$ rpki-client -vvf rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.mft File: A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.mft (raw, json) Hash identifier: Tna/10fWHAVqpxRljh9NOpgWfwnVu3xi5pVF6MD9Iiw= Subject key identifier: 67:D2:03:4B:A4:C9:A5:D2:BC:73:FE:05:87:04:89:2F:C3:4D:F4:A3 Authority key identifier: A0:18:B2:CA:A6:D0:D5:0A:96:B8:55:60:1A:C3:B9:9D:5B:B9:CF:FA Certificate issuer: /CN=A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA Certificate serial: 5CD7512EF610B9DAE4DCCF35436B8B910E0EAC09 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.mft Manifest number: 01B0 Signing time: Tue 04 Nov 2025 13:49:58 +0000 Manifest this update: Tue 04 Nov 2025 13:44:58 +0000 Manifest next update: Wed 05 Nov 2025 14:54:58 +0000 Files and hashes: 1: 3134332e3230382e3234302e302f32322d3234203d3e203631373530.roa (hash: WcKC1sN5ziX22RXbUzReSfmeECyh9hVWahDEtFhDIzk=) 2: 323830343a316263383a3a2f33322d3438203d3e203631373530.roa (hash: qlNFc2tBNukX+9u/fPnfKRlTc2Ao4DGPeLy1N2cKjhU=) 3: 3133312e37322e3138342e302f32322d3234203d3e203631373530.roa (hash: WOc804GL5O6rAbuK0PXLnvcquBktlYjxpDw/C49pPTk=) 4: A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.crl (hash: f+lrOhP/AJL6NMvUeYx393gNgD/4yRPuxQWtZuu3gXs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.crl rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 14:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d7:51:2e:f6:10:b9:da:e4:dc:cf:35:43:6b:8b:91:0e:0e:ac:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA Validity Not Before: Nov 4 13:44:58 2025 GMT Not After : Nov 5 14:54:58 2025 GMT Subject: CN=67D2034BA4C9A5D2BC73FE058704892FC34DF4A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:8e:39:b3:1e:8a:2b:2f:ce:c5:e9:da:4b: de:34:e3:71:ae:75:30:76:51:49:e9:2c:27:d3:23: 2a:b7:bd:50:c2:bd:85:c5:62:43:f9:0b:4b:ad:a3: 60:ad:f7:d9:8c:bd:ea:5d:74:33:90:07:3b:5d:19: 2a:96:f3:ae:99:8a:0a:45:a2:ee:49:5a:3c:34:3d: 9f:9c:12:2d:cc:f9:6d:05:f2:54:d3:51:07:35:5d: 7e:6c:b4:12:14:78:e4:2b:b9:13:96:57:42:bb:c7: 19:4c:9b:db:b9:9c:36:60:e6:af:9f:55:67:94:fb: b1:56:d9:32:88:04:0b:fd:09:e5:f1:24:60:e3:5b: 54:4b:5f:33:ff:03:5d:dd:7a:0f:39:5d:7d:50:b5: 7c:d4:40:78:0e:4f:59:25:ee:cf:c9:ae:3b:d8:2c: 15:b1:e6:86:c7:37:f6:7d:c9:45:91:57:27:14:49: 7c:6f:ad:a6:89:5f:1c:56:a8:ae:a6:ff:4f:9c:b2: a8:55:e0:2c:5e:fa:94:d5:a0:91:dd:83:c6:fe:ce: bb:3a:7e:c9:ef:9a:58:96:42:31:a0:82:14:c8:95: 4f:ec:59:71:01:8f:3c:ce:ea:02:e0:62:fe:23:45: 29:ea:03:24:54:47:e8:d6:02:4d:66:52:a2:b8:07: 86:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D2:03:4B:A4:C9:A5:D2:BC:73:FE:05:87:04:89:2F:C3:4D:F4:A3 X509v3 Authority Key Identifier: keyid:A0:18:B2:CA:A6:D0:D5:0A:96:B8:55:60:1A:C3:B9:9D:5B:B9:CF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:8f:2d:72:bd:2c:39:d0:35:61:36:79:a2:22:75:32:df:90: 47:5f:8e:58:95:16:9b:c3:d3:6e:fe:43:40:72:2d:30:24:d2: e3:2f:6e:3e:0a:15:fe:76:43:3b:f9:08:a4:8a:c5:21:5e:15: 5a:cc:0e:be:89:4c:a1:ad:d8:46:98:84:c9:5c:e8:dc:bf:5d: d6:88:2e:fa:ab:88:1d:a6:c4:ce:b3:e5:93:08:97:66:db:ea: ee:0a:0e:b3:61:09:97:c2:ce:a2:f9:9e:6c:3b:db:f1:eb:0a: 03:ac:a6:91:1f:49:9c:67:f7:05:e2:7b:0e:58:63:04:42:b2: 79:72:5c:75:49:17:3a:90:87:55:a1:96:fb:2c:3b:6a:81:b1: 88:37:88:c2:40:98:3f:1a:8b:72:42:8e:21:5f:bf:09:47:40: 9c:4b:87:dd:ad:b0:d6:3f:f1:2f:f5:76:9c:12:23:3a:78:de: 61:74:be:55:7a:05:40:2c:84:14:98:7b:40:2e:f2:7f:45:41: 98:2d:5a:4d:e4:f2:13:d2:a6:a4:da:fd:2d:6d:f3:f4:30:8a: 40:14:1b:f9:38:ec:d0:a7:f8:b9:ee:1f:b4:64:07:35:e0:35: 93:10:b5:aa:c3:e8:4b:49:d9:23:49:d0:86:f6:bc:23:5d:74: 00:7e:8c:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXNdRLvYQudrk3M81Q2uLkQ4OrAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxOEIyQ0FBNkQwRDUwQTk2Qjg1NTYwMUFDM0I5OUQ1 QkI5Q0ZGQTAeFw0yNTExMDQxMzQ0NThaFw0yNTExMDUxNDU0NThaMDMxMTAvBgNV BAMTKDY3RDIwMzRCQTRDOUE1RDJCQzczRkUwNTg3MDQ4OTJGQzM0REY0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKyY45sx6KKy/OxenaS94043Gu dTB2UUnpLCfTIyq3vVDCvYXFYkP5C0uto2Ct99mMvepddDOQBztdGSqW866ZigpF ou5JWjw0PZ+cEi3M+W0F8lTTUQc1XX5stBIUeOQruROWV0K7xxlMm9u5nDZg5q+f VWeU+7FW2TKIBAv9CeXxJGDjW1RLXzP/A13deg85XX1QtXzUQHgOT1kl7s/JrjvY LBWx5obHN/Z9yUWRVycUSXxvraaJXxxWqK6m/0+csqhV4Cxe+pTVoJHdg8b+zrs6 fsnvmliWQjGgghTIlU/sWXEBjzzO6gLgYv4jRSnqAyRUR+jWAk1mUqK4B4aLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZ9IDS6TJpdK8c/4FhwSJL8NN9KMwHwYDVR0j BBgwFoAUoBiyyqbQ1QqWuFVgGsO5nVu5z/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFFpeDRFZk5nYXBuWWtLM3V2cVlHREpQQ3Z1Vmd6WWhINnB4YVdKUHdX OFUvMC9BMDE4QjJDQUE2RDBENTBBOTZCODU1NjAxQUMzQjk5RDVCQjlDRkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwMThCMkNBQTZEMEQ1MEE5 NkI4NTU2MDFBQzNCOTlENUJCOUNGRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFFpeDRFZk5nYXBuWWtLM3V2cVlHREpQQ3Z1Vmd6WWhINnB4YVdKUHdXOFUvMC9B MDE4QjJDQUE2RDBENTBBOTZCODU1NjAxQUMzQjk5RDVCQjlDRkZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYY8tcr0sOdA1YTZ5oiJ1Mt+QR1+OWJUWm8PTbv5DQHItMCTS4y9uPgoV/nZD O/kIpIrFIV4VWswOvolMoa3YRpiEyVzo3L9d1ogu+quIHabEzrPlkwiXZtvq7goO s2EJl8LOovmebDvb8esKA6ymkR9JnGf3BeJ7DlhjBEKyeXJcdUkXOpCHVaGW+yw7 aoGxiDeIwkCYPxqLckKOIV+/CUdAnEuH3a2w1j/xL/V2nBIjOnjeYXS+VXoFQCyE FJh7QC7yf0VBmC1aTeTyE9KmpNr9LW3z9DCKQBQb+Tjs0Kf4ue4ftGQHNeA1kxC1 qsPoS0nZI0nQhva8I110AH6MjQ== -----END CERTIFICATE-----Generated at Wed Nov 5 02:00:08 2025 by rpki-client