$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft File: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft (raw, json) Hash identifier: aVhUMtUkNU2bJes+cxBzL4UJB018x8FSj7aZDyvg62s= Subject key identifier: 20:2A:33:D9:B4:BD:28:4A:4F:0F:FE:93:39:5F:D8:DF:95:C0:C2:FC Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA Certificate issuer: /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Certificate serial: 3B210BBDB11969B6E8CA1C46236CFADB86095444 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft Manifest number: 02F7 Signing time: Wed 05 Nov 2025 17:32:31 +0000 Manifest this update: Wed 05 Nov 2025 17:27:31 +0000 Manifest next update: Thu 06 Nov 2025 21:02:31 +0000 Files and hashes: 1: 3138372e3130392e38302e302f32302d3234203d3e203533313339.roa (hash: IQvjHctOgbHfUkTO0U34ErrEutSrCbjo/UK2hA9NLGA=) 2: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl (hash: jEZRJGpNEEwTZ4HxfJesqsYI1m7k8VtMgdW67GdPZAI=) 3: 3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (hash: sPenw571n896sllNaEQg92EoBX7mLS0ivDvfDaPaky8=) 4: 323830343a333164343a3a2f33322d3438203d3e203533313339.roa (hash: Tny32eTDORgq/MtVMRE6pvmeZrpwE0nT6BNCMfyIuNM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 21:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:21:0b:bd:b1:19:69:b6:e8:ca:1c:46:23:6c:fa:db:86:09:54:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Validity Not Before: Nov 5 17:27:31 2025 GMT Not After : Nov 6 21:02:31 2025 GMT Subject: CN=202A33D9B4BD284A4F0FFE93395FD8DF95C0C2FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:29:8c:09:f3:e8:9c:ff:51:52:02:a2:a8:e6: 86:49:d8:d3:07:6c:b0:5d:cc:1e:65:d3:d8:70:40: 86:c7:ad:c8:c3:0e:7a:8d:2c:18:42:40:1a:ee:7d: fd:8a:d0:01:f9:29:73:d3:4e:9a:bd:cf:ec:ed:3a: d9:f2:33:f7:87:a2:65:7c:b2:66:9f:fc:b9:51:c1: f8:26:4d:22:38:0c:09:cb:a2:83:39:fb:bd:be:f8: be:98:27:d5:77:6a:f3:07:e6:d4:cf:23:cb:55:5f: 74:6f:5e:0f:53:74:9c:5a:77:9a:e1:8f:53:69:a0: 66:b2:bf:2c:49:3d:db:6f:ba:e0:08:7e:cb:96:83: f7:b5:63:dd:ce:31:5a:9b:9a:60:3a:68:45:ef:31: c1:79:5e:d9:38:2f:ee:e3:ca:3e:75:75:57:4f:63: c3:45:3f:d0:72:c5:62:c6:fd:9e:1f:d7:99:28:7f: 0e:a5:26:59:99:29:6a:cc:76:6f:4c:2f:7a:cc:5c: 4b:b1:b3:08:3c:41:6e:b6:66:a9:c0:92:01:c3:ae: 5e:0a:47:d2:fd:5c:59:55:3a:9c:33:4f:8b:be:f6: ec:21:66:de:ac:74:cc:53:ce:88:25:91:5e:b5:c3: 95:dd:a2:4d:6f:5a:4c:ba:4a:b7:e1:8b:89:bf:d5: a2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2A:33:D9:B4:BD:28:4A:4F:0F:FE:93:39:5F:D8:DF:95:C0:C2:FC X509v3 Authority Key Identifier: keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:e3:79:4f:86:d5:5f:fb:ef:6e:4b:d3:08:d9:d3:13:a8:f6: 49:d6:6b:c9:3e:76:15:66:d1:7e:a5:e6:5d:b3:2d:4c:7c:79: 18:72:fb:e5:e6:2e:64:88:f2:73:b5:13:ce:63:ba:5e:d8:de: 39:7f:d2:2f:d8:b9:90:41:d1:aa:67:fb:28:82:fe:71:ba:f1: 7e:a8:1a:34:c4:21:a1:9b:fd:51:93:ca:89:73:a5:e2:0b:ec: 49:eb:a0:85:19:6f:33:db:ba:9c:68:75:e8:56:de:83:48:38: ac:23:9a:ef:3a:c3:db:d4:dd:0b:ed:9e:85:66:8c:7a:ee:5e: dd:01:00:5a:9d:20:93:f2:4a:08:77:6d:90:88:7c:86:85:64: c4:fe:2c:ee:f3:52:89:54:85:9b:a5:49:7e:5f:5e:7e:2c:05: ab:41:ce:68:34:f2:fa:97:ff:c7:93:6b:3c:5d:3c:8f:80:67: b2:7e:a5:b3:1b:af:ab:48:15:66:62:44:42:3c:57:e0:52:d1: c9:0d:54:47:59:fd:25:87:a4:83:84:67:f1:ef:4f:1c:08:72: b7:27:88:e0:f2:78:eb:c1:a9:ef:d7:bf:f8:3b:3d:4b:22:b5: d8:fd:f7:27:44:b8:06:1f:6a:38:b9:44:9e:03:79:fb:d8:d7: 4a:cf:b9:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOyELvbEZabboyhxGI2z624YJVEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNERGRjE5ODIyQzVCMjdDN0JDQzE2QkZEOEJFMkEz ODRGODlBQTAeFw0yNTExMDUxNzI3MzFaFw0yNTExMDYyMTAyMzFaMDMxMTAvBgNV BAMTKDIwMkEzM0Q5QjRCRDI4NEE0RjBGRkU5MzM5NUZEOERGOTVDMEMyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqKYwJ8+ic/1FSAqKo5oZJ2NMH bLBdzB5l09hwQIbHrcjDDnqNLBhCQBruff2K0AH5KXPTTpq9z+ztOtnyM/eHomV8 smaf/LlRwfgmTSI4DAnLooM5+72++L6YJ9V3avMH5tTPI8tVX3RvXg9TdJxad5rh j1NpoGayvyxJPdtvuuAIfsuWg/e1Y93OMVqbmmA6aEXvMcF5Xtk4L+7jyj51dVdP Y8NFP9ByxWLG/Z4f15kofw6lJlmZKWrMdm9ML3rMXEuxswg8QW62ZqnAkgHDrl4K R9L9XFlVOpwzT4u+9uwhZt6sdMxTzoglkV61w5Xdok1vWky6Srfhi4m/1aJNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUICoz2bS9KEpPD/6TOV/Y35XAwvwwHwYDVR0j BBgwFoAU0iTf8ZgixbJ8e8wWv9i+KjhPiaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlW QXYvMS9EMjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyMjRERkYxOTgyMkM1QjI3 QzdCQ0MxNkJGRDhCRTJBMzg0Rjg5QUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlWQXYvMS9E MjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZON5T4bVX/vvbkvTCNnTE6j2SdZryT52FWbRfqXmXbMtTHx5GHL75eYuZIjy c7UTzmO6XtjeOX/SL9i5kEHRqmf7KIL+cbrxfqgaNMQhoZv9UZPKiXOl4gvsSeug hRlvM9u6nGh16Fbeg0g4rCOa7zrD29TdC+2ehWaMeu5e3QEAWp0gk/JKCHdtkIh8 hoVkxP4s7vNSiVSFm6VJfl9efiwFq0HOaDTy+pf/x5NrPF08j4Bnsn6lsxuvq0gV ZmJEQjxX4FLRyQ1UR1n9JYekg4Rn8e9PHAhytyeI4PJ468Gp79e/+Ds9SyK12P33 J0S4Bh9qOLlEngN5+9jXSs+57A== -----END CERTIFICATE-----Generated at Thu Nov 6 02:55:48 2025 by rpki-client