$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft File: 89F33609E2B118C8ED9A105548D2D01FD6E38729.mft (raw, json) Hash identifier: xGHHPMeOksZSH/4c/LY2OUoFP/j137WMRS4tbYsdQE0= Subject key identifier: A1:0B:4E:50:70:BE:12:72:A0:91:0A:20:BA:3F:54:D7:20:89:69:94 Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 Certificate issuer: /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Certificate serial: 2FCF52CE70BD79076F9538720F55670F0C57F6AE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft Manifest number: 02EF Signing time: Mon 20 Oct 2025 21:38:24 +0000 Manifest this update: Mon 20 Oct 2025 21:33:24 +0000 Manifest next update: Tue 21 Oct 2025 21:54:24 +0000 Files and hashes: 1: 3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa (hash: bMO8E7JDP414YIw6qvyG05VpeLGja7y87JGV9snRtok=) 2: 3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa (hash: 91gQ1OFtC7i3YwbFOdgAOt94iN2xUARUXKGh62+Ssos=) 3: 89F33609E2B118C8ED9A105548D2D01FD6E38729.crl (hash: LBoyp3HaOYWeXRwAr/v+ROK3N8uwcMImRmP7YDaLiWY=) 4: 323830343a313263303a3a2f33322d3438203d3e20323633343936.roa (hash: yCRnKe7Cfo4f5weE5YMpi/ZO3/1Psrg+aJlLbswl12Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 21:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:cf:52:ce:70:bd:79:07:6f:95:38:72:0f:55:67:0f:0c:57:f6:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Validity Not Before: Oct 20 21:33:24 2025 GMT Not After : Oct 21 21:54:24 2025 GMT Subject: CN=A10B4E5070BE1272A0910A20BA3F54D720896994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:01:af:1e:53:9c:34:bd:59:eb:32:5d:e8:a8: b1:d3:6d:b3:f3:44:e4:6d:07:76:c4:3a:08:3d:4d: 72:5c:01:2a:43:bf:e8:69:84:71:3f:93:e1:df:e3: e0:97:22:30:ea:76:78:3a:a1:86:07:ff:b5:16:b4: a2:f1:69:4a:12:b3:4b:14:e0:f0:e4:34:0b:9f:c5: 81:af:63:57:fd:ff:1e:e6:24:5e:26:75:42:a9:58: 33:c8:7f:ce:3c:be:b2:79:bc:9b:ab:85:e2:2a:9b: 87:ae:dd:b2:e1:5c:c8:4a:39:6c:57:57:ee:a4:8c: 8d:8b:48:61:e2:15:32:4e:87:76:fb:9f:6b:79:53: 1a:b6:7a:68:85:80:af:d6:1c:bc:70:e0:bd:7d:fc: 7c:71:6b:66:a7:5f:14:4e:1c:32:eb:d9:78:1a:a7: fd:eb:07:54:2e:96:3c:fa:10:57:b1:c4:14:4d:58: d3:c6:85:f3:2a:72:c9:d7:73:dd:cd:fd:26:17:4a: 0d:3a:ef:fb:f4:d7:c0:ad:5d:c8:31:05:17:46:5c: b2:60:c7:25:84:18:8a:4d:36:3b:29:96:86:e6:12: e1:d0:e6:dc:09:29:89:04:1b:4b:f6:39:ef:4c:8f: 62:eb:95:50:2c:d6:59:31:f9:c3:b9:d2:a4:65:fd: d9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0B:4E:50:70:BE:12:72:A0:91:0A:20:BA:3F:54:D7:20:89:69:94 X509v3 Authority Key Identifier: keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:69:df:87:c9:de:73:60:17:54:db:d6:21:3a:35:26:dc:06: 14:d0:8d:62:33:a7:9e:b3:9e:ed:04:c6:e1:c1:3c:7a:4c:88: 8a:62:83:9d:60:2c:e7:af:b0:98:7f:5d:5e:d4:90:25:8e:94: cb:f5:86:f5:75:47:56:41:2c:bf:2d:c0:b0:8a:20:68:3d:e2: 2a:04:e1:56:2c:db:67:1a:35:c3:e2:c5:5f:18:f7:97:fe:ea: 40:7c:2a:09:c4:0b:96:bb:c0:a8:12:0f:4f:0f:32:38:02:4d: 59:8a:04:ad:2d:c1:6d:23:3d:1d:44:d4:35:07:e9:3a:cc:d3: 65:8b:e7:7b:39:d8:86:85:e7:53:a2:bf:c4:17:26:8a:a8:49: 08:11:2c:46:f4:9c:50:37:05:42:5e:38:4d:e5:7d:01:93:c9: ba:4a:ee:17:ab:f9:f2:ab:be:57:38:83:7b:01:8e:3f:4d:7f: 65:0b:e6:5a:fe:d3:6a:89:0c:33:40:a3:6e:1f:68:01:91:e9: ac:ea:12:dd:d8:74:03:51:06:16:44:c6:bc:3c:6c:42:7b:b5: f7:46:ce:b8:c9:9a:2d:2a:86:36:7c:d2:59:57:27:6c:51:95: bf:36:70:9d:2c:67:1f:74:c5:12:7c:54:ff:21:d1:f6:16:b2: a7:b5:a9:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL89SznC9eQdvlThyD1VnDwxX9q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlGMzM2MDlFMkIxMThDOEVEOUExMDU1NDhEMkQwMUZE NkUzODcyOTAeFw0yNTEwMjAyMTMzMjRaFw0yNTEwMjEyMTU0MjRaMDMxMTAvBgNV BAMTKEExMEI0RTUwNzBCRTEyNzJBMDkxMEEyMEJBM0Y1NEQ3MjA4OTY5OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcAa8eU5w0vVnrMl3oqLHTbbPz RORtB3bEOgg9TXJcASpDv+hphHE/k+Hf4+CXIjDqdng6oYYH/7UWtKLxaUoSs0sU 4PDkNAufxYGvY1f9/x7mJF4mdUKpWDPIf848vrJ5vJurheIqm4eu3bLhXMhKOWxX V+6kjI2LSGHiFTJOh3b7n2t5Uxq2emiFgK/WHLxw4L19/Hxxa2anXxROHDLr2Xga p/3rB1Quljz6EFexxBRNWNPGhfMqcsnXc93N/SYXSg067/v018CtXcgxBRdGXLJg xyWEGIpNNjsplobmEuHQ5twJKYkEG0v2Oe9Mj2LrlVAs1lkx+cO50qRl/dkzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoQtOUHC+EnKgkQoguj9U1yCJaZQwHwYDVR0j BBgwFoAUifM2CeKxGMjtmhBVSNLQH9bjhykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4 ekUvMS84OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RjMzNjA5RTJCMTE4QzhF RDlBMTA1NTQ4RDJEMDFGRDZFMzg3MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4ekUvMS84 OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQWnfh8nec2AXVNvWITo1JtwGFNCNYjOnnrOe7QTG4cE8ekyIimKDnWAs56+w mH9dXtSQJY6Uy/WG9XVHVkEsvy3AsIogaD3iKgThVizbZxo1w+LFXxj3l/7qQHwq CcQLlrvAqBIPTw8yOAJNWYoErS3BbSM9HUTUNQfpOszTZYvneznYhoXnU6K/xBcm iqhJCBEsRvScUDcFQl44TeV9AZPJukruF6v58qu+VziDewGOP01/ZQvmWv7TaokM M0Cjbh9oAZHprOoS3dh0A1EGFkTGvDxsQnu190bOuMmaLSqGNnzSWVcnbFGVvzZw nSxnH3TFEnxU/yHR9hayp7WpOA== -----END CERTIFICATE-----Generated at Mon Oct 20 23:10:27 2025 by rpki-client