$ rpki-client -vvf rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/10EC5E4CC1905B32F23845726B4A13773CC62985.mft File: 10EC5E4CC1905B32F23845726B4A13773CC62985.mft (raw, json) Hash identifier: zWRTzxR2tFtHX39C8qpz6hsoqYGef6+uvxCM9BfjXE8= Subject key identifier: 95:8C:14:0A:52:22:34:46:D0:DF:0A:28:6E:DF:32:92:FA:E1:F5:83 Authority key identifier: 10:EC:5E:4C:C1:90:5B:32:F2:38:45:72:6B:4A:13:77:3C:C6:29:85 Certificate issuer: /CN=10EC5E4CC1905B32F23845726B4A13773CC62985 Certificate serial: 45BC9F7D018025BA36237B713588394940CE555B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10EC5E4CC1905B32F23845726B4A13773CC62985.cer Subject info access: rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/10EC5E4CC1905B32F23845726B4A13773CC62985.mft Manifest number: 0153 Signing time: Wed 05 Nov 2025 08:10:43 +0000 Manifest this update: Wed 05 Nov 2025 08:05:43 +0000 Manifest next update: Thu 06 Nov 2025 11:31:43 +0000 Files and hashes: 1: 3137392e34392e39322e302f32322d3332203d3e20323731333834.roa (hash: ffc24DirVxIQnVqfTtEg3+C/HpHq42Uy2LI+FNSnsY4=) 2: 323830343a376161383a3a2f33322d313238203d3e20323731333834.roa (hash: ZK+WweiutpDlsvnCXt2BvZADi29Luh7PUy40pIgM4QM=) 3: 10EC5E4CC1905B32F23845726B4A13773CC62985.crl (hash: bcaj4a+KTYfpeC0U7JDMIMcbrQKqg8R7Eo/175Ihsfs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/10EC5E4CC1905B32F23845726B4A13773CC62985.crl rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/10EC5E4CC1905B32F23845726B4A13773CC62985.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10EC5E4CC1905B32F23845726B4A13773CC62985.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:bc:9f:7d:01:80:25:ba:36:23:7b:71:35:88:39:49:40:ce:55:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10EC5E4CC1905B32F23845726B4A13773CC62985 Validity Not Before: Nov 5 08:05:43 2025 GMT Not After : Nov 6 11:31:43 2025 GMT Subject: CN=958C140A52223446D0DF0A286EDF3292FAE1F583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d9:88:56:ac:a3:55:c5:32:e4:82:8d:e7:c4: 33:f5:c5:88:ab:dc:27:94:41:35:5d:12:13:16:bb: e2:a2:d2:ac:c5:ff:4a:e1:f1:f1:1d:e5:8a:b6:c8: df:30:7f:fb:36:62:d0:d6:99:4f:5c:af:42:f4:b2: ba:74:20:6c:20:8b:03:76:81:fc:b0:63:44:0f:d6: 18:fc:95:d1:4e:bb:3c:87:43:6f:2d:2e:59:a2:0c: 34:2d:e3:dc:51:56:4e:4f:28:89:95:18:85:f9:ae: f1:19:3b:52:9c:f8:45:09:45:b2:c9:8d:d2:70:ca: a5:ba:a1:85:03:51:bf:24:f5:f5:1e:b8:0f:f2:1f: 50:a4:50:b3:16:48:d1:d5:31:fa:60:92:d0:c3:a6: d9:f7:b4:3c:42:c4:60:d8:19:e5:f2:33:0d:c4:f0: a8:5d:10:18:eb:3d:34:5b:16:3a:ea:c4:5d:2c:6e: c2:0e:17:00:35:f9:ac:6a:50:25:48:9c:0f:e5:66: f0:22:74:76:4c:2d:a7:fb:84:66:1d:2e:11:72:79: 91:b8:25:63:08:4b:44:18:dd:5c:9e:37:5f:26:da: a9:71:94:d1:be:5b:ed:85:86:fa:a7:ca:f7:2c:7d: 46:95:e5:ef:4e:72:0f:12:81:31:09:8e:44:17:9e: ec:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8C:14:0A:52:22:34:46:D0:DF:0A:28:6E:DF:32:92:FA:E1:F5:83 X509v3 Authority Key Identifier: keyid:10:EC:5E:4C:C1:90:5B:32:F2:38:45:72:6B:4A:13:77:3C:C6:29:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/10EC5E4CC1905B32F23845726B4A13773CC62985.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10EC5E4CC1905B32F23845726B4A13773CC62985.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/10EC5E4CC1905B32F23845726B4A13773CC62985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:4c:f6:f7:90:29:ff:29:1c:63:d3:6f:2a:bc:a1:2f:23:61: b3:29:29:36:ea:7a:2c:d1:67:b4:46:32:80:18:c9:02:47:63: d8:a6:e8:1d:9e:1d:2c:e0:16:a5:eb:0c:b4:5c:d9:db:b6:99: 53:81:04:2d:b6:98:fd:2f:a9:31:41:7d:18:a7:c2:9a:00:f1: be:1f:2a:59:22:a7:d5:82:26:14:65:96:f3:34:92:c9:74:11: c0:dd:08:97:fb:7f:ab:09:f5:66:32:8c:55:87:c2:b7:96:85: c8:25:e9:ef:4e:e3:7c:55:6e:24:c3:b5:df:b1:c1:5c:c9:95: 9c:33:43:7b:72:33:d6:09:85:ca:6e:16:9c:2b:9a:06:8f:9f: ce:c1:13:c8:a3:0f:5f:25:a8:a7:c0:5b:f0:19:b7:c8:b5:78: 27:64:aa:a8:a5:31:60:5d:e7:b7:d5:b3:67:68:69:83:ae:80: b6:c8:ea:65:f5:f2:fc:85:ae:48:d5:ea:41:38:c3:e1:6b:7d: 1c:af:4c:83:2b:4c:dd:39:e5:d0:0d:a5:c5:c5:63:1d:a1:43: 1b:16:42:e4:71:69:f2:c0:d8:1d:e6:26:1e:fc:37:82:18:b5: 23:ed:bd:1a:2c:80:42:95:64:b6:c0:ef:79:63:b8:2e:8e:42: 6c:c0:75:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURbyffQGAJbo2I3txNYg5SUDOVVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBFQzVFNENDMTkwNUIzMkYyMzg0NTcyNkI0QTEzNzcz Q0M2Mjk4NTAeFw0yNTExMDUwODA1NDNaFw0yNTExMDYxMTMxNDNaMDMxMTAvBgNV BAMTKDk1OEMxNDBBNTIyMjM0NDZEMERGMEEyODZFREYzMjkyRkFFMUY1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR2YhWrKNVxTLkgo3nxDP1xYir 3CeUQTVdEhMWu+Ki0qzF/0rh8fEd5Yq2yN8wf/s2YtDWmU9cr0L0srp0IGwgiwN2 gfywY0QP1hj8ldFOuzyHQ28tLlmiDDQt49xRVk5PKImVGIX5rvEZO1Kc+EUJRbLJ jdJwyqW6oYUDUb8k9fUeuA/yH1CkULMWSNHVMfpgktDDptn3tDxCxGDYGeXyMw3E 8KhdEBjrPTRbFjrqxF0sbsIOFwA1+axqUCVInA/lZvAidHZMLaf7hGYdLhFyeZG4 JWMIS0QY3VyeN18m2qlxlNG+W+2FhvqnyvcsfUaV5e9Ocg8SgTEJjkQXnuyXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlYwUClIiNEbQ3woobt8ykvrh9YMwHwYDVR0j BBgwFoAUEOxeTMGQWzLyOEVya0oTdzzGKYUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHJTb01pUFhTWVZzZjFhcFZnV3NiVDVXdXBpWWlaV0RDaUZ3QzFVRjZU SFUvMC8xMEVDNUU0Q0MxOTA1QjMyRjIzODQ1NzI2QjRBMTM3NzNDQzYyOTg1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwRUM1RTRDQzE5MDVCMzJG MjM4NDU3MjZCNEExMzc3M0NDNjI5ODUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHJTb01pUFhTWVZzZjFhcFZnV3NiVDVXdXBpWWlaV0RDaUZ3QzFVRjZUSFUvMC8x MEVDNUU0Q0MxOTA1QjMyRjIzODQ1NzI2QjRBMTM3NzNDQzYyOTg1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQkz295Ap/ykcY9NvKryhLyNhsykpNup6LNFntEYygBjJAkdj2KboHZ4dLOAW pesMtFzZ27aZU4EELbaY/S+pMUF9GKfCmgDxvh8qWSKn1YImFGWW8zSSyXQRwN0I l/t/qwn1ZjKMVYfCt5aFyCXp707jfFVuJMO137HBXMmVnDNDe3Iz1gmFym4WnCua Bo+fzsETyKMPXyWop8Bb8Bm3yLV4J2SqqKUxYF3nt9WzZ2hpg66AtsjqZfXy/IWu SNXqQTjD4Wt9HK9MgytM3Tnl0A2lxcVjHaFDGxZC5HFp8sDYHeYmHvw3ghi1I+29 GiyAQpVktsDveWO4Lo5CbMB1IA== -----END CERTIFICATE-----Generated at Wed Nov 5 17:59:48 2025 by rpki-client