$ rpki-client -vvf rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft File: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft (raw, json) Hash identifier: zavrPzOhQzFZdjff5I51estWbuF8rzoSJf00h5oRJkc= Subject key identifier: B9:BA:7A:3B:BA:FF:45:6C:10:E1:42:66:45:63:BB:8C:F7:13:1E:F5 Authority key identifier: DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7 Certificate issuer: /CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7 Certificate serial: 52140BE6D2902CA0D4F385C4D78408DDF187EAFD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer Subject info access: rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft Manifest number: A2 Signing time: Wed 05 Nov 2025 02:30:02 +0000 Manifest this update: Wed 05 Nov 2025 02:25:02 +0000 Manifest next update: Thu 06 Nov 2025 05:17:02 +0000 Files and hashes: 1: 323830343a386532303a3a2f33322d313238203d3e20323733343034.roa (hash: +rQtNxAInELK5ARSncrEa6aoX0jAyBJS0K9vEo2MC/M=) 2: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl (hash: v6EorXqz/ra8h1fLu0o9SWH2WUCTyUhdnSnJ+NHmJbs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 05:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:14:0b:e6:d2:90:2c:a0:d4:f3:85:c4:d7:84:08:dd:f1:87:ea:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7 Validity Not Before: Nov 5 02:25:02 2025 GMT Not After : Nov 6 05:17:02 2025 GMT Subject: CN=B9BA7A3BBAFF456C10E142664563BB8CF7131EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:97:3a:dd:7e:70:0a:8e:75:86:82:da:24:4a: 50:45:5e:7d:ab:76:02:69:24:17:82:dd:0f:6a:62: 49:16:b7:4c:af:d9:27:0d:1e:c1:f5:63:7e:e4:98: 6e:3c:21:f5:69:ae:3a:2b:f7:62:b8:28:3d:57:ee: 3d:c3:91:d1:d4:08:53:16:e7:8e:7e:42:d2:54:f9: 71:9a:71:b6:6d:7f:7a:0e:e9:c3:7e:37:0b:53:b6: 77:55:c9:86:58:4b:54:66:5a:9a:7c:fe:70:3c:d3: 63:80:58:68:df:1c:d9:6b:23:f8:31:dd:86:e7:21: 53:8a:e1:3f:f0:a2:51:16:9b:ba:0f:64:b3:02:c4: b4:d0:64:3f:da:8f:a2:2e:78:94:d2:75:1e:cf:c4: 25:3c:e9:e9:fb:9c:b7:44:30:98:03:af:0f:cd:0a: d4:80:b1:c2:c0:3e:01:0a:3d:27:52:2c:49:4b:27: a8:3f:35:75:91:21:29:6f:f9:dd:3a:68:ac:a4:fa: 6b:78:f7:64:1d:77:ad:ba:9d:5e:e2:11:31:2f:82: ac:ba:7a:2d:1a:3b:e1:ac:79:c3:a4:56:bf:bc:96: c8:71:0b:f9:6b:be:b6:d1:8d:74:3f:ac:3f:85:5d: a6:53:5e:f4:2e:07:f8:95:af:0f:fb:8e:d8:00:81: 3d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BA:7A:3B:BA:FF:45:6C:10:E1:42:66:45:63:BB:8C:F7:13:1E:F5 X509v3 Authority Key Identifier: keyid:DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5a:38:00:e2:24:b7:e4:55:6a:1f:6c:4f:1d:04:00:27:40: fc:54:14:51:be:ea:68:d8:f4:b5:ca:90:77:5c:3b:7a:2d:b6: 32:f9:71:6e:d4:c4:a6:c0:ce:9c:1c:f4:07:08:18:f3:6a:43: 64:51:72:d5:8f:c4:c3:19:45:d6:ad:d8:8b:53:9f:02:da:6e: 60:b4:8c:fe:bf:36:53:c1:0e:f9:15:ba:98:55:3a:9d:15:08: d4:ec:78:ef:44:82:e9:3e:fb:2a:4f:f2:84:09:8e:23:2b:af: c6:4e:a0:38:77:d1:8a:d6:d5:7c:3e:c4:d0:8d:2e:e0:e8:d2: a2:3d:e5:71:df:5a:a6:67:1f:3d:98:31:d6:ff:2b:74:b5:0f: 11:52:83:a8:a8:a4:14:1c:1f:0f:b0:7f:ed:52:44:b2:1e:36: ba:49:f4:f1:a9:9d:ea:32:76:d8:a7:cc:1e:b2:14:0e:6b:4d: 38:d4:87:b6:35:de:f7:86:32:dc:8d:d0:c4:1c:a6:14:a8:82: 50:0b:6a:be:2f:5d:67:09:57:c9:ca:40:27:00:c2:f2:e2:ec: 40:ee:a1:b7:dc:13:9e:80:07:1c:c2:ba:cb:9b:94:a4:2a:3f: a5:63:17:3e:34:b8:96:4e:08:a7:db:4f:bf:8b:42:a6:d1:58: 00:ef:4a:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUhQL5tKQLKDU84XE14QI3fGH6v0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNEFGRTRDMzUyNTlFQTBFMEFCOTNBMzQwREYxMzlF ODZCOERCNzAeFw0yNTExMDUwMjI1MDJaFw0yNTExMDYwNTE3MDJaMDMxMTAvBgNV BAMTKEI5QkE3QTNCQkFGRjQ1NkMxMEUxNDI2NjQ1NjNCQjhDRjcxMzFFRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUlzrdfnAKjnWGgtokSlBFXn2r dgJpJBeC3Q9qYkkWt0yv2ScNHsH1Y37kmG48IfVprjor92K4KD1X7j3DkdHUCFMW 545+QtJU+XGacbZtf3oO6cN+NwtTtndVyYZYS1RmWpp8/nA802OAWGjfHNlrI/gx 3YbnIVOK4T/wolEWm7oPZLMCxLTQZD/aj6IueJTSdR7PxCU86en7nLdEMJgDrw/N CtSAscLAPgEKPSdSLElLJ6g/NXWRISlv+d06aKyk+mt492Qdd626nV7iETEvgqy6 ei0aO+GsecOkVr+8lshxC/lrvrbRjXQ/rD+FXaZTXvQuB/iVrw/7jtgAgT1dAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUubp6O7r/RWwQ4UJmRWO7jPcTHvUwHwYDVR0j BBgwFoAU3zSv5MNSWeoOCrk6NA3xOehrjbcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1R0VWJvMmVxcDhjR2F1VmtRQ1RpZkhRdWFlRTVWZlNpWXA0VHdYZVgx SjkvMC9ERjM0QUZFNEMzNTI1OUVBMEUwQUI5M0EzNDBERjEzOUU4NkI4REI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGMzRBRkU0QzM1MjU5RUEw RTBBQjkzQTM0MERGMTM5RTg2QjhEQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1R0VWJvMmVxcDhjR2F1VmtRQ1RpZkhRdWFlRTVWZlNpWXA0VHdYZVgxSjkvMC9E RjM0QUZFNEMzNTI1OUVBMEUwQUI5M0EzNDBERjEzOUU4NkI4REI3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAblo4AOIkt+RVah9sTx0EACdA/FQUUb7qaNj0tcqQd1w7ei22MvlxbtTEpsDO nBz0BwgY82pDZFFy1Y/EwxlF1q3Yi1OfAtpuYLSM/r82U8EO+RW6mFU6nRUI1Ox4 70SC6T77Kk/yhAmOIyuvxk6gOHfRitbVfD7E0I0u4OjSoj3lcd9apmcfPZgx1v8r dLUPEVKDqKikFBwfD7B/7VJEsh42ukn08amd6jJ22KfMHrIUDmtNONSHtjXe94Yy 3I3QxBymFKiCUAtqvi9dZwlXycpAJwDC8uLsQO6ht9wTnoAHHMK6y5uUpCo/pWMX PjS4lk4Ip9tPv4tCptFYAO9KQA== -----END CERTIFICATE-----Generated at Wed Nov 5 15:02:56 2025 by rpki-client