$ rpki-client -vvf rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.mft File: 18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.mft (raw, json) Hash identifier: JFaM0Cwta2dZRpiRjR0xI24nOIW7A3P4MxYdcgoRheQ= Subject key identifier: 21:3C:74:B9:89:F2:97:91:48:B3:85:06:30:E2:45:F2:CA:CA:3B:29 Authority key identifier: 18:EC:B5:AE:B5:0F:51:D6:D9:3C:7B:F4:92:29:D6:9F:DC:AE:21:6B Certificate issuer: /CN=18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B Certificate serial: 71FA62ECC49FA2E93388FDA10688F0AC26784482 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.cer Subject info access: rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.mft Manifest number: 3B Signing time: Mon 20 Oct 2025 04:06:12 +0000 Manifest this update: Mon 20 Oct 2025 04:01:12 +0000 Manifest next update: Tue 21 Oct 2025 07:54:12 +0000 Files and hashes: 1: 18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.crl (hash: XDJjMV+PncZS55o8TYhzQW2qaNAGcpLnNgwM7KJqj94=) 2: 3230312e35352e3132382e302f31392d3234203d3e20313938393439.roa (hash: EIUYyzQ5fF+3IpNcCSmSwjXSfxryI8AM6/YJokFnLL8=) 3: 3230312e35352e3137362e302f32302d3234203d3e20313938393439.roa (hash: UCPF9BHrVll4+GfqIuehwEpZwV+FS1XdlVzylJmOp/c=) 4: 323830343a6166633a3a2f33322d313238203d3e203238363230.roa (hash: NJYcpBCfCPeUZh1y15AMxwYEHxLLTTPNncc+nLNfNDI=) 5: 3230312e35352e3132382e302f31392d3332203d3e203238363230.roa (hash: 9cfxWYleeqMnsax/Y67rUWcUmbHBebsZJ3inWugTyL4=) 6: 3230312e35352e3137362e302f32302d3332203d3e203238363230.roa (hash: guJ0HovixVZsT11OY5dR4Thql/lqVIEunspIHEkEld4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.crl rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:fa:62:ec:c4:9f:a2:e9:33:88:fd:a1:06:88:f0:ac:26:78:44:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B Validity Not Before: Oct 20 04:01:12 2025 GMT Not After : Oct 21 07:54:12 2025 GMT Subject: CN=213C74B989F2979148B3850630E245F2CACA3B29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:86:4c:c8:54:8e:58:8e:94:9a:5d:83:43:70: 2a:36:3a:5c:8f:80:c8:a8:90:fb:f2:08:c4:81:a2: e6:72:5b:df:f4:ea:0a:17:89:7c:70:59:0d:26:37: 22:6b:e4:f0:e9:f6:37:84:22:b0:ff:72:6b:32:30: e5:1e:6b:d6:6b:95:1e:8e:26:ec:ae:c1:02:45:66: f4:d0:1c:f2:85:85:6f:52:f7:96:cb:e2:6e:c7:cd: f5:94:3a:83:5f:4f:a8:49:c9:5a:b9:fd:78:20:89: 29:13:61:18:58:4f:a8:31:89:e2:0e:53:19:39:07: 52:7c:a8:45:d7:83:a9:4d:b5:a0:1b:e1:ef:aa:44: 3b:c5:c6:14:80:4f:32:28:e5:4b:90:44:dc:1c:81: 05:c6:a6:c2:14:2f:a3:ea:e2:a6:7c:03:4d:7a:b9: 34:38:3d:e8:d8:9a:ce:bd:d4:bf:cb:ec:ae:65:bb: b7:46:7e:f9:61:23:63:0f:a2:5b:0e:24:4e:d3:1d: f0:23:32:c6:fc:93:30:d8:0c:0f:df:22:0e:4d:dc: dc:cc:a6:ea:91:35:5a:86:51:ea:f7:3b:d1:20:44: 59:77:df:0a:2a:e9:00:3f:84:a1:ff:e7:e4:c3:c6: 5e:b2:a4:28:63:19:da:85:fc:bf:85:9d:96:90:bc: 9a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3C:74:B9:89:F2:97:91:48:B3:85:06:30:E2:45:F2:CA:CA:3B:29 X509v3 Authority Key Identifier: keyid:18:EC:B5:AE:B5:0F:51:D6:D9:3C:7B:F4:92:29:D6:9F:DC:AE:21:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:79:97:29:72:70:ff:62:e0:d1:b6:04:60:2b:da:7f:b7:ce: b2:62:3d:c3:8a:fd:8a:66:43:dd:7d:73:39:80:68:4b:bf:35: 02:13:50:c0:70:06:61:0b:2e:5b:7e:34:3d:b7:4c:78:9c:62: 02:4d:0e:e7:23:6d:bc:54:dc:64:eb:37:89:2b:aa:eb:6e:ab: cc:00:e8:38:7a:5f:25:03:9f:89:89:61:c5:c8:47:c3:dc:1b: 77:ce:24:89:72:a0:7f:36:92:0d:32:01:d6:e0:ac:8f:6d:bd: ae:d3:97:ee:4d:ab:87:25:10:7f:df:98:f0:f2:69:3c:78:33: 67:b1:75:93:4a:23:c3:77:3c:3a:b6:64:29:64:86:d1:54:7b: c5:18:56:d7:f1:3d:a1:27:00:27:84:1d:86:55:01:4d:00:8a: 2b:a5:a6:f9:f2:3a:23:8c:db:63:db:4d:fe:a0:a0:d9:56:56: b6:83:7e:b5:f9:46:02:15:dd:ee:71:d9:ca:35:91:22:38:35: 85:26:71:60:71:e2:95:bb:cf:73:81:9a:e6:34:b7:30:5e:06: 6f:f0:ea:e1:ba:4e:12:ee:7d:90:75:84:8f:c6:76:3e:c6:66: 93:6c:31:76:d7:ec:06:40:b6:ef:d2:ef:9a:f0:bd:c7:b8:4f: 9a:48:04:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcfpi7MSfoukziP2hBojwrCZ4RIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThFQ0I1QUVCNTBGNTFENkQ5M0M3QkY0OTIyOUQ2OUZE Q0FFMjE2QjAeFw0yNTEwMjAwNDAxMTJaFw0yNTEwMjEwNzU0MTJaMDMxMTAvBgNV BAMTKDIxM0M3NEI5ODlGMjk3OTE0OEIzODUwNjMwRTI0NUYyQ0FDQTNCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvhkzIVI5YjpSaXYNDcCo2OlyP gMiokPvyCMSBouZyW9/06goXiXxwWQ0mNyJr5PDp9jeEIrD/cmsyMOUea9ZrlR6O JuyuwQJFZvTQHPKFhW9S95bL4m7HzfWUOoNfT6hJyVq5/XggiSkTYRhYT6gxieIO Uxk5B1J8qEXXg6lNtaAb4e+qRDvFxhSATzIo5UuQRNwcgQXGpsIUL6Pq4qZ8A016 uTQ4PejYms691L/L7K5lu7dGfvlhI2MPolsOJE7THfAjMsb8kzDYDA/fIg5N3NzM puqRNVqGUer3O9EgRFl33woq6QA/hKH/5+TDxl6ypChjGdqF/L+FnZaQvJo5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUITx0uYnyl5FIs4UGMOJF8srKOykwHwYDVR0j BBgwFoAUGOy1rrUPUdbZPHv0kinWn9yuIWswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0FRckFCMlhqYVRVU3FpRmp4MnlacHV4RXNlUHBkUjdLVWh5eGRzVFNB OHAvMC8xOEVDQjVBRUI1MEY1MUQ2RDkzQzdCRjQ5MjI5RDY5RkRDQUUyMTZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4RUNCNUFFQjUwRjUxRDZE OTNDN0JGNDkyMjlENjlGRENBRTIxNkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0FRckFCMlhqYVRVU3FpRmp4MnlacHV4RXNlUHBkUjdLVWh5eGRzVFNBOHAvMC8x OEVDQjVBRUI1MEY1MUQ2RDkzQzdCRjQ5MjI5RDY5RkRDQUUyMTZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi3mXKXJw/2Lg0bYEYCvaf7fOsmI9w4r9imZD3X1zOYBoS781AhNQwHAGYQsu W340PbdMeJxiAk0O5yNtvFTcZOs3iSuq626rzADoOHpfJQOfiYlhxchHw9wbd84k iXKgfzaSDTIB1uCsj229rtOX7k2rhyUQf9+Y8PJpPHgzZ7F1k0ojw3c8OrZkKWSG 0VR7xRhW1/E9oScAJ4QdhlUBTQCKK6Wm+fI6I4zbY9tN/qCg2VZWtoN+tflGAhXd 7nHZyjWRIjg1hSZxYHHilbvPc4Ga5jS3MF4Gb/Dq4bpOEu59kHWEj8Z2PsZmk2wx dtfsBkC279LvmvC9x7hPmkgEOg== -----END CERTIFICATE-----Generated at Mon Oct 20 13:02:10 2025 by rpki-client