$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft File: 694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft (raw, json) Hash identifier: tSYbK94rKwRFCqKC2FJKhPXiZ1jnsQXiITsHd3VjcWQ= Subject key identifier: 17:AF:38:E9:E1:12:1D:15:6B:08:2D:7A:E2:FB:C0:A7:27:ED:D1:AF Authority key identifier: 69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53 Certificate issuer: /CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053 Certificate serial: 1F62B5AE51DEDCA286232563C8E049F5173153D6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer Subject info access: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft Manifest number: 0302 Signing time: Mon 20 Oct 2025 06:30:20 +0000 Manifest this update: Mon 20 Oct 2025 06:25:20 +0000 Manifest next update: Tue 21 Oct 2025 08:37:20 +0000 Files and hashes: 1: 694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl (hash: hMWX6fbuBp7m4LzLHoysytwmx/cSNK9hebvhNqH7DBY=) 2: 3136382e302e3130382e302f32322d3234203d3e20323632373931.roa (hash: Zp9x2unx+lTPAPJ1Lhv/7ePGfk5aZfLlvD+Z3BQpqoM=) 3: 3138362e3233332e3139322e302f32312d3332203d3e20323632373931.roa (hash: RbBI3L+SmbAQ29IEd/nzNXiL8h8J44CD73Mpttmb714=) 4: 323830343a3232303a3a2f33322d313238203d3e20323632373931.roa (hash: MgUKS224Zil7FVJNSvbMElQa7gE6fEtgJOTwhJNBmkw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:62:b5:ae:51:de:dc:a2:86:23:25:63:c8:e0:49:f5:17:31:53:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053 Validity Not Before: Oct 20 06:25:20 2025 GMT Not After : Oct 21 08:37:20 2025 GMT Subject: CN=17AF38E9E1121D156B082D7AE2FBC0A727EDD1AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f4:f0:73:85:af:28:7e:38:60:a6:95:60:df: 05:0f:5c:4b:f5:52:55:8a:f6:2a:34:18:70:44:04: e4:6d:10:f8:f5:a3:96:1b:26:21:92:da:e2:ee:50: 5b:65:31:ed:f9:bd:1b:0c:2c:42:04:69:a5:ef:83: db:7b:1d:3f:03:22:5b:1a:c9:d1:7b:aa:17:47:0d: 04:ca:aa:f9:f1:10:85:6a:21:28:99:dd:eb:4f:75: 51:ec:ce:bb:e1:53:b4:5f:27:9d:f0:e8:96:d6:ee: 33:2d:da:8f:8b:2c:94:db:b6:d7:9e:8a:80:cb:78: 57:0e:84:36:f4:ee:c7:45:b0:80:6a:04:5d:66:67: a2:58:e6:2e:2c:a8:f7:ff:6b:74:41:da:10:7f:79: 5f:4e:8b:9c:ce:a3:b4:67:a1:ac:61:ca:e7:ba:1c: 0c:33:db:16:87:49:ef:f8:87:a3:e2:4f:b5:e7:ba: 96:f0:03:9c:e7:7a:40:72:2d:6a:19:5c:6b:91:8a: 2b:12:d9:03:81:ee:e3:7f:13:53:00:bb:7d:17:86: bf:ff:04:27:58:8f:c8:6b:b1:fa:ec:3a:83:83:c0: a0:b8:6b:b3:43:74:dd:51:45:7c:81:ae:32:1e:d5: 4f:33:13:4b:10:bc:69:b2:dd:25:5e:ba:09:86:90: 6e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AF:38:E9:E1:12:1D:15:6B:08:2D:7A:E2:FB:C0:A7:27:ED:D1:AF X509v3 Authority Key Identifier: keyid:69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f0:ec:9b:b3:96:5f:5d:da:8d:be:3c:49:04:09:66:34:f0: 6f:8a:12:5c:bb:46:eb:f9:52:0b:03:6a:59:e7:d6:f5:ee:8a: 9f:03:a2:b1:be:33:f6:ac:a2:ed:55:67:8f:25:22:a0:1a:43: cb:d7:a0:eb:f0:6c:45:45:84:81:e0:3a:e7:f9:69:df:56:45: f8:23:33:30:56:69:e1:06:0b:28:95:6f:d1:d1:e9:34:02:25: 90:75:4c:64:28:fc:ad:eb:c4:1a:fe:6e:58:96:56:e2:bc:ad: 2f:ae:12:09:26:1b:61:70:bc:8b:2a:aa:38:74:63:21:06:c6: 89:d2:34:73:10:5e:63:d4:0d:a7:ce:ce:56:be:f4:92:61:af: 93:9f:8f:a6:00:55:ab:02:be:b0:c6:e3:b2:3b:29:32:82:70: ef:78:f0:3c:46:d1:01:48:29:77:40:b0:63:2e:c1:b1:95:bf: e2:c7:15:4c:33:02:76:d9:cc:9c:11:29:78:2d:e6:8a:0c:aa: e7:a1:a6:26:68:fd:71:cb:3e:a3:1e:21:68:89:bd:1a:12:c4: e4:0a:6d:f0:76:5f:fa:29:6f:77:9a:45:2c:41:d6:a1:12:6c: 04:2f:58:7b:9c:06:8f:ce:18:05:38:fe:13:67:92:24:86:b7: f5:3e:73:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUH2K1rlHe3KKGIyVjyOBJ9RcxU9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk0QkU0NTQ3OUIxMEJGQ0E3QkI0MEE0NEMwNkI1MUQx NUYyRDA1MzAeFw0yNTEwMjAwNjI1MjBaFw0yNTEwMjEwODM3MjBaMDMxMTAvBgNV BAMTKDE3QUYzOEU5RTExMjFEMTU2QjA4MkQ3QUUyRkJDMEE3MjdFREQxQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq9PBzha8ofjhgppVg3wUPXEv1 UlWK9io0GHBEBORtEPj1o5YbJiGS2uLuUFtlMe35vRsMLEIEaaXvg9t7HT8DIlsa ydF7qhdHDQTKqvnxEIVqISiZ3etPdVHszrvhU7RfJ53w6JbW7jMt2o+LLJTbttee ioDLeFcOhDb07sdFsIBqBF1mZ6JY5i4sqPf/a3RB2hB/eV9Oi5zOo7Rnoaxhyue6 HAwz2xaHSe/4h6PiT7XnupbwA5znekByLWoZXGuRiisS2QOB7uN/E1MAu30Xhr// BCdYj8hrsfrsOoODwKC4a7NDdN1RRXyBrjIe1U8zE0sQvGmy3SVeugmGkG75AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUF6846eESHRVrCC164vvApyft0a8wHwYDVR0j BBgwFoAUaUvkVHmxC/ynu0CkTAa1HRXy0FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM29tREIzenhKVzFlN25NWnRKWlZvZWVrMkpUTUwzNHgxeDJxMXRLbm1n WFEvMC82OTRCRTQ1NDc5QjEwQkZDQTdCQjQwQTQ0QzA2QjUxRDE1RjJEMDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NEJFNDU0NzlCMTBCRkNB N0JCNDBBNDRDMDZCNTFEMTVGMkQwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M29tREIzenhKVzFlN25NWnRKWlZvZWVrMkpUTUwzNHgxeDJxMXRLbm1nWFEvMC82 OTRCRTQ1NDc5QjEwQkZDQTdCQjQwQTQ0QzA2QjUxRDE1RjJEMDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQvDsm7OWX13ajb48SQQJZjTwb4oSXLtG6/lSCwNqWefW9e6KnwOisb4z9qyi 7VVnjyUioBpDy9eg6/BsRUWEgeA65/lp31ZF+CMzMFZp4QYLKJVv0dHpNAIlkHVM ZCj8revEGv5uWJZW4rytL64SCSYbYXC8iyqqOHRjIQbGidI0cxBeY9QNp87OVr70 kmGvk5+PpgBVqwK+sMbjsjspMoJw73jwPEbRAUgpd0CwYy7BsZW/4scVTDMCdtnM nBEpeC3migyq56GmJmj9ccs+ox4haIm9GhLE5Apt8HZf+ilvd5pFLEHWoRJsBC9Y e5wGj84YBTj+E2eSJIa39T5zpQ== -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:05 2025 by rpki-client