$ rpki-client -vvf rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft File: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft (raw, json) Hash identifier: pgd8Q5FmvN6v69Qnoc8sEuCI406GzODip009OuFfXjo= Subject key identifier: DF:19:24:FC:F3:32:7D:54:A3:CC:14:D9:25:8D:DB:B8:00:1C:59:29 Authority key identifier: D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 Certificate issuer: /CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Certificate serial: 0F5B769D6B1209C89C60662CEE47D6C72C33191F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject info access: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft Manifest number: 0285 Signing time: Wed 05 Nov 2025 02:17:11 +0000 Manifest this update: Wed 05 Nov 2025 02:12:11 +0000 Manifest next update: Thu 06 Nov 2025 05:46:11 +0000 Files and hashes: 1: 323830343a336431383a3a2f33322d3438203d3e20323636323533.roa (hash: q5JF9UY+MTB4Mlfj2lWL8AvBvbFDkXWD3ksggtStp3k=) 2: 3139302e3132332e3139322e302f32322d3234203d3e20323636323533.roa (hash: lEGRwhg9phXl2q/TNnF7j2kv/C2pVxAJLq4sIptatEQ=) 3: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl (hash: 7Git/lmSZlSgLjTCT3gwi/dSlAdyDyab7/iS9T2Ww14=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:5b:76:9d:6b:12:09:c8:9c:60:66:2c:ee:47:d6:c7:2c:33:19:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Validity Not Before: Nov 5 02:12:11 2025 GMT Not After : Nov 6 05:46:11 2025 GMT Subject: CN=DF1924FCF3327D54A3CC14D9258DDBB8001C5929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:48:65:6c:a0:a5:8b:c2:b0:6f:7e:9d:cc:58: 56:cd:22:e2:e4:c2:86:27:7c:b3:10:81:7c:60:84: b5:64:32:a0:e9:bb:4a:e0:ab:a8:25:c3:52:54:7b: 8a:ef:a8:82:f0:be:e7:1f:95:98:5b:81:eb:39:8d: b3:d0:1f:58:df:d8:b5:b0:16:bd:80:2f:40:73:77: c9:0c:65:56:4e:de:b5:74:34:8d:ad:ce:f6:a0:a1: df:29:ea:0c:fd:78:f6:e9:a8:f9:58:5f:4a:6a:59: a4:51:d8:5e:9d:e0:52:6c:ea:a9:33:f9:e8:73:fe: 2a:2c:27:d7:8f:e1:7b:e2:81:cf:f4:22:b0:fc:5e: d4:b9:e8:e7:2e:de:a8:5a:c8:c6:26:08:14:44:7b: 51:d3:94:3c:87:c1:ea:71:1c:01:c4:28:7f:6a:6e: 7f:86:a2:45:7f:b9:e6:f0:85:e3:2d:90:e3:26:bb: 5f:14:72:cf:81:0b:4c:cf:97:0a:3c:e4:92:6e:55: 10:76:c9:bc:3a:83:d9:7c:c2:ee:66:af:d1:3a:96: ab:41:71:6d:cf:8f:3c:db:cd:dc:ad:42:c6:a6:43: 11:2b:0a:5c:fb:11:00:b3:4b:e0:24:6d:8b:15:9c: 9c:b4:93:f8:2a:00:d4:c4:c9:71:63:4d:90:72:9b: a9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:19:24:FC:F3:32:7D:54:A3:CC:14:D9:25:8D:DB:B8:00:1C:59:29 X509v3 Authority Key Identifier: keyid:D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:65:2d:fc:aa:05:31:b3:63:ef:f9:03:21:31:f5:9f:07:55: ec:b5:42:02:de:8d:27:81:3a:bb:1d:85:a1:f6:1d:a6:f4:03: c8:b1:f8:20:b5:a9:f3:5f:6e:ae:ed:a5:01:39:25:dd:ca:43: e4:72:ed:f9:94:1f:fb:2e:a2:7b:24:36:69:89:4b:dc:17:74: 8e:9a:92:a5:cd:a1:51:7a:dd:31:3e:3c:3e:29:2f:d4:32:21: 3f:99:7a:67:43:d5:71:c4:c4:7f:f6:7b:c8:15:ff:5b:cc:5d: a6:d9:13:e9:43:a2:53:2d:8f:cc:88:e6:f8:ef:ce:15:da:0a: 28:7b:fb:93:65:3e:36:7c:06:b7:78:98:52:28:6e:e6:12:62: 2c:0e:25:fd:30:d7:e9:a4:91:c0:89:f1:91:26:89:e1:1a:24: 96:86:44:47:8f:6d:c4:f6:f6:24:c1:97:6f:11:1b:26:48:66: 40:b2:57:67:bf:77:56:05:cc:ce:9c:8f:77:b5:c0:97:e3:cf: b5:08:b7:1d:92:10:48:68:dd:44:dd:de:b9:9a:6b:16:79:dd: b1:fb:8a:d0:90:60:a8:e1:17:76:df:6c:1f:a3:1d:98:b0:bc: ae:95:d1:6e:2b:c0:4a:94:b2:15:54:21:47:35:1f:a9:f2:01: 0a:d5:80:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD1t2nWsSCcicYGYs7kfWxywzGR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJCRTQwQzY2QTBCMEVGOTc0N0FDQzlEMkMzQTBGNDVC Q0JEODhEMDAeFw0yNTExMDUwMjEyMTFaFw0yNTExMDYwNTQ2MTFaMDMxMTAvBgNV BAMTKERGMTkyNEZDRjMzMjdENTRBM0NDMTREOTI1OEREQkI4MDAxQzU5MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPSGVsoKWLwrBvfp3MWFbNIuLk woYnfLMQgXxghLVkMqDpu0rgq6glw1JUe4rvqILwvucflZhbges5jbPQH1jf2LWw Fr2AL0Bzd8kMZVZO3rV0NI2tzvagod8p6gz9ePbpqPlYX0pqWaRR2F6d4FJs6qkz +ehz/iosJ9eP4Xvigc/0IrD8XtS56Ocu3qhayMYmCBREe1HTlDyHwepxHAHEKH9q bn+GokV/uebwheMtkOMmu18Ucs+BC0zPlwo85JJuVRB2ybw6g9l8wu5mr9E6lqtB cW3PjzzbzdytQsamQxErClz7EQCzS+AkbYsVnJy0k/gqANTEyXFjTZBym6nXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3xkk/PMyfVSjzBTZJY3buAAcWSkwHwYDVR0j BBgwFoAU0r5AxmoLDvl0esydLDoPRby9iNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5l NnIvMC9EMkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyQkU0MEM2NkEwQjBFRjk3 NDdBQ0M5RDJDM0EwRjQ1QkNCRDg4RDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5lNnIvMC9E MkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK2Ut/KoFMbNj7/kDITH1nwdV7LVCAt6NJ4E6ux2FofYdpvQDyLH4ILWp819u ru2lATkl3cpD5HLt+ZQf+y6ieyQ2aYlL3Bd0jpqSpc2hUXrdMT48Pikv1DIhP5l6 Z0PVccTEf/Z7yBX/W8xdptkT6UOiUy2PzIjm+O/OFdoKKHv7k2U+NnwGt3iYUihu 5hJiLA4l/TDX6aSRwInxkSaJ4RokloZER49txPb2JMGXbxEbJkhmQLJXZ793VgXM zpyPd7XAl+PPtQi3HZIQSGjdRN3euZprFnndsfuK0JBgqOEXdt9sH6MdmLC8rpXR bivASpSyFVQhRzUfqfIBCtWApw== -----END CERTIFICATE-----Generated at Wed Nov 5 05:17:07 2025 by rpki-client