$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft File: 68EC60223DF10BE63B7A84464ACF2A9697173D75.mft (raw, json) Hash identifier: eM13dBKQsQ74UO/gGUxmejFv4H/sSQzP1mu7oryXbSo= Subject key identifier: BF:C8:B9:A1:A0:BD:6C:E0:71:35:E8:24:57:F9:2F:68:A6:6B:A5:41 Authority key identifier: 68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75 Certificate issuer: /CN=68EC60223DF10BE63B7A84464ACF2A9697173D75 Certificate serial: 6D0C3DAF6C344C8DF281D361EE1E7EB2B9638907 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer Subject info access: rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft Manifest number: 02F5 Signing time: Tue 04 Nov 2025 20:06:41 +0000 Manifest this update: Tue 04 Nov 2025 20:01:41 +0000 Manifest next update: Wed 05 Nov 2025 21:13:41 +0000 Files and hashes: 1: 323830343a326233343a3a2f33322d3336203d3e20323635313430.roa (hash: e293ucudGtZaweGXAccg++hTWsDiYVPUspL2krLmXvw=) 2: 3134332e3235352e302e302f32322d3234203d3e20323635313430.roa (hash: jO+j2ycSSgUqX/c6R4D4iMxvnJVHoWNPsmxQHR/K7WA=) 3: 68EC60223DF10BE63B7A84464ACF2A9697173D75.crl (hash: h8znFR8OuxN2xMdeYwRb32WfQ+cev79CwlG54ADPnAs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 21:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:0c:3d:af:6c:34:4c:8d:f2:81:d3:61:ee:1e:7e:b2:b9:63:89:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68EC60223DF10BE63B7A84464ACF2A9697173D75 Validity Not Before: Nov 4 20:01:41 2025 GMT Not After : Nov 5 21:13:41 2025 GMT Subject: CN=BFC8B9A1A0BD6CE07135E82457F92F68A66BA541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:43:55:05:97:8e:35:2a:cf:d1:62:ca:8a:f8: a6:f6:d9:ab:0d:24:5a:b4:14:68:32:9f:8b:54:a7: 50:39:49:7d:a8:f4:22:7b:4c:6e:72:89:05:05:fa: 30:5d:a4:7a:d8:15:09:3c:3c:d5:f2:7a:09:f8:bb: c2:49:75:e9:1b:bc:e5:ea:f5:69:d2:14:69:ea:86: 4a:0a:a2:73:9a:0d:a6:ea:51:92:42:15:b3:0d:83: b4:12:78:1f:64:8a:f2:d7:4f:61:ce:22:2e:87:a6: 19:18:88:ef:be:4d:5c:38:aa:a5:b4:67:01:99:0b: af:38:5e:17:2d:8d:74:23:15:e6:94:af:4f:6d:52: 10:cf:a9:e2:d6:a9:66:4e:a1:05:4f:c1:0c:10:4a: 37:37:36:d3:1f:4a:9a:73:f9:22:ac:4c:e9:f4:65: b6:db:b3:f3:c3:6a:9c:e4:67:b2:81:cf:e3:13:43: 31:2d:2f:55:ca:e1:9a:b9:01:73:5c:b1:06:d2:35: e3:61:b9:11:e4:91:20:89:35:7e:d9:33:23:ae:a0: e4:f3:25:f6:67:99:ff:1e:2b:50:cc:6f:b3:3d:3f: 6e:d3:f0:7e:55:7b:07:35:4a:94:50:27:f0:f5:72: 00:0b:f6:0c:67:e6:85:d7:5a:b4:cc:76:62:94:e7: e1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C8:B9:A1:A0:BD:6C:E0:71:35:E8:24:57:F9:2F:68:A6:6B:A5:41 X509v3 Authority Key Identifier: keyid:68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:79:d8:b6:40:f7:29:a0:86:39:ab:84:1e:73:30:ea:b8:d2: 11:dc:1e:f3:5e:4e:1c:b7:c1:3b:95:dc:8b:73:4f:09:fe:fa: a1:c5:de:75:07:02:9a:f6:dd:94:a8:ce:16:2b:8d:f0:28:42: b6:8d:a5:08:60:92:98:4f:3c:8d:c2:ff:a7:2c:0b:ea:7a:41: 5d:ac:70:b6:8a:e4:19:0b:f4:4b:e1:fb:c7:1a:48:8d:0f:06: 99:b5:7c:c6:1e:f9:2e:28:73:44:f8:67:35:9a:a9:d2:71:52: f8:88:0b:5f:cb:18:a9:cb:59:a6:52:46:20:af:93:75:9e:ab: 68:27:a4:bb:f5:7d:fd:d9:7f:8f:53:a0:66:87:50:cb:cc:9c: 06:95:75:36:0e:d3:56:84:49:3b:94:ad:3d:17:7d:5b:35:bc: 07:af:60:de:21:88:d3:27:9c:d5:ac:0a:5b:d1:8e:bc:ee:dd: 82:17:87:4f:d0:dd:a1:32:cc:59:aa:45:e0:4a:b2:cb:83:83: 18:6c:58:26:74:c4:bf:91:ee:3c:1d:c5:d6:b9:38:6f:bd:ce: 06:98:23:92:b5:c7:af:5c:c6:e2:d6:5f:4d:e6:2d:f4:15:52: ee:e1:74:cd:0b:0e:26:20:cb:90:c9:62:ec:80:c9:a1:cc:8f: bf:6e:ce:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbQw9r2w0TI3ygdNh7h5+srljiQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFQzYwMjIzREYxMEJFNjNCN0E4NDQ2NEFDRjJBOTY5 NzE3M0Q3NTAeFw0yNTExMDQyMDAxNDFaFw0yNTExMDUyMTEzNDFaMDMxMTAvBgNV BAMTKEJGQzhCOUExQTBCRDZDRTA3MTM1RTgyNDU3RjkyRjY4QTY2QkE1NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQ1UFl441Ks/RYsqK+Kb22asN JFq0FGgyn4tUp1A5SX2o9CJ7TG5yiQUF+jBdpHrYFQk8PNXyegn4u8JJdekbvOXq 9WnSFGnqhkoKonOaDabqUZJCFbMNg7QSeB9kivLXT2HOIi6HphkYiO++TVw4qqW0 ZwGZC684XhctjXQjFeaUr09tUhDPqeLWqWZOoQVPwQwQSjc3NtMfSppz+SKsTOn0 Zbbbs/PDapzkZ7KBz+MTQzEtL1XK4Zq5AXNcsQbSNeNhuRHkkSCJNX7ZMyOuoOTz JfZnmf8eK1DMb7M9P27T8H5Vewc1SpRQJ/D1cgAL9gxn5oXXWrTMdmKU5+EPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUv8i5oaC9bOBxNegkV/kvaKZrpUEwHwYDVR0j BBgwFoAUaOxgIj3xC+Y7eoRGSs8qlpcXPXUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5NNWtOVkVQeTl2RDVkVGNRY2ROQnl1eHBkMm5IeTRTM2prVXFIUktE Z24vMC82OEVDNjAyMjNERjEwQkU2M0I3QTg0NDY0QUNGMkE5Njk3MTczRDc1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RUM2MDIyM0RGMTBCRTYz QjdBODQ0NjRBQ0YyQTk2OTcxNzNENzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OG5NNWtOVkVQeTl2RDVkVGNRY2ROQnl1eHBkMm5IeTRTM2prVXFIUktEZ24vMC82 OEVDNjAyMjNERjEwQkU2M0I3QTg0NDY0QUNGMkE5Njk3MTczRDc1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOHnYtkD3KaCGOauEHnMw6rjSEdwe815OHLfBO5Xci3NPCf76ocXedQcCmvbd lKjOFiuN8ChCto2lCGCSmE88jcL/pywL6npBXaxwtorkGQv0S+H7xxpIjQ8GmbV8 xh75LihzRPhnNZqp0nFS+IgLX8sYqctZplJGIK+TdZ6raCeku/V9/dl/j1OgZodQ y8ycBpV1Ng7TVoRJO5StPRd9WzW8B69g3iGI0yec1awKW9GOvO7dgheHT9DdoTLM WapF4Eqyy4ODGGxYJnTEv5HuPB3F1rk4b73OBpgjkrXHr1zG4tZfTeYt9BVS7uF0 zQsOJiDLkMli7IDJocyPv27ORw== -----END CERTIFICATE-----Generated at Wed Nov 5 04:08:20 2025 by rpki-client