$ rpki-client -vvf rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft File: DD0CBBA83E82BACB16521E6328443385F92099E0.mft (raw, json) Hash identifier: kIFYrKufelJ9ybQ3YtVyUwt7/UrHPVCRgYe2x5pteeQ= Subject key identifier: C0:89:82:AE:61:9B:8C:33:8B:62:66:06:D9:01:E9:B4:58:3C:47:DC Authority key identifier: DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0 Certificate issuer: /CN=DD0CBBA83E82BACB16521E6328443385F92099E0 Certificate serial: 3A8C3E3EA6968B96F96C542F756042DB157624DE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft Manifest number: 0161 Signing time: Wed 05 Nov 2025 01:45:00 +0000 Manifest this update: Wed 05 Nov 2025 01:40:00 +0000 Manifest next update: Thu 06 Nov 2025 03:53:00 +0000 Files and hashes: 1: 3136302e31392e3234382e302f32322d3234203d3e20323636313732.roa (hash: Ca1pmAXz0FFwQDKx4al/0Enxv3kwvor9qxc1ErXA0kU=) 2: 323830343a336264303a3a2f33322d3332203d3e20323636313732.roa (hash: ARQtTGJn8ecRrryzPLbTrDMNnVh5iFR4d/qAnKHlnZ8=) 3: DD0CBBA83E82BACB16521E6328443385F92099E0.crl (hash: VROyqoC9ylpRBBbGpjdBjC1Z5kQP2+z/JZsSo1S/nuw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.crl rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:8c:3e:3e:a6:96:8b:96:f9:6c:54:2f:75:60:42:db:15:76:24:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD0CBBA83E82BACB16521E6328443385F92099E0 Validity Not Before: Nov 5 01:40:00 2025 GMT Not After : Nov 6 03:53:00 2025 GMT Subject: CN=C08982AE619B8C338B626606D901E9B4583C47DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:be:1e:17:0e:6d:c1:0e:9e:25:76:14:69:a0: 30:bd:87:60:b4:3c:aa:13:fc:b8:20:e0:f0:c5:42: a5:9a:0f:ef:c8:24:5f:38:0e:cc:21:5a:10:13:d0: 5c:1b:03:bb:83:f5:0a:16:ff:7e:c8:6f:e9:fd:43: c9:09:4b:5a:d7:19:77:f2:9f:32:c1:c4:ec:66:cc: 69:1e:85:54:6c:c0:0f:ee:38:fc:6f:19:fa:d1:cf: 65:41:19:e0:52:a2:b8:f6:f3:dd:82:84:8d:ed:45: 23:c6:2a:5f:2a:51:22:ea:f2:f3:3c:97:32:a0:33: 29:f2:2d:66:d3:47:16:13:a8:c7:17:88:b6:c0:4a: eb:37:f3:84:66:36:03:ad:ec:d2:54:f4:95:ff:0e: 62:da:5c:b0:53:36:be:dd:6a:0d:60:19:95:d0:ba: 3e:8c:e9:f2:26:58:ca:f2:bd:db:5b:c3:d9:4d:72: dc:74:9b:fa:57:7e:f1:26:a2:a7:5a:68:83:a5:cf: 2e:d9:ed:3c:a5:7a:ee:44:99:3d:e3:04:cc:40:1c: 70:0f:81:92:a7:2f:e6:14:b0:97:a0:38:b9:47:cb: 81:ce:99:e2:f4:bc:00:f0:57:ec:ec:6c:ce:9d:5b: 7e:14:3a:d8:8d:b3:ec:4e:c3:84:c9:8a:3b:82:40: 41:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:89:82:AE:61:9B:8C:33:8B:62:66:06:D9:01:E9:B4:58:3C:47:DC X509v3 Authority Key Identifier: keyid:DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d3:2f:ef:cc:f7:b3:b8:53:9b:e9:71:f9:de:16:55:ea:d1: b2:d6:b3:c8:02:5e:1f:c4:37:68:99:2c:81:51:36:b8:32:a5: 8d:a9:8b:79:1a:4f:c1:c4:3a:fe:c3:13:45:12:31:9f:16:92: 74:9b:ca:90:4e:ec:56:0b:9d:7e:26:13:6f:4b:16:cc:2d:c3: 57:77:17:77:c1:59:a2:69:98:d8:b9:1f:e8:b1:80:f8:43:7a: d1:99:12:1f:a6:ae:2b:91:3d:98:08:56:bf:76:28:ba:27:e3: 19:01:15:b9:a1:4c:02:8c:ae:1f:16:a8:d0:10:19:94:4e:33: ec:98:1a:af:30:b3:2a:ca:06:52:12:dd:ec:cf:7b:2d:77:c0: cb:0b:ef:f5:72:16:77:af:a7:ef:09:42:cc:49:2e:84:af:02: d8:e0:05:d3:1c:55:92:48:40:65:41:20:81:23:d9:93:08:00: 6b:5f:33:01:b0:4e:08:d0:6e:e5:e9:42:70:93:7d:6e:e6:58: a5:02:a8:dc:b4:fd:7f:30:98:48:0d:9f:77:a0:31:e3:16:93: d6:a3:ab:bb:19:66:79:79:e1:70:24:d1:bc:9a:d3:a5:50:87: c5:e2:a9:a4:56:3d:dc:23:1d:81:b4:25:60:20:f4:ae:3c:62: 25:4b:af:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOow+PqaWi5b5bFQvdWBC2xV2JN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQwQ0JCQTgzRTgyQkFDQjE2NTIxRTYzMjg0NDMzODVG OTIwOTlFMDAeFw0yNTExMDUwMTQwMDBaFw0yNTExMDYwMzUzMDBaMDMxMTAvBgNV BAMTKEMwODk4MkFFNjE5QjhDMzM4QjYyNjYwNkQ5MDFFOUI0NTgzQzQ3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOvh4XDm3BDp4ldhRpoDC9h2C0 PKoT/Lgg4PDFQqWaD+/IJF84DswhWhAT0FwbA7uD9QoW/37Ib+n9Q8kJS1rXGXfy nzLBxOxmzGkehVRswA/uOPxvGfrRz2VBGeBSorj2892ChI3tRSPGKl8qUSLq8vM8 lzKgMynyLWbTRxYTqMcXiLbASus384RmNgOt7NJU9JX/DmLaXLBTNr7dag1gGZXQ uj6M6fImWMryvdtbw9lNctx0m/pXfvEmoqdaaIOlzy7Z7Tyleu5EmT3jBMxAHHAP gZKnL+YUsJegOLlHy4HOmeL0vADwV+zsbM6dW34UOtiNs+xOw4TJijuCQEGBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwImCrmGbjDOLYmYG2QHptFg8R9wwHwYDVR0j BBgwFoAU3Qy7qD6CussWUh5jKEQzhfkgmeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM05MS3ZVY1J4Z1NHNWl1alVSd1hndGJnUHdpcmY1OTNmeERqOHl4eXM4 cDcvMC9ERDBDQkJBODNFODJCQUNCMTY1MjFFNjMyODQ0MzM4NUY5MjA5OUUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMENCQkE4M0U4MkJBQ0Ix NjUyMUU2MzI4NDQzMzg1RjkyMDk5RTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M05MS3ZVY1J4Z1NHNWl1alVSd1hndGJnUHdpcmY1OTNmeERqOHl4eXM4cDcvMC9E RDBDQkJBODNFODJCQUNCMTY1MjFFNjMyODQ0MzM4NUY5MjA5OUUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAadMv78z3s7hTm+lx+d4WVerRstazyAJeH8Q3aJksgVE2uDKljamLeRpPwcQ6 /sMTRRIxnxaSdJvKkE7sVgudfiYTb0sWzC3DV3cXd8FZommY2Lkf6LGA+EN60ZkS H6auK5E9mAhWv3YouifjGQEVuaFMAoyuHxao0BAZlE4z7JgarzCzKsoGUhLd7M97 LXfAywvv9XIWd6+n7wlCzEkuhK8C2OAF0xxVkkhAZUEggSPZkwgAa18zAbBOCNBu 5elCcJN9buZYpQKo3LT9fzCYSA2fd6Ax4xaT1qOruxlmeXnhcCTRvJrTpVCHxeKp pFY93CMdgbQlYCD0rjxiJUuvzA== -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:14 2025 by rpki-client