$ rpki-client -vvf rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.mft File: 68381282EE8DA4C004BD63329B8F39CB17F85C0C.mft (raw, json) Hash identifier: C1Px0HwxMw2BvaAmuP3fGcdG4Vctf2b3vaTfAw1ArXk= Subject key identifier: 16:BA:21:39:75:F5:B8:4C:E5:C8:7C:A4:C0:15:63:4B:97:27:9B:31 Authority key identifier: 68:38:12:82:EE:8D:A4:C0:04:BD:63:32:9B:8F:39:CB:17:F8:5C:0C Certificate issuer: /CN=68381282EE8DA4C004BD63329B8F39CB17F85C0C Certificate serial: 1672F89F030C09DF72F9DC51B36F04F9A298DE53 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68381282EE8DA4C004BD63329B8F39CB17F85C0C.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.mft Manifest number: 011A Signing time: Mon 03 Nov 2025 06:42:00 +0000 Manifest this update: Mon 03 Nov 2025 06:37:00 +0000 Manifest next update: Tue 04 Nov 2025 08:17:00 +0000 Files and hashes: 1: 323830343a346533303a3a2f33322d3332203d3e20323638323435.roa (hash: gcomUqxbhizBcmCUM46hkkUKGFfY1x71E9nBiTQH6J8=) 2: 68381282EE8DA4C004BD63329B8F39CB17F85C0C.crl (hash: xmc2CiKBS4E6tQP0waCOSzdrupslyNlKCnePSv5NM5I=) 3: 34352e3233362e3230342e302f32322d3232203d3e20323638323435.roa (hash: QvwPGxFXXyzw4W7JgC7xHZ5e05Og2/6exbZRNO7nyN4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.crl rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68381282EE8DA4C004BD63329B8F39CB17F85C0C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 08:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:72:f8:9f:03:0c:09:df:72:f9:dc:51:b3:6f:04:f9:a2:98:de:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68381282EE8DA4C004BD63329B8F39CB17F85C0C Validity Not Before: Nov 3 06:37:00 2025 GMT Not After : Nov 4 08:17:00 2025 GMT Subject: CN=16BA213975F5B84CE5C87CA4C015634B97279B31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:82:8c:6e:71:9d:97:ba:aa:fe:83:af:4f:25: b4:41:03:59:ba:76:db:54:d5:65:f2:ab:b6:bd:a4: 14:d1:32:f0:68:1c:c3:35:31:5f:4d:78:0f:fb:03: 4c:29:dd:66:89:2f:a5:e3:59:99:d2:ae:ee:33:e7: 50:39:c7:2f:4f:72:73:9e:56:34:7f:4b:46:52:10: d2:26:6d:4e:71:66:63:23:2d:b0:b9:8e:ae:fc:3b: 1b:3c:b7:eb:d7:08:68:fe:18:b6:c5:01:3a:4a:c1: 84:03:92:b9:9b:cb:d8:32:c2:2f:23:09:e0:ab:73: 97:a8:ec:07:d0:55:d1:46:3f:eb:51:1a:b1:24:be: 21:4d:80:08:bc:86:ff:7d:f0:2b:66:bf:dc:cd:91: 97:86:fd:7d:de:23:25:64:66:fb:56:6b:3d:0b:d3: 03:c1:9c:1a:24:63:22:3f:7c:d9:e6:ce:a5:ce:9d: 09:55:23:5e:9e:9e:58:11:7c:92:98:3f:6a:59:b1: a5:0d:61:f6:9d:53:e5:5f:a5:16:51:df:8e:e5:93: af:fa:22:a7:03:db:71:a0:3d:f2:26:3f:27:3f:d0: 2d:bf:1e:e2:34:f4:7b:e6:b9:2b:46:ad:7a:f5:d4: 7b:f7:4f:5b:af:9a:47:4f:48:99:e0:3c:32:3c:10: 26:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BA:21:39:75:F5:B8:4C:E5:C8:7C:A4:C0:15:63:4B:97:27:9B:31 X509v3 Authority Key Identifier: keyid:68:38:12:82:EE:8D:A4:C0:04:BD:63:32:9B:8F:39:CB:17:F8:5C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68381282EE8DA4C004BD63329B8F39CB17F85C0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:eb:67:74:33:80:b8:9b:0a:ae:77:45:2d:36:1e:21:98:28: 5f:44:70:16:14:a1:1c:cd:be:f5:14:3f:24:83:76:bf:b8:e4: dc:33:70:12:4b:4e:f2:f1:75:2c:9e:8e:b9:2c:ef:64:0d:ba: ab:a6:b0:8e:08:eb:d0:4a:2e:b1:00:f8:10:64:9f:24:fb:cd: f1:a0:7b:8e:85:d3:2d:e4:62:38:3f:4d:6c:eb:95:ef:13:e1: 24:36:e6:a7:b4:fe:6d:f8:f5:d3:e3:c0:58:fd:d2:ca:b7:b3: 86:08:d6:63:ce:68:75:4f:d1:6e:3d:72:7f:c9:34:a9:e1:4b: a8:f2:45:14:80:c0:88:75:84:f8:21:71:53:26:20:bd:64:13: 77:52:59:cc:45:0d:2e:a4:d1:7a:91:6c:d9:a2:85:d3:94:7b: 02:9b:3f:61:5a:37:bd:41:c3:14:87:54:0b:4d:5c:80:32:15: f9:02:23:30:98:58:c5:52:bb:e0:a4:d7:e4:07:f6:02:a0:d5: cb:af:2b:31:2e:fa:ca:88:ed:81:3a:c9:05:21:c1:1b:d7:cb: 2b:17:96:4b:ed:b6:98:e5:51:78:4c:d9:fd:f5:3f:54:46:a4: 1c:60:db:53:59:ed:a3:9d:ab:fc:9b:a8:ad:46:97:ec:4d:1c: 7d:25:3f:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFnL4nwMMCd9y+dxRs28E+aKY3lMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgzODEyODJFRThEQTRDMDA0QkQ2MzMyOUI4RjM5Q0Ix N0Y4NUMwQzAeFw0yNTExMDMwNjM3MDBaFw0yNTExMDQwODE3MDBaMDMxMTAvBgNV BAMTKDE2QkEyMTM5NzVGNUI4NENFNUM4N0NBNEMwMTU2MzRCOTcyNzlCMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVgoxucZ2Xuqr+g69PJbRBA1m6 dttU1WXyq7a9pBTRMvBoHMM1MV9NeA/7A0wp3WaJL6XjWZnSru4z51A5xy9PcnOe VjR/S0ZSENImbU5xZmMjLbC5jq78Oxs8t+vXCGj+GLbFATpKwYQDkrmby9gywi8j CeCrc5eo7AfQVdFGP+tRGrEkviFNgAi8hv998Ctmv9zNkZeG/X3eIyVkZvtWaz0L 0wPBnBokYyI/fNnmzqXOnQlVI16enlgRfJKYP2pZsaUNYfadU+VfpRZR347lk6/6 IqcD23GgPfImPyc/0C2/HuI09HvmuStGrXr11Hv3T1uvmkdPSJngPDI8ECZTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFrohOXX1uEzlyHykwBVjS5cnmzEwHwYDVR0j BBgwFoAUaDgSgu6NpMAEvWMym485yxf4XAwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGd0NGpXTkxhZURHQ21uTHJuNk5LeWNkamQ2ZFZKdFZYOEh1TjhoeVpB emEvMC82ODM4MTI4MkVFOERBNEMwMDRCRDYzMzI5QjhGMzlDQjE3Rjg1QzBDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4MzgxMjgyRUU4REE0QzAw NEJENjMzMjlCOEYzOUNCMTdGODVDMEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGd0NGpXTkxhZURHQ21uTHJuNk5LeWNkamQ2ZFZKdFZYOEh1TjhoeVpBemEvMC82 ODM4MTI4MkVFOERBNEMwMDRCRDYzMzI5QjhGMzlDQjE3Rjg1QzBDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACetndDOAuJsKrndFLTYeIZgoX0RwFhShHM2+9RQ/JIN2v7jk3DNwEktO8vF1 LJ6OuSzvZA26q6awjgjr0EousQD4EGSfJPvN8aB7joXTLeRiOD9NbOuV7xPhJDbm p7T+bfj10+PAWP3SyrezhgjWY85odU/Rbj1yf8k0qeFLqPJFFIDAiHWE+CFxUyYg vWQTd1JZzEUNLqTRepFs2aKF05R7Aps/YVo3vUHDFIdUC01cgDIV+QIjMJhYxVK7 4KTX5Af2AqDVy68rMS76yojtgTrJBSHBG9fLKxeWS+22mOVReEzZ/fU/VEakHGDb U1nto52r/JuorUaX7E0cfSU/oA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:24:26 2025 by rpki-client