$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft File: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft (raw, json) Hash identifier: EBKPBjCCbLB/uap/XHe/CNWNlanX3iLGM5r7nUVshSc= Subject key identifier: 67:F9:4E:FE:7D:09:33:EE:70:C2:A7:18:2C:A0:BC:94:2A:6C:8E:9E Authority key identifier: AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A Certificate issuer: /CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A Certificate serial: 49C59CF2D675ED02D1D4700821B72505339A7A33 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer Subject info access: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft Manifest number: 01AB Signing time: Mon 03 Nov 2025 07:01:54 +0000 Manifest this update: Mon 03 Nov 2025 06:56:54 +0000 Manifest next update: Tue 04 Nov 2025 07:20:54 +0000 Files and hashes: 1: 323830343a353463383a3a2f33322d3438203d3e203631353935.roa (hash: Ae2efMgnwM2PCNT7dU75s66Sccj5kzLKU0a/b++2GsQ=) 2: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl (hash: dAbo5fqF7crxK1Y220c1kt3NMSFmSdaBU9Fy6Xag1hA=) 3: 34352e3136352e38302e302f32322d3234203d3e203533343237.roa (hash: W6Il1nJqq5qqLa4TPlQ/OzjTUK08KOF0OrC0Ec1PXjE=) 4: 34352e3136352e38302e302f32322d3234203d3e203631353935.roa (hash: P3iRqeK3Yv57QU7Bwadb2mGTtOHbUHSsYSW0mi15khA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 07:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c5:9c:f2:d6:75:ed:02:d1:d4:70:08:21:b7:25:05:33:9a:7a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A Validity Not Before: Nov 3 06:56:54 2025 GMT Not After : Nov 4 07:20:54 2025 GMT Subject: CN=67F94EFE7D0933EE70C2A7182CA0BC942A6C8E9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:90:58:c7:95:a4:78:2c:68:a8:cf:0d:c3:a1: 81:8f:54:f9:07:9d:4e:77:ca:56:a2:e0:d1:ac:5d: d7:25:5b:85:26:54:73:cd:49:7f:8e:6f:fa:aa:5e: 8d:c8:62:2f:b5:9a:a8:41:ce:c9:68:2f:91:ca:bb: bd:90:68:2a:d8:48:42:d8:35:18:16:d3:42:9b:ee: 4b:6f:1f:98:ed:7f:6d:28:d1:d9:d0:92:df:78:c2: 87:5a:27:76:ef:80:b9:fd:13:96:dd:ad:88:09:e9: 65:41:01:5e:83:7b:0c:4a:d8:6b:38:70:ff:9c:40: 55:4a:49:6e:60:3e:4b:df:4e:e2:00:aa:06:4e:fc: 77:89:ee:e3:88:7e:fa:36:f1:a3:ea:30:7d:c8:b5: 17:1f:5a:c2:4a:8f:31:45:3d:6e:bc:43:cd:e6:58: ec:32:1c:93:cf:64:05:df:16:ea:9b:db:64:c7:d5: 09:a0:7a:6e:c2:d9:74:ec:b1:4b:6b:a4:54:b8:9a: 08:4e:e0:60:be:6f:c7:53:33:0c:55:79:bd:e4:34: b1:03:ca:b1:c4:fd:1f:24:08:06:d6:7f:f7:dc:ae: a7:7a:0a:92:72:a6:25:c0:3b:cc:fb:5c:71:e3:bb: 82:c7:f5:20:1c:bc:21:e0:b9:53:9c:6d:6f:8b:fb: a4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F9:4E:FE:7D:09:33:EE:70:C2:A7:18:2C:A0:BC:94:2A:6C:8E:9E X509v3 Authority Key Identifier: keyid:AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:30:67:45:39:fa:21:05:f6:ac:16:02:25:9b:1a:89:13:1a: 0c:e2:0a:0b:11:0f:35:48:13:39:69:da:cc:b5:4f:65:5e:0c: 58:68:8f:80:ba:ec:c0:57:01:50:ec:5e:22:88:5e:39:ed:0f: 17:69:20:52:34:8b:b4:e6:96:c5:8f:49:14:ba:57:ec:5a:ed: 92:7c:1d:56:77:f1:49:38:80:ed:8b:56:ec:af:73:5c:43:c8: c8:2c:f6:c8:58:bb:af:93:51:91:98:03:5f:41:31:a3:2a:e7: f8:31:a8:02:d8:ce:9b:ae:12:80:53:01:35:9e:13:2e:c1:74: 77:9e:71:3b:87:11:9e:4b:2a:a5:cc:bd:a4:9e:36:28:e7:32: 31:c6:9f:52:4d:9c:ce:d6:95:df:5f:c6:99:8b:eb:f1:2f:61: 76:e3:80:ab:c3:1e:61:db:db:12:c9:42:31:98:b9:66:45:6e: 43:38:4d:69:9b:02:74:5f:b0:fa:7b:d2:d6:bc:74:22:b2:69: ba:f9:7a:c1:19:60:a2:69:a7:48:ef:58:4d:7c:56:85:32:33: 68:00:4c:d9:29:a8:90:31:8b:bb:8e:6c:89:38:d2:a3:36:ad: 20:80:ff:31:d6:81:97:f3:5e:57:3b:2d:2d:4b:b8:8b:33:b0: 2e:cc:f8:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUScWc8tZ17QLR1HAIIbclBTOaejMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1OEVFRDIwQ0VBMDQwMUJERUJERTRDQTI5Q0MyREI1 OUQ3MTEzQTAeFw0yNTExMDMwNjU2NTRaFw0yNTExMDQwNzIwNTRaMDMxMTAvBgNV BAMTKDY3Rjk0RUZFN0QwOTMzRUU3MEMyQTcxODJDQTBCQzk0MkE2QzhFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMkFjHlaR4LGiozw3DoYGPVPkH nU53ylai4NGsXdclW4UmVHPNSX+Ob/qqXo3IYi+1mqhBzsloL5HKu72QaCrYSELY NRgW00Kb7ktvH5jtf20o0dnQkt94wodaJ3bvgLn9E5bdrYgJ6WVBAV6DewxK2Gs4 cP+cQFVKSW5gPkvfTuIAqgZO/HeJ7uOIfvo28aPqMH3ItRcfWsJKjzFFPW68Q83m WOwyHJPPZAXfFuqb22TH1Qmgem7C2XTssUtrpFS4mghO4GC+b8dTMwxVeb3kNLED yrHE/R8kCAbWf/fcrqd6CpJypiXAO8z7XHHju4LH9SAcvCHguVOcbW+L+6Q/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZ/lO/n0JM+5wwqcYLKC8lCpsjp4wHwYDVR0j BBgwFoAUrVju0gzqBAG9695MopzC21nXETowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBi eUYvMC9BRDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENThFRUQyMENFQTA0MDFC REVCREU0Q0EyOUNDMkRCNTlENzExM0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBieUYvMC9B RDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATzBnRTn6IQX2rBYCJZsaiRMaDOIKCxEPNUgTOWnazLVPZV4MWGiPgLrswFcB UOxeIoheOe0PF2kgUjSLtOaWxY9JFLpX7FrtknwdVnfxSTiA7YtW7K9zXEPIyCz2 yFi7r5NRkZgDX0Exoyrn+DGoAtjOm64SgFMBNZ4TLsF0d55xO4cRnksqpcy9pJ42 KOcyMcafUk2cztaV31/GmYvr8S9hduOAq8MeYdvbEslCMZi5ZkVuQzhNaZsCdF+w +nvS1rx0IrJpuvl6wRlgommnSO9YTXxWhTIzaABM2SmokDGLu45siTjSozatIID/ MdaBl/NeVzstLUu4izOwLsz42w== -----END CERTIFICATE-----Generated at Mon Nov 3 12:33:48 2025 by rpki-client