$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json) Hash identifier: XujpQrZGw1ELgVu+8hi/nZbFobdgaAqYNfVXBssmqzU= Subject key identifier: 51:B2:BD:68:BA:7E:32:48:78:78:64:0B:63:B0:D3:89:92:AB:1B:79 Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201 Certificate serial: 22E971DD185B2C0EB9479EF18E743695236FB302 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft Manifest number: 01DC Signing time: Tue 04 Nov 2025 17:36:21 +0000 Manifest this update: Tue 04 Nov 2025 17:31:21 +0000 Manifest next update: Wed 05 Nov 2025 21:23:21 +0000 Files and hashes: 1: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: YkHNFpiEdZRFqAPUekPsvykOpAqid54uYpVuA67yZjU=) 2: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: C0u1aT3LDMhL5SLNpfi4dKOK4v/xmo0BwWf2GUw/OvQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 21:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e9:71:dd:18:5b:2c:0e:b9:47:9e:f1:8e:74:36:95:23:6f:b3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201 Validity Not Before: Nov 4 17:31:21 2025 GMT Not After : Nov 5 21:23:21 2025 GMT Subject: CN=51B2BD68BA7E32487878640B63B0D38992AB1B79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4b:24:55:19:bf:82:f0:2e:c4:27:3f:05:7e: ea:2e:d9:a7:b3:4b:e5:7f:23:64:1a:12:7d:7d:66: 3d:b8:c2:ba:84:d1:32:6e:fc:5a:b3:bd:f0:a0:da: b5:1d:f5:ac:ce:d0:78:f5:bb:c0:85:2e:80:1a:25: d8:9b:0e:d8:38:79:ac:d1:8c:48:f3:85:79:b2:7a: 7f:8d:4d:bf:ae:f2:69:90:29:a2:49:1c:fa:78:7c: 93:79:fb:df:b7:95:ab:f2:21:4b:59:47:c1:2c:a3: 09:c5:0f:ea:19:58:40:4c:6f:da:2c:e9:86:63:5d: ff:53:3e:27:50:c0:1d:6e:b9:2d:7f:20:d9:65:cb: 27:5a:8e:bd:ae:8d:5d:de:84:81:ba:fc:cf:af:f6: dd:67:68:1d:2c:da:a8:eb:5d:8e:be:55:60:2a:91: 07:06:df:83:68:1e:a4:4a:8f:f5:e0:34:5c:2c:6e: 2e:f7:d3:7b:37:e1:10:65:b1:52:20:b7:2b:c3:31: 57:08:39:11:90:f4:d1:66:e8:f1:36:a2:49:5a:4d: 12:fa:be:c8:c4:22:0c:64:48:40:32:9f:8d:6b:b9: 75:f8:04:38:3b:26:66:15:fa:a8:aa:4a:d2:03:b6: c2:2b:d9:e1:a0:89:0d:02:23:bd:60:25:fc:47:9b: 37:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B2:BD:68:BA:7E:32:48:78:78:64:0B:63:B0:D3:89:92:AB:1B:79 X509v3 Authority Key Identifier: keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:26:29:f1:48:53:dc:15:ce:ad:56:1f:3e:bf:ed:b2:dc:5f: 9e:cf:bf:99:d7:89:8e:eb:6b:09:db:74:c4:76:18:3c:d9:8c: 04:34:13:3f:48:49:fa:f8:ea:be:8f:38:f9:ef:95:e7:b3:34: e5:72:23:d8:e1:f1:40:36:bf:bb:05:3a:e2:d4:23:5d:0d:0c: 01:3c:1e:b3:3e:27:d1:ce:2b:a7:02:88:fc:0e:d3:ec:18:8b: b1:a2:89:f5:9e:6f:50:6d:aa:ab:f9:22:6f:ba:f0:82:f6:30: 25:cf:9a:b0:75:9d:94:5d:f7:f0:26:ab:05:e6:28:15:fd:98: 52:95:a4:4d:3d:52:45:04:1f:c0:28:5c:20:13:80:fe:58:fd: 78:49:17:65:20:8b:15:bf:7b:9f:14:72:51:75:79:37:29:75: 3c:e5:51:9a:e0:e6:09:ab:fe:c9:d1:d7:f6:cd:63:d2:f7:f7: 24:d5:77:ab:27:9d:43:7d:04:2a:8f:62:9a:9c:ed:3d:2c:bb: 35:32:b5:d9:1a:a9:56:03:ac:ca:15:4a:55:29:95:1d:d7:e0: ee:1f:49:93:45:39:92:8f:0c:40:78:a3:9c:b1:b2:7e:c1:a9: 7c:83:d9:22:52:88:ca:44:81:2d:2e:1f:62:f5:7d:69:e3:4b: 6d:04:95:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIulx3RhbLA65R57xjnQ2lSNvswIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy NzBBOTIwMTAeFw0yNTExMDQxNzMxMjFaFw0yNTExMDUyMTIzMjFaMDMxMTAvBgNV BAMTKDUxQjJCRDY4QkE3RTMyNDg3ODc4NjQwQjYzQjBEMzg5OTJBQjFCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXSyRVGb+C8C7EJz8Ffuou2aez S+V/I2QaEn19Zj24wrqE0TJu/FqzvfCg2rUd9azO0Hj1u8CFLoAaJdibDtg4eazR jEjzhXmyen+NTb+u8mmQKaJJHPp4fJN5+9+3lavyIUtZR8EsownFD+oZWEBMb9os 6YZjXf9TPidQwB1uuS1/INllyydajr2ujV3ehIG6/M+v9t1naB0s2qjrXY6+VWAq kQcG34NoHqRKj/XgNFwsbi7303s34RBlsVIgtyvDMVcIORGQ9NFm6PE2oklaTRL6 vsjEIgxkSEAyn41ruXX4BDg7JmYV+qiqStIDtsIr2eGgiQ0CI71gJfxHmzfZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUbK9aLp+Mkh4eGQLY7DTiZKrG3kwHwYDVR0j BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1 OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkCYp8UhT3BXOrVYfPr/tstxfns+/mdeJjutrCdt0xHYYPNmMBDQTP0hJ+vjq vo84+e+V57M05XIj2OHxQDa/uwU64tQjXQ0MATwesz4n0c4rpwKI/A7T7BiLsaKJ 9Z5vUG2qq/kib7rwgvYwJc+asHWdlF338CarBeYoFf2YUpWkTT1SRQQfwChcIBOA /lj9eEkXZSCLFb97nxRyUXV5Nyl1POVRmuDmCav+ydHX9s1j0vf3JNV3qyedQ30E Ko9impztPSy7NTK12RqpVgOsyhVKVSmVHdfg7h9Jk0U5ko8MQHijnLGyfsGpfIPZ IlKIykSBLS4fYvV9aeNLbQSVqw== -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:22 2025 by rpki-client