$ rpki-client -vvf rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.mft File: E68618F45B841B2C0F36D3F8AD7C98AF5A517052.mft (raw, json) Hash identifier: jtGyeevvj98WUl432MHSpaX/2XTlNW2dQ3uN0gKFwf4= Subject key identifier: 60:8E:13:56:6D:FE:D8:AE:59:C7:62:41:E3:EF:35:2C:6E:F8:A8:5C Authority key identifier: E6:86:18:F4:5B:84:1B:2C:0F:36:D3:F8:AD:7C:98:AF:5A:51:70:52 Certificate issuer: /CN=E68618F45B841B2C0F36D3F8AD7C98AF5A517052 Certificate serial: 1448C2E0562FD55BE91F56103F60342B82976FAD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.cer Subject info access: rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.mft Manifest number: 02F1 Signing time: Mon 20 Oct 2025 10:20:35 +0000 Manifest this update: Mon 20 Oct 2025 10:15:35 +0000 Manifest next update: Tue 21 Oct 2025 12:01:35 +0000 Files and hashes: 1: 323830343a383833633a313430303a3a2f34302d3430203d3e20323732373538.roa (hash: CTtrDOhs1PgRLAYrUqi67vbnYYlJ7lJTueXlZGAMyNU=) 2: E68618F45B841B2C0F36D3F8AD7C98AF5A517052.crl (hash: Hk47wm1b4yntY0M/PRQRRtf4HEtcrBe8StIb1hXFCc4=) 3: 323830343a383833633a6130303a3a2f34302d3430203d3e20323732373538.roa (hash: RbHjpPUIMLPicmm+EDUJ9MFGS8vIcOHf8B1XsyrwO2w=) 4: 323830343a383833633a3a2f34302d3430203d3e20323732373538.roa (hash: QoRGsBRam/M9QqRR0VDox7U2m11RG4D3TeoblyUDqNE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.crl rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:48:c2:e0:56:2f:d5:5b:e9:1f:56:10:3f:60:34:2b:82:97:6f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E68618F45B841B2C0F36D3F8AD7C98AF5A517052 Validity Not Before: Oct 20 10:15:35 2025 GMT Not After : Oct 21 12:01:35 2025 GMT Subject: CN=608E13566DFED8AE59C76241E3EF352C6EF8A85C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3c:c9:11:cc:92:0b:27:06:a0:b8:21:d8:ff: b4:0f:26:b0:8c:c5:d6:ad:e3:d5:d8:6d:48:21:4b: b1:f2:8f:c2:62:b6:7d:df:ef:65:20:a9:7d:05:78: c2:11:05:0f:83:38:15:d8:bd:0f:89:a5:5c:34:9e: 08:cc:55:f5:0e:38:54:46:0f:c5:72:72:3c:a2:ef: dd:39:7b:41:a4:f9:57:d9:be:d1:4f:72:5a:56:ea: 85:e1:7b:86:1f:02:7a:02:11:2d:e0:d0:fd:06:13: c5:b9:22:a1:5a:9c:15:0a:5e:0d:12:45:28:cf:e7: f7:48:12:9c:d6:cc:72:13:ed:bc:06:4e:58:99:de: 45:99:22:07:92:c6:a8:db:6a:b2:cb:a9:39:bf:4c: 48:4d:e8:58:e9:8f:a5:3e:dd:78:04:0d:a3:88:6c: 8e:e8:2b:9a:50:0e:ab:13:ad:51:cd:27:18:a5:37: 29:99:34:a7:1b:d3:94:0c:28:34:36:7c:35:30:19: 9c:a9:77:ae:45:94:04:b4:16:6f:53:2c:a6:0a:07: 16:73:6d:72:d0:55:ae:c9:06:f3:83:70:ad:0c:80: 66:2c:35:6d:57:11:82:0f:1c:5b:e3:7a:00:b5:55: 18:ab:29:5e:c8:40:a3:d0:9e:83:38:07:b2:81:45: 44:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8E:13:56:6D:FE:D8:AE:59:C7:62:41:E3:EF:35:2C:6E:F8:A8:5C X509v3 Authority Key Identifier: keyid:E6:86:18:F4:5B:84:1B:2C:0F:36:D3:F8:AD:7C:98:AF:5A:51:70:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:12:2e:fe:29:e3:6d:44:a9:c3:90:8f:32:87:2c:94:c9:45: c4:56:cd:72:e3:5d:36:ff:7e:e2:05:43:f7:ac:57:58:6d:96: 63:74:70:4e:7a:ae:0a:de:8a:bc:5e:fb:3f:5b:35:82:4a:fd: 74:4a:0b:c9:ac:ac:af:26:87:3e:8a:91:58:e8:f3:35:f1:04: e4:b6:7e:ab:38:09:80:02:62:68:d9:74:b2:a5:63:7f:c2:4b: 77:e9:03:6f:34:8b:9e:a6:70:65:08:6e:4f:86:df:24:73:b7: 68:cf:00:4f:90:e3:d7:76:cd:10:38:68:1b:23:bb:96:38:25: e5:20:59:32:0d:cd:d3:17:6f:e0:a1:10:97:0b:10:8f:0e:bc: 81:4d:f4:c1:79:aa:23:b6:93:73:ee:48:48:78:95:ca:95:57: e4:d5:69:93:9a:31:4b:e9:ef:59:12:df:62:ac:38:0c:bb:e8: ce:99:5c:dc:27:e0:10:16:ea:71:a8:c4:6f:fc:38:31:7f:2f: 14:ba:74:15:d1:ec:ff:b2:6b:7f:2b:15:13:69:24:33:dc:8a: 0c:7f:88:fa:e4:6d:85:c2:0c:aa:9f:81:a4:fa:6c:45:b1:5c: d7:7c:e6:20:9c:d3:7d:ef:42:b9:e9:cb:ae:85:c9:fe:36:65: 89:2e:4d:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFEjC4FYv1VvpH1YQP2A0K4KXb60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY4NjE4RjQ1Qjg0MUIyQzBGMzZEM0Y4QUQ3Qzk4QUY1 QTUxNzA1MjAeFw0yNTEwMjAxMDE1MzVaFw0yNTEwMjExMjAxMzVaMDMxMTAvBgNV BAMTKDYwOEUxMzU2NkRGRUQ4QUU1OUM3NjI0MUUzRUYzNTJDNkVGOEE4NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOPMkRzJILJwaguCHY/7QPJrCM xdat49XYbUghS7Hyj8Jitn3f72UgqX0FeMIRBQ+DOBXYvQ+JpVw0ngjMVfUOOFRG D8Vycjyi7905e0Gk+VfZvtFPclpW6oXhe4YfAnoCES3g0P0GE8W5IqFanBUKXg0S RSjP5/dIEpzWzHIT7bwGTliZ3kWZIgeSxqjbarLLqTm/TEhN6Fjpj6U+3XgEDaOI bI7oK5pQDqsTrVHNJxilNymZNKcb05QMKDQ2fDUwGZypd65FlAS0Fm9TLKYKBxZz bXLQVa7JBvODcK0MgGYsNW1XEYIPHFvjegC1VRirKV7IQKPQnoM4B7KBRURLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYI4TVm3+2K5Zx2JB4+81LG74qFwwHwYDVR0j BBgwFoAU5oYY9FuEGywPNtP4rXyYr1pRcFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXR6M1hoaFVhWXBQZ1ZIV2VKd3Exa1lxWExqMVNRRlJGYmVzTkg1REht UFUvMS9FNjg2MThGNDVCODQxQjJDMEYzNkQzRjhBRDdDOThBRjVBNTE3MDUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2ODYxOEY0NUI4NDFCMkMw RjM2RDNGOEFEN0M5OEFGNUE1MTcwNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXR6M1hoaFVhWXBQZ1ZIV2VKd3Exa1lxWExqMVNRRlJGYmVzTkg1REhtUFUvMS9F Njg2MThGNDVCODQxQjJDMEYzNkQzRjhBRDdDOThBRjVBNTE3MDUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzxIu/injbUSpw5CPMocslMlFxFbNcuNdNv9+4gVD96xXWG2WY3RwTnquCt6K vF77P1s1gkr9dEoLyaysryaHPoqRWOjzNfEE5LZ+qzgJgAJiaNl0sqVjf8JLd+kD bzSLnqZwZQhuT4bfJHO3aM8AT5Dj13bNEDhoGyO7ljgl5SBZMg3N0xdv4KEQlwsQ jw68gU30wXmqI7aTc+5ISHiVypVX5NVpk5oxS+nvWRLfYqw4DLvozplc3CfgEBbq cajEb/w4MX8vFLp0FdHs/7JrfysVE2kkM9yKDH+I+uRthcIMqp+BpPpsRbFc13zm IJzTfe9CuenLroXJ/jZliS5Nkw== -----END CERTIFICATE-----Generated at Mon Oct 20 16:25:48 2025 by rpki-client