$ rpki-client -vvf rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft File: 068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft (raw, json) Hash identifier: DL8aTRpibXMJeXeB6jNHYISW4t9yLPgm3w+RROlGSm8= Subject key identifier: D8:6C:EA:7E:F2:04:3D:BF:A5:8D:8D:08:45:D4:A9:6E:B1:49:98:04 Authority key identifier: 06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D Certificate issuer: /CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D Certificate serial: 5BC9BE6878F7FB8BA504396146970CD647AA3456 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer Subject info access: rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft Manifest number: 0306 Signing time: Tue 04 Nov 2025 15:35:35 +0000 Manifest this update: Tue 04 Nov 2025 15:30:35 +0000 Manifest next update: Wed 05 Nov 2025 18:07:35 +0000 Files and hashes: 1: 068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl (hash: uRh7QqHUAYBNBqd2PSdLHujwb/iAibzxG+J7yTt4o60=) 2: 323830343a333131633a3a2f33322d3438203d3e20323634393933.roa (hash: Bzk4dZzrNC2Jl6ZUDrTLxTfoojkN5yomvgAkgomW3v0=) 3: 3137302e38342e3131362e302f32322d3234203d3e20323634393933.roa (hash: uQbx9J4xqOZ9ulDsiq8PH8RnyLqo6V/EHfZIYzuiAOU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 18:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c9:be:68:78:f7:fb:8b:a5:04:39:61:46:97:0c:d6:47:aa:34:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D Validity Not Before: Nov 4 15:30:35 2025 GMT Not After : Nov 5 18:07:35 2025 GMT Subject: CN=D86CEA7EF2043DBFA58D8D0845D4A96EB1499804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:64:1d:9f:75:0f:31:5e:5c:d4:45:46:4c: d5:50:d3:6e:cd:f3:9f:95:e0:3d:e0:4d:8b:01:7d: e7:e1:06:73:81:b5:9d:b6:a7:2f:55:f7:4b:6b:dd: 10:38:7e:0e:b5:d5:01:1b:db:c4:73:30:9d:61:45: 50:49:87:c2:4b:d8:f3:83:67:5f:fe:42:5a:19:6f: ab:cf:6d:d8:bf:5d:db:fa:aa:c9:01:36:dc:bf:e4: 38:e8:19:a3:5f:ab:30:da:37:96:44:73:e5:3d:c7: 46:f3:55:15:69:00:bf:76:36:9d:34:9d:90:af:4c: d1:55:05:35:86:1c:50:b9:f2:d6:21:b1:a6:73:64: fd:c8:73:12:be:07:f0:29:b0:b0:2b:6c:90:0a:33: 6b:ec:6f:a5:db:95:49:ec:9f:59:93:e3:75:94:56: 20:a8:82:91:1e:07:4f:07:66:d9:55:2e:3c:8d:c8: 32:70:d7:87:fc:a6:d1:0c:b2:69:c5:77:62:85:f7: 44:bc:14:cc:7d:dd:c1:5c:da:1d:ad:20:4a:b0:eb: da:58:e1:bc:2f:50:aa:b1:45:24:c1:d2:72:05:73: 0d:e7:70:0a:00:8e:36:4f:63:ee:e9:5d:21:6b:21: 9b:1d:87:c2:da:6c:b0:c0:2e:ad:c4:13:9b:33:af: 87:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6C:EA:7E:F2:04:3D:BF:A5:8D:8D:08:45:D4:A9:6E:B1:49:98:04 X509v3 Authority Key Identifier: keyid:06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:39:b9:f9:f3:a5:df:04:4e:28:f5:2a:0b:e9:b5:0e:95:7b: 43:46:32:30:38:e2:9f:49:5c:37:18:de:ac:0d:33:a8:76:ee: 1d:79:13:a5:48:f8:ca:4f:70:5e:4e:3a:0f:06:57:68:02:8b: 76:70:91:ed:db:ef:d9:e7:d5:6d:2d:ac:16:ce:26:f6:67:96: d8:45:78:af:6c:99:ca:fa:c6:ca:e2:0c:5e:15:d6:f0:10:ae: ac:e6:72:f3:a5:ec:56:05:4f:59:08:3c:de:ed:f3:2a:9d:92: 1d:9f:2d:d5:1e:8b:10:a8:37:bb:9d:65:de:cf:ca:b2:35:8f: 1b:59:9c:3b:1f:75:1a:82:0d:81:92:e8:88:ce:cf:49:a0:1b: f3:21:27:c5:42:fe:f1:5a:03:4d:bd:fe:ee:f1:fd:2f:a7:76: 76:67:15:3a:a9:4f:5f:17:d1:a7:ec:aa:94:e7:a6:c4:7a:c5: 73:a7:b6:e9:8a:ff:a0:23:55:3c:74:08:01:76:d3:89:4b:e2: b7:c9:3d:38:ba:70:bb:99:0c:60:22:c3:b8:9a:33:be:08:ce: 6d:6a:90:26:27:40:1a:69:ae:7c:fa:eb:8f:f6:78:41:fb:41: f8:67:54:5d:03:af:45:37:bd:18:c1:60:e7:e8:0b:0c:53:5b: 86:cd:41:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUW8m+aHj3+4ulBDlhRpcM1keqNFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4RkRGQzVBMkI3QkUxMzg3QkRCREJGMUU4RDUxRUFG NEQyMEYyRDAeFw0yNTExMDQxNTMwMzVaFw0yNTExMDUxODA3MzVaMDMxMTAvBgNV BAMTKEQ4NkNFQTdFRjIwNDNEQkZBNThEOEQwODQ1RDRBOTZFQjE0OTk4MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4imQdn3UPMV5c1EVGTNVQ027N 85+V4D3gTYsBfefhBnOBtZ22py9V90tr3RA4fg611QEb28RzMJ1hRVBJh8JL2POD Z1/+QloZb6vPbdi/Xdv6qskBNty/5DjoGaNfqzDaN5ZEc+U9x0bzVRVpAL92Np00 nZCvTNFVBTWGHFC58tYhsaZzZP3IcxK+B/ApsLArbJAKM2vsb6XblUnsn1mT43WU ViCogpEeB08HZtlVLjyNyDJw14f8ptEMsmnFd2KF90S8FMx93cFc2h2tIEqw69pY 4bwvUKqxRSTB0nIFcw3ncAoAjjZPY+7pXSFrIZsdh8LabLDALq3EE5szr4eNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2GzqfvIEPb+ljY0IRdSpbrFJmAQwHwYDVR0j BBgwFoAUBo/fxaK3vhOHvb2/Ho1R6vTSDy0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDJBREhMMkJRYnhGUXpINXBxdXFCS0R2b2ZiNFZNWWpaVE5EZWdRclZE Y3cvMS8wNjhGREZDNUEyQjdCRTEzODdCREJEQkYxRThENTFFQUY0RDIwRjJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2OEZERkM1QTJCN0JFMTM4 N0JEQkRCRjFFOEQ1MUVBRjREMjBGMkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDJBREhMMkJRYnhGUXpINXBxdXFCS0R2b2ZiNFZNWWpaVE5EZWdRclZEY3cvMS8w NjhGREZDNUEyQjdCRTEzODdCREJEQkYxRThENTFFQUY0RDIwRjJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACzm5+fOl3wROKPUqC+m1DpV7Q0YyMDjin0lcNxjerA0zqHbuHXkTpUj4yk9w Xk46DwZXaAKLdnCR7dvv2efVbS2sFs4m9meW2EV4r2yZyvrGyuIMXhXW8BCurOZy 86XsVgVPWQg83u3zKp2SHZ8t1R6LEKg3u51l3s/KsjWPG1mcOx91GoINgZLoiM7P SaAb8yEnxUL+8VoDTb3+7vH9L6d2dmcVOqlPXxfRp+yqlOemxHrFc6e26Yr/oCNV PHQIAXbTiUvit8k9OLpwu5kMYCLDuJozvgjObWqQJidAGmmufPrrj/Z4QftB+GdU XQOvRTe9GMFg5+gLDFNbhs1B/w== -----END CERTIFICATE-----Generated at Wed Nov 5 02:45:53 2025 by rpki-client