$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft File: DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft (raw, json) Hash identifier: QZH1x4OXwIDEtXMHxUn5XbEe7reyIWcpMUzNrKWwG6A= Subject key identifier: 23:01:FA:6A:BD:20:65:AA:D3:BF:24:3C:66:FB:5E:71:86:E4:93:36 Authority key identifier: DA:2C:3B:25:72:C3:BC:A9:22:5E:87:2B:77:D7:EB:EC:51:E4:A0:1A Certificate issuer: /CN=DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A Certificate serial: 69EB3B08A74DFB8C1A7FBE7CBF4321D62FF4DBF4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer Subject info access: rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft Manifest number: 33 Signing time: Tue 04 Nov 2025 19:11:21 +0000 Manifest this update: Tue 04 Nov 2025 19:06:21 +0000 Manifest next update: Wed 05 Nov 2025 21:14:21 +0000 Files and hashes: 1: 323830343a373737383a3a2f33322d3332203d3e20323731313830.roa (hash: afCsZwiPB5N2fDqRaLCKFhpsL0Zx4SiwNNU+IFHfbU8=) 2: 3230302e302e36342e302f32342d3234203d3e20323731313830.roa (hash: rtgPsjEvrft8zzHlyyMigdsHOXzeRbr5m37PyhBdAbE=) 3: 323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa (hash: 78gnsip7r3qOi/EZ5Pk33H7zC5HcnHgzJbHz8JD3Mxs=) 4: 3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa (hash: ntZ1ArAYp3sb9ElbA2pbCEeKkjRFsWYf3g7xNVHvk/0=) 5: DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.crl (hash: STsnPUljzEB+KubmGcH8vfsfmNQMeBsYbiPgY2TtoyI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.crl rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 21:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:eb:3b:08:a7:4d:fb:8c:1a:7f:be:7c:bf:43:21:d6:2f:f4:db:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A Validity Not Before: Nov 4 19:06:21 2025 GMT Not After : Nov 5 21:14:21 2025 GMT Subject: CN=2301FA6ABD2065AAD3BF243C66FB5E7186E49336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:1b:3c:58:71:24:f7:77:a5:20:86:d0:82: ae:f7:e0:24:18:78:eb:9c:70:63:50:33:25:bd:02: c7:9e:17:c7:34:3a:a4:87:2f:73:76:09:0f:cb:71: 85:3a:3f:0e:a4:2a:2b:81:b0:9e:a8:70:ee:2a:b8: 42:f1:9f:ff:3a:c6:6e:55:5e:a1:81:f4:8e:37:ef: 5b:6b:18:a5:11:e5:30:4c:4e:bd:ce:6f:cf:d4:d1: 6a:18:6f:11:f8:1d:d8:75:9f:4c:d5:24:93:c7:e7: 53:52:c2:07:0e:63:85:23:64:bb:03:f2:e3:15:2a: d4:ca:8a:31:c6:e7:6b:f9:67:4b:91:83:d3:c0:f6: f1:60:b2:9d:3c:6a:46:e8:9c:4e:84:b1:3c:ed:e6: 4b:47:a5:7e:e6:4c:b1:1f:3d:70:d0:e9:04:d6:b1: 9e:49:88:29:a2:77:93:23:68:fe:0b:d5:ba:b6:d4: 91:cc:13:a2:f5:76:a8:d5:f2:2f:a4:b7:e2:df:76: b4:90:4a:76:17:c9:26:72:2a:0e:87:12:e8:e4:eb: af:19:e5:ca:76:d9:e4:9f:23:4c:6d:d9:72:29:e0: d4:ee:b7:2b:8f:52:5d:fb:df:bf:ad:63:d2:c3:9a: 9b:81:6a:60:2b:3a:7d:6c:07:6a:02:6a:c5:9a:52: a0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:01:FA:6A:BD:20:65:AA:D3:BF:24:3C:66:FB:5E:71:86:E4:93:36 X509v3 Authority Key Identifier: keyid:DA:2C:3B:25:72:C3:BC:A9:22:5E:87:2B:77:D7:EB:EC:51:E4:A0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:59:6e:2b:c3:3a:31:a9:64:b1:ed:01:94:d9:a2:9e:43:e1: 48:85:7a:41:eb:d1:6f:fd:ea:0d:56:cb:e4:76:ff:cf:f1:7c: af:b1:e0:3e:65:1d:d4:9d:26:eb:a7:9b:9f:5a:58:c7:20:2a: d2:18:ab:c8:d8:9f:1c:55:7f:c1:f6:7f:84:33:70:a7:98:a4: 1d:7c:58:bd:22:0a:b6:ad:e1:71:35:b7:1e:68:94:6e:51:33: 35:a9:96:66:34:29:d6:01:d9:1a:dd:e6:01:71:db:5e:03:00: 54:67:f2:99:45:4c:87:a4:97:7a:05:02:3a:8f:87:75:e6:03: e3:19:84:4c:aa:c9:a9:79:e2:1c:ba:0e:9e:90:08:ce:b6:c0: 96:33:bf:07:d3:de:28:ab:2b:15:dc:c3:a3:09:78:d9:9b:18: 2c:b8:b4:15:00:1d:5a:10:79:83:9d:d2:9b:bb:d8:0a:d1:2a: d9:87:b2:0a:f8:cd:51:be:f8:22:1f:89:99:f8:36:b3:91:ad: 04:66:24:1d:d2:9c:38:15:b3:86:79:8b:c7:f2:b7:56:d2:07: a1:46:53:0b:c5:fe:c3:c6:b2:94:45:14:2e:ae:52:8c:02:75: 04:27:b9:c3:b6:bc:db:4f:89:03:b0:46:b0:31:0e:6b:6b:6c: 46:76:03:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaes7CKdN+4waf758v0Mh1i/02/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEyQzNCMjU3MkMzQkNBOTIyNUU4NzJCNzdEN0VCRUM1 MUU0QTAxQTAeFw0yNTExMDQxOTA2MjFaFw0yNTExMDUyMTE0MjFaMDMxMTAvBgNV BAMTKDIzMDFGQTZBQkQyMDY1QUFEM0JGMjQzQzY2RkI1RTcxODZFNDkzMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHxs8WHEk93elIIbQgq734CQY eOuccGNQMyW9AseeF8c0OqSHL3N2CQ/LcYU6Pw6kKiuBsJ6ocO4quELxn/86xm5V XqGB9I4371trGKUR5TBMTr3Ob8/U0WoYbxH4Hdh1n0zVJJPH51NSwgcOY4UjZLsD 8uMVKtTKijHG52v5Z0uRg9PA9vFgsp08akbonE6EsTzt5ktHpX7mTLEfPXDQ6QTW sZ5JiCmid5MjaP4L1bq21JHME6L1dqjV8i+kt+LfdrSQSnYXySZyKg6HEujk668Z 5cp22eSfI0xt2XIp4NTutyuPUl3737+tY9LDmpuBamArOn1sB2oCasWaUqB5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIwH6ar0gZarTvyQ8ZvtecYbkkzYwHwYDVR0j BBgwFoAU2iw7JXLDvKkiXocrd9fr7FHkoBowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEhkS3UxNzNpV2NOeXM1WWljTXlGNlI1S2tqVHduVlJrOFJkTXN5amhG WW8vMC9EQTJDM0IyNTcyQzNCQ0E5MjI1RTg3MkI3N0Q3RUJFQzUxRTRBMDFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBMkMzQjI1NzJDM0JDQTky MjVFODcyQjc3RDdFQkVDNTFFNEEwMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEhkS3UxNzNpV2NOeXM1WWljTXlGNlI1S2tqVHduVlJrOFJkTXN5amhGWW8vMC9E QTJDM0IyNTcyQzNCQ0E5MjI1RTg3MkI3N0Q3RUJFQzUxRTRBMDFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh1luK8M6Malkse0BlNminkPhSIV6QevRb/3qDVbL5Hb/z/F8r7HgPmUd1J0m 66ebn1pYxyAq0hiryNifHFV/wfZ/hDNwp5ikHXxYvSIKtq3hcTW3HmiUblEzNamW ZjQp1gHZGt3mAXHbXgMAVGfymUVMh6SXegUCOo+HdeYD4xmETKrJqXniHLoOnpAI zrbAljO/B9PeKKsrFdzDowl42ZsYLLi0FQAdWhB5g53Sm7vYCtEq2YeyCvjNUb74 Ih+Jmfg2s5GtBGYkHdKcOBWzhnmLx/K3VtIHoUZTC8X+w8aylEUULq5SjAJ1BCe5 w7a820+JA7BGsDEOa2tsRnYDdA== -----END CERTIFICATE-----Generated at Wed Nov 5 04:59:40 2025 by rpki-client