$ rpki-client -vvf rpki-repo.registro.br/repo/HgHBCnS2JPyEdADPkEd9g2iwU2NL4ZczqYLw2vYbkt3J/0/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.mft File: 1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.mft (raw, json) Hash identifier: XbqF3u5kuyvnfGyV+pIRiDqefp/Zweyv9q52puTpG/o= Subject key identifier: DE:9A:4B:48:E2:3A:A3:8A:C0:AA:7F:13:82:3C:C3:18:1A:7D:F9:8D Authority key identifier: 1A:69:4A:79:E3:F9:AD:8C:80:24:F5:A8:0C:4E:A8:97:9E:DA:27:B8 Certificate issuer: /CN=1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8 Certificate serial: 7BD2AE50B3A9C8A7E6FDF6333F0370A0D1044662 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.cer Subject info access: rsync://rpki-repo.registro.br/repo/HgHBCnS2JPyEdADPkEd9g2iwU2NL4ZczqYLw2vYbkt3J/0/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.mft Manifest number: 0A Signing time: Mon 03 Nov 2025 02:15:29 +0000 Manifest this update: Mon 03 Nov 2025 02:10:29 +0000 Manifest next update: Tue 04 Nov 2025 03:26:29 +0000 Files and hashes: 1: 323830343a393064303a3a2f33322d313238203d3e203631363230.roa (hash: e5ogBCsJMNTEypsrkCBB6KJNBdFvGQBoi//pg4P57xo=) 2: 1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.crl (hash: ++DfoFQt0WOZrfecvwPDdqGCE3R0MUERKC9yOoC+XZs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HgHBCnS2JPyEdADPkEd9g2iwU2NL4ZczqYLw2vYbkt3J/0/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.crl rsync://rpki-repo.registro.br/repo/HgHBCnS2JPyEdADPkEd9g2iwU2NL4ZczqYLw2vYbkt3J/0/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d2:ae:50:b3:a9:c8:a7:e6:fd:f6:33:3f:03:70:a0:d1:04:46:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8 Validity Not Before: Nov 3 02:10:29 2025 GMT Not After : Nov 4 03:26:29 2025 GMT Subject: CN=DE9A4B48E23AA38AC0AA7F13823CC3181A7DF98D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:f7:e0:f4:08:f4:0c:d6:9b:4a:0b:28:e7: 7b:04:58:89:ea:a1:b2:9f:ee:43:81:47:62:68:63: 08:f7:25:cb:d1:cc:73:75:73:9b:72:63:3f:64:db: e7:e7:38:0a:c7:d3:66:92:1b:0e:85:53:bb:00:4b: 6a:d3:31:0f:9e:3c:a6:1a:2a:c5:6f:47:be:6c:5c: 58:03:d4:c7:11:1b:93:09:e0:3f:ce:94:4a:e2:cc: 6d:ee:fc:1c:d5:25:3d:0e:28:ec:fb:f7:43:31:82: 01:76:36:a8:c7:90:c0:fd:93:48:e5:e1:8f:73:29: 94:95:85:95:b0:7f:8e:dd:5a:6d:a1:67:f4:9b:f5: 95:31:1d:f3:ee:37:02:3f:7c:68:87:1e:02:08:b1: 28:89:90:40:17:17:41:3c:79:53:92:d0:a6:04:5c: 86:8a:ce:8c:03:66:11:43:74:12:e3:f6:b0:27:6d: bf:cf:ed:89:4c:35:be:f4:af:bc:80:87:c4:9b:03: e2:c6:7e:58:1f:bb:31:b3:4e:9b:c5:0d:51:57:ae: 9d:d8:37:b9:22:1a:77:9f:7e:19:d4:fc:59:15:34: 6e:03:8c:bc:ed:8c:84:9d:57:87:b0:10:1b:a9:62: e4:8f:da:b4:07:1f:9a:d0:5f:a0:9f:c6:0c:22:fc: c3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9A:4B:48:E2:3A:A3:8A:C0:AA:7F:13:82:3C:C3:18:1A:7D:F9:8D X509v3 Authority Key Identifier: keyid:1A:69:4A:79:E3:F9:AD:8C:80:24:F5:A8:0C:4E:A8:97:9E:DA:27:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HgHBCnS2JPyEdADPkEd9g2iwU2NL4ZczqYLw2vYbkt3J/0/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HgHBCnS2JPyEdADPkEd9g2iwU2NL4ZczqYLw2vYbkt3J/0/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:c0:29:30:24:3c:60:1d:5e:6b:bb:f0:32:cd:01:0f:0e:6b: 71:d0:b1:1c:d0:79:62:6f:47:d8:21:55:b6:c0:b1:34:db:5e: 49:5a:c9:e8:2b:95:a4:fe:22:a3:cb:ac:0b:08:66:ff:35:f1: 07:8c:bc:b2:db:d9:4d:e7:c2:81:6e:d0:ea:21:44:21:28:10: dc:3d:46:5a:40:6c:19:28:3f:47:c7:fe:31:4e:43:d9:4d:3a: c0:7a:fc:d3:52:8f:7d:85:a7:0d:94:2e:b1:ec:42:c5:8b:02: 26:53:29:30:14:f9:12:91:1b:60:45:cd:75:4f:e6:31:79:8e: e1:b3:b1:62:49:6d:dc:98:4e:f5:87:94:4e:79:62:d3:bb:ee: 80:75:37:ec:57:e0:f4:c5:af:bf:d7:17:c5:8a:3e:87:c9:48: f5:3f:77:46:55:6f:34:2a:6a:f8:b6:76:24:71:62:f9:5b:0c: ff:8e:14:53:3c:bf:b0:57:04:91:e5:cd:fc:ad:7c:7c:b7:fc: 10:84:6e:f6:d2:0a:65:9d:dc:d0:02:61:cc:76:d1:c0:d6:05: 9f:22:60:0f:19:89:f6:12:b8:e0:88:37:91:3e:b0:56:f8:16: ee:31:84:e9:da:16:a6:fe:ff:26:21:c4:2f:71:6f:40:15:75: 75:fb:52:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUe9KuULOpyKfm/fYzPwNwoNEERmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE2OTRBNzlFM0Y5QUQ4QzgwMjRGNUE4MEM0RUE4OTc5 RURBMjdCODAeFw0yNTExMDMwMjEwMjlaFw0yNTExMDQwMzI2MjlaMDMxMTAvBgNV BAMTKERFOUE0QjQ4RTIzQUEzOEFDMEFBN0YxMzgyM0NDMzE4MUE3REY5OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzvfg9Aj0DNabSgso53sEWInq obKf7kOBR2JoYwj3JcvRzHN1c5tyYz9k2+fnOArH02aSGw6FU7sAS2rTMQ+ePKYa KsVvR75sXFgD1McRG5MJ4D/OlErizG3u/BzVJT0OKOz790MxggF2NqjHkMD9k0jl 4Y9zKZSVhZWwf47dWm2hZ/Sb9ZUxHfPuNwI/fGiHHgIIsSiJkEAXF0E8eVOS0KYE XIaKzowDZhFDdBLj9rAnbb/P7YlMNb70r7yAh8SbA+LGflgfuzGzTpvFDVFXrp3Y N7kiGneffhnU/FkVNG4DjLztjISdV4ewEBupYuSP2rQHH5rQX6Cfxgwi/MOLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3ppLSOI6o4rAqn8TgjzDGBp9+Y0wHwYDVR0j BBgwFoAUGmlKeeP5rYyAJPWoDE6ol57aJ7gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGdIQkNuUzJKUHlFZEFEUGtFZDlnMml3VTJOTDRaY3pxWUx3MnZZYmt0 M0ovMC8xQTY5NEE3OUUzRjlBRDhDODAyNEY1QTgwQzRFQTg5NzlFREEyN0I4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNjk0QTc5RTNGOUFEOEM4 MDI0RjVBODBDNEVBODk3OUVEQTI3QjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGdIQkNuUzJKUHlFZEFEUGtFZDlnMml3VTJOTDRaY3pxWUx3MnZZYmt0M0ovMC8x QTY5NEE3OUUzRjlBRDhDODAyNEY1QTgwQzRFQTg5NzlFREEyN0I4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArcApMCQ8YB1ea7vwMs0BDw5rcdCxHNB5Ym9H2CFVtsCxNNteSVrJ6CuVpP4i o8usCwhm/zXxB4y8stvZTefCgW7Q6iFEISgQ3D1GWkBsGSg/R8f+MU5D2U06wHr8 01KPfYWnDZQusexCxYsCJlMpMBT5EpEbYEXNdU/mMXmO4bOxYklt3JhO9YeUTnli 07vugHU37Ffg9MWvv9cXxYo+h8lI9T93RlVvNCpq+LZ2JHFi+VsM/44UUzy/sFcE keXN/K18fLf8EIRu9tIKZZ3c0AJhzHbRwNYFnyJgDxmJ9hK44Ig3kT6wVvgW7jGE 6doWpv7/JiHEL3FvQBV1dftSrw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:10:55 2025 by rpki-client