$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft File: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft (raw, json) Hash identifier: CT1l51KS7mcwV0aCVgowPWOhb8kkOrlcUgaWZ9Jzohk= Subject key identifier: 94:32:37:B8:42:46:58:B2:E6:81:70:A9:85:9E:88:2B:39:C3:EA:56 Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3 Certificate issuer: /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3 Certificate serial: 0A38AEC8A3BA079691DE7297E9755686862ABB75 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft Manifest number: 012A Signing time: Tue 04 Nov 2025 23:27:00 +0000 Manifest this update: Tue 04 Nov 2025 23:22:00 +0000 Manifest next update: Thu 06 Nov 2025 00:21:00 +0000 Files and hashes: 1: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl (hash: Y0zdx7D5IziYm/d/qBAxwd9CPzWBwaYU9WhiMIcV/WU=) 2: 3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa (hash: EO9/XY1ow03W8t7vGcP2Wy5W1TvFO2XAT86ZvjriNVc=) 3: 3137302e38332e3231322e302f32322d3332203d3e20323633343832.roa (hash: VRf7c1AilMDa5MAED8IvmErGMZeCvn1CKEsBPS+2gS8=) 4: 3138392e38342e34342e302f32322d3332203d3e20323633343832.roa (hash: O4kifbSkitu5/3Knp4MgghSalt5nO6zrru13mWlDmc4=) 5: 323830343a313238383a3a2f33322d313238203d3e20323633343832.roa (hash: hw5+VUcxGrU/e1Wu8H1AwOj1HjLcJDx9TuqRoRLdwuM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:38:ae:c8:a3:ba:07:96:91:de:72:97:e9:75:56:86:86:2a:bb:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3 Validity Not Before: Nov 4 23:22:00 2025 GMT Not After : Nov 6 00:21:00 2025 GMT Subject: CN=943237B8424658B2E68170A9859E882B39C3EA56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:da:10:2c:30:34:eb:0f:90:aa:c9:00:68:5a: 1e:c1:80:84:b7:c3:05:85:aa:a9:97:4a:eb:1b:3f: cc:38:0b:07:f0:e6:46:8d:ef:5e:8e:dc:1e:3d:37: 92:a8:0e:6b:bb:79:12:d3:21:74:5c:ac:c0:2f:4b: 14:9b:a9:d8:60:5a:8d:f4:f4:f0:d7:ed:68:27:c4: 1f:91:e2:f2:ca:58:67:8a:17:59:58:8f:2e:36:30: 3e:7f:c2:4b:67:39:ec:05:cb:41:d4:5d:44:24:f4: a6:0d:ab:74:2a:24:8f:72:63:d5:b9:2c:8a:85:db: 79:e4:29:67:e4:9a:4b:6a:1c:a2:97:6a:ad:3e:c8: 9e:0e:75:ac:75:8e:c3:c5:69:59:70:7d:c4:8f:71: 64:75:04:d3:03:43:69:1e:3a:9e:93:ed:2d:6c:bf: 22:f4:63:7f:62:83:84:c3:ef:8f:4a:af:1f:4e:a1: 97:3d:7c:a4:00:81:1b:2b:32:db:e2:e6:ff:78:1b: 27:07:0b:42:1e:25:c5:90:b6:4c:a8:bb:76:5d:27: 65:42:6f:e7:38:55:69:27:c5:74:0d:70:14:16:c1: d5:a4:34:8e:56:ec:91:cf:a5:99:c7:09:f0:f3:2c: 87:ac:4e:fa:8b:16:2c:7b:25:57:fe:3a:dd:2a:96: e7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:32:37:B8:42:46:58:B2:E6:81:70:A9:85:9E:88:2B:39:C3:EA:56 X509v3 Authority Key Identifier: keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ed:06:1a:8d:83:a0:dc:ca:87:86:9d:ec:31:cf:33:89:a8: 50:44:58:32:f1:69:c8:b6:24:5f:46:bd:79:77:36:02:c5:1d: aa:3f:4b:49:bd:fe:9d:94:fe:6c:ae:ed:91:eb:44:75:b5:73: 88:af:77:bd:a0:b3:1b:7e:4d:90:3c:c4:07:27:68:00:fd:21: 99:66:f1:81:11:56:33:26:43:97:51:80:7d:d1:28:6c:24:62: 51:64:5d:f1:42:d8:bf:1b:86:3f:5e:91:2a:d1:97:b5:0d:33: d3:d4:25:a7:36:95:bc:64:29:74:09:12:92:ba:ac:ee:e3:86: 01:eb:57:d5:7c:1b:e8:2a:e6:b1:20:9d:a2:12:05:46:30:c1: a9:99:ff:5d:53:22:73:1a:d2:a7:74:50:3f:e3:fc:1d:1d:e1: 2b:cf:7c:b0:e9:27:88:fe:99:28:5b:9f:ae:a6:1a:a2:22:10: e4:ed:57:a0:aa:a4:62:a1:78:75:1c:ba:a8:f1:51:84:ee:2a: 58:86:bb:c9:c3:ac:3d:46:ca:e5:06:45:b9:e5:7f:69:2a:bf: 12:61:71:92:a9:5c:0c:b5:b3:99:67:67:79:96:78:6e:56:47: 75:2f:5c:b3:91:b5:c3:52:80:42:0d:1f:91:f3:23:3c:fd:e6: 93:72:9b:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCjiuyKO6B5aR3nKX6XVWhoYqu3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBEQkQzQTBCNTREMTlFMTM1QkE1M0IzMUM0NTg4NDJD ODlENDlGMzAeFw0yNTExMDQyMzIyMDBaFw0yNTExMDYwMDIxMDBaMDMxMTAvBgNV BAMTKDk0MzIzN0I4NDI0NjU4QjJFNjgxNzBBOTg1OUU4ODJCMzlDM0VBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2hAsMDTrD5CqyQBoWh7BgIS3 wwWFqqmXSusbP8w4Cwfw5kaN716O3B49N5KoDmu7eRLTIXRcrMAvSxSbqdhgWo30 9PDX7WgnxB+R4vLKWGeKF1lYjy42MD5/wktnOewFy0HUXUQk9KYNq3QqJI9yY9W5 LIqF23nkKWfkmktqHKKXaq0+yJ4Odax1jsPFaVlwfcSPcWR1BNMDQ2keOp6T7S1s vyL0Y39ig4TD749Krx9OoZc9fKQAgRsrMtvi5v94GycHC0IeJcWQtkyou3ZdJ2VC b+c4VWknxXQNcBQWwdWkNI5W7JHPpZnHCfDzLIesTvqLFix7JVf+Ot0qludPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlDI3uEJGWLLmgXCphZ6IKznD6lYwHwYDVR0j BBgwFoAUINvToLVNGeE1ulOzHEWIQsidSfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFE VnMvMC8yMERCRDNBMEI1NEQxOUUxMzVCQTUzQjMxQzQ1ODg0MkM4OUQ0OUYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwREJEM0EwQjU0RDE5RTEz NUJBNTNCMzFDNDU4ODQyQzg5RDQ5RjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFEVnMvMC8y MERCRDNBMEI1NEQxOUUxMzVCQTUzQjMxQzQ1ODg0MkM4OUQ0OUYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj+0GGo2DoNzKh4ad7DHPM4moUERYMvFpyLYkX0a9eXc2AsUdqj9LSb3+nZT+ bK7tketEdbVziK93vaCzG35NkDzEBydoAP0hmWbxgRFWMyZDl1GAfdEobCRiUWRd 8ULYvxuGP16RKtGXtQ0z09QlpzaVvGQpdAkSkrqs7uOGAetX1Xwb6CrmsSCdohIF RjDBqZn/XVMicxrSp3RQP+P8HR3hK898sOkniP6ZKFufrqYaoiIQ5O1XoKqkYqF4 dRy6qPFRhO4qWIa7ycOsPUbK5QZFueV/aSq/EmFxkqlcDLWzmWdneZZ4blZHdS9c s5G1w1KAQg0fkfMjPP3mk3KbSQ== -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:10 2025 by rpki-client