$ rpki-client -vvf rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft File: 0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft (raw, json) Hash identifier: rLJndaPxVYJhSxf0k5odxjTOmx1PzxqCTfrkfvJ8L2o= Subject key identifier: F0:14:64:2C:23:1C:0C:D3:50:21:7A:06:FC:BA:5A:96:7D:3C:B7:98 Authority key identifier: 0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15 Certificate issuer: /CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15 Certificate serial: 34E8361D07D4A617CF8070E78063AD7045C42DDC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer Subject info access: rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft Manifest number: 0162 Signing time: Tue 04 Nov 2025 15:06:58 +0000 Manifest this update: Tue 04 Nov 2025 15:01:58 +0000 Manifest next update: Wed 05 Nov 2025 15:33:58 +0000 Files and hashes: 1: 0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl (hash: 8NtpX/Y62aoPoucYwG4WtQmUTzOitucnZFZqvZWiTdM=) 2: 3137302e38312e34342e302f32322d3234203d3e203631383732.roa (hash: 3uUj0R6DlPY399C9yzaH3KMwAJiuFg6IDEJm6Flo7/I=) 3: 3137372e32322e3230382e302f32302d3234203d3e203631383732.roa (hash: Ff7NxA9f2NFen6Fa/2ff2j5YwONNZaeQShwc44r8Cz8=) 4: 323830343a316161303a3a2f33322d3438203d3e203631383732.roa (hash: zSptNN8DkmF10Nv+nlCLUTysqOi1fB0W3pY01wsysuw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 15:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e8:36:1d:07:d4:a6:17:cf:80:70:e7:80:63:ad:70:45:c4:2d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15 Validity Not Before: Nov 4 15:01:58 2025 GMT Not After : Nov 5 15:33:58 2025 GMT Subject: CN=F014642C231C0CD350217A06FCBA5A967D3CB798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:8f:de:1a:e2:67:a4:6c:0e:c6:de:d2:88: cc:d2:51:c6:0b:a0:1a:1d:b2:7b:b3:c8:9c:ae:69: c9:2f:01:4a:c2:5d:5c:ed:a5:88:a7:40:7b:99:03: ae:2d:0f:91:b0:e8:50:a6:2c:c6:81:93:df:bc:ef: 62:fd:8c:10:63:5d:73:fb:99:ae:55:79:73:09:1d: 6a:1c:ce:02:15:d8:f2:20:89:19:1d:65:1d:58:5b: 1b:96:9f:26:7a:0a:51:65:9a:04:22:9d:98:f5:4a: 85:b5:6b:44:1e:dc:a3:81:84:dd:30:8a:f7:dd:62: ad:4d:21:fe:dc:13:37:fa:e4:3f:1e:0a:c7:f8:95: f0:1f:cf:c7:46:ee:f4:ec:f6:30:7a:c7:19:9c:a1: 0d:61:60:0e:c9:1a:3e:61:ee:2d:dd:94:ed:f1:32: 9e:aa:66:17:17:d9:c8:e7:65:4f:8e:fd:4c:9c:3b: 82:12:56:c5:76:68:4f:f4:7a:6e:cc:39:43:75:3a: fb:e1:60:40:45:8e:a8:99:5e:86:cb:e7:c4:1e:16: 0a:6c:93:0d:f9:e2:44:ce:d1:82:e8:2a:7d:35:1d: 58:a0:94:7e:22:fa:57:f6:0d:d8:cd:3b:44:56:24: 52:f1:41:4e:c5:67:92:26:cb:ee:af:1b:39:cf:92: a2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:14:64:2C:23:1C:0C:D3:50:21:7A:06:FC:BA:5A:96:7D:3C:B7:98 X509v3 Authority Key Identifier: keyid:0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:cd:35:c3:ca:97:ae:30:82:ea:16:af:36:8c:64:17:01:ef: f1:7c:ed:ca:78:d7:7a:0e:0b:83:f6:f7:78:2e:e9:0f:35:56: 3d:b4:3d:95:21:95:2f:4a:2b:e4:f8:c7:36:d3:c5:32:2a:51: 80:7c:4f:32:c6:cf:56:57:68:26:ec:84:f4:c4:e4:be:82:41: ce:69:9a:0c:17:88:11:50:dc:92:76:40:2d:b4:81:d3:01:30: 1a:fb:fb:a4:72:65:0c:a8:c1:3a:d2:c6:3b:51:3c:3a:53:c2: f2:7f:bf:0a:c9:72:60:1b:7b:e2:63:96:c6:4a:94:e0:1a:b7: 17:71:2e:00:96:92:56:77:4d:a6:7f:7a:2a:bb:a3:27:27:ff: e4:9c:ab:d3:e8:56:8f:b1:13:45:a7:77:47:0a:ea:8a:92:67: 22:eb:16:b4:ff:92:d7:14:54:27:55:1a:ee:1f:d1:52:ef:c7: 76:d4:b1:95:4b:76:b4:8e:a5:65:b7:64:8c:a0:d2:9f:04:bc: 45:c1:1c:a5:f0:b0:26:3b:29:da:f7:b8:98:aa:fa:a4:b3:2a: 62:59:b0:47:26:98:58:56:a0:ae:df:20:71:f1:2f:59:f9:12: 02:7f:50:c8:db:51:44:9d:e3:56:3e:e9:f9:9c:34:38:c3:85: 7c:f0:48:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNOg2HQfUphfPgHDngGOtcEXELdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEREMTFENEZGOERBRDlBNTY0OUM4RjEzNTNENDE0QkJF RkI3QkMxNTAeFw0yNTExMDQxNTAxNThaFw0yNTExMDUxNTMzNThaMDMxMTAvBgNV BAMTKEYwMTQ2NDJDMjMxQzBDRDM1MDIxN0EwNkZDQkE1QTk2N0QzQ0I3OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6PY/eGuJnpGwOxt7SiMzSUcYL oBodsnuzyJyuackvAUrCXVztpYinQHuZA64tD5Gw6FCmLMaBk9+872L9jBBjXXP7 ma5VeXMJHWoczgIV2PIgiRkdZR1YWxuWnyZ6ClFlmgQinZj1SoW1a0Qe3KOBhN0w ivfdYq1NIf7cEzf65D8eCsf4lfAfz8dG7vTs9jB6xxmcoQ1hYA7JGj5h7i3dlO3x Mp6qZhcX2cjnZU+O/UycO4ISVsV2aE/0em7MOUN1OvvhYEBFjqiZXobL58QeFgps kw354kTO0YLoKn01HViglH4i+lf2DdjNO0RWJFLxQU7FZ5Imy+6vGznPkqIrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8BRkLCMcDNNQIXoG/Lpaln08t5gwHwYDVR0j BBgwFoAUDdEdT/ja2aVknI8TU9QUu++3vBUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2pXWmVTNXJta0dyN211bUNtcmtXTDZBQkVZYXQ1c1A1TjhzS0VEV0ND cUYvMC8wREQxMUQ0RkY4REFEOUE1NjQ5QzhGMTM1M0Q0MTRCQkVGQjdCQzE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBERDExRDRGRjhEQUQ5QTU2 NDlDOEYxMzUzRDQxNEJCRUZCN0JDMTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2pXWmVTNXJta0dyN211bUNtcmtXTDZBQkVZYXQ1c1A1TjhzS0VEV0NDcUYvMC8w REQxMUQ0RkY4REFEOUE1NjQ5QzhGMTM1M0Q0MTRCQkVGQjdCQzE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcc01w8qXrjCC6havNoxkFwHv8XztynjXeg4Lg/b3eC7pDzVWPbQ9lSGVL0or 5PjHNtPFMipRgHxPMsbPVldoJuyE9MTkvoJBzmmaDBeIEVDcknZALbSB0wEwGvv7 pHJlDKjBOtLGO1E8OlPC8n+/CslyYBt74mOWxkqU4Bq3F3EuAJaSVndNpn96Kruj Jyf/5Jyr0+hWj7ETRad3RwrqipJnIusWtP+S1xRUJ1Ua7h/RUu/HdtSxlUt2tI6l ZbdkjKDSnwS8RcEcpfCwJjsp2ve4mKr6pLMqYlmwRyaYWFagrt8gcfEvWfkSAn9Q yNtRRJ3jVj7p+Zw0OMOFfPBIug== -----END CERTIFICATE-----Generated at Wed Nov 5 02:46:43 2025 by rpki-client