$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft File: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft (raw, json) Hash identifier: aMran79vBn0HyUGEpzHc2/ejML/4IyHZY0dEdaLiEBg= Subject key identifier: D7:8D:5C:9F:60:FD:67:B0:00:1E:75:AE:8E:AC:0B:76:D6:F2:8D:E7 Authority key identifier: AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A Certificate issuer: /CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A Certificate serial: 2D2072012C8966A364DE1195AF2001AE50F27BFC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer Subject info access: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft Manifest number: 0199 Signing time: Mon 20 Oct 2025 17:38:25 +0000 Manifest this update: Mon 20 Oct 2025 17:33:25 +0000 Manifest next update: Tue 21 Oct 2025 20:29:25 +0000 Files and hashes: 1: 34352e3136352e38302e302f32322d3234203d3e203631353935.roa (hash: P3iRqeK3Yv57QU7Bwadb2mGTtOHbUHSsYSW0mi15khA=) 2: 323830343a353463383a3a2f33322d3438203d3e203631353935.roa (hash: Ae2efMgnwM2PCNT7dU75s66Sccj5kzLKU0a/b++2GsQ=) 3: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl (hash: gLsB4U/CIOlgCmx+U0tikYuackfTDw2JBfUJq6lbSM8=) 4: 34352e3136352e38302e302f32322d3234203d3e203533343237.roa (hash: W6Il1nJqq5qqLa4TPlQ/OzjTUK08KOF0OrC0Ec1PXjE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 19:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:20:72:01:2c:89:66:a3:64:de:11:95:af:20:01:ae:50:f2:7b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A Validity Not Before: Oct 20 17:33:25 2025 GMT Not After : Oct 21 20:29:25 2025 GMT Subject: CN=D78D5C9F60FD67B0001E75AE8EAC0B76D6F28DE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f2:65:09:b5:5f:4a:a3:1b:57:61:1f:b2:31: c0:50:b3:87:35:7c:a0:a9:9c:73:92:3e:a0:bc:a3: c0:47:87:2b:76:d8:17:cf:59:0c:7e:71:48:39:7b: 2a:72:09:34:28:65:90:37:ea:07:05:2b:03:96:b5: 85:19:6f:f2:55:d6:b4:ca:ab:00:6e:a4:13:9e:ac: 46:e0:fa:1c:b4:69:36:b7:74:de:58:eb:79:c4:18: 1e:f9:37:65:52:97:62:c6:4e:95:1c:e6:b7:f3:8e: fb:16:ec:a6:b2:9f:07:27:7f:cd:55:a9:46:27:27: bc:60:b4:57:f7:1c:a2:4e:11:47:8f:5d:19:cc:ad: 1e:ef:ee:f7:9d:9e:65:69:3c:9b:0e:55:27:64:e2: e6:12:92:87:28:03:20:58:65:4a:e4:ae:cd:4e:33: bd:6e:62:10:c1:91:4f:52:7f:e1:a0:d1:44:f3:d2: 24:fa:9b:fa:f6:8b:db:e2:85:a6:2e:dd:86:e7:78: 93:b6:53:65:bf:bd:05:05:e0:2e:01:c7:0c:6d:98: 5b:b0:ea:b0:16:e6:32:01:f2:1c:4c:18:26:98:16: dd:31:12:50:1f:0e:07:fa:86:33:81:86:ab:aa:63: 79:1c:15:b5:3a:18:83:9c:df:ed:bc:24:b7:a5:0d: 25:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8D:5C:9F:60:FD:67:B0:00:1E:75:AE:8E:AC:0B:76:D6:F2:8D:E7 X509v3 Authority Key Identifier: keyid:AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:0a:e4:29:57:aa:d2:77:d5:7e:34:08:ea:8a:d9:b9:43:8a: 2b:19:01:1a:f4:9c:8c:ac:63:22:e2:45:b1:8d:27:d7:f6:aa: 22:d9:82:59:20:c8:70:d0:3e:13:e6:21:73:8d:cd:56:f7:06: 46:8f:49:94:ad:17:17:99:63:9c:e7:02:af:94:99:96:08:1c: bd:84:35:41:3e:99:3b:f7:0c:70:23:bb:c5:cc:28:f4:0b:88: 67:7b:a2:5b:69:e7:4f:06:52:42:d9:5b:a0:49:53:38:1a:d3: ba:8c:d2:69:33:a8:09:bc:8a:bc:1a:fe:e7:db:7f:18:44:08: 23:ce:5b:4d:95:9a:ec:90:be:bf:31:78:1a:bf:d3:7a:7c:87: 75:ca:d7:ba:1a:cc:46:3a:33:30:ee:02:cf:81:06:f9:a5:47: 57:64:b0:17:c7:55:f1:68:76:94:a5:db:de:f6:7d:e6:d2:7b: 8f:e2:ea:50:e9:6c:40:9e:b0:ef:5d:76:b8:f1:f9:09:5e:57: 5c:33:ef:35:e7:d0:e9:64:c7:94:38:27:94:bb:1d:a5:6c:55: 82:1c:6b:30:f8:33:24:dc:a6:22:55:ea:59:8f:48:1f:4c:0b: 45:ce:84:5d:a4:53:65:31:8d:41:77:03:a1:97:36:82:43:a5: e3:c0:b6:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULSByASyJZqNk3hGVryABrlDye/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1OEVFRDIwQ0VBMDQwMUJERUJERTRDQTI5Q0MyREI1 OUQ3MTEzQTAeFw0yNTEwMjAxNzMzMjVaFw0yNTEwMjEyMDI5MjVaMDMxMTAvBgNV BAMTKEQ3OEQ1QzlGNjBGRDY3QjAwMDFFNzVBRThFQUMwQjc2RDZGMjhERTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8mUJtV9KoxtXYR+yMcBQs4c1 fKCpnHOSPqC8o8BHhyt22BfPWQx+cUg5eypyCTQoZZA36gcFKwOWtYUZb/JV1rTK qwBupBOerEbg+hy0aTa3dN5Y63nEGB75N2VSl2LGTpUc5rfzjvsW7Kaynwcnf81V qUYnJ7xgtFf3HKJOEUePXRnMrR7v7vednmVpPJsOVSdk4uYSkocoAyBYZUrkrs1O M71uYhDBkU9Sf+Gg0UTz0iT6m/r2i9vihaYu3YbneJO2U2W/vQUF4C4BxwxtmFuw 6rAW5jIB8hxMGCaYFt0xElAfDgf6hjOBhquqY3kcFbU6GIOc3+28JLelDSXXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU141cn2D9Z7AAHnWujqwLdtbyjecwHwYDVR0j BBgwFoAUrVju0gzqBAG9695MopzC21nXETowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBi eUYvMC9BRDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENThFRUQyMENFQTA0MDFC REVCREU0Q0EyOUNDMkRCNTlENzExM0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBieUYvMC9B RDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABwrkKVeq0nfVfjQI6orZuUOKKxkBGvScjKxjIuJFsY0n1/aqItmCWSDIcNA+ E+Yhc43NVvcGRo9JlK0XF5ljnOcCr5SZlggcvYQ1QT6ZO/cMcCO7xcwo9AuIZ3ui W2nnTwZSQtlboElTOBrTuozSaTOoCbyKvBr+59t/GEQII85bTZWa7JC+vzF4Gr/T enyHdcrXuhrMRjozMO4Cz4EG+aVHV2SwF8dV8Wh2lKXb3vZ95tJ7j+LqUOlsQJ6w 7112uPH5CV5XXDPvNefQ6WTHlDgnlLsdpWxVghxrMPgzJNymIlXqWY9IH0wLRc6E XaRTZTGNQXcDoZc2gkOl48C2mA== -----END CERTIFICATE-----Generated at Mon Oct 20 21:37:11 2025 by rpki-client