$ rpki-client -vvf rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft File: DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft (raw, json) Hash identifier: yxjm/SNnkV2vATdvKbl7VpT7hKe8AGkLBA2EwchvPOk= Subject key identifier: F0:C4:8E:E0:9A:DC:04:79:CD:44:0B:8C:F3:85:26:69:BD:52:3B:3D Authority key identifier: DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F Certificate issuer: /CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F Certificate serial: 6034AC906EA95ADAF5228D36F388395B5F89C9AA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer Subject info access: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft Manifest number: 0302 Signing time: Tue 04 Nov 2025 17:10:00 +0000 Manifest this update: Tue 04 Nov 2025 17:05:00 +0000 Manifest next update: Wed 05 Nov 2025 19:45:00 +0000 Files and hashes: 1: 323830343a376335343a3a2f33322d3438203d3e20323731343839.roa (hash: pqL3pcOsDBWog4FTkOFYD2egq3espsDeFjP7vuhGzY8=) 2: 3138312e3233322e3230302e302f32322d3234203d3e20323731343839.roa (hash: 4cOfXyVHYsJDDR76i7+rDrxZZ+9x01vqjfGMjszNxxs=) 3: DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl (hash: 00tFWjFvdixWyYpWGQmpI22p9NwhIDUBRFAajnGHdOM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:34:ac:90:6e:a9:5a:da:f5:22:8d:36:f3:88:39:5b:5f:89:c9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F Validity Not Before: Nov 4 17:05:00 2025 GMT Not After : Nov 5 19:45:00 2025 GMT Subject: CN=F0C48EE09ADC0479CD440B8CF3852669BD523B3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:d0:d0:77:89:1e:b7:5b:05:08:c0:0f:ee: e8:f7:e4:96:2f:9b:84:bc:c5:07:5d:f1:dd:fe:b3: 3f:29:a5:28:6a:57:ef:91:66:52:69:51:67:22:66: 22:ce:54:e9:30:38:24:15:bb:19:f5:25:75:57:6f: 65:21:b3:da:8b:71:cf:79:d1:3c:af:90:66:f7:93: 18:a7:6e:4b:29:66:e4:5c:da:8f:ab:34:a4:53:0c: c3:2e:35:25:f8:7c:ae:51:64:f1:b3:d2:2a:34:ae: fb:95:5a:a7:18:7a:86:3d:82:82:08:be:9a:a5:62: 34:99:cf:ea:09:0b:0d:cf:39:94:24:49:39:4d:a4: be:a9:e0:a7:f3:30:e8:5d:4a:9d:79:45:0a:f7:e3: 04:86:59:e4:68:27:0d:7c:a4:04:1b:cd:55:bb:06: d7:d2:c9:bd:35:01:82:64:0c:ae:39:c4:8f:4e:46: 60:9c:a4:cd:be:1c:88:5f:16:45:06:53:d5:3f:cc: 07:f2:cf:0a:d8:ff:da:38:68:08:46:8c:af:67:6f: 26:f6:c0:7f:b9:89:97:a3:4d:d3:d6:9b:32:f6:76: 84:2e:d3:b1:49:87:e1:ab:8a:03:bc:4a:cb:d6:3d: 1c:93:b3:68:05:ac:84:3f:35:08:50:44:33:e8:64: 42:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C4:8E:E0:9A:DC:04:79:CD:44:0B:8C:F3:85:26:69:BD:52:3B:3D X509v3 Authority Key Identifier: keyid:DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:01:36:36:40:93:0a:97:00:45:34:db:86:cb:8c:05:eb:e7: 60:5e:fd:82:0e:01:e1:e9:13:0f:d9:e7:88:4c:77:7b:b5:72: 1a:06:0f:5b:ea:aa:3d:e5:c2:0a:b8:c7:51:a2:bd:86:f4:c9: 73:c8:59:0e:79:9e:3d:50:26:76:60:a2:f9:5d:e8:0e:fa:aa: b6:2d:96:9f:f2:5b:f0:19:73:ee:d3:a2:79:fe:5a:f1:83:5f: 5a:8b:d3:b5:92:02:3b:19:1e:c4:7f:56:8b:a5:02:ea:80:50: 8c:c3:d3:54:99:4d:39:63:87:4e:07:63:18:5f:9a:cf:1b:1c: 75:d7:01:b8:ca:70:55:ee:7d:aa:ae:1c:41:58:d2:a8:b9:1f: 66:f1:08:8f:fa:be:65:5c:af:08:85:6a:20:a9:d9:c4:e7:93: 66:f2:20:a3:3c:0b:8a:40:09:53:80:eb:d7:db:2e:41:d5:4f: ff:f3:c4:cf:8d:18:1c:ce:16:cd:46:ef:5c:8c:7a:ee:be:08: 0e:a3:79:1e:7b:e9:5f:2e:4c:41:04:90:c3:76:37:c5:b5:f5: c8:e8:e5:cc:76:73:ad:1d:70:2b:37:c8:3a:66:ea:89:3e:0d: 96:61:26:17:df:b1:66:d2:cb:d7:8f:90:9d:17:7e:db:5e:8e: 32:2a:a2:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYDSskG6pWtr1Io0284g5W1+JyaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENEN0ExQURENERFQkQyM0IxQzVGQUQ1RTYwQkMyNjlE MkFEMTAwRjAeFw0yNTExMDQxNzA1MDBaFw0yNTExMDUxOTQ1MDBaMDMxMTAvBgNV BAMTKEYwQzQ4RUUwOUFEQzA0NzlDRDQ0MEI4Q0YzODUyNjY5QkQ1MjNCM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC239DQd4ket1sFCMAP7uj35JYv m4S8xQdd8d3+sz8ppShqV++RZlJpUWciZiLOVOkwOCQVuxn1JXVXb2Uhs9qLcc95 0TyvkGb3kxinbkspZuRc2o+rNKRTDMMuNSX4fK5RZPGz0io0rvuVWqcYeoY9goII vpqlYjSZz+oJCw3POZQkSTlNpL6p4KfzMOhdSp15RQr34wSGWeRoJw18pAQbzVW7 BtfSyb01AYJkDK45xI9ORmCcpM2+HIhfFkUGU9U/zAfyzwrY/9o4aAhGjK9nbyb2 wH+5iZejTdPWmzL2doQu07FJh+GrigO8SsvWPRyTs2gFrIQ/NQhQRDPoZEJ/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8MSO4JrcBHnNRAuM84Umab1SOz0wHwYDVR0j BBgwFoAU3NehrdTevSOxxfrV5gvCadKtEA8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3NIa0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJu dlovMS9EQ0Q3QTFBREQ0REVCRDIzQjFDNUZBRDVFNjBCQzI2OUQyQUQxMDBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRDdBMUFERDRERUJEMjNC MUM1RkFENUU2MEJDMjY5RDJBRDEwMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3NIa0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJudlovMS9E Q0Q3QTFBREQ0REVCRDIzQjFDNUZBRDVFNjBCQzI2OUQyQUQxMDBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIgE2NkCTCpcARTTbhsuMBevnYF79gg4B4ekTD9nniEx3e7VyGgYPW+qqPeXC CrjHUaK9hvTJc8hZDnmePVAmdmCi+V3oDvqqti2Wn/Jb8Blz7tOief5a8YNfWovT tZICOxkexH9Wi6UC6oBQjMPTVJlNOWOHTgdjGF+azxscddcBuMpwVe59qq4cQVjS qLkfZvEIj/q+ZVyvCIVqIKnZxOeTZvIgozwLikAJU4Dr19suQdVP//PEz40YHM4W zUbvXIx67r4IDqN5HnvpXy5MQQSQw3Y3xbX1yOjlzHZzrR1wKzfIOmbqiT4NlmEm F9+xZtLL14+QnRd+216OMiqiiA== -----END CERTIFICATE-----Generated at Wed Nov 5 11:44:30 2025 by rpki-client