$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft File: 0688357ED433C0A60770FB474BDB2C72796B78BD.mft (raw, json) Hash identifier: DBKKyAGR8gd5YlB1YpDn1L3JxIYvtAZCzhUMBCnve5s= Subject key identifier: B2:02:FF:B1:3F:36:1C:E0:2B:FA:59:C8:40:64:2D:2E:57:F5:81:A9 Authority key identifier: 06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD Certificate issuer: /CN=0688357ED433C0A60770FB474BDB2C72796B78BD Certificate serial: 3B1256699C8764F24BE14C435DE5910B94B9728D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft Manifest number: FC Signing time: Mon 20 Oct 2025 07:17:47 +0000 Manifest this update: Mon 20 Oct 2025 07:12:45 +0000 Manifest next update: Tue 21 Oct 2025 07:53:45 +0000 Files and hashes: 1: 323830343a316165303a3a2f33322d3634203d3e203631363936.roa (hash: MNi0hCQVw5LiwCn26uDAV8DWpcneKIoS1bbRQFE26gw=) 2: 0688357ED433C0A60770FB474BDB2C72796B78BD.crl (hash: q5iKVmv5gHM89pPARMBaqzXbcIGoeYzZUrG8sHi9CVk=) 3: 3133382e33362e3233322e302f32322d3332203d3e203631363936.roa (hash: 0PAGB5C8H6IcqwDv00MSTHzGTYgYIUYZIqOHywJKqvU=) 4: 3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa (hash: IaTZ4i3zNgWw2pTgrax+ua0Htv3rIzLefPo79rSHOwM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:12:56:69:9c:87:64:f2:4b:e1:4c:43:5d:e5:91:0b:94:b9:72:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0688357ED433C0A60770FB474BDB2C72796B78BD Validity Not Before: Oct 20 07:12:45 2025 GMT Not After : Oct 21 07:53:45 2025 GMT Subject: CN=B202FFB13F361CE02BFA59C840642D2E57F581A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:11:d0:9a:ad:85:a2:ee:1a:f2:26:5f:cd:a3: 96:d1:3f:28:34:bf:cc:78:0a:3e:92:0c:e8:b3:62: 62:65:c4:f8:be:9c:63:ce:28:24:93:60:54:12:28: ac:81:5b:ce:a7:5c:a1:68:67:8f:ee:72:71:f8:00: 48:8c:bd:3c:91:85:09:7f:ba:b9:73:d6:76:66:7e: 62:12:11:94:e0:c4:16:fd:91:6f:40:51:fe:6e:fe: b2:49:d8:77:34:27:eb:9b:1a:b2:33:99:5a:89:ed: d1:e6:ea:16:10:46:51:1b:dd:9f:2e:b3:a7:a7:bd: 26:5f:eb:4b:cf:c1:6c:93:c3:8e:b3:4f:b4:bb:9c: 05:dd:b4:d5:e8:5b:d0:bc:c9:2a:ff:53:87:8a:11: 4d:3a:16:51:24:96:51:20:b6:6f:13:8b:dd:4b:ad: 72:fb:91:c4:a4:dd:d5:04:a3:0a:a3:06:d9:f2:06: c4:94:b3:4d:fd:92:bf:78:fe:16:46:0d:33:b7:46: 9d:51:f4:4f:7e:e2:34:f4:42:70:5e:8c:78:c4:fd: fb:77:77:ea:62:9c:93:07:12:ab:70:6f:3b:28:da: d9:a2:1f:2c:ee:47:bb:28:66:c3:de:b0:da:70:92: e0:90:89:ac:82:6c:d1:f9:dc:d2:71:f0:b8:bf:ed: cc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:02:FF:B1:3F:36:1C:E0:2B:FA:59:C8:40:64:2D:2E:57:F5:81:A9 X509v3 Authority Key Identifier: keyid:06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b6:cc:13:6c:33:1e:80:4d:c3:4f:64:ff:a9:31:71:0e:d9: c4:3a:c8:cd:ac:e8:f3:ae:71:5d:89:ab:0c:a7:10:fe:ee:df: a5:c9:b3:53:dc:c0:b5:e8:1b:d2:bf:8b:52:9b:fe:33:37:ac: 3c:74:9b:85:1c:34:3e:c2:e6:b2:e6:8a:21:da:05:fa:86:f3: c7:7d:06:d6:d0:90:59:cb:2a:3b:9e:66:6b:29:6e:8f:52:31: a2:5d:c4:dd:87:ee:ac:fa:0b:1b:48:bc:d9:77:34:1f:51:88: 7c:6a:6f:ac:87:d9:49:d6:df:8d:0b:35:5f:ca:7e:87:4e:19: f8:bc:3c:35:18:f1:b8:29:ec:fc:02:71:97:03:53:7b:8c:bc: d9:b1:cd:ac:91:49:1c:76:38:db:e4:5e:8f:c8:06:32:e0:e3: 43:4c:2d:cc:ac:a7:0a:44:33:d5:c9:73:8e:63:ba:19:09:49: fe:e9:9b:4c:e9:7e:1e:9c:06:54:40:95:a8:cd:2f:ec:78:a9: 80:79:0a:a1:93:f1:ee:ee:e1:4e:77:d5:77:a7:97:3e:94:12: 07:bb:12:f7:97:17:50:fe:41:dd:1e:be:b9:e6:06:d6:78:0c: e4:0a:31:13:18:f7:0d:56:41:18:c8:70:62:b6:bf:05:81:b7: 3a:e7:2b:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOxJWaZyHZPJL4UxDXeWRC5S5co0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4ODM1N0VENDMzQzBBNjA3NzBGQjQ3NEJEQjJDNzI3 OTZCNzhCRDAeFw0yNTEwMjAwNzEyNDVaFw0yNTEwMjEwNzUzNDVaMDMxMTAvBgNV BAMTKEIyMDJGRkIxM0YzNjFDRTAyQkZBNTlDODQwNjQyRDJFNTdGNTgxQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOEdCarYWi7hryJl/No5bRPyg0 v8x4Cj6SDOizYmJlxPi+nGPOKCSTYFQSKKyBW86nXKFoZ4/ucnH4AEiMvTyRhQl/ urlz1nZmfmISEZTgxBb9kW9AUf5u/rJJ2Hc0J+ubGrIzmVqJ7dHm6hYQRlEb3Z8u s6envSZf60vPwWyTw46zT7S7nAXdtNXoW9C8ySr/U4eKEU06FlEkllEgtm8Ti91L rXL7kcSk3dUEowqjBtnyBsSUs039kr94/hZGDTO3Rp1R9E9+4jT0QnBejHjE/ft3 d+pinJMHEqtwbzso2tmiHyzuR7soZsPesNpwkuCQiayCbNH53NJx8Li/7cx3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsgL/sT82HOAr+lnIQGQtLlf1gakwHwYDVR0j BBgwFoAUBog1ftQzwKYHcPtHS9sscnlreL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNX c3gvMC8wNjg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODgzNTdFRDQzM0MwQTYw NzcwRkI0NzRCREIyQzcyNzk2Qjc4QkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNXc3gvMC8w Njg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABrbME2wzHoBNw09k/6kxcQ7ZxDrIzazo865xXYmrDKcQ/u7fpcmzU9zAtegb 0r+LUpv+MzesPHSbhRw0PsLmsuaKIdoF+obzx30G1tCQWcsqO55mayluj1Ixol3E 3YfurPoLG0i82Xc0H1GIfGpvrIfZSdbfjQs1X8p+h04Z+Lw8NRjxuCns/AJxlwNT e4y82bHNrJFJHHY42+Rej8gGMuDjQ0wtzKynCkQz1clzjmO6GQlJ/umbTOl+HpwG VECVqM0v7HipgHkKoZPx7u7hTnfVd6eXPpQSB7sS95cXUP5B3R6+ueYG1ngM5Aox Exj3DVZBGMhwYra/BYG3Oucr9A== -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:44 2025 by rpki-client