$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft File: DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft (raw, json) Hash identifier: w2b1nZjmVrKPl55k0AJ/vjpFFTKTp3mwaEVifAva4Zw= Subject key identifier: 98:7F:C3:4F:D5:E7:B5:F0:96:F5:BC:56:F0:19:CB:1A:BD:26:BD:71 Authority key identifier: DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70 Certificate issuer: /CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570 Certificate serial: 4D791011D634D5150C76E8D67314448F07B11C95 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer Subject info access: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft Manifest number: 02D3 Signing time: Wed 05 Nov 2025 03:34:12 +0000 Manifest this update: Wed 05 Nov 2025 03:29:12 +0000 Manifest next update: Thu 06 Nov 2025 07:02:12 +0000 Files and hashes: 1: 34352e3233362e32302e302f32322d3234203d3e20323638323232.roa (hash: FG1wug4MqyLJsAReVjvXRe7puwgFUXpXXwbr9j3w0ZI=) 2: DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl (hash: U6SzD7Ol/CxqUD6u29mYYp4sAOMkDyh2Xl77wa9XKrY=) 3: 323830343a346464343a3a2f33322d3438203d3e20323638323232.roa (hash: fv6ZnXxZ45ntnnbYQPrDO2OsehPsbW9FdZy/XuAwgL0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:79:10:11:d6:34:d5:15:0c:76:e8:d6:73:14:44:8f:07:b1:1c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570 Validity Not Before: Nov 5 03:29:12 2025 GMT Not After : Nov 6 07:02:12 2025 GMT Subject: CN=987FC34FD5E7B5F096F5BC56F019CB1ABD26BD71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:56:2b:a7:4e:ff:3e:e8:90:87:12:3b:38: 12:32:6c:15:fa:9e:aa:1b:9b:fc:46:16:93:c7:fd: 9a:47:bd:d2:fb:71:9c:3f:f4:3a:f1:1a:a5:a2:e2: 87:8e:53:e1:77:68:bf:a8:ee:e0:16:40:4d:3b:3d: 9d:d0:b3:01:07:6b:6f:5e:ad:9a:8c:2a:cb:9d:63: 0d:c5:9e:46:33:51:33:eb:fc:16:15:40:46:bf:10: 83:15:21:20:ec:b3:1b:9f:96:d3:17:a3:72:c4:86: eb:a5:d6:49:1f:64:d8:29:b6:de:11:36:ad:7b:51: 6d:82:cf:f6:1b:c1:36:be:96:1c:56:b1:ea:de:ad: fd:7c:97:f0:f1:72:ed:2a:a2:5b:6f:bf:4d:f3:5c: 03:e9:d7:ba:32:27:28:da:e9:69:e2:af:a9:f7:2a: 5d:7e:90:75:71:13:18:78:41:e8:f4:42:e8:2b:d8: 8a:29:d3:49:56:99:2e:ee:93:f7:bf:0f:06:b6:9c: 75:d1:4e:f5:b6:70:c8:30:b3:98:72:22:ef:f0:be: 54:85:a2:b5:ce:5b:c9:d0:a0:ef:5e:8c:11:af:f3: 32:f4:b6:d1:ea:88:07:84:e8:bf:83:d3:72:70:f4: 70:a9:aa:c2:18:55:4d:22:7a:0e:cc:73:28:93:80: db:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7F:C3:4F:D5:E7:B5:F0:96:F5:BC:56:F0:19:CB:1A:BD:26:BD:71 X509v3 Authority Key Identifier: keyid:DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9e:2b:e6:3a:17:ac:4c:86:5a:fc:c3:aa:e8:ea:f0:e8:ec: a4:6d:09:ab:e4:7b:76:02:ce:08:96:a1:30:b2:ad:03:c9:93: a3:e6:a8:82:cb:b2:36:da:03:6c:ad:60:83:2e:5f:63:bb:26: 59:0c:c8:1e:6a:70:ed:50:f2:c3:71:94:36:8e:26:49:77:58: ec:43:87:69:bd:3e:01:1d:71:67:88:e8:ca:93:2c:69:f4:6f: 6a:c5:d4:6d:c2:cf:33:09:1c:17:d0:ad:4e:af:d1:1e:e0:5c: 07:60:5c:34:0f:f9:89:3b:37:52:8a:ed:07:3d:e4:bb:97:87: 64:09:d0:ca:66:fe:a5:98:9b:d3:ea:06:05:bc:f4:01:f0:69: ea:df:a1:11:f4:ad:dd:6b:af:33:0d:93:87:b6:28:47:94:63: 3f:89:6d:8e:35:0f:5c:b0:63:e3:e6:f7:91:67:b5:39:c9:51: 8c:41:62:9e:38:c9:20:06:87:e9:3c:1c:d7:db:a2:18:68:7d: 1d:a4:ec:a2:fa:7b:82:fe:8c:d5:8f:7e:be:54:a4:5f:d9:81: bc:69:7a:d3:fd:6a:ad:e9:9b:03:89:4e:68:f7:04:5e:12:2b: 88:65:ba:60:50:81:83:b6:07:e0:b4:e8:00:31:3a:d5:37:0e: 35:8d:7d:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTXkQEdY01RUMdujWcxREjwexHJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBMUVDNEEwRTQ4QjVDMDlGQjc0NjMyN0YwNUY1MUVC NUY4RTU3MDAeFw0yNTExMDUwMzI5MTJaFw0yNTExMDYwNzAyMTJaMDMxMTAvBgNV BAMTKDk4N0ZDMzRGRDVFN0I1RjA5NkY1QkM1NkYwMTlDQjFBQkQyNkJENzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKH1Yrp07/PuiQhxI7OBIybBX6 nqobm/xGFpPH/ZpHvdL7cZw/9DrxGqWi4oeOU+F3aL+o7uAWQE07PZ3QswEHa29e rZqMKsudYw3FnkYzUTPr/BYVQEa/EIMVISDssxufltMXo3LEhuul1kkfZNgptt4R Nq17UW2Cz/YbwTa+lhxWsererf18l/Dxcu0qoltvv03zXAPp17oyJyja6Wnir6n3 Kl1+kHVxExh4Qej0Qugr2Iop00lWmS7uk/e/Dwa2nHXRTvW2cMgws5hyIu/wvlSF orXOW8nQoO9ejBGv8zL0ttHqiAeE6L+D03Jw9HCpqsIYVU0ieg7McyiTgNs5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmH/DT9XntfCW9bxW8BnLGr0mvXEwHwYDVR0j BBgwFoAU3aHsSg5ItcCft0YyfwX1HrX45XAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FSZE5ZZFQ3WERq UksvMC9EREExRUM0QTBFNDhCNUMwOUZCNzQ2MzI3RjA1RjUxRUI1RjhFNTcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REQTFFQzRBMEU0OEI1QzA5 RkI3NDYzMjdGMDVGNTFFQjVGOEU1NzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FSZE5ZZFQ3WERqUksvMC9E REExRUM0QTBFNDhCNUMwOUZCNzQ2MzI3RjA1RjUxRUI1RjhFNTcwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC54r5joXrEyGWvzDqujq8OjspG0Jq+R7dgLOCJahMLKtA8mTo+aogsuyNtoD bK1ggy5fY7smWQzIHmpw7VDyw3GUNo4mSXdY7EOHab0+AR1xZ4joypMsafRvasXU bcLPMwkcF9CtTq/RHuBcB2BcNA/5iTs3UortBz3ku5eHZAnQymb+pZib0+oGBbz0 AfBp6t+hEfSt3WuvMw2Th7YoR5RjP4ltjjUPXLBj4+b3kWe1OclRjEFinjjJIAaH 6Twc19uiGGh9HaTsovp7gv6M1Y9+vlSkX9mBvGl60/1qrembA4lOaPcEXhIriGW6 YFCBg7YH4LToADE61TcONY19yA== -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:58 2025 by rpki-client