$ rpki-client -vvf rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft File: B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft (raw, json) Hash identifier: G5GD409eOOhJlf9bezG98MM4Nl3tR/OJZSLv3jIA8BM= Subject key identifier: DE:4B:AF:86:F4:24:0F:76:60:91:40:3B:CC:65:AF:6C:DB:48:82:1E Authority key identifier: B6:29:AD:9F:55:FA:B6:BB:BF:BD:FF:EB:C0:5F:F5:6F:BC:A9:CC:94 Certificate issuer: /CN=B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94 Certificate serial: 250153F4445EAA613F22D1B40FF432D38549CF91 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.cer Subject info access: rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft Manifest number: 36 Signing time: Wed 05 Nov 2025 13:01:39 +0000 Manifest this update: Wed 05 Nov 2025 12:56:39 +0000 Manifest next update: Thu 06 Nov 2025 13:50:39 +0000 Files and hashes: 1: 34352e3138312e3138342e302f32322d3234203d3e20323639323030.roa (hash: MjgAbGBA3MLIQEbDOEqfgH94qhnYSyUXbioQpjVsW7I=) 2: B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.crl (hash: EesDK6qKpeGK2f7GZibRsp2AXJ3AKCHAQMWIs2dZyQA=) 3: 323830343a363065633a3a2f33322d3332203d3e20323639323030.roa (hash: n9rse3OoCQBo0ruAYtRVJWD4u89jY4UKuEhCcVoKoUM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.crl rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 13:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:01:53:f4:44:5e:aa:61:3f:22:d1:b4:0f:f4:32:d3:85:49:cf:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94 Validity Not Before: Nov 5 12:56:39 2025 GMT Not After : Nov 6 13:50:39 2025 GMT Subject: CN=DE4BAF86F4240F766091403BCC65AF6CDB48821E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:15:0e:50:5d:86:88:a4:81:a3:fe:5d:08:c4: 93:a0:ce:3b:f0:c1:dc:30:b2:2d:28:54:62:3e:fe: a9:a7:cc:6a:24:be:42:59:04:fc:64:b1:b4:b8:da: d7:7f:4b:c4:5c:1e:56:80:f9:3a:5f:ac:73:9d:3d: b3:8d:31:ef:1b:1b:b6:f9:01:1b:29:89:d4:24:04: 73:05:1c:a1:ad:58:c7:8b:e4:d6:f8:78:e1:56:41: c3:7b:fc:4c:7d:bb:83:b0:cc:90:e8:c0:df:fc:c9: 45:1d:46:23:02:eb:ad:7b:7e:60:dd:0e:96:24:d3: e8:fc:03:5d:64:a6:3b:a0:7f:7a:f9:54:86:39:60: 95:47:1d:b6:12:7c:39:54:2b:ee:66:5d:6b:f8:99: ce:2f:95:6b:bf:db:4a:58:9b:cc:fd:70:20:c5:df: c5:81:20:43:7b:9f:d7:ed:07:93:2f:a6:e0:96:cb: 99:5e:fa:20:14:d8:28:c5:f3:f9:15:70:0b:81:66: 6a:95:a5:78:f3:7d:11:09:9e:b8:a1:1d:c4:8c:41: 9a:46:e9:24:a2:44:56:a3:63:b9:eb:4e:2c:fd:11: 89:6e:00:f9:7b:19:d7:18:2f:a8:bb:1b:5b:1f:f8: cc:74:ee:12:33:bb:41:22:c2:83:9d:7a:dc:9c:0c: 9e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4B:AF:86:F4:24:0F:76:60:91:40:3B:CC:65:AF:6C:DB:48:82:1E X509v3 Authority Key Identifier: keyid:B6:29:AD:9F:55:FA:B6:BB:BF:BD:FF:EB:C0:5F:F5:6F:BC:A9:CC:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:77:0e:df:93:c2:7c:bb:9c:9f:05:ff:ea:d8:1b:4b:01:50: 57:e3:aa:82:e6:52:4d:78:21:24:e6:bc:9d:23:fc:9f:5a:aa: 36:db:ae:a9:7e:dd:d6:3f:49:de:fd:33:e4:14:c2:5d:e2:76: bf:bf:66:4b:86:94:4e:1c:19:d6:95:9c:df:c6:2b:2a:d6:b8: 98:16:90:42:7a:8f:02:59:ea:a2:41:de:84:b6:59:12:09:41: eb:f7:36:26:e0:50:5e:df:18:bb:22:38:ab:76:b0:ef:50:b7: 43:4d:43:ca:a4:fc:20:91:6b:4d:20:06:a2:8e:bd:3a:14:65: c0:86:a9:c5:4d:c4:29:95:fc:2f:35:28:f4:6a:bc:4b:28:a5: 32:39:06:17:2d:0d:f3:0f:62:07:11:89:0a:c0:70:94:eb:23: cf:0f:51:e4:22:20:64:ce:e0:c5:60:14:f1:b9:b8:35:b5:f6: 24:df:ce:ac:f5:01:28:7e:a6:97:ef:f7:e9:8f:a8:5b:fc:4a: b3:e5:b3:32:18:3a:f5:ba:11:45:88:e4:a8:2f:0b:ce:9a:b2: e2:0b:94:24:92:37:f9:0b:96:88:5f:7b:9f:c1:10:90:08:dc: c8:97:d1:b5:43:8d:f4:fb:07:cc:07:1c:f3:92:9e:5f:41:b0: cb:4a:cc:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJQFT9EReqmE/ItG0D/Qy04VJz5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyOUFEOUY1NUZBQjZCQkJGQkRGRkVCQzA1RkY1NkZC Q0E5Q0M5NDAeFw0yNTExMDUxMjU2MzlaFw0yNTExMDYxMzUwMzlaMDMxMTAvBgNV BAMTKERFNEJBRjg2RjQyNDBGNzY2MDkxNDAzQkNDNjVBRjZDREI0ODgyMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrFQ5QXYaIpIGj/l0IxJOgzjvw wdwwsi0oVGI+/qmnzGokvkJZBPxksbS42td/S8RcHlaA+TpfrHOdPbONMe8bG7b5 ARspidQkBHMFHKGtWMeL5Nb4eOFWQcN7/Ex9u4OwzJDowN/8yUUdRiMC6617fmDd DpYk0+j8A11kpjugf3r5VIY5YJVHHbYSfDlUK+5mXWv4mc4vlWu/20pYm8z9cCDF 38WBIEN7n9ftB5MvpuCWy5le+iAU2CjF8/kVcAuBZmqVpXjzfREJnrihHcSMQZpG 6SSiRFajY7nrTiz9EYluAPl7GdcYL6i7G1sf+Mx07hIzu0EiwoOdetycDJ5HAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3kuvhvQkD3ZgkUA7zGWvbNtIgh4wHwYDVR0j BBgwFoAUtimtn1X6tru/vf/rwF/1b7ypzJQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGtDYVkyOGg4ODZ4UXRXMUY0Y1hQMmhvdDVkaGF0dEhmdmVDdVNSdlNi QnEvMC9CNjI5QUQ5RjU1RkFCNkJCQkZCREZGRUJDMDVGRjU2RkJDQTlDQzk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2MjlBRDlGNTVGQUI2QkJC RkJERkZFQkMwNUZGNTZGQkNBOUNDOTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGtDYVkyOGg4ODZ4UXRXMUY0Y1hQMmhvdDVkaGF0dEhmdmVDdVNSdlNiQnEvMC9C NjI5QUQ5RjU1RkFCNkJCQkZCREZGRUJDMDVGRjU2RkJDQTlDQzk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzncO35PCfLucnwX/6tgbSwFQV+OqguZSTXghJOa8nSP8n1qqNtuuqX7d1j9J 3v0z5BTCXeJ2v79mS4aUThwZ1pWc38YrKta4mBaQQnqPAlnqokHehLZZEglB6/c2 JuBQXt8YuyI4q3aw71C3Q01DyqT8IJFrTSAGoo69OhRlwIapxU3EKZX8LzUo9Gq8 SyilMjkGFy0N8w9iBxGJCsBwlOsjzw9R5CIgZM7gxWAU8bm4NbX2JN/OrPUBKH6m l+/36Y+oW/xKs+WzMhg69boRRYjkqC8Lzpqy4guUJJI3+QuWiF97n8EQkAjcyJfR tUON9PsHzAcc85KeX0Gwy0rM3g== -----END CERTIFICATE-----Generated at Wed Nov 5 15:28:43 2025 by rpki-client