$ rpki-client -vvf rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft File: 658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft (raw, json) Hash identifier: 03u+lpwdfM23lOEWLSaC7mQO0eYbkIYXYaWhyD6r99Q= Subject key identifier: C1:8D:29:81:09:9C:75:5E:D3:A3:B3:BC:05:CF:2D:84:97:CD:2D:C5 Authority key identifier: 65:8F:D2:C4:C8:A5:DA:07:9A:C1:30:7D:53:15:12:B7:C5:72:40:AA Certificate issuer: /CN=658FD2C4C8A5DA079AC1307D531512B7C57240AA Certificate serial: 25737DCF78E76E825A3CB188977C3429FC039E63 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft Manifest number: 42 Signing time: Mon 03 Nov 2025 14:02:14 +0000 Manifest this update: Mon 03 Nov 2025 13:57:14 +0000 Manifest next update: Tue 04 Nov 2025 14:28:14 +0000 Files and hashes: 1: 3139312e33372e31322e302f32322d3332203d3e20313938393439.roa (hash: dUvPNyH+1sT9JEddjsNec3pJF/CutLJpkDRRP2ljdAI=) 2: 658FD2C4C8A5DA079AC1307D531512B7C57240AA.crl (hash: 86rylz2rYM5tlkP+sUep7qmYSirEO7yDMXEMsvs47Gc=) 3: 3139312e33372e31322e302f32322d3332203d3e20323633333530.roa (hash: K17H+8R3bf4Ik/EEIIS2q9ds9+VT0iYutYHN78cPwsM=) 4: 323830343a313463383a3a2f33322d313238203d3e20323633333530.roa (hash: X710oqaMA3JanrSPP1LTWK7F3nOBbtVEfY+7eFVHbpo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.crl rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 14:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:73:7d:cf:78:e7:6e:82:5a:3c:b1:88:97:7c:34:29:fc:03:9e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658FD2C4C8A5DA079AC1307D531512B7C57240AA Validity Not Before: Nov 3 13:57:14 2025 GMT Not After : Nov 4 14:28:14 2025 GMT Subject: CN=C18D2981099C755ED3A3B3BC05CF2D8497CD2DC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:7f:6e:0d:fa:07:63:72:ab:f4:b9:db:1f: 91:26:3a:ff:ef:7b:3d:b2:3b:51:88:48:2c:26:ab: 55:56:b6:e4:74:55:b5:fb:7f:02:9c:36:4e:4d:89: 54:30:62:94:e3:02:f1:62:ac:63:5f:29:02:79:60: 9a:1c:b2:ff:b5:6a:dd:4c:51:73:fb:88:40:2d:92: b4:cf:0c:bd:0a:14:91:34:ac:35:98:af:ad:50:72: d6:16:dd:61:47:4f:db:c6:64:fb:2e:8b:5d:47:a6: 08:8d:96:7a:9b:24:0b:ca:25:07:a9:92:8a:a7:74: 82:e9:3f:61:04:86:91:cf:88:93:b7:9a:12:fd:ca: 89:58:68:32:25:ab:4b:89:ea:0e:8e:39:be:ad:21: 9d:d7:c2:8a:fd:59:88:27:41:d6:a4:42:19:dd:a7: 08:90:82:2f:df:be:95:37:0f:cd:db:e8:6b:99:61: af:dd:d7:18:0a:cc:d4:7d:f0:fd:89:dc:c9:dc:6e: 04:8a:97:b8:78:e8:f3:6b:43:0f:e3:91:53:b6:b0: 7c:11:c1:e0:b3:94:ad:3d:8d:36:95:b8:a2:77:f1: 28:a4:3c:f7:dd:57:e5:d6:d1:38:7e:18:52:fa:a5: 7c:f7:32:7a:c3:3c:8a:d8:d6:1b:8e:1e:e0:c2:52: 01:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8D:29:81:09:9C:75:5E:D3:A3:B3:BC:05:CF:2D:84:97:CD:2D:C5 X509v3 Authority Key Identifier: keyid:65:8F:D2:C4:C8:A5:DA:07:9A:C1:30:7D:53:15:12:B7:C5:72:40:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d5:54:bd:d5:c0:13:32:32:b0:98:52:d6:83:ad:88:19:f1: 23:92:4d:4b:92:6c:52:82:12:ca:eb:d9:45:e5:47:b2:fd:8b: 48:a4:2f:f2:cb:f9:27:e9:be:19:2f:a1:fb:7b:41:3e:05:94: a3:ff:a9:8a:4c:31:27:58:f2:75:d8:c1:da:6b:e2:42:9f:a4: 29:cd:3c:d9:9a:d5:9f:8d:02:9e:94:2a:d7:be:f0:19:4b:41: 71:e6:5f:ae:52:4a:6a:a6:be:43:d9:03:ee:c9:28:e5:14:35: e8:4e:53:76:3e:a8:5d:7b:64:29:4f:d3:9c:31:8d:42:35:1c: 37:31:44:b0:75:56:b8:3b:b3:21:fa:07:58:13:41:d8:03:5d: 0e:5e:a8:a5:f7:86:33:24:46:12:b1:5f:07:af:a9:0f:39:7a: 25:49:7a:c1:80:ca:87:f1:5a:79:b0:6a:13:b7:ce:96:2e:0c: 8d:5b:4c:ac:68:7b:8d:3d:c0:c7:26:39:70:dd:54:cd:2c:9f: df:5b:5b:00:b4:42:8d:65:c3:3a:64:bd:1d:a5:1e:85:f8:75: 6e:9a:1d:37:6a:d2:b9:58:04:0a:6a:71:ef:d1:8d:7b:79:d8: a4:0d:b4:fa:f7:5e:4a:44:85:0e:fa:5a:9f:4c:ea:76:47:dd: da:9b:49:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJXN9z3jnboJaPLGIl3w0KfwDnmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4RkQyQzRDOEE1REEwNzlBQzEzMDdENTMxNTEyQjdD NTcyNDBBQTAeFw0yNTExMDMxMzU3MTRaFw0yNTExMDQxNDI4MTRaMDMxMTAvBgNV BAMTKEMxOEQyOTgxMDk5Qzc1NUVEM0EzQjNCQzA1Q0YyRDg0OTdDRDJEQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKsH9uDfoHY3Kr9LnbH5EmOv/v ez2yO1GISCwmq1VWtuR0VbX7fwKcNk5NiVQwYpTjAvFirGNfKQJ5YJocsv+1at1M UXP7iEAtkrTPDL0KFJE0rDWYr61QctYW3WFHT9vGZPsui11HpgiNlnqbJAvKJQep koqndILpP2EEhpHPiJO3mhL9yolYaDIlq0uJ6g6OOb6tIZ3Xwor9WYgnQdakQhnd pwiQgi/fvpU3D83b6GuZYa/d1xgKzNR98P2J3MncbgSKl7h46PNrQw/jkVO2sHwR weCzlK09jTaVuKJ38SikPPfdV+XW0Th+GFL6pXz3MnrDPIrY1huOHuDCUgHDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwY0pgQmcdV7To7O8Bc8thJfNLcUwHwYDVR0j BBgwFoAUZY/SxMil2geawTB9UxUSt8VyQKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkRZTlZMTEpHRkZlSFZ3UWUzQ3NSYUVWZ3B5TmVSMW9rZGZVN2EzcFFS S2YvMC82NThGRDJDNEM4QTVEQTA3OUFDMTMwN0Q1MzE1MTJCN0M1NzI0MEFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1OEZEMkM0QzhBNURBMDc5 QUMxMzA3RDUzMTUxMkI3QzU3MjQwQUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NkRZTlZMTEpHRkZlSFZ3UWUzQ3NSYUVWZ3B5TmVSMW9rZGZVN2EzcFFSS2YvMC82 NThGRDJDNEM4QTVEQTA3OUFDMTMwN0Q1MzE1MTJCN0M1NzI0MEFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADtVUvdXAEzIysJhS1oOtiBnxI5JNS5JsUoISyuvZReVHsv2LSKQv8sv5J+m+ GS+h+3tBPgWUo/+pikwxJ1jyddjB2mviQp+kKc082ZrVn40CnpQq177wGUtBceZf rlJKaqa+Q9kD7sko5RQ16E5Tdj6oXXtkKU/TnDGNQjUcNzFEsHVWuDuzIfoHWBNB 2ANdDl6opfeGMyRGErFfB6+pDzl6JUl6wYDKh/FaebBqE7fOli4MjVtMrGh7jT3A xyY5cN1UzSyf31tbALRCjWXDOmS9HaUehfh1bpodN2rSuVgECmpx79GNe3nYpA20 +vdeSkSFDvpan0zqdkfd2ptJJQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:10:17 2025 by rpki-client