$ rpki-client -vvf rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft File: 69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft (raw, json) Hash identifier: kz1PMJjuMqgxOzwYa9/H02Aeza0kkRYrM04D9m+8gMY= Subject key identifier: D9:99:3B:74:49:2B:66:76:C0:02:3E:C3:DA:7D:48:4C:37:BE:F2:29 Authority key identifier: 69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23 Certificate issuer: /CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123 Certificate serial: 0B5A5A0947885F5A1532DFC802B94AB003073E07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer Subject info access: rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft Manifest number: 0126 Signing time: Tue 04 Nov 2025 12:15:24 +0000 Manifest this update: Tue 04 Nov 2025 12:10:24 +0000 Manifest next update: Wed 05 Nov 2025 14:11:24 +0000 Files and hashes: 1: 69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl (hash: ykEGBgogYuz6aRNkgjc51ThTtLB/sQLa0IoKo7RRY2M=) 2: 3138392e33382e33322e302f32302d3234203d3e203238333039.roa (hash: 9htZ/FrsfimiBtIRqe4S+q6Q8vdfYo+stxFxu6+6KXM=) 3: 3138372e34342e36342e302f32302d3234203d3e203238333039.roa (hash: ytWMeT7a+5e3RhiY9vsuprXfI161f6tC472OLXTHDx0=) 4: 3136382e3232382e39362e302f32322d3234203d3e203238333039.roa (hash: P4GcC84l5CNw0HIyuFql5vqXvV7osJssOwZyF9l46qM=) 5: 323830343a3136633a3a2f33322d3438203d3e203238333039.roa (hash: ExtPc8BcnrlABDGyELCaMKx1KVqxUBfgTRnIpEc/mhg=) 6: 3137392e3138392e302e302f32302d3234203d3e203238333039.roa (hash: gj4anIFoqS5An8dBcpGfcziSjC/4vyS/7Ef60ioYdXI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 14:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:5a:5a:09:47:88:5f:5a:15:32:df:c8:02:b9:4a:b0:03:07:3e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123 Validity Not Before: Nov 4 12:10:24 2025 GMT Not After : Nov 5 14:11:24 2025 GMT Subject: CN=D9993B74492B6676C0023EC3DA7D484C37BEF229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:91:c8:c3:90:2f:7e:f1:90:71:2a:aa:f2:6d: 60:bd:2a:cf:92:68:82:26:6a:61:3a:5e:5f:e8:40: f7:04:0f:7a:41:64:d4:1c:8b:2f:ca:d4:a5:d3:51: 14:32:43:e1:e7:65:cb:68:e7:bd:31:e6:8c:08:cf: 03:bf:4d:a2:d3:6a:8c:84:6f:05:80:55:6e:0b:58: 25:ce:d1:bd:bc:58:49:2a:f1:d9:a3:15:4a:83:dd: 91:de:07:c2:b0:4e:27:8d:84:0e:8b:2c:b4:6e:3d: a0:3e:00:69:28:7e:25:9a:e4:9c:05:8d:86:13:4f: dd:89:60:84:7b:48:5d:f7:d4:15:53:5d:bf:2c:40: 53:7e:d5:82:05:51:33:91:c8:da:ba:9a:cb:4c:e3: 2c:84:b9:c0:30:8c:dc:40:6a:56:41:2f:3d:02:85: 68:2a:17:81:41:1f:ae:c7:91:ca:f3:f1:26:95:6b: d0:ff:41:43:9b:14:71:fb:e8:f4:41:e1:18:bd:0c: c1:c6:ee:e7:20:a9:b6:b4:1d:b0:0c:dd:a8:d1:4d: 3a:20:54:61:52:61:73:d0:ef:f1:88:a5:ab:b2:3d: 03:54:50:f6:3e:3c:6d:c0:a4:45:42:76:a8:90:48: d1:06:4a:00:ec:1d:3d:5b:7a:1b:db:4d:1c:e3:c1: dc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:99:3B:74:49:2B:66:76:C0:02:3E:C3:DA:7D:48:4C:37:BE:F2:29 X509v3 Authority Key Identifier: keyid:69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:21:86:e2:8f:5d:bc:2a:0b:91:d8:69:d2:3a:49:af:76:dc: 76:fb:39:e2:53:a9:36:e8:cb:12:32:34:12:16:03:aa:0f:9d: 80:11:30:75:8f:cd:08:bc:4d:40:2e:07:ea:00:f6:a4:99:42: d0:08:4a:20:65:76:4a:5e:44:2f:60:5c:f3:73:86:fb:32:53: 73:64:69:b4:a4:25:e6:59:ef:bd:8c:e4:68:5d:d6:ac:16:9d: f4:b9:a0:d8:5a:c6:a6:b1:0a:8e:9d:29:d0:73:2c:f1:df:8d: f2:f2:54:f6:5b:ba:f6:a0:a6:8c:5b:5b:71:7d:56:27:e8:5e: e7:c9:a2:cd:f9:c3:41:04:05:0d:e4:ee:ed:32:7a:d9:65:aa: 01:68:3d:33:3d:b7:95:a8:5b:b7:55:c2:0d:67:0c:cd:c1:1c: d0:5e:ce:4c:74:94:d6:42:e3:9c:7c:1f:a8:72:f7:59:18:bb: 89:bb:5e:24:83:f3:92:82:c5:93:cd:86:80:41:c7:b2:b1:9e: da:44:de:47:31:04:4f:8e:4f:ca:fb:58:d7:d5:88:f4:32:bd: 7b:32:57:6e:9b:85:40:fb:a6:a8:a4:4a:ae:33:06:21:51:6f: 5e:f4:33:84:b6:ae:8c:9a:10:00:25:0e:43:b2:75:47:ed:57: 84:f4:29:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUC1paCUeIX1oVMt/IArlKsAMHPgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlERTVBRDFBNUIxRjk3ODg0RDE5REMzRTlFRkRBM0Y5 NjU0QzEyMzAeFw0yNTExMDQxMjEwMjRaFw0yNTExMDUxNDExMjRaMDMxMTAvBgNV BAMTKEQ5OTkzQjc0NDkyQjY2NzZDMDAyM0VDM0RBN0Q0ODRDMzdCRUYyMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVkcjDkC9+8ZBxKqrybWC9Ks+S aIImamE6Xl/oQPcED3pBZNQciy/K1KXTURQyQ+HnZcto570x5owIzwO/TaLTaoyE bwWAVW4LWCXO0b28WEkq8dmjFUqD3ZHeB8KwTieNhA6LLLRuPaA+AGkofiWa5JwF jYYTT92JYIR7SF331BVTXb8sQFN+1YIFUTORyNq6mstM4yyEucAwjNxAalZBLz0C hWgqF4FBH67Hkcrz8SaVa9D/QUObFHH76PRB4Ri9DMHG7ucgqba0HbAM3ajRTTog VGFSYXPQ7/GIpauyPQNUUPY+PG3ApEVCdqiQSNEGSgDsHT1behvbTRzjwdxHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2Zk7dEkrZnbAAj7D2n1ITDe+8ikwHwYDVR0j BBgwFoAUad5a0aWx+XiE0Z3D6e/aP5ZUwSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDczRGFnOW95ckd3Vzl5RThDcnUxS0J0b2VlZmFoSmF0Yml5eDR4SDh3 Q28vMC82OURFNUFEMUE1QjFGOTc4ODREMTlEQzNFOUVGREEzRjk2NTRDMTIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5REU1QUQxQTVCMUY5Nzg4 NEQxOURDM0U5RUZEQTNGOTY1NEMxMjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDczRGFnOW95ckd3Vzl5RThDcnUxS0J0b2VlZmFoSmF0Yml5eDR4SDh3Q28vMC82 OURFNUFEMUE1QjFGOTc4ODREMTlEQzNFOUVGREEzRjk2NTRDMTIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeiGG4o9dvCoLkdhp0jpJr3bcdvs54lOpNujLEjI0EhYDqg+dgBEwdY/NCLxN QC4H6gD2pJlC0AhKIGV2Sl5EL2Bc83OG+zJTc2RptKQl5lnvvYzkaF3WrBad9Lmg 2FrGprEKjp0p0HMs8d+N8vJU9lu69qCmjFtbcX1WJ+he58mizfnDQQQFDeTu7TJ6 2WWqAWg9Mz23lahbt1XCDWcMzcEc0F7OTHSU1kLjnHwfqHL3WRi7ibteJIPzkoLF k82GgEHHsrGe2kTeRzEET45PyvtY19WI9DK9ezJXbpuFQPumqKRKrjMGIVFvXvQz hLaujJoQACUOQ7J1R+1XhPQpNA== -----END CERTIFICATE-----Generated at Wed Nov 5 05:15:04 2025 by rpki-client