$ rpki-client -vvf rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.mft File: 85068FEAC49281A5AC659FD8ACD5E5618494FE80.mft (raw, json) Hash identifier: pTgQtzOn0SDqd75BDzhvWscQMqweSLyeZ8haKxq0jlU= Subject key identifier: D8:A9:E9:EC:8E:5A:8D:9D:AD:08:A2:DE:BB:6B:E0:94:EB:77:4C:DA Authority key identifier: 85:06:8F:EA:C4:92:81:A5:AC:65:9F:D8:AC:D5:E5:61:84:94:FE:80 Certificate issuer: /CN=85068FEAC49281A5AC659FD8ACD5E5618494FE80 Certificate serial: 5A67F7E09E799B0E602788F8A37CBF0CDF6C8CE0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85068FEAC49281A5AC659FD8ACD5E5618494FE80.cer Subject info access: rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.mft Manifest number: 70 Signing time: Tue 04 Nov 2025 12:10:50 +0000 Manifest this update: Tue 04 Nov 2025 12:05:50 +0000 Manifest next update: Wed 05 Nov 2025 14:11:50 +0000 Files and hashes: 1: 323830343a366132303a3a2f33352d3335203d3e20323730333131.roa (hash: kATj2QWkHPDvEzcQ6ybysXbSpkiDyHgqSAZt18xiT5s=) 2: 3138392e3131332e3139302e302f32342d3234203d3e20323730333131.roa (hash: PfBe69iu29jWZz2+9qaHmtzi9QqGT1j6b6bJF47cghc=) 3: 3138392e3131332e3138392e302f32342d3234203d3e20323730333131.roa (hash: 8OCy0PQFpeRimd/3R/B5HNkDVJJ2JMsWz0MCw2sfDO0=) 4: 85068FEAC49281A5AC659FD8ACD5E5618494FE80.crl (hash: p/AD7SQ2FXe2TelQR6LWIncO86Fp/jB6uHrMakgXNNY=) 5: 3138392e3131332e3139312e302f32342d3234203d3e20323730333131.roa (hash: HWvHKUKBbIi2U8mRS7k7gBkY11IKW8zsgXIwVrKBf0k=) 6: 323830343a366132303a3a2f33322d3332203d3e20323730333131.roa (hash: nJRw2a5PSv2Upws4q6C3IDuHd+WXSYEUTkABck7q9vA=) 7: 3138392e3131332e3138382e302f32342d3234203d3e20323730333131.roa (hash: T5iSsyEa3CJ5ubJjAJ0Wh5EeghX/bBpzxG4BvxvQMnY=) 8: 323830343a366132303a323030303a3a2f33352d3335203d3e20323730333131.roa (hash: crndK/TccfHrPXN22xqZ6uksrZ3hBAKDitK4kEkuC04=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.crl rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85068FEAC49281A5AC659FD8ACD5E5618494FE80.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 14:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:67:f7:e0:9e:79:9b:0e:60:27:88:f8:a3:7c:bf:0c:df:6c:8c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85068FEAC49281A5AC659FD8ACD5E5618494FE80 Validity Not Before: Nov 4 12:05:50 2025 GMT Not After : Nov 5 14:11:50 2025 GMT Subject: CN=D8A9E9EC8E5A8D9DAD08A2DEBB6BE094EB774CDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a1:ca:6d:56:05:bb:fe:22:f4:de:b2:ec:26: 1a:1a:31:06:fb:83:d3:c3:10:89:6f:9f:1c:99:4d: cd:f8:56:0c:92:43:64:d9:33:dd:0c:77:09:47:0a: ec:b9:8d:64:2a:b8:91:5a:44:75:97:24:5d:79:71: 38:02:36:b3:9f:f0:ad:57:77:dc:81:5d:4d:ba:d9: 9b:04:d3:11:a0:16:eb:2a:c5:ea:05:7a:00:9d:96: 90:8f:ff:3f:24:fc:34:e9:9c:77:32:9a:21:40:bf: 16:fc:9d:ca:3b:06:fd:a1:7a:c6:b6:f2:79:98:7a: 49:1e:a7:65:ed:c0:11:05:13:0c:79:6d:f2:ed:e6: 35:a2:e1:d7:5f:b7:24:d5:49:ef:b1:c7:2c:81:d9: 33:f8:f3:47:90:81:0b:78:76:ac:8b:bf:28:47:14: 93:79:b1:c5:92:27:f0:19:53:d2:ae:2a:18:57:c2: 9d:96:e5:6d:45:c3:02:b0:4c:3a:39:37:6d:81:15: eb:72:15:1c:d5:4e:2e:1f:f7:47:21:0d:5c:0a:5e: 41:99:71:9f:72:02:03:06:46:ef:a5:9e:7c:45:2b: df:a1:03:c1:11:be:67:23:83:2b:9f:ae:30:48:12: 11:1e:c4:03:cd:a8:91:ef:04:e7:7b:54:5f:bf:2c: 1b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A9:E9:EC:8E:5A:8D:9D:AD:08:A2:DE:BB:6B:E0:94:EB:77:4C:DA X509v3 Authority Key Identifier: keyid:85:06:8F:EA:C4:92:81:A5:AC:65:9F:D8:AC:D5:E5:61:84:94:FE:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85068FEAC49281A5AC659FD8ACD5E5618494FE80.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:7f:f8:82:22:22:b2:0f:83:2e:59:f7:7f:ae:06:32:45:67: 8c:48:52:39:bc:d9:e1:34:7f:0e:0b:94:3c:11:90:06:2f:be: 02:fb:2b:8d:57:e9:2e:e9:aa:49:e4:7a:71:83:59:14:e1:db: 17:ec:8a:bc:b9:97:ef:f9:91:d8:3a:d5:fd:e4:56:f8:3e:29: fe:06:f4:0c:f8:ee:e5:e2:d4:e5:7c:d4:25:cc:45:21:7b:3a: 7b:a9:a6:d7:ae:ca:21:9f:37:92:a2:bf:85:8c:4b:99:78:52: 25:c7:fa:00:8b:09:90:12:73:ba:eb:c2:3d:c0:39:1c:9c:be: 3e:0a:3d:3b:45:d8:c9:0d:40:fb:84:e3:8a:d4:d7:74:1a:c1: 04:09:d8:2c:fa:75:10:66:20:06:b4:f7:fc:7b:dc:ad:87:1d: 24:ed:ae:e9:27:e8:ef:71:bb:2a:46:b9:12:45:ca:ba:9a:cc: c9:02:8d:3a:6f:24:bc:af:f4:62:c8:fe:7a:d6:29:cd:45:aa: 90:22:a6:c3:1f:8b:01:05:76:81:f0:26:57:91:38:b1:59:1c: 64:9d:2d:33:7b:3b:18:88:ee:63:6f:62:46:62:a0:5c:ef:36: ad:cd:b9:0a:2c:3a:ff:81:29:b0:f4:ac:34:d6:b5:62:e7:09: dc:1a:ba:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWmf34J55mw5gJ4j4o3y/DN9sjOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUwNjhGRUFDNDkyODFBNUFDNjU5RkQ4QUNENUU1NjE4 NDk0RkU4MDAeFw0yNTExMDQxMjA1NTBaFw0yNTExMDUxNDExNTBaMDMxMTAvBgNV BAMTKEQ4QTlFOUVDOEU1QThEOURBRDA4QTJERUJCNkJFMDk0RUI3NzRDREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGocptVgW7/iL03rLsJhoaMQb7 g9PDEIlvnxyZTc34VgySQ2TZM90MdwlHCuy5jWQquJFaRHWXJF15cTgCNrOf8K1X d9yBXU262ZsE0xGgFusqxeoFegCdlpCP/z8k/DTpnHcymiFAvxb8nco7Bv2hesa2 8nmYekkep2XtwBEFEwx5bfLt5jWi4ddftyTVSe+xxyyB2TP480eQgQt4dqyLvyhH FJN5scWSJ/AZU9KuKhhXwp2W5W1FwwKwTDo5N22BFetyFRzVTi4f90chDVwKXkGZ cZ9yAgMGRu+lnnxFK9+hA8ERvmcjgyufrjBIEhEexAPNqJHvBOd7VF+/LBvrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2Knp7I5ajZ2tCKLeu2vglOt3TNowHwYDVR0j BBgwFoAUhQaP6sSSgaWsZZ/YrNXlYYSU/oAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUQ3VnRLRmNtZlJEcktocXBaN1R6TlhyMllveVJtMzlmMkZkVkNwazVv c0UvMC84NTA2OEZFQUM0OTI4MUE1QUM2NTlGRDhBQ0Q1RTU2MTg0OTRGRTgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1MDY4RkVBQzQ5MjgxQTVB QzY1OUZEOEFDRDVFNTYxODQ5NEZFODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUQ3VnRLRmNtZlJEcktocXBaN1R6TlhyMllveVJtMzlmMkZkVkNwazVvc0UvMC84 NTA2OEZFQUM0OTI4MUE1QUM2NTlGRDhBQ0Q1RTU2MTg0OTRGRTgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOH/4giIisg+DLln3f64GMkVnjEhSObzZ4TR/DguUPBGQBi++AvsrjVfpLumq SeR6cYNZFOHbF+yKvLmX7/mR2DrV/eRW+D4p/gb0DPju5eLU5XzUJcxFIXs6e6mm 167KIZ83kqK/hYxLmXhSJcf6AIsJkBJzuuvCPcA5HJy+Pgo9O0XYyQ1A+4TjitTX dBrBBAnYLPp1EGYgBrT3/HvcrYcdJO2u6Sfo73G7Kka5EkXKuprMyQKNOm8kvK/0 Ysj+etYpzUWqkCKmwx+LAQV2gfAmV5E4sVkcZJ0tM3s7GIjuY29iRmKgXO82rc25 Ciw6/4EpsPSsNNa1YucJ3Bq67Q== -----END CERTIFICATE-----Generated at Wed Nov 5 03:36:47 2025 by rpki-client