$ rpki-client -vvf rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft File: 585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft (raw, json) Hash identifier: h1oflSCLfF2R1E8wGikamw7HWrLw9GllUZ7UScngJoE= Subject key identifier: BF:A4:7D:B0:8F:B9:BE:42:CD:7B:70:90:C8:A8:92:03:BC:2C:3F:FD Authority key identifier: 58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23 Certificate issuer: /CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23 Certificate serial: 53720EDBDBC8C5A916E445C7201021D19C08F1F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer Subject info access: rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft Manifest number: 02F1 Signing time: Mon 20 Oct 2025 09:57:38 +0000 Manifest this update: Mon 20 Oct 2025 09:52:38 +0000 Manifest next update: Tue 21 Oct 2025 12:41:38 +0000 Files and hashes: 1: 585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl (hash: 6RUoKMk2KaaT2BLy0Cm5cLAKws3Z6GJhospHHTkmCC0=) 2: 323830343a363061303a3a2f33342d3334203d3e20323639313831.roa (hash: 6x8+o76rwpnYtElNSxkW/KyDWMmXx+okvMIMdSvdlNI=) 3: 323830343a363061303a383030303a3a2f33342d3438203d3e20323639313831.roa (hash: 7VYb9eVMn/JdVnewRd3uN1ztGHf7FqVnTEIvA9WR40g=) 4: 34352e3138312e3131322e302f32322d3234203d3e20323639313831.roa (hash: 5cTe/r7IooW1P31zdsmcHlinxnkNAFe2rsZjLal0A/M=) 5: 323830343a363061303a343030303a3a2f33342d3438203d3e20323639313831.roa (hash: IDneDWzTyr5SgSIAENGnHT6t+yatkXYogvFZdoAk/uI=) 6: 323830343a363061303a633030303a3a2f33342d3438203d3e20323639313831.roa (hash: aC08Xc+AWU2Gmn9FKnzrvxdKmO26eHCpZULre8VMh/I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:72:0e:db:db:c8:c5:a9:16:e4:45:c7:20:10:21:d1:9c:08:f1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23 Validity Not Before: Oct 20 09:52:38 2025 GMT Not After : Oct 21 12:41:38 2025 GMT Subject: CN=BFA47DB08FB9BE42CD7B7090C8A89203BC2C3FFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4a:59:6d:a3:de:36:4b:20:7e:95:7c:31:a3: a2:4f:65:2e:5e:d8:77:39:85:db:fa:0d:00:6f:b1: 65:7b:9e:da:cd:7b:07:c2:93:9e:f9:e8:ff:44:db: 9c:29:a9:1a:e3:91:b8:6c:85:ce:56:4e:df:77:6d: 55:24:18:fe:6c:5d:8a:49:f3:81:ee:22:11:77:b0: 02:b5:fa:13:a7:7a:c6:05:6f:77:46:dc:41:25:0b: 0b:fc:20:d6:a8:b5:ca:18:76:28:15:87:57:41:59: ce:7c:13:d3:77:e7:ef:a1:1e:13:b3:50:b9:b1:d3: 0f:64:40:c8:0f:36:59:8a:f3:e5:94:b4:c5:84:24: e7:16:1f:dc:40:f7:36:67:98:1a:f1:24:47:fc:63: 60:f0:39:27:47:33:bc:6f:e4:9f:73:b7:ea:57:b8: 1a:19:d4:f3:92:e4:06:a3:f0:46:b4:11:0c:e9:7d: 3d:76:12:dd:c0:0e:64:7e:21:db:d3:af:5b:ab:7c: c9:8f:c0:18:5b:db:a3:c1:0d:51:29:f4:9e:35:78: 4f:7b:84:64:78:13:67:27:f2:4e:35:e5:fb:ba:68: 88:a5:fa:fb:5f:b5:cd:29:27:c4:11:7a:57:d2:c6: 23:7f:3b:d3:5e:7e:c3:e4:2d:6e:34:8f:9f:14:b3: 7b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A4:7D:B0:8F:B9:BE:42:CD:7B:70:90:C8:A8:92:03:BC:2C:3F:FD X509v3 Authority Key Identifier: keyid:58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d6:20:8c:e6:7c:a5:12:21:97:1b:fa:9d:db:8e:7a:a0:17: b8:a0:46:e9:7f:75:15:84:0d:e3:24:cf:5d:08:64:ed:4e:f4: 68:d7:a9:92:a5:53:49:e6:61:1d:ca:66:49:75:98:51:46:66: 50:f2:7b:dc:80:e9:d0:f6:cf:04:63:95:f5:c4:1f:aa:23:d6: 28:5e:31:7c:19:28:98:3c:b4:c2:05:65:26:c7:08:52:39:69: af:05:ea:b5:62:31:0f:d8:7b:c1:cf:87:8b:3b:d2:f7:9a:13: 88:80:c1:73:2e:e8:48:d6:24:b2:0e:e2:6e:4a:b5:24:00:c4: 17:01:9d:c4:34:d4:6c:de:8c:21:e1:bd:7e:40:6a:25:81:31: 96:b0:3c:98:6f:b1:20:d1:e7:38:7c:dc:c3:a2:5f:b3:f9:d3: eb:e7:b5:ec:68:ac:b9:fa:b8:f2:f9:82:d5:19:da:5d:78:5e: 6b:76:5f:cc:07:ce:d2:9b:fa:f5:1a:8c:52:06:8a:e9:cf:d5: 0d:0f:1a:f7:0e:8c:e2:04:88:db:a4:95:3a:3e:ed:b9:a0:e9: f9:4f:c6:42:13:66:ab:aa:ff:e7:75:eb:c0:06:83:c8:bc:bc: 9a:04:66:55:3b:b9:16:d9:c7:16:48:34:0b:f8:67:6a:78:c2: 43:f7:90:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUU3IO29vIxakW5EXHIBAh0ZwI8fAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1QjQ2NEREMTRGRjhERUVENjkwOENCRkE5QUFFNUFB QTc0OEMyMzAeFw0yNTEwMjAwOTUyMzhaFw0yNTEwMjExMjQxMzhaMDMxMTAvBgNV BAMTKEJGQTQ3REIwOEZCOUJFNDJDRDdCNzA5MEM4QTg5MjAzQkMyQzNGRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsSllto942SyB+lXwxo6JPZS5e 2Hc5hdv6DQBvsWV7ntrNewfCk5756P9E25wpqRrjkbhshc5WTt93bVUkGP5sXYpJ 84HuIhF3sAK1+hOnesYFb3dG3EElCwv8INaotcoYdigVh1dBWc58E9N35++hHhOz ULmx0w9kQMgPNlmK8+WUtMWEJOcWH9xA9zZnmBrxJEf8Y2DwOSdHM7xv5J9zt+pX uBoZ1POS5Aaj8Ea0EQzpfT12Et3ADmR+IdvTr1urfMmPwBhb26PBDVEp9J41eE97 hGR4E2cn8k415fu6aIil+vtftc0pJ8QRelfSxiN/O9NefsPkLW40j58Us3ujAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUv6R9sI+5vkLNe3CQyKiSA7wsP/0wHwYDVR0j BBgwFoAUWFtGTdFP+N7taQjL+pquWqp0jCMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSG5iQ1cybnVLVzl2bldWVVFzYkxnRGNER3NpTUE1eHVQN3VDaW85WDk3 WXIvMS81ODVCNDY0REQxNEZGOERFRUQ2OTA4Q0JGQTlBQUU1QUFBNzQ4QzIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4NUI0NjRERDE0RkY4REVF RDY5MDhDQkZBOUFBRTVBQUE3NDhDMjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SG5iQ1cybnVLVzl2bldWVVFzYkxnRGNER3NpTUE1eHVQN3VDaW85WDk3WXIvMS81 ODVCNDY0REQxNEZGOERFRUQ2OTA4Q0JGQTlBQUU1QUFBNzQ4QzIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjtYgjOZ8pRIhlxv6nduOeqAXuKBG6X91FYQN4yTPXQhk7U70aNepkqVTSeZh HcpmSXWYUUZmUPJ73IDp0PbPBGOV9cQfqiPWKF4xfBkomDy0wgVlJscIUjlprwXq tWIxD9h7wc+HizvS95oTiIDBcy7oSNYksg7ibkq1JADEFwGdxDTUbN6MIeG9fkBq JYExlrA8mG+xINHnOHzcw6Jfs/nT6+e17Gisufq48vmC1RnaXXhea3ZfzAfO0pv6 9RqMUgaK6c/VDQ8a9w6M4gSI26SVOj7tuaDp+U/GQhNmq6r/53XrwAaDyLy8mgRm VTu5FtnHFkg0C/hnanjCQ/eQiQ== -----END CERTIFICATE-----Generated at Mon Oct 20 16:17:13 2025 by rpki-client