$ rpki-client -vvf rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft File: 658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft (raw, json) Hash identifier: nc7hJY6Gwmh52yMe2MzxTkl3L6cVjyOiiATM2USa7jY= Subject key identifier: 23:29:A2:3E:4D:B9:3A:2F:7B:09:71:21:FD:B6:A9:90:EF:70:00:14 Authority key identifier: 65:8F:D2:C4:C8:A5:DA:07:9A:C1:30:7D:53:15:12:B7:C5:72:40:AA Certificate issuer: /CN=658FD2C4C8A5DA079AC1307D531512B7C57240AA Certificate serial: 5F746FB2940A7206FA8B8DD790C933A2F89F543F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft Manifest number: 2F Signing time: Mon 20 Oct 2025 03:41:12 +0000 Manifest this update: Mon 20 Oct 2025 03:36:12 +0000 Manifest next update: Tue 21 Oct 2025 07:31:12 +0000 Files and hashes: 1: 658FD2C4C8A5DA079AC1307D531512B7C57240AA.crl (hash: ORhLXPKZnC5lMEsaCCLW6jI+SX6OrQCIJp/JlHPvI9c=) 2: 3139312e33372e31322e302f32322d3332203d3e20313938393439.roa (hash: dUvPNyH+1sT9JEddjsNec3pJF/CutLJpkDRRP2ljdAI=) 3: 3139312e33372e31322e302f32322d3332203d3e20323633333530.roa (hash: K17H+8R3bf4Ik/EEIIS2q9ds9+VT0iYutYHN78cPwsM=) 4: 323830343a313463383a3a2f33322d313238203d3e20323633333530.roa (hash: X710oqaMA3JanrSPP1LTWK7F3nOBbtVEfY+7eFVHbpo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.crl rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:74:6f:b2:94:0a:72:06:fa:8b:8d:d7:90:c9:33:a2:f8:9f:54:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658FD2C4C8A5DA079AC1307D531512B7C57240AA Validity Not Before: Oct 20 03:36:12 2025 GMT Not After : Oct 21 07:31:12 2025 GMT Subject: CN=2329A23E4DB93A2F7B097121FDB6A990EF700014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b3:9d:70:bd:f4:26:7e:ed:d8:13:b3:62:d5: bd:56:fb:63:2e:5a:3c:4d:3d:22:e9:ee:12:c3:0b: 6b:42:de:17:85:03:e7:80:33:93:5d:21:9a:87:1c: 70:1e:e0:83:63:5f:66:39:4d:af:9c:fe:fc:ac:64: 18:af:d1:1f:a5:2a:43:d9:db:f9:bd:b9:78:23:88: 52:fb:de:01:15:1b:45:4f:e4:37:a6:7c:45:ae:da: b1:fb:79:cc:c5:3d:44:f7:af:08:d6:8e:d1:d1:3b: cf:54:9b:9b:31:e7:af:08:18:ed:39:2e:7e:d7:cd: 06:2e:fd:4b:c7:45:cb:18:3e:ee:d7:e2:83:76:54: 34:59:db:bf:44:52:e4:bb:5d:f9:bd:9e:ee:cf:97: 98:c8:e6:23:86:67:ac:4c:60:87:ff:b3:85:dd:5c: 0f:c8:62:a3:ea:d9:a2:60:f4:d0:c4:95:c6:67:11: a4:d8:f8:09:db:ef:2c:59:c9:51:7c:8a:5c:9b:12: 2a:ca:17:70:76:39:01:85:ea:7a:17:18:30:d3:3c: 49:2f:fb:97:b4:01:18:b6:5d:27:47:57:27:81:7f: 4e:72:14:51:86:67:d5:b4:94:76:b2:84:4f:a5:f7: 6c:93:2c:b8:c0:16:ec:73:94:ab:f2:45:00:2a:2c: c6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:29:A2:3E:4D:B9:3A:2F:7B:09:71:21:FD:B6:A9:90:EF:70:00:14 X509v3 Authority Key Identifier: keyid:65:8F:D2:C4:C8:A5:DA:07:9A:C1:30:7D:53:15:12:B7:C5:72:40:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:60:14:3f:da:84:f7:fd:a6:4b:3e:1c:80:bc:7c:73:5b:b1: 7b:e6:3e:76:c1:89:e7:80:d0:af:5a:92:19:a3:2a:af:15:5b: 68:79:37:1a:50:50:32:7d:4e:b0:db:71:ba:24:64:5d:28:3e: 1f:fb:27:4e:31:64:61:97:38:d8:44:79:d7:11:1e:7e:45:60: 11:12:83:4a:c0:7a:4e:63:9b:d3:41:f3:1b:2a:2e:5c:10:6a: a0:52:62:60:2c:0d:f8:13:d2:30:cc:f0:3a:da:95:b6:bc:5b: bb:db:14:22:c7:6c:89:5e:a3:f4:e7:eb:07:38:00:42:74:5e: 5d:37:10:38:8a:c2:57:2a:03:30:09:8e:be:9a:ce:a9:71:9a: 00:35:df:12:d7:f8:fb:12:5a:c1:35:7a:92:c1:1f:36:72:81: ef:93:66:e0:d1:fe:3e:1e:f7:1a:5d:a8:03:b1:86:41:a1:6d: f1:5b:5d:7f:e9:0b:06:9e:15:8c:c7:ab:8f:f2:20:19:c5:16: ba:fa:52:de:d8:54:40:69:be:d5:75:df:d9:b9:93:56:17:b7: 3f:47:47:f3:0f:19:e7:67:85:85:e7:6d:3a:7a:18:35:36:37: 37:42:25:83:2c:98:c9:ce:67:d1:32:df:7b:54:c3:37:3c:5b: c3:3d:3a:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX3RvspQKcgb6i43XkMkzovifVD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4RkQyQzRDOEE1REEwNzlBQzEzMDdENTMxNTEyQjdD NTcyNDBBQTAeFw0yNTEwMjAwMzM2MTJaFw0yNTEwMjEwNzMxMTJaMDMxMTAvBgNV BAMTKDIzMjlBMjNFNERCOTNBMkY3QjA5NzEyMUZEQjZBOTkwRUY3MDAwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSs51wvfQmfu3YE7Ni1b1W+2Mu WjxNPSLp7hLDC2tC3heFA+eAM5NdIZqHHHAe4INjX2Y5Ta+c/vysZBiv0R+lKkPZ 2/m9uXgjiFL73gEVG0VP5DemfEWu2rH7eczFPUT3rwjWjtHRO89Um5sx568IGO05 Ln7XzQYu/UvHRcsYPu7X4oN2VDRZ279EUuS7Xfm9nu7Pl5jI5iOGZ6xMYIf/s4Xd XA/IYqPq2aJg9NDElcZnEaTY+Anb7yxZyVF8ilybEirKF3B2OQGF6noXGDDTPEkv +5e0ARi2XSdHVyeBf05yFFGGZ9W0lHayhE+l92yTLLjAFuxzlKvyRQAqLMY5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIymiPk25Oi97CXEh/bapkO9wABQwHwYDVR0j BBgwFoAUZY/SxMil2geawTB9UxUSt8VyQKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkRZTlZMTEpHRkZlSFZ3UWUzQ3NSYUVWZ3B5TmVSMW9rZGZVN2EzcFFS S2YvMC82NThGRDJDNEM4QTVEQTA3OUFDMTMwN0Q1MzE1MTJCN0M1NzI0MEFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1OEZEMkM0QzhBNURBMDc5 QUMxMzA3RDUzMTUxMkI3QzU3MjQwQUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NkRZTlZMTEpHRkZlSFZ3UWUzQ3NSYUVWZ3B5TmVSMW9rZGZVN2EzcFFSS2YvMC82 NThGRDJDNEM4QTVEQTA3OUFDMTMwN0Q1MzE1MTJCN0M1NzI0MEFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkmAUP9qE9/2mSz4cgLx8c1uxe+Y+dsGJ54DQr1qSGaMqrxVbaHk3GlBQMn1O sNtxuiRkXSg+H/snTjFkYZc42ER51xEefkVgERKDSsB6TmOb00HzGyouXBBqoFJi YCwN+BPSMMzwOtqVtrxbu9sUIsdsiV6j9OfrBzgAQnReXTcQOIrCVyoDMAmOvprO qXGaADXfEtf4+xJawTV6ksEfNnKB75Nm4NH+Ph73Gl2oA7GGQaFt8Vtdf+kLBp4V jMerj/IgGcUWuvpS3thUQGm+1XXf2bmTVhe3P0dH8w8Z52eFhedtOnoYNTY3N0Il gyyYyc5n0TLfe1TDNzxbwz06pQ== -----END CERTIFICATE-----Generated at Mon Oct 20 07:47:51 2025 by rpki-client