$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft File: 695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft (raw, json) Hash identifier: JjAas/OvVMI1z+qS1aLO85JiSx88i5eW9eWajD/8QoA= Subject key identifier: F0:1F:DE:F5:37:1E:89:A1:E9:CF:B6:73:E4:6A:40:2D:E3:EE:9D:83 Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2 Certificate issuer: /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2 Certificate serial: 5A3B2C014751830F0029082132FEB7EA6BBA5F8E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft Manifest number: 0126 Signing time: Mon 20 Oct 2025 02:02:47 +0000 Manifest this update: Mon 20 Oct 2025 01:57:47 +0000 Manifest next update: Tue 21 Oct 2025 02:38:47 +0000 Files and hashes: 1: 3133312e3130382e382e302f32322d3332203d3e20323633343234.roa (hash: 5x0qHXKy052VE9+a2c/CKxVgKs0GgOqzJVo2yGxQ3ro=) 2: 3137372e39312e33322e302f32322d3332203d3e20323633343234.roa (hash: 05bv3rwHFKdXP0ka5nwmC7aUxyM/kFqlL8VfT5VE/hg=) 3: 695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl (hash: novxys8l9Kfj552IIJoQEWgvmSnkwlASWjfrxpUSzSE=) 4: 3137302e3233312e3135322e302f32322d3332203d3e20323633343234.roa (hash: QNYexqxi8ZgpvO1oIsW72rOjkHsbCORODUg23wwI2QE=) 5: 3137302e38322e3131362e302f32322d3332203d3e20323633343234.roa (hash: Bq7jYvlTzFbRiuY4gjDAmQq+hoFOYx9hFEexWG876XM=) 6: 3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa (hash: XqR77qLnVQPjvW+NdcPMVLhS20GCaBS3cER2/qIQpkE=) 7: 323830343a313139343a3a2f33322d313238203d3e20323633343234.roa (hash: qRpe3HMunOlDvbnsvh59LbRtj4Tl6ZLH4gik3VMaTCc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3b:2c:01:47:51:83:0f:00:29:08:21:32:fe:b7:ea:6b:ba:5f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2 Validity Not Before: Oct 20 01:57:47 2025 GMT Not After : Oct 21 02:38:47 2025 GMT Subject: CN=F01FDEF5371E89A1E9CFB673E46A402DE3EE9D83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:f0:30:eb:a5:77:c0:f5:49:13:c5:76:63: 6e:14:eb:d8:fd:65:da:26:f4:2b:da:2d:12:e8:e9: 5f:e6:fd:89:8e:dd:c5:04:49:5b:c8:1a:30:ed:f5: 06:38:a5:05:f3:ce:bd:14:fa:73:0f:57:11:57:66: c4:31:6e:0e:c2:c9:31:5c:42:20:76:12:6d:00:10: 0c:82:83:b7:f7:ac:5c:a9:78:66:26:2d:97:8e:c3: 97:b1:f7:c2:d1:ed:10:ae:f7:06:1c:91:6c:7e:ce: 77:e7:16:e4:a8:3f:c4:76:d5:95:a3:8d:88:c0:b7: 52:69:26:48:2a:68:bf:71:f6:4b:6a:ac:c0:22:ae: cc:b0:45:6d:f2:a7:65:ea:c7:72:37:97:cb:5e:11: 30:16:1d:c8:d0:ba:88:1e:bb:73:39:60:3e:48:18: b3:17:59:f7:0c:c8:01:d2:30:3e:eb:b3:61:67:a5: 42:3f:0c:20:ac:e5:96:1c:ea:9f:6f:41:ae:4f:54: 90:bb:b5:92:c9:a3:92:03:e7:f2:bf:1b:16:b5:21: 5e:50:85:78:9f:d9:0e:59:dd:e9:81:5e:59:79:67: fe:e4:57:7a:10:36:5a:dc:f3:f1:ab:73:24:16:90: 5a:f9:b4:a6:8e:ed:6f:2d:1b:45:06:c0:bc:b8:57: 86:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1F:DE:F5:37:1E:89:A1:E9:CF:B6:73:E4:6A:40:2D:E3:EE:9D:83 X509v3 Authority Key Identifier: keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:27:67:4a:ac:ac:48:2b:cc:5f:6c:4b:47:a2:88:39:5f:94: 10:4d:96:90:ea:d1:18:ae:45:17:a0:6b:5d:72:0e:aa:a1:f6: 10:68:ab:b8:6b:84:88:ca:77:86:a5:1a:c3:0f:27:72:b9:50: 70:7b:20:d5:7f:c8:c0:f4:2b:47:26:8b:36:5d:15:2e:80:ad: 22:91:41:d5:f1:5e:6e:93:b3:8f:59:95:68:3d:09:20:55:b0: 5c:ac:e1:a5:54:af:3e:05:29:61:b0:43:27:bc:4c:34:bc:be: 5c:13:d0:2c:dd:d4:ef:d3:00:30:2b:2e:a2:81:4e:3d:f5:1e: 4c:d9:8c:4d:07:79:b1:97:c0:ce:73:aa:e5:35:c6:31:78:4d: a6:6c:75:3a:19:51:31:25:e6:45:35:d2:cb:15:c5:3c:00:9f: 82:7a:fb:29:2c:84:c9:0b:9d:aa:be:87:bc:97:a6:70:34:18: b4:c8:e8:3a:27:ce:78:70:5a:21:82:a4:c9:38:de:ca:32:58: ca:42:26:a6:48:0d:7b:af:c7:03:25:ea:1f:3d:db:c5:ea:68: 25:41:e6:5a:ec:9a:11:c4:16:54:e4:45:36:0f:c8:c2:73:79: 7d:31:a2:f0:a4:55:38:1a:3b:9e:d5:7b:0b:6a:b5:ca:56:0a: 15:ad:3b:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWjssAUdRgw8AKQghMv636mu6X44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk1QTI4RkMxMzNFQjU0MDhCOUJBMTI2RDlGRkUyMDg4 NEVERUNEMjAeFw0yNTEwMjAwMTU3NDdaFw0yNTEwMjEwMjM4NDdaMDMxMTAvBgNV BAMTKEYwMUZERUY1MzcxRTg5QTFFOUNGQjY3M0U0NkE0MDJERTNFRTlEODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKfAw66V3wPVJE8V2Y24U69j9 Zdom9CvaLRLo6V/m/YmO3cUESVvIGjDt9QY4pQXzzr0U+nMPVxFXZsQxbg7CyTFc QiB2Em0AEAyCg7f3rFypeGYmLZeOw5ex98LR7RCu9wYckWx+znfnFuSoP8R21ZWj jYjAt1JpJkgqaL9x9ktqrMAirsywRW3yp2Xqx3I3l8teETAWHcjQuogeu3M5YD5I GLMXWfcMyAHSMD7rs2FnpUI/DCCs5ZYc6p9vQa5PVJC7tZLJo5ID5/K/Gxa1IV5Q hXif2Q5Z3emBXll5Z/7kV3oQNlrc8/GrcyQWkFr5tKaO7W8tG0UGwLy4V4blAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8B/e9TceiaHpz7Zz5GpALePunYMwHwYDVR0j BBgwFoAUaVoo/BM+tUCLm6Em2f/iCITt7NIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUhFWVJMOHlrV3hBNWFNMnZqbjdqWTI1WHYzYnF2bXk5dGlnRkJOcVJr TjgvMi82OTVBMjhGQzEzM0VCNTQwOEI5QkExMjZEOUZGRTIwODg0RURFQ0QyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NUEyOEZDMTMzRUI1NDA4 QjlCQTEyNkQ5RkZFMjA4ODRFREVDRDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUhFWVJMOHlrV3hBNWFNMnZqbjdqWTI1WHYzYnF2bXk5dGlnRkJOcVJrTjgvMi82 OTVBMjhGQzEzM0VCNTQwOEI5QkExMjZEOUZGRTIwODg0RURFQ0QyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMSdnSqysSCvMX2xLR6KIOV+UEE2WkOrRGK5FF6BrXXIOqqH2EGiruGuEiMp3 hqUaww8ncrlQcHsg1X/IwPQrRyaLNl0VLoCtIpFB1fFebpOzj1mVaD0JIFWwXKzh pVSvPgUpYbBDJ7xMNLy+XBPQLN3U79MAMCsuooFOPfUeTNmMTQd5sZfAznOq5TXG MXhNpmx1OhlRMSXmRTXSyxXFPACfgnr7KSyEyQudqr6HvJemcDQYtMjoOifOeHBa IYKkyTjeyjJYykImpkgNe6/HAyXqHz3bxepoJUHmWuyaEcQWVORFNg/IwnN5fTGi 8KRVOBo7ntV7C2q1ylYKFa07rw== -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:43 2025 by rpki-client