$ rpki-client -vvf rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.mft File: 070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.mft (raw, json) Hash identifier: d6Rj5m8L3Gj0fROM8Zf8ewqXwNakIc3pJl+V8dw+Z1Q= Subject key identifier: 09:1A:FC:F9:6D:27:D6:C2:82:88:A6:B7:58:9E:15:A0:5D:54:D5:E6 Authority key identifier: 07:08:45:DA:CC:1D:F7:8A:B0:DB:0A:E9:1C:C8:CF:8F:64:FF:A0:38 Certificate issuer: /CN=070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038 Certificate serial: 235D326B0DDB3530D9CEB670ED77ED1834FA0E5D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.cer Subject info access: rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.mft Manifest number: 47 Signing time: Wed 05 Nov 2025 03:00:51 +0000 Manifest this update: Wed 05 Nov 2025 02:55:51 +0000 Manifest next update: Thu 06 Nov 2025 04:30:51 +0000 Files and hashes: 1: 34352e3137392e36382e302f32322d3332203d3e20323639313039.roa (hash: IyZcDTXDvP2kF3jftamqMhb06YANOArcauWrWN5LViw=) 2: 323830343a356639303a3a2f33322d313238203d3e20323639313039.roa (hash: gIHjJOToIbaIEN7HcuK340pC1HYXWvwb6Nzx/LOfIk8=) 3: 070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.crl (hash: ZgJlE5Pb/Qkq6mOY5Hq+6959aA3Lyp+1vrEeseJcL/c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.crl rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:5d:32:6b:0d:db:35:30:d9:ce:b6:70:ed:77:ed:18:34:fa:0e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038 Validity Not Before: Nov 5 02:55:51 2025 GMT Not After : Nov 6 04:30:51 2025 GMT Subject: CN=091AFCF96D27D6C28288A6B7589E15A05D54D5E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d1:55:ac:16:5b:5e:91:9c:aa:4b:8b:c3:e5: 21:bf:77:92:fe:cc:6b:af:cc:6e:f1:99:cf:a6:2d: 2f:de:0b:9f:3b:e8:37:a5:c4:89:80:bf:fd:29:49: b0:9e:99:5a:48:01:87:44:4b:0a:96:af:1c:63:f0: 0f:ce:5e:43:9c:ef:dd:7c:5d:b0:22:83:87:78:17: 0e:5a:a0:37:dc:35:a5:10:29:0b:18:c7:b8:4c:c3: 13:c3:9d:94:4f:a8:2c:c0:85:b4:31:cf:63:39:12: 20:44:01:90:8b:ff:b5:f5:bf:c4:b0:a5:1b:c4:27: 12:ff:cc:72:01:8c:2b:1e:d9:65:66:22:af:a0:51: 8a:63:35:60:6b:a1:1c:7f:2e:9d:be:4a:53:3f:77: bf:b9:2a:17:c7:49:5a:e7:4a:95:33:2f:80:1e:1f: ce:1c:6e:5c:f8:ca:cc:24:f9:df:eb:ec:1d:97:92: 75:01:bc:6a:5b:ee:e0:b9:87:42:b2:97:28:2b:45: 7d:79:d4:f7:3b:f7:9d:0e:9a:6a:e2:75:68:34:66: b3:68:a3:d7:b0:9e:3e:94:39:70:d1:24:74:fe:9b: 10:70:59:07:79:89:c7:7d:18:5a:32:70:a7:56:61: 88:9f:7e:4f:45:71:30:e3:83:4e:30:d9:95:aa:b3: 77:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1A:FC:F9:6D:27:D6:C2:82:88:A6:B7:58:9E:15:A0:5D:54:D5:E6 X509v3 Authority Key Identifier: keyid:07:08:45:DA:CC:1D:F7:8A:B0:DB:0A:E9:1C:C8:CF:8F:64:FF:A0:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ac:5d:2a:90:7b:be:17:be:24:54:7b:55:6c:33:4e:ef:d6: c1:77:d2:41:55:38:35:48:c7:81:b2:36:42:42:e1:03:bf:87: a4:6c:a1:83:e5:66:de:14:51:13:b2:ff:89:4e:c7:be:d5:1c: 25:31:e3:3f:f7:2f:46:67:a9:6a:61:84:7d:f8:3a:c6:77:9d: 45:0f:b8:e2:d9:4a:36:9a:a0:94:ed:f2:83:1b:47:e1:54:4e: 02:13:33:61:34:03:42:72:30:82:c7:86:5e:04:61:84:41:3b: 88:91:b6:f6:74:07:9f:01:e6:33:f0:3a:74:89:7a:0a:7c:f2: ee:ee:7c:4e:5a:b7:b8:fd:e9:80:4b:19:12:30:b6:7e:7b:4e: 9a:c3:57:dc:4e:18:93:4c:1a:5e:47:c4:38:5d:72:97:4b:13: a3:e8:c0:36:f1:c1:ed:71:e5:aa:e3:03:f1:3d:e9:ee:ce:1d: a4:bb:03:e9:2f:3e:d8:51:02:20:42:d7:93:23:87:fb:c3:8c: ae:89:f8:0d:98:54:22:66:ac:85:49:a4:59:57:a3:56:f4:cd: f4:69:c7:1f:2c:c3:b7:60:ec:5d:a1:f3:1b:5d:d3:dd:fe:0e: c0:2d:a1:d6:9d:ca:c2:ba:f4:17:06:51:1f:ed:58:e8:53:76: 91:92:6d:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI10yaw3bNTDZzrZw7XftGDT6Dl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwODQ1REFDQzFERjc4QUIwREIwQUU5MUNDOENGOEY2 NEZGQTAzODAeFw0yNTExMDUwMjU1NTFaFw0yNTExMDYwNDMwNTFaMDMxMTAvBgNV BAMTKDA5MUFGQ0Y5NkQyN0Q2QzI4Mjg4QTZCNzU4OUUxNUEwNUQ1NEQ1RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh0VWsFltekZyqS4vD5SG/d5L+ zGuvzG7xmc+mLS/eC5876DelxImAv/0pSbCemVpIAYdESwqWrxxj8A/OXkOc7918 XbAig4d4Fw5aoDfcNaUQKQsYx7hMwxPDnZRPqCzAhbQxz2M5EiBEAZCL/7X1v8Sw pRvEJxL/zHIBjCse2WVmIq+gUYpjNWBroRx/Lp2+SlM/d7+5KhfHSVrnSpUzL4Ae H84cblz4yswk+d/r7B2XknUBvGpb7uC5h0KylygrRX151Pc7950OmmridWg0ZrNo o9ewnj6UOXDRJHT+mxBwWQd5icd9GFoycKdWYYiffk9FcTDjg04w2ZWqs3ezAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCRr8+W0n1sKCiKa3WJ4VoF1U1eYwHwYDVR0j BBgwFoAUBwhF2swd94qw2wrpHMjPj2T/oDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREFYS1doNW11elZDZkFxUFRzYnRDTGpYYmlZZmU5ODFZVUVWejE3Rnox ZFQvMC8wNzA4NDVEQUNDMURGNzhBQjBEQjBBRTkxQ0M4Q0Y4RjY0RkZBMDM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA3MDg0NURBQ0MxREY3OEFC MERCMEFFOTFDQzhDRjhGNjRGRkEwMzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REFYS1doNW11elZDZkFxUFRzYnRDTGpYYmlZZmU5ODFZVUVWejE3RnoxZFQvMC8w NzA4NDVEQUNDMURGNzhBQjBEQjBBRTkxQ0M4Q0Y4RjY0RkZBMDM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFKxdKpB7vhe+JFR7VWwzTu/WwXfSQVU4NUjHgbI2QkLhA7+HpGyhg+Vm3hRR E7L/iU7HvtUcJTHjP/cvRmepamGEffg6xnedRQ+44tlKNpqglO3ygxtH4VROAhMz YTQDQnIwgseGXgRhhEE7iJG29nQHnwHmM/A6dIl6Cnzy7u58Tlq3uP3pgEsZEjC2 fntOmsNX3E4Yk0waXkfEOF1yl0sTo+jANvHB7XHlquMD8T3p7s4dpLsD6S8+2FEC IELXkyOH+8OMron4DZhUImashUmkWVejVvTN9GnHHyzDt2DsXaHzG13T3f4OwC2h 1p3Kwrr0FwZRH+1Y6FN2kZJtqQ== -----END CERTIFICATE-----Generated at Wed Nov 5 21:55:10 2025 by rpki-client