmG9EJ4m+55R2Ewu10zUvoU4Q9Rw+ahduJjM23d21QEdVP7llJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULWphwLj1ZqICONbwj/D0k5J6BwMwHwYDVR0j BBgwFoAUibBZwiO6CtQemdJQgpJpjKWdTVEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRn eGUvMS84OUIwNTlDMjIzQkEwQUQ0MUU5OUQyNTA4MjkyNjk4Q0E1OUQ0RDUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5QjA1OUMyMjNCQTBBRDQx RTk5RDI1MDgyOTI2OThDQTU5RDRENTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRneGUvMS84 OUIwNTlDMjIzQkEwQUQ0MUU5OUQyNTA4MjkyNjk4Q0E1OUQ0RDUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ6CDlFOWWXX13P7nVa8Kv51TZuKg2jiaOFLv3uVywLNJEC3t9DbSjGgiGlhw 6QBIFan9t7mBSl6dS4bt21YdP82r/TwQCEaiWu6BtkppiExfMkJI+QO5/gi7NiEh T2l1/BQMGco5erjw7/S0oIU9SYRatAiVlb1RElx0PAuikokJtvN8xPQ80XWRZiSp 47zTWIaZmKuC5DzmYz/H6BQugw8SZ2tq38z8Is8Os4LxtdGwx17ur49xYMTN7D40 jtuPQTAV8v7EeVPhOAwYjfMh9GvD+aRWQQnseEaIjbgfPoCvUICMfXEswubBa2KV pUz9byGl85D/xDXiTr2Xh2AH2g== -----END CERTIFICATE-----Generated at Mon Oct 20 22:42:46 2025 by rpki-client