$ rpki-client -vvf rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/60351DF380C4B3B45FA6563D20C3C596A13B0C50.mft File: 60351DF380C4B3B45FA6563D20C3C596A13B0C50.mft (raw, json) Hash identifier: NaM5p7gfa4VMT4pCs+IV9WXZR1lhX2X0GNVZqLKjxC4= Subject key identifier: 67:FD:5B:B4:66:2E:60:9C:84:B2:0F:22:48:A9:48:81:9C:A0:40:FB Authority key identifier: 60:35:1D:F3:80:C4:B3:B4:5F:A6:56:3D:20:C3:C5:96:A1:3B:0C:50 Certificate issuer: /CN=60351DF380C4B3B45FA6563D20C3C596A13B0C50 Certificate serial: 3737D424B4252678C9398546C38B44BA0E1D88F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60351DF380C4B3B45FA6563D20C3C596A13B0C50.cer Subject info access: rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/60351DF380C4B3B45FA6563D20C3C596A13B0C50.mft Manifest number: 02C3 Signing time: Wed 05 Nov 2025 04:06:36 +0000 Manifest this update: Wed 05 Nov 2025 04:01:36 +0000 Manifest next update: Thu 06 Nov 2025 05:41:36 +0000 Files and hashes: 1: 323830343a376130383a3a2f33322d3438203d3e20323731333433.roa (hash: Okek1xevNK45+es+TgaKdwxrGwW1nGDvvscpk7/pfuE=) 2: 3230302e33392e33362e302f32322d3234203d3e20323731333433.roa (hash: doMQpTD06PIxAEhZD2c20YSLE/X9WY308NbzmVoCr7A=) 3: 60351DF380C4B3B45FA6563D20C3C596A13B0C50.crl (hash: Sn1X2T5XIieCkxBClBnmXslwvVWncSHWSSE4OYuUaFU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/60351DF380C4B3B45FA6563D20C3C596A13B0C50.crl rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/60351DF380C4B3B45FA6563D20C3C596A13B0C50.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60351DF380C4B3B45FA6563D20C3C596A13B0C50.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 05:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:37:d4:24:b4:25:26:78:c9:39:85:46:c3:8b:44:ba:0e:1d:88:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60351DF380C4B3B45FA6563D20C3C596A13B0C50 Validity Not Before: Nov 5 04:01:36 2025 GMT Not After : Nov 6 05:41:36 2025 GMT Subject: CN=67FD5BB4662E609C84B20F2248A948819CA040FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f2:b9:d2:79:33:40:ff:28:2a:10:e0:4e:be: 3a:45:c4:63:d1:9c:21:64:8a:19:b4:b8:61:67:97: 8c:32:73:e0:ea:ae:5d:a2:60:16:ca:71:7a:4b:10: ce:06:7e:6c:6f:ea:34:7b:01:e9:8e:95:2d:45:8c: 54:c0:2e:b7:b6:8d:2e:90:2c:a6:b8:43:1e:65:60: 98:b4:35:22:63:9a:6f:07:a3:62:e0:3b:86:de:d8: ac:55:b4:64:18:91:33:a9:3c:14:3d:2c:13:07:b9: 45:60:ec:1b:93:31:43:0c:28:31:14:1d:e5:22:c3: 4b:41:ae:68:f8:2f:57:84:08:95:67:cb:0f:66:66: 7a:06:f7:9d:d4:cf:eb:50:67:d1:da:41:6d:68:26: d6:bf:35:b1:f6:98:7f:7e:f9:50:07:0b:d2:b2:a3: d1:8f:39:97:89:fa:8d:f8:c4:d8:21:16:9c:f7:4f: 2e:3c:cd:c2:59:77:a9:bc:da:ae:e0:65:40:e3:3b: d6:00:d0:8c:42:77:d9:3c:cd:40:92:ed:17:7a:e5: 25:f1:9b:62:72:3b:81:08:84:ec:59:85:49:02:ef: d6:a6:13:25:51:6c:9f:4e:6d:50:da:5c:6b:45:aa: 81:57:fa:cf:db:2b:2a:7f:d6:99:a7:10:36:a1:97: 7e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FD:5B:B4:66:2E:60:9C:84:B2:0F:22:48:A9:48:81:9C:A0:40:FB X509v3 Authority Key Identifier: keyid:60:35:1D:F3:80:C4:B3:B4:5F:A6:56:3D:20:C3:C5:96:A1:3B:0C:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/60351DF380C4B3B45FA6563D20C3C596A13B0C50.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60351DF380C4B3B45FA6563D20C3C596A13B0C50.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/60351DF380C4B3B45FA6563D20C3C596A13B0C50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f4:84:38:79:a7:65:da:c9:02:94:79:31:e3:85:bc:4e:69: 3c:6b:59:57:2a:26:7f:bb:02:ad:c1:9f:81:5b:69:03:5d:df: fe:6f:00:b2:ef:e7:75:ab:44:61:da:a9:55:81:db:77:87:90: a3:02:77:df:d9:0a:ad:ad:4a:2e:93:44:e0:10:02:d4:b7:09: 4b:7e:b3:9f:f2:44:7f:f8:30:1f:ee:c3:90:d0:58:9a:66:3d: 97:62:a8:2d:02:ba:f9:d3:7a:dd:e6:84:1f:68:47:ec:e3:15: 47:08:c6:0e:fb:7a:83:f6:21:7c:dd:f2:25:e3:d4:9c:c2:63: 3f:88:d0:e7:74:52:ed:f4:c5:37:97:7d:25:96:e4:14:e7:ce: f6:c0:d0:8a:5f:95:f0:b3:5c:c2:aa:84:ed:03:82:ce:cd:fa: 75:2b:53:90:4b:f9:7e:77:b2:97:e9:2e:fe:e2:16:ed:0e:0f: 14:e8:64:1f:48:04:3e:c4:9f:7e:aa:af:2b:98:9e:5c:21:f3: 1a:fd:ae:fd:bc:66:57:fe:3a:30:02:c7:eb:c9:f7:e0:06:7e: 66:d7:ed:ec:15:c4:3a:84:87:ca:f1:b5:80:4c:d4:f8:86:33: 3a:91:3a:12:86:20:5c:73:4c:c8:df:1d:8b:63:a0:86:89:2b: 96:02:46:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNzfUJLQlJnjJOYVGw4tEug4diPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAzNTFERjM4MEM0QjNCNDVGQTY1NjNEMjBDM0M1OTZB MTNCMEM1MDAeFw0yNTExMDUwNDAxMzZaFw0yNTExMDYwNTQxMzZaMDMxMTAvBgNV BAMTKDY3RkQ1QkI0NjYyRTYwOUM4NEIyMEYyMjQ4QTk0ODgxOUNBMDQwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR8rnSeTNA/ygqEOBOvjpFxGPR nCFkihm0uGFnl4wyc+Dqrl2iYBbKcXpLEM4Gfmxv6jR7AemOlS1FjFTALre2jS6Q LKa4Qx5lYJi0NSJjmm8Ho2LgO4be2KxVtGQYkTOpPBQ9LBMHuUVg7BuTMUMMKDEU HeUiw0tBrmj4L1eECJVnyw9mZnoG953Uz+tQZ9HaQW1oJta/NbH2mH9++VAHC9Ky o9GPOZeJ+o34xNghFpz3Ty48zcJZd6m82q7gZUDjO9YA0IxCd9k8zUCS7Rd65SXx m2JyO4EIhOxZhUkC79amEyVRbJ9ObVDaXGtFqoFX+s/bKyp/1pmnEDahl36vAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZ/1btGYuYJyEsg8iSKlIgZygQPswHwYDVR0j BBgwFoAUYDUd84DEs7RfplY9IMPFlqE7DFAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGVLOFBubldWeDk0aWRkbzNyYkZIakFQMkJvSnJWWU5oa0JURFhWbkE0 NUsvMi82MDM1MURGMzgwQzRCM0I0NUZBNjU2M0QyMEMzQzU5NkExM0IwQzUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMzUxREYzODBDNEIzQjQ1 RkE2NTYzRDIwQzNDNTk2QTEzQjBDNTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGVLOFBubldWeDk0aWRkbzNyYkZIakFQMkJvSnJWWU5oa0JURFhWbkE0NUsvMi82 MDM1MURGMzgwQzRCM0I0NUZBNjU2M0QyMEMzQzU5NkExM0IwQzUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOvSEOHmnZdrJApR5MeOFvE5pPGtZVyomf7sCrcGfgVtpA13f/m8Asu/ndatE YdqpVYHbd4eQowJ339kKra1KLpNE4BAC1LcJS36zn/JEf/gwH+7DkNBYmmY9l2Ko LQK6+dN63eaEH2hH7OMVRwjGDvt6g/YhfN3yJePUnMJjP4jQ53RS7fTFN5d9JZbk FOfO9sDQil+V8LNcwqqE7QOCzs36dStTkEv5fneyl+ku/uIW7Q4PFOhkH0gEPsSf fqqvK5ieXCHzGv2u/bxmV/46MALH68n34AZ+Ztft7BXEOoSHyvG1gEzU+IYzOpE6 EoYgXHNMyN8di2OghokrlgJGZQ== -----END CERTIFICATE-----Generated at Wed Nov 5 19:21:48 2025 by rpki-client