$ rpki-client -vvf rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft File: B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft (raw, json) Hash identifier: xu12nPtotl27sTiklOHGRCaOkbKg6JNlrYMpjXpoUk0= Subject key identifier: 02:B0:5F:0C:20:BB:BF:2B:66:75:31:37:22:43:6F:4B:9F:39:50:A8 Authority key identifier: B6:29:AD:9F:55:FA:B6:BB:BF:BD:FF:EB:C0:5F:F5:6F:BC:A9:CC:94 Certificate issuer: /CN=B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94 Certificate serial: 663A8F83C3E27CBBF623A3CF85271B7E46E09117 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.cer Subject info access: rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft Manifest number: 20 Signing time: Mon 20 Oct 2025 04:15:32 +0000 Manifest this update: Mon 20 Oct 2025 04:10:32 +0000 Manifest next update: Tue 21 Oct 2025 06:09:32 +0000 Files and hashes: 1: B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.crl (hash: e56W9M+q/oZbrR41a95r+LykCb05mSEwBLDVcnH9R58=) 2: 323830343a363065633a3a2f33322d3332203d3e20323639323030.roa (hash: n9rse3OoCQBo0ruAYtRVJWD4u89jY4UKuEhCcVoKoUM=) 3: 34352e3138312e3138342e302f32322d3234203d3e20323639323030.roa (hash: MjgAbGBA3MLIQEbDOEqfgH94qhnYSyUXbioQpjVsW7I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.crl rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:3a:8f:83:c3:e2:7c:bb:f6:23:a3:cf:85:27:1b:7e:46:e0:91:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94 Validity Not Before: Oct 20 04:10:32 2025 GMT Not After : Oct 21 06:09:32 2025 GMT Subject: CN=02B05F0C20BBBF2B6675313722436F4B9F3950A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b2:ca:ab:38:15:d3:2c:30:f7:dc:8a:82:e4: 0b:2a:94:4a:07:56:69:59:69:b9:ee:0f:65:7a:35: 0a:98:c5:10:2c:d9:59:e1:dd:0c:e7:48:7e:e6:46: a0:fd:05:33:74:d1:5b:5c:fa:34:11:14:dd:ab:ea: 4c:ee:f8:2d:67:d3:fa:19:2b:f1:06:27:5c:4e:45: 14:ed:1b:83:c8:50:ad:de:c5:46:2d:1a:d6:8f:62: 94:9b:28:75:e9:99:73:5d:38:70:9c:7b:7c:5a:6a: 84:c8:3f:dc:ee:7b:82:e1:50:f2:c3:b6:95:76:08: d7:2a:4e:dc:0e:3e:76:8c:67:cc:ff:80:1d:81:c1: fd:40:61:3a:e3:ad:3c:36:bd:86:3d:4a:1a:0f:29: 50:e6:50:09:09:7f:59:a0:70:66:34:ce:14:46:40: e3:8e:ca:ad:53:f2:05:7c:b9:13:62:ac:db:70:c9: f0:0e:43:0b:22:02:c9:9b:6b:72:5c:f6:51:2b:9e: 60:cf:87:d2:25:4a:e5:94:39:8b:d6:5d:a6:3c:52: d2:2d:02:50:44:30:92:4d:ae:60:7b:69:2f:57:f6: 6c:bd:02:76:db:5e:64:eb:1b:bc:42:f6:da:21:9b: e1:e1:99:64:e8:25:d4:d5:d9:30:69:de:25:71:d5: 1f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B0:5F:0C:20:BB:BF:2B:66:75:31:37:22:43:6F:4B:9F:39:50:A8 X509v3 Authority Key Identifier: keyid:B6:29:AD:9F:55:FA:B6:BB:BF:BD:FF:EB:C0:5F:F5:6F:BC:A9:CC:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:cc:39:ea:95:3d:97:37:03:e4:4c:37:42:1f:41:fb:d6:03: 03:8d:9d:b0:de:3d:2d:97:45:c6:39:0e:d4:c2:f2:71:1d:f5: d7:e4:54:06:d5:c4:8e:b8:d7:1b:7e:4d:1a:f5:b9:2d:e6:60: b4:1a:1d:07:78:35:e6:4a:52:b4:5a:79:d3:b3:2c:68:2a:a4: 86:73:a1:64:ac:e0:b3:33:01:36:ff:1f:8f:f9:cc:49:aa:d6: e2:53:9e:96:cd:0f:cf:df:bf:d0:52:44:3e:71:59:63:35:fd: 15:1a:a9:3e:dc:51:56:db:61:33:a2:bd:d8:fe:41:c4:d5:7a: 74:f9:3c:48:33:c8:3c:05:47:2c:28:d1:98:fc:d6:77:b9:17: 77:ee:c5:14:e9:23:4c:b6:71:78:bb:e3:74:97:7b:c8:aa:8f: 1a:6e:a9:69:cb:0b:84:8d:05:67:a6:34:b3:5d:66:51:c8:4f: d5:b8:d1:8a:fd:8d:76:e7:9b:c5:5c:3f:94:a1:26:e6:cb:44: 4f:fd:59:17:d3:f8:31:bb:7e:85:fe:ea:92:88:87:06:25:5d: 7f:24:34:82:fe:f4:9e:28:f0:d3:5d:49:13:71:e4:31:83:37: 62:bf:5e:bf:d3:80:47:82:57:6b:58:38:60:ee:80:01:20:d4: 69:97:13:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZjqPg8PifLv2I6PPhScbfkbgkRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyOUFEOUY1NUZBQjZCQkJGQkRGRkVCQzA1RkY1NkZC Q0E5Q0M5NDAeFw0yNTEwMjAwNDEwMzJaFw0yNTEwMjEwNjA5MzJaMDMxMTAvBgNV BAMTKDAyQjA1RjBDMjBCQkJGMkI2Njc1MzEzNzIyNDM2RjRCOUYzOTUwQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUssqrOBXTLDD33IqC5AsqlEoH VmlZabnuD2V6NQqYxRAs2Vnh3QznSH7mRqD9BTN00Vtc+jQRFN2r6kzu+C1n0/oZ K/EGJ1xORRTtG4PIUK3exUYtGtaPYpSbKHXpmXNdOHCce3xaaoTIP9zue4LhUPLD tpV2CNcqTtwOPnaMZ8z/gB2Bwf1AYTrjrTw2vYY9ShoPKVDmUAkJf1mgcGY0zhRG QOOOyq1T8gV8uRNirNtwyfAOQwsiAsmba3Jc9lErnmDPh9IlSuWUOYvWXaY8UtIt AlBEMJJNrmB7aS9X9my9AnbbXmTrG7xC9tohm+HhmWToJdTV2TBp3iVx1R+JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUArBfDCC7vytmdTE3IkNvS585UKgwHwYDVR0j BBgwFoAUtimtn1X6tru/vf/rwF/1b7ypzJQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGtDYVkyOGg4ODZ4UXRXMUY0Y1hQMmhvdDVkaGF0dEhmdmVDdVNSdlNi QnEvMC9CNjI5QUQ5RjU1RkFCNkJCQkZCREZGRUJDMDVGRjU2RkJDQTlDQzk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2MjlBRDlGNTVGQUI2QkJC RkJERkZFQkMwNUZGNTZGQkNBOUNDOTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGtDYVkyOGg4ODZ4UXRXMUY0Y1hQMmhvdDVkaGF0dEhmdmVDdVNSdlNiQnEvMC9C NjI5QUQ5RjU1RkFCNkJCQkZCREZGRUJDMDVGRjU2RkJDQTlDQzk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmMw56pU9lzcD5Ew3Qh9B+9YDA42dsN49LZdFxjkO1MLycR311+RUBtXEjrjX G35NGvW5LeZgtBodB3g15kpStFp507MsaCqkhnOhZKzgszMBNv8fj/nMSarW4lOe ls0Pz9+/0FJEPnFZYzX9FRqpPtxRVtthM6K92P5BxNV6dPk8SDPIPAVHLCjRmPzW d7kXd+7FFOkjTLZxeLvjdJd7yKqPGm6pacsLhI0FZ6Y0s11mUchP1bjRiv2Ndueb xVw/lKEm5stET/1ZF9P4Mbt+hf7qkoiHBiVdfyQ0gv70nijw011JE3HkMYM3Yr9e v9OAR4JXa1g4YO6AASDUaZcTkg== -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:08 2025 by rpki-client