$ rpki-client -vvf rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft File: 890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft (raw, json) Hash identifier: 4qvEHCYyx0y2oSmgtogiuh5MwbKchiusolowadZ1QQY= Subject key identifier: 01:90:B8:94:02:6C:8F:93:BE:C7:54:86:B3:08:FE:5F:8A:0B:AB:1A Authority key identifier: 89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29 Certificate issuer: /CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629 Certificate serial: 2EEBBA9F308A86EED7030068F83D1196D95F53CA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer Subject info access: rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft Manifest number: 02F3 Signing time: Mon 20 Oct 2025 18:09:39 +0000 Manifest this update: Mon 20 Oct 2025 18:04:39 +0000 Manifest next update: Tue 21 Oct 2025 19:24:39 +0000 Files and hashes: 1: 34352e352e38382e302f32322d3232203d3e20323636303834.roa (hash: K84xCId8+1cs5H3nmPDltEdVWLmM3+PGwnAlVZb81fo=) 2: 890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl (hash: AwuQqvR7V1EZrBVho9r8x1cIM7tOUgRXkhiJHRrSQGo=) 3: 323830343a336135383a3a2f33322d3332203d3e20323636303834.roa (hash: sEDi9DwKH3RgvOw8jDr36sB6k6gHWPRVR+WX1w3q6W4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 19:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:eb:ba:9f:30:8a:86:ee:d7:03:00:68:f8:3d:11:96:d9:5f:53:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629 Validity Not Before: Oct 20 18:04:39 2025 GMT Not After : Oct 21 19:24:39 2025 GMT Subject: CN=0190B894026C8F93BEC75486B308FE5F8A0BAB1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7b:98:f1:3c:a0:dd:b5:f7:9a:68:32:45:18: b9:11:39:f5:02:cf:dd:61:57:6f:ec:9a:b2:0c:67: 0e:f4:aa:77:df:b1:c3:17:01:bf:7e:67:70:1e:5b: 5e:e7:52:fc:a6:b9:c5:7e:16:6d:c1:bf:a6:1c:f3: 9c:d3:9b:65:4a:ed:82:d4:15:58:86:3e:74:e6:d2: f7:e6:02:5a:0c:3e:45:43:32:b4:9e:07:5a:21:b6: a9:a0:ee:09:f2:a3:b4:f5:78:50:7d:68:1d:fc:73: 4a:fa:ec:e7:1f:f4:5e:8f:8d:e3:2e:eb:13:b8:da: 94:6f:50:83:f0:9c:1e:ff:f2:1c:1c:06:26:d1:df: 50:33:24:91:80:78:05:4a:9b:1f:05:ec:c6:5e:9f: 83:ad:2b:d3:14:6c:bc:6c:7b:66:0a:29:33:7f:54: 81:a1:28:8f:cc:7a:af:81:63:57:06:2a:58:62:31: 54:bf:b2:00:60:ef:a4:12:16:3e:3c:94:01:50:43: 1e:52:67:f1:fb:54:67:06:64:5c:2b:74:22:d9:c0: 06:bb:19:56:9d:51:5e:94:f1:4e:27:a4:d8:8c:42: df:51:b3:68:27:23:d8:52:12:18:c6:80:59:3e:de: 0b:96:38:78:86:df:99:7a:ff:6e:fd:35:80:de:e5: ad:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:90:B8:94:02:6C:8F:93:BE:C7:54:86:B3:08:FE:5F:8A:0B:AB:1A X509v3 Authority Key Identifier: keyid:89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:86:c7:c8:de:ec:13:bb:04:20:eb:e5:d0:83:e2:28:69:95: 80:4e:37:bf:ce:39:d3:3c:82:10:1f:84:76:72:6a:f6:03:bc: a3:be:e0:17:40:38:53:e1:d8:66:ba:52:b3:4a:22:7b:bd:b9: a9:7b:55:72:ae:e7:cb:ff:fa:dd:fa:16:a2:a1:35:a1:48:9d: f1:cd:78:1b:3b:50:9d:09:07:15:d5:56:01:02:4e:4a:b0:61: 3d:19:fe:2d:26:89:ff:84:a1:08:8d:b9:64:93:68:c2:8d:76: 5d:ca:fd:9e:e6:32:33:97:52:58:13:33:f7:e0:87:3f:36:96: 8f:a9:f3:67:f4:40:96:5c:21:50:af:92:7d:6f:06:d6:27:64: ee:c5:7c:82:68:6b:b0:d5:8a:4d:91:c6:72:92:d1:cb:55:09: f2:98:60:07:eb:33:b5:80:f2:d4:93:9e:e0:84:d4:76:f3:28: a6:cd:5c:5b:ba:68:e3:52:e1:97:1d:9f:2b:6b:f3:10:e4:3f: 33:3f:d0:5d:93:25:41:9c:86:2c:ef:50:ba:1d:bc:67:69:42: 84:6b:e1:5e:ce:e5:44:cc:75:f2:2c:45:93:64:e7:05:21:f7: 71:8d:39:d7:52:86:ce:83:f0:79:48:c5:db:c1:bb:85:bf:50: 9d:2d:a2:9f -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIULuu6nzCKhu7XAwBo+D0RltlfU8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwQUQ1ODRDODNENDRGRkIyREZGRjk1NUQxQkQxQzcy RkYwRjYyOTAeFw0yNTEwMjAxODA0MzlaFw0yNTEwMjExOTI0MzlaMDMxMTAvBgNV BAMTKDAxOTBCODk0MDI2QzhGOTNCRUM3NTQ4NkIzMDhGRTVGOEEwQkFCMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCne5jxPKDdtfeaaDJFGLkROfUC z91hV2/smrIMZw70qnffscMXAb9+Z3AeW17nUvymucV+Fm3Bv6Yc85zTm2VK7YLU FViGPnTm0vfmAloMPkVDMrSeB1ohtqmg7gnyo7T1eFB9aB38c0r67Ocf9F6PjeMu 6xO42pRvUIPwnB7/8hwcBibR31AzJJGAeAVKmx8F7MZen4OtK9MUbLxse2YKKTN/ VIGhKI/Meq+BY1cGKlhiMVS/sgBg76QSFj48lAFQQx5SZ/H7VGcGZFwrdCLZwAa7 GVadUV6U8U4npNiMQt9Rs2gnI9hSEhjGgFk+3guWOHiG35l6/279NYDe5a15AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUAZC4lAJsj5O+x1SGswj+X4oLqxowHwYDVR0j BBgwFoAUiQrVhMg9RP+y3/+VXRvRxy/w9ikwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9ZRHp6elVXNjlGbmUyUkdaemJtWFpKcG1Hajl3Q2RqR0NhdEtEUDJNYVBV LzEvODkwQUQ1ODRDODNENDRGRkIyREZGRjk1NUQxQkQxQzcyRkYwRjYyOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84OTBBRDU4NEM4M0Q0NEZGQjJE RkZGOTU1RDFCRDFDNzJGRjBGNjI5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1lE enp6VVc2OUZuZTJSR1p6Ym1YWkpwbUdqOXdDZGpHQ2F0S0RQMk1hUFUvMS84OTBB RDU4NEM4M0Q0NEZGQjJERkZGOTU1RDFCRDFDNzJGRjBGNjI5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA cYbHyN7sE7sEIOvl0IPiKGmVgE43v8450zyCEB+EdnJq9gO8o77gF0A4U+HYZrpS s0oie725qXtVcq7ny//63foWoqE1oUid8c14GztQnQkHFdVWAQJOSrBhPRn+LSaJ /4ShCI25ZJNowo12Xcr9nuYyM5dSWBMz9+CHPzaWj6nzZ/RAllwhUK+SfW8G1idk 7sV8gmhrsNWKTZHGcpLRy1UJ8phgB+sztYDy1JOe4ITUdvMops1cW7po41Lhlx2f K2vzEOQ/Mz/QXZMlQZyGLO9Quh28Z2lChGvhXs7lRMx18ixFk2TnBSH3cY0511KG zoPweUjF28G7hb9QnS2inw== -----END CERTIFICATE-----Generated at Mon Oct 20 20:59:21 2025 by rpki-client