$ rpki-client -vvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.mft File: DB9415C36A536191ABEEF23CD6A326417BD63F0F.mft (raw, json) Hash identifier: 75LvdLKl4zWgHkR6GbWr1ABVInq9hPklCwSuJi8+YPQ= Subject key identifier: 3D:42:83:A4:B7:B0:47:F8:D8:9C:9D:60:F1:B4:AD:F9:D4:AB:D0:DE Authority key identifier: DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F Certificate issuer: /CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F Certificate serial: 58F4F3308AC47C45AE9CEE687528DB2CA6F6F1F8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer Subject info access: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.mft Manifest number: CE Signing time: Wed 05 Nov 2025 06:31:37 +0000 Manifest this update: Wed 05 Nov 2025 06:26:37 +0000 Manifest next update: Thu 06 Nov 2025 09:43:37 +0000 Files and hashes: 1: DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl (hash: 20ZOnpZoSvPoQljCpWhTt719onhdlHiWY4AzCEZx51E=) 2: 3230312e37312e31362e302f32322d3234203d3e20323730323835.roa (hash: ksxJBrGNhebFWBTvZv7ZTM5qHDALGsZ9CYGjiIMG5r0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f4:f3:30:8a:c4:7c:45:ae:9c:ee:68:75:28:db:2c:a6:f6:f1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F Validity Not Before: Nov 5 06:26:37 2025 GMT Not After : Nov 6 09:43:37 2025 GMT Subject: CN=3D4283A4B7B047F8D89C9D60F1B4ADF9D4ABD0DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:87:02:91:14:8a:1f:31:cf:16:01:1c:07:eb: 2d:1a:96:78:f5:06:c3:eb:66:73:e3:35:7c:b5:0d: be:a2:23:96:3c:ba:39:cd:08:b2:ac:95:80:c3:4b: cd:02:ea:d2:13:39:18:f0:3c:ca:b8:61:08:c5:e3: 82:c6:cb:77:45:32:b2:26:f4:b4:c9:36:e3:72:b4: 85:4b:80:2e:20:84:60:d4:b7:54:50:ec:e2:e6:8d: 61:89:84:74:d1:c0:19:58:e6:b9:d5:49:cd:00:1b: c1:92:56:b2:04:9b:f0:b2:9d:8c:4e:cf:fa:96:6c: 64:23:22:a6:ca:52:28:c3:2e:b2:f0:25:a1:ad:2c: 71:20:0d:83:ce:6c:ed:1d:1e:46:c3:6b:0e:62:46: 54:13:fd:ca:2a:06:87:7d:e1:d9:e0:70:73:3a:6f: 22:db:6d:6c:bf:f9:0b:d8:ab:5a:f0:89:3f:85:40: a9:8f:0d:57:41:2d:53:e8:85:64:4b:cd:37:30:a4: f3:32:2d:91:9e:0d:28:42:7d:f1:9d:26:59:af:9e: 29:6a:25:d0:b1:fe:e0:c9:a6:e4:49:56:68:c5:50: f7:d7:d7:c3:22:bd:7d:82:bb:0c:cd:f6:a8:28:01: a4:9a:8e:fc:40:26:ee:26:37:28:d5:ef:94:45:b9: e2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:42:83:A4:B7:B0:47:F8:D8:9C:9D:60:F1:B4:AD:F9:D4:AB:D0:DE X509v3 Authority Key Identifier: keyid:DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:69:49:f0:3e:f5:40:0c:ec:4f:07:e3:ec:6e:37:18:6c:59: b7:ca:e7:d8:e7:de:02:ee:21:2a:19:bd:27:e7:f5:42:43:5e: 3e:c1:e5:db:7b:1c:fe:94:fd:a0:48:f8:7f:5e:90:f3:8b:48: e8:ff:c2:db:84:22:53:cc:85:3e:77:ff:1b:53:d4:68:3e:87: c5:ea:6e:b1:14:7a:10:18:b5:58:6d:21:f1:ff:c3:e6:4f:e0: 18:32:74:eb:14:e2:99:f2:7f:c6:75:3f:64:d2:2b:51:28:2e: c1:6f:3d:29:b5:c8:36:25:cb:ae:a8:59:c9:8c:f0:35:34:c5: 81:07:5f:c0:e8:1c:d2:a8:13:45:1d:31:1f:aa:2f:bf:2a:28: fd:8d:dd:d5:a7:77:68:2d:1f:44:61:1a:4c:fe:b4:a8:a1:c0: 8c:87:80:ac:36:01:cb:eb:48:77:ea:bc:36:a2:9a:f3:76:be: 4f:fd:56:82:66:03:0d:dd:07:c0:4d:b9:38:35:78:c0:e1:0a: f0:9a:07:0f:ac:7a:03:1d:a5:e7:e1:2f:80:a7:bd:77:ad:cc: 01:c3:a8:89:f2:64:f1:8d:0d:a4:bd:ef:e2:65:c2:cf:e8:51: be:0c:e1:dd:71:9a:b9:a1:bf:12:a9:7b:22:d5:06:61:85:14: d7:1d:33:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWPTzMIrEfEWunO5odSjbLKb28fgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5NDE1QzM2QTUzNjE5MUFCRUVGMjNDRDZBMzI2NDE3 QkQ2M0YwRjAeFw0yNTExMDUwNjI2MzdaFw0yNTExMDYwOTQzMzdaMDMxMTAvBgNV BAMTKDNENDI4M0E0QjdCMDQ3RjhEODlDOUQ2MEYxQjRBREY5RDRBQkQwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqhwKRFIofMc8WARwH6y0alnj1 BsPrZnPjNXy1Db6iI5Y8ujnNCLKslYDDS80C6tITORjwPMq4YQjF44LGy3dFMrIm 9LTJNuNytIVLgC4ghGDUt1RQ7OLmjWGJhHTRwBlY5rnVSc0AG8GSVrIEm/CynYxO z/qWbGQjIqbKUijDLrLwJaGtLHEgDYPObO0dHkbDaw5iRlQT/coqBod94dngcHM6 byLbbWy/+QvYq1rwiT+FQKmPDVdBLVPohWRLzTcwpPMyLZGeDShCffGdJlmvnilq JdCx/uDJpuRJVmjFUPfX18MivX2CuwzN9qgoAaSajvxAJu4mNyjV75RFueIBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPUKDpLewR/jYnJ1g8bSt+dSr0N4wHwYDVR0j BBgwFoAU25QVw2pTYZGr7vI81qMmQXvWPw8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGlGRTNrZ0ZNNTc3OUd2N1ZramY4NEpUeHZRVlBrcU5Za0xvQm5MQjh3 V1UvMC9EQjk0MTVDMzZBNTM2MTkxQUJFRUYyM0NENkEzMjY0MTdCRDYzRjBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCOTQxNUMzNkE1MzYxOTFB QkVFRjIzQ0Q2QTMyNjQxN0JENjNGMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGlGRTNrZ0ZNNTc3OUd2N1ZramY4NEpUeHZRVlBrcU5Za0xvQm5MQjh3V1UvMC9E Qjk0MTVDMzZBNTM2MTkxQUJFRUYyM0NENkEzMjY0MTdCRDYzRjBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB2lJ8D71QAzsTwfj7G43GGxZt8rn2OfeAu4hKhm9J+f1QkNePsHl23sc/pT9 oEj4f16Q84tI6P/C24QiU8yFPnf/G1PUaD6HxepusRR6EBi1WG0h8f/D5k/gGDJ0 6xTimfJ/xnU/ZNIrUSguwW89KbXINiXLrqhZyYzwNTTFgQdfwOgc0qgTRR0xH6ov vyoo/Y3d1ad3aC0fRGEaTP60qKHAjIeArDYBy+tId+q8NqKa83a+T/1WgmYDDd0H wE25ODV4wOEK8JoHD6x6Ax2l5+EvgKe9d63MAcOoifJk8Y0NpL3v4mXCz+hRvgzh 3XGauaG/Eql7ItUGYYUU1x0zlA== -----END CERTIFICATE-----Generated at Wed Nov 5 13:37:28 2025 by rpki-client