$ rpki-client -vvf rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft File: DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft (raw, json) Hash identifier: ECsW9NoS4v88Vhg++JVvAi93GAxS2WBwMw/S/1zj93o= Subject key identifier: A9:14:46:8B:56:F2:E3:69:CC:14:3E:CB:45:DE:17:CF:7D:F9:69:AA Authority key identifier: DA:A9:0F:AC:A0:DF:71:D2:7E:A4:00:93:7B:94:23:A3:BD:8F:05:BF Certificate issuer: /CN=DAA90FACA0DF71D27EA400937B9423A3BD8F05BF Certificate serial: 051E1B0B631706DF98610EB7F80CB8F4DC4E120E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer Subject info access: rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft Manifest number: 01F9 Signing time: Wed 05 Nov 2025 12:21:11 +0000 Manifest this update: Wed 05 Nov 2025 12:16:11 +0000 Manifest next update: Thu 06 Nov 2025 15:45:11 +0000 Files and hashes: 1: 323830343a336463633a3a2f33322d3438203d3e20323636353534.roa (hash: DW5oS1R955VazVvFo2R1EAEemFMcMD7OxbUjMQkgwCM=) 2: DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl (hash: 8cGYFeBrsiYkN5bRH81+ZzzaOh+oM2ykXDoh32UOD6s=) 3: 3136302e3233382e3137322e302f32322d3234203d3e20323636353534.roa (hash: tuN+EyMbBuM+4QcgMreh6GUCrLuRnxQ1/cjBpJyn3Bc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 15:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:1e:1b:0b:63:17:06:df:98:61:0e:b7:f8:0c:b8:f4:dc:4e:12:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DAA90FACA0DF71D27EA400937B9423A3BD8F05BF Validity Not Before: Nov 5 12:16:11 2025 GMT Not After : Nov 6 15:45:11 2025 GMT Subject: CN=A914468B56F2E369CC143ECB45DE17CF7DF969AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:07:db:0a:c4:7b:b1:bb:b6:af:e2:3e:c5: 72:44:36:16:49:6b:dd:c9:4d:fe:15:b2:55:06:56: 2f:8f:4f:8e:8d:c9:0c:48:54:a4:0a:33:d8:ca:4b: c3:f5:4f:8b:77:71:a9:e2:64:1f:66:38:8d:f3:73: a6:e6:fd:64:47:46:ae:8f:8f:32:26:dd:b5:5c:0d: 2b:c8:1e:45:74:ee:37:68:f5:50:1b:51:ab:08:f0: dc:3d:5f:6c:20:57:c3:1e:f5:11:86:9b:27:6f:d6: 92:42:65:75:fc:ab:50:77:06:e9:9e:fc:a1:a4:6f: c5:01:42:a6:9a:19:f9:e3:58:a4:b6:98:2e:dc:28: ac:ef:3c:cf:7b:d9:2b:5c:ef:fc:d6:a3:06:cc:e9: 4c:43:66:6b:54:56:16:ce:ca:20:3d:06:73:00:42: d3:77:56:9e:ab:47:2a:9d:74:ee:34:cd:e6:30:af: 74:04:eb:4d:d3:81:81:5c:26:cf:84:ca:3b:83:b8: 7a:3e:cd:0b:27:ed:a8:3d:02:07:b1:9b:bd:82:68: 15:46:c5:4d:7d:d9:38:db:ae:87:a1:ea:b7:44:e6: 02:36:1a:51:6f:ec:f0:d1:1c:22:14:4a:91:51:c9: f6:53:e7:de:40:4a:28:c3:e5:ac:a4:4c:f2:01:93: 49:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:14:46:8B:56:F2:E3:69:CC:14:3E:CB:45:DE:17:CF:7D:F9:69:AA X509v3 Authority Key Identifier: keyid:DA:A9:0F:AC:A0:DF:71:D2:7E:A4:00:93:7B:94:23:A3:BD:8F:05:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:0f:59:b0:6c:ec:72:48:0a:b6:b7:e5:b4:3a:03:f9:ac:48: e7:84:72:73:37:27:ea:ab:a5:91:76:26:d1:83:fb:86:cb:ca: d9:60:80:9c:fa:6f:69:13:31:de:4d:f7:85:bc:ee:d1:ad:81: 8c:b1:81:77:42:3b:4a:30:08:8a:17:ba:e8:80:60:55:47:50: c9:24:df:4d:91:cc:04:bc:d4:c0:d8:98:0c:d6:d4:76:76:81: 7b:13:7c:de:9a:6b:cd:83:82:af:27:10:14:ce:38:52:b5:24: 74:68:f2:d4:73:ce:4b:d1:2c:b0:05:cf:6b:58:c4:5e:a7:e6: 5e:75:10:bb:3d:c3:28:60:09:33:c1:6f:17:cb:57:f0:f1:46: 7e:e1:4b:7c:49:2c:c2:09:ed:8f:b8:d2:c8:4b:9e:bf:b8:6f: c9:8b:78:5d:f7:8a:5b:4b:92:72:49:08:0f:d3:0a:51:b3:d1: f0:c1:1f:71:5e:b7:fa:23:07:6b:9d:b1:7f:c9:59:c9:52:bc: 53:1b:1b:6f:12:cc:c3:3b:40:3e:3a:48:61:4d:6f:1b:d1:99: 74:4a:94:64:10:18:b0:67:e0:6b:76:3a:f8:d6:21:03:5e:57: e2:4e:38:bf:5c:92:c9:dc:44:9b:ef:d5:47:bc:aa:f1:02:32: 12:d3:9c:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBR4bC2MXBt+YYQ63+Ay49NxOEg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREFBOTBGQUNBMERGNzFEMjdFQTQwMDkzN0I5NDIzQTNC RDhGMDVCRjAeFw0yNTExMDUxMjE2MTFaFw0yNTExMDYxNTQ1MTFaMDMxMTAvBgNV BAMTKEE5MTQ0NjhCNTZGMkUzNjlDQzE0M0VDQjQ1REUxN0NGN0RGOTY5QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ggfbCsR7sbu2r+I+xXJENhZJ a93JTf4VslUGVi+PT46NyQxIVKQKM9jKS8P1T4t3caniZB9mOI3zc6bm/WRHRq6P jzIm3bVcDSvIHkV07jdo9VAbUasI8Nw9X2wgV8Me9RGGmydv1pJCZXX8q1B3Bume /KGkb8UBQqaaGfnjWKS2mC7cKKzvPM972Stc7/zWowbM6UxDZmtUVhbOyiA9BnMA QtN3Vp6rRyqddO40zeYwr3QE603TgYFcJs+EyjuDuHo+zQsn7ag9Agexm72CaBVG xU192Tjbroeh6rdE5gI2GlFv7PDRHCIUSpFRyfZT595ASijD5aykTPIBk0nlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqRRGi1by42nMFD7LRd4Xz335aaowHwYDVR0j BBgwFoAU2qkPrKDfcdJ+pACTe5Qjo72PBb8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk5kdUQxdWlYd29Nd2lzc2tBblBIRWpYOFJaMVFaZEJjQjVQM2JyaUF5 cWUvMC9EQUE5MEZBQ0EwREY3MUQyN0VBNDAwOTM3Qjk0MjNBM0JEOEYwNUJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBQTkwRkFDQTBERjcxRDI3 RUE0MDA5MzdCOTQyM0EzQkQ4RjA1QkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mk5kdUQxdWlYd29Nd2lzc2tBblBIRWpYOFJaMVFaZEJjQjVQM2JyaUF5cWUvMC9E QUE5MEZBQ0EwREY3MUQyN0VBNDAwOTM3Qjk0MjNBM0JEOEYwNUJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtg9ZsGzsckgKtrfltDoD+axI54Ryczcn6qulkXYm0YP7hsvK2WCAnPpvaRMx 3k33hbzu0a2BjLGBd0I7SjAIihe66IBgVUdQySTfTZHMBLzUwNiYDNbUdnaBexN8 3pprzYOCrycQFM44UrUkdGjy1HPOS9EssAXPa1jEXqfmXnUQuz3DKGAJM8FvF8tX 8PFGfuFLfEkswgntj7jSyEuev7hvyYt4XfeKW0uSckkID9MKUbPR8MEfcV63+iMH a52xf8lZyVK8UxsbbxLMwztAPjpIYU1vG9GZdEqUZBAYsGfga3Y6+NYhA15X4k44 v1ySydxEm+/VR7yq8QIyEtOcgw== -----END CERTIFICATE-----Generated at Wed Nov 5 17:55:15 2025 by rpki-client