$ rpki-client -vvf rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft File: 686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft (raw, json) Hash identifier: bHxRLzVDwI5IWkPCfD9nT/mWOuHj00iMcdaXn/6F1Yk= Subject key identifier: 25:14:57:A6:FB:67:7A:CF:70:AC:CA:C0:B7:51:3F:78:59:F5:7F:61 Authority key identifier: 68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7 Certificate issuer: /CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7 Certificate serial: 7401AD25732F34C31949B86C019EF0F77BF59E67 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft Manifest number: 02BC Signing time: Mon 20 Oct 2025 14:24:08 +0000 Manifest this update: Mon 20 Oct 2025 14:19:08 +0000 Manifest next update: Tue 21 Oct 2025 16:02:08 +0000 Files and hashes: 1: 3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa (hash: nwVIwcLmhDBueq5xt/gc37vwol4yziELmDoL4LzkP7w=) 2: 686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl (hash: ezMKLfEf/8jaIURJzVyuzZZuY4Wc/yDcygqVXJyCfAA=) 3: 323830343a316432343a3a2f33322d3438203d3e20323634333530.roa (hash: eBr86NdP8UcNjjscNRKlKFP5HRNCnh3UcA1xh8UVip4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 16:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:01:ad:25:73:2f:34:c3:19:49:b8:6c:01:9e:f0:f7:7b:f5:9e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7 Validity Not Before: Oct 20 14:19:08 2025 GMT Not After : Oct 21 16:02:08 2025 GMT Subject: CN=251457A6FB677ACF70ACCAC0B7513F7859F57F61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:18:58:92:75:8a:d8:a6:c7:e7:e8:80:44: 09:84:c1:32:9c:7e:5b:35:cb:7f:90:eb:d0:e7:35: 18:15:28:66:40:83:48:2b:75:a5:46:a4:e9:df:70: bb:0c:8a:14:36:49:57:12:d2:7e:ed:45:ca:f7:b9: 34:9e:7b:f9:0e:15:fe:f0:5a:b5:96:76:e8:07:30: bf:74:34:92:e4:87:34:89:1b:e5:02:eb:ba:77:9a: b9:b9:b8:58:41:b4:90:c1:00:57:62:72:74:24:56: c8:e6:df:ad:9c:fe:51:02:72:96:18:ac:41:7f:cf: 10:36:35:2d:e2:fd:d7:3c:ea:16:3a:61:34:fb:67: fb:02:59:57:c4:95:2d:65:7d:9e:15:e6:23:c5:d3: 37:43:89:56:85:e5:6b:e3:f1:e6:d7:d4:7f:4f:c0: e2:1d:08:eb:63:4e:f3:f0:80:6a:cd:68:30:54:19: 5b:39:b2:80:1a:03:b6:82:86:7b:db:2c:15:25:33: 12:46:1b:7a:95:54:5e:1e:90:98:6e:ec:24:9a:c3: 62:e1:00:cb:27:55:6c:55:87:6a:ec:f5:85:e8:41: 9d:d3:2f:4b:1c:22:63:a6:89:12:1c:c9:2a:9a:bf: c3:a8:ac:a7:41:6a:5e:a5:0c:f8:53:1e:37:2d:5f: c7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:14:57:A6:FB:67:7A:CF:70:AC:CA:C0:B7:51:3F:78:59:F5:7F:61 X509v3 Authority Key Identifier: keyid:68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:31:7c:9b:f5:3c:6a:c6:dc:6f:6d:1b:f7:2a:09:f8:88:ee: 9b:e6:45:c2:33:f4:2e:15:6c:92:f9:cc:a2:53:59:ff:c9:45: c6:a9:5b:8f:2e:b4:6f:6f:41:05:b4:4f:ae:10:3d:17:24:11: df:1d:40:87:03:a2:bf:75:72:30:54:cf:3f:0c:11:93:43:b7: dd:6c:9b:57:c6:99:8f:bb:e5:4e:1b:58:34:5f:ec:c5:e8:9f: 2c:ea:2a:47:cf:17:0c:f6:24:01:1a:6b:8b:a2:7e:b4:d0:8b: 1d:07:33:a4:32:e9:5a:d5:ee:f4:47:54:65:e7:c0:c8:30:28: b8:fe:40:8a:8c:70:70:05:89:f3:f8:48:17:3c:cb:3d:30:e2: ba:2c:d7:bc:96:e7:8b:0f:7b:85:49:5b:1d:eb:db:86:42:01: ad:44:f2:5d:68:68:a6:74:a4:f7:d4:00:a5:ce:3c:d7:dd:e7: fa:45:8a:ea:e8:e7:2b:da:8d:45:f0:35:e1:cb:50:03:bf:c7: bb:85:99:88:31:b0:6c:e0:f1:d9:6c:21:93:a4:80:3f:87:62: 2d:23:48:31:cf:e9:70:e7:e7:56:d0:32:c9:3d:b1:d9:23:93: 40:fa:5e:8d:da:a3:87:cb:4c:b4:66:e4:6e:d3:a1:61:5f:c7: 10:8e:b5:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdAGtJXMvNMMZSbhsAZ7w93v1nmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg2RjBCQkZFRkFCMjRDOTBEQ0M0NUQ3NDNDOTIzMzcy NTFCMkNBNzAeFw0yNTEwMjAxNDE5MDhaFw0yNTEwMjExNjAyMDhaMDMxMTAvBgNV BAMTKDI1MTQ1N0E2RkI2NzdBQ0Y3MEFDQ0FDMEI3NTEzRjc4NTlGNTdGNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAAxhYknWK2KbH5+iARAmEwTKc fls1y3+Q69DnNRgVKGZAg0grdaVGpOnfcLsMihQ2SVcS0n7tRcr3uTSee/kOFf7w WrWWdugHML90NJLkhzSJG+UC67p3mrm5uFhBtJDBAFdicnQkVsjm362c/lECcpYY rEF/zxA2NS3i/dc86hY6YTT7Z/sCWVfElS1lfZ4V5iPF0zdDiVaF5Wvj8ebX1H9P wOIdCOtjTvPwgGrNaDBUGVs5soAaA7aChnvbLBUlMxJGG3qVVF4ekJhu7CSaw2Lh AMsnVWxVh2rs9YXoQZ3TL0scImOmiRIcySqav8OorKdBal6lDPhTHjctX8c9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJRRXpvtnes9wrMrAt1E/eFn1f2EwHwYDVR0j BBgwFoAUaG8Lv++rJMkNzEXXQ8kjNyUbLKcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGZxYjNSNWdLMlNRM0t2Z3h6NkRobkgzbkwxMjVTdzNBamoyd01YbWZv ZjIvMS82ODZGMEJCRkVGQUIyNEM5MERDQzQ1RDc0M0M5MjMzNzI1MUIyQ0E3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4NkYwQkJGRUZBQjI0Qzkw RENDNDVENzQzQzkyMzM3MjUxQjJDQTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGZxYjNSNWdLMlNRM0t2Z3h6NkRobkgzbkwxMjVTdzNBamoyd01YbWZvZjIvMS82 ODZGMEJCRkVGQUIyNEM5MERDQzQ1RDc0M0M5MjMzNzI1MUIyQ0E3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjDF8m/U8asbcb20b9yoJ+Ijum+ZFwjP0LhVskvnMolNZ/8lFxqlbjy60b29B BbRPrhA9FyQR3x1AhwOiv3VyMFTPPwwRk0O33WybV8aZj7vlThtYNF/sxeifLOoq R88XDPYkARpri6J+tNCLHQczpDLpWtXu9EdUZefAyDAouP5AioxwcAWJ8/hIFzzL PTDiuizXvJbniw97hUlbHevbhkIBrUTyXWhopnSk99QApc48193n+kWK6ujnK9qN RfA14ctQA7/Hu4WZiDGwbODx2Wwhk6SAP4diLSNIMc/pcOfnVtAyyT2x2SOTQPpe jdqjh8tMtGbkbtOhYV/HEI61Ug== -----END CERTIFICATE-----Generated at Mon Oct 20 21:37:03 2025 by rpki-client