$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft File: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft (raw, json) Hash identifier: uMlW+qU8iW4oJ/iW4Reyg3NhcdS6Z9A+mS136lMIV38= Subject key identifier: 86:13:9D:D5:EA:AD:7C:B2:21:DF:BB:22:1A:93:DB:12:15:E5:56:CC Authority key identifier: DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3 Certificate issuer: /CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3 Certificate serial: 409E881412356FBB771F5FEE6CF447FC39586C0D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer Subject info access: rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft Manifest number: 0303 Signing time: Tue 04 Nov 2025 20:14:53 +0000 Manifest this update: Tue 04 Nov 2025 20:09:53 +0000 Manifest next update: Wed 05 Nov 2025 22:28:53 +0000 Files and hashes: 1: 34352e3138312e3139362e302f32322d3234203d3e20323639313937.roa (hash: Col+LRGc/1lk9nvkTe3TytJA4agsIFfCWd9IIiNQBxI=) 2: 323830343a363065303a3a2f33322d3336203d3e20323639313937.roa (hash: D5Kh1u0vUQX58zC8K3kTptsTZXCjTHtVrMtIC/ORziw=) 3: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl (hash: 3h0gdgUi2g7ttYPfQ/q0TKsP0aNdwGCgo9A1vq8V0qY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:9e:88:14:12:35:6f:bb:77:1f:5f:ee:6c:f4:47:fc:39:58:6c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3 Validity Not Before: Nov 4 20:09:53 2025 GMT Not After : Nov 5 22:28:53 2025 GMT Subject: CN=86139DD5EAAD7CB221DFBB221A93DB1215E556CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:46:aa:9c:6f:90:74:ff:f3:d5:a0:d2:9c: 17:6f:37:e2:31:db:51:de:7c:86:77:85:d2:c9:b0: e7:b6:1d:d5:d6:15:51:87:a2:42:91:d3:8b:5d:a8: 91:de:51:32:11:45:7f:69:71:41:00:a6:64:98:c0: e1:dd:c3:05:31:af:e5:ba:2b:9c:e7:c9:c1:b8:7c: 72:f5:8d:49:08:a7:06:83:3e:7d:c3:24:24:6d:fe: 6d:1d:04:76:5f:d4:64:a9:df:c1:88:e7:31:c2:78: 42:89:2e:c9:ee:60:ef:9a:c7:b7:70:fc:fd:98:a0: d7:21:42:3b:23:4a:56:9b:f7:e6:06:6e:bd:14:5f: 5a:11:5f:54:18:26:44:82:67:e1:6c:8a:f8:00:6a: ff:5b:4a:0d:23:f6:d1:ab:e2:01:82:67:d0:a6:2e: b4:67:1f:8d:ff:a4:01:37:1e:63:5a:b4:27:dc:72: 78:81:69:55:22:48:b5:11:8f:65:e2:de:a7:34:c2: 78:8e:5f:f4:e5:d3:e6:4a:02:71:22:13:46:fd:d5: f1:09:0d:a4:1c:5f:f3:b5:78:0d:6f:a7:46:91:b0: 91:68:e2:f0:32:c9:e7:24:65:aa:fd:f5:15:fd:00: e5:97:00:c1:ea:0d:d3:07:2e:06:04:ae:45:d2:ae: 69:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:13:9D:D5:EA:AD:7C:B2:21:DF:BB:22:1A:93:DB:12:15:E5:56:CC X509v3 Authority Key Identifier: keyid:DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d4:07:6a:c3:c5:d5:0c:f8:ca:09:c3:8b:bb:70:1e:b2:15: 84:e9:c4:fc:63:db:3f:1f:2d:f8:15:80:5d:b4:0e:c9:0a:6d: c1:be:7c:93:d0:bc:a5:53:f7:40:93:8c:03:be:c5:fc:a1:95: 78:73:75:d3:f0:9e:76:af:a4:1b:08:65:8e:89:fe:00:66:7b: 1c:d7:98:a9:f5:3b:50:82:51:4e:e9:a8:ca:0d:34:9c:90:d4: 65:25:54:75:67:fb:a3:90:ed:91:ac:54:4d:cd:5d:08:a0:73: cc:0c:0b:0b:e0:15:a1:28:eb:8e:d4:d2:e7:9a:7c:59:64:87: 16:2f:e9:ca:9f:0a:d6:28:d8:1a:3f:38:c6:7a:32:1a:3c:5f: 59:0d:d8:7f:23:cf:06:14:38:f5:1c:f4:5f:01:e1:8a:0a:6a: e5:73:e1:3c:a6:bf:f2:c8:95:79:24:fc:3b:23:7c:70:6f:d0: 86:95:a2:90:d8:96:00:8b:01:96:c5:3d:c1:b8:2f:be:00:25: 20:3f:74:1d:92:4f:ab:a5:81:44:c3:05:13:11:bc:3e:c3:8d: 55:a6:fa:50:38:41:12:dc:7b:83:0d:a1:1a:98:46:41:ef:a9: 56:cd:5a:40:40:38:79:22:73:73:c0:10:5c:64:0a:5a:fd:57: fb:25:16:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQJ6IFBI1b7t3H1/ubPRH/DlYbA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY1MkNDOTBGQ0QyQzM4MzI4NDA2NDNBOUU1NTdERTg1 QjBGNTlEMzAeFw0yNTExMDQyMDA5NTNaFw0yNTExMDUyMjI4NTNaMDMxMTAvBgNV BAMTKDg2MTM5REQ1RUFBRDdDQjIyMURGQkIyMjFBOTNEQjEyMTVFNTU2Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+0aqnG+QdP/z1aDSnBdvN+Ix 21HefIZ3hdLJsOe2HdXWFVGHokKR04tdqJHeUTIRRX9pcUEApmSYwOHdwwUxr+W6 K5znycG4fHL1jUkIpwaDPn3DJCRt/m0dBHZf1GSp38GI5zHCeEKJLsnuYO+ax7dw /P2YoNchQjsjSlab9+YGbr0UX1oRX1QYJkSCZ+FsivgAav9bSg0j9tGr4gGCZ9Cm LrRnH43/pAE3HmNatCfccniBaVUiSLURj2Xi3qc0wniOX/Tl0+ZKAnEiE0b91fEJ DaQcX/O1eA1vp0aRsJFo4vAyyeckZar99RX9AOWXAMHqDdMHLgYErkXSrmnvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhhOd1eqtfLIh37siGpPbEhXlVswwHwYDVR0j BBgwFoAU31LMkPzSw4MoQGQ6nlV96FsPWdMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlZLa1RaZktpTEZvclVNaFlSSnlHYm5ZcEV4RjRrRDVBUVpoaTh1N1Na dUQvMS9ERjUyQ0M5MEZDRDJDMzgzMjg0MDY0M0E5RTU1N0RFODVCMEY1OUQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGNTJDQzkwRkNEMkMzODMy ODQwNjQzQTlFNTU3REU4NUIwRjU5RDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlZLa1RaZktpTEZvclVNaFlSSnlHYm5ZcEV4RjRrRDVBUVpoaTh1N1NadUQvMS9E RjUyQ0M5MEZDRDJDMzgzMjg0MDY0M0E5RTU1N0RFODVCMEY1OUQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd9QHasPF1Qz4ygnDi7twHrIVhOnE/GPbPx8t+BWAXbQOyQptwb58k9C8pVP3 QJOMA77F/KGVeHN10/Cedq+kGwhljon+AGZ7HNeYqfU7UIJRTumoyg00nJDUZSVU dWf7o5DtkaxUTc1dCKBzzAwLC+AVoSjrjtTS55p8WWSHFi/pyp8K1ijYGj84xnoy GjxfWQ3YfyPPBhQ49Rz0XwHhigpq5XPhPKa/8siVeST8OyN8cG/QhpWikNiWAIsB lsU9wbgvvgAlID90HZJPq6WBRMMFExG8PsONVab6UDhBEtx7gw2hGphGQe+pVs1a QEA4eSJzc8AQXGQKWv1X+yUWZg== -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:35 2025 by rpki-client