$ rpki-client -vvf rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/D70AEA1061F94850A8A9E906B852D2ED075B6932.mft File: D70AEA1061F94850A8A9E906B852D2ED075B6932.mft (raw, json) Hash identifier: JmZi1h3ErNisnIRn7o/uWk9uxn8kwVTBghccN5y4VS0= Subject key identifier: 10:D0:C8:3A:46:C6:F5:AB:05:9A:38:1E:83:C0:CB:F2:C3:CA:48:92 Authority key identifier: D7:0A:EA:10:61:F9:48:50:A8:A9:E9:06:B8:52:D2:ED:07:5B:69:32 Certificate issuer: /CN=D70AEA1061F94850A8A9E906B852D2ED075B6932 Certificate serial: 06B9C3FEF2741FB2FEA28E45BAFCF2085519AF5E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D70AEA1061F94850A8A9E906B852D2ED075B6932.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/D70AEA1061F94850A8A9E906B852D2ED075B6932.mft Manifest number: C4 Signing time: Wed 05 Nov 2025 10:39:39 +0000 Manifest this update: Wed 05 Nov 2025 10:34:39 +0000 Manifest next update: Thu 06 Nov 2025 11:27:39 +0000 Files and hashes: 1: D70AEA1061F94850A8A9E906B852D2ED075B6932.crl (hash: Z/+AuK0UVECQZJS7t+a+JeWVICGs4iDFcrPOA7uB60M=) 2: 323830343a376132343a3a2f33322d313238203d3e20323731333530.roa (hash: 5snb+PpougjVMrUlOkfywVYYeOGnqJlwNH8u42ep6eI=) 3: 3138312e3138392e36342e302f32322d3332203d3e20323731333530.roa (hash: 2tjv/nUH0etLPn8DX1CXEGYQqhDK/tYwjmI7W5ZDY/4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/D70AEA1061F94850A8A9E906B852D2ED075B6932.crl rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/D70AEA1061F94850A8A9E906B852D2ED075B6932.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D70AEA1061F94850A8A9E906B852D2ED075B6932.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:b9:c3:fe:f2:74:1f:b2:fe:a2:8e:45:ba:fc:f2:08:55:19:af:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D70AEA1061F94850A8A9E906B852D2ED075B6932 Validity Not Before: Nov 5 10:34:39 2025 GMT Not After : Nov 6 11:27:39 2025 GMT Subject: CN=10D0C83A46C6F5AB059A381E83C0CBF2C3CA4892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:53:c1:fb:9b:11:9c:1a:d1:3d:5f:1c:11:0f: d2:ff:ea:f4:16:1f:a7:38:fb:cb:fb:32:ff:8d:a0: 48:94:44:cd:d1:37:5a:e5:d3:31:54:bf:0a:d2:17: 63:2a:31:4c:25:e6:ce:ad:37:80:3d:b3:95:16:fe: 77:86:a7:9f:2c:f3:41:2b:8b:89:a5:13:9c:45:92: 77:98:75:5e:c0:6e:5e:d8:92:df:9f:2c:de:43:fb: ca:e6:58:d7:0d:39:c9:be:5f:43:96:be:8c:a9:c5: 35:a5:ba:bb:55:f4:34:cc:f9:9e:34:54:7d:00:b1: ce:86:aa:ad:dd:09:54:20:54:2d:79:77:9a:45:66: 38:83:3e:69:04:a2:9c:e5:6a:6f:62:bc:d2:1c:0a: 04:7e:74:81:11:0f:8a:aa:de:fd:27:62:0a:7a:ea: f3:97:fe:87:ba:a1:89:c8:62:05:7c:0d:50:a1:ad: 26:e1:1f:f6:27:c1:5b:33:32:72:04:93:69:d0:3f: 7d:60:80:d5:29:30:c3:78:a3:47:db:84:0c:75:58: b2:ef:db:c5:3f:5a:83:15:d6:e9:89:d9:41:83:b0: 61:a2:01:0f:ba:7d:93:7b:f6:42:96:bb:ca:d7:2c: 10:9d:69:b4:17:d6:b2:24:94:c0:d9:10:0e:b9:f4: cb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D0:C8:3A:46:C6:F5:AB:05:9A:38:1E:83:C0:CB:F2:C3:CA:48:92 X509v3 Authority Key Identifier: keyid:D7:0A:EA:10:61:F9:48:50:A8:A9:E9:06:B8:52:D2:ED:07:5B:69:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/D70AEA1061F94850A8A9E906B852D2ED075B6932.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D70AEA1061F94850A8A9E906B852D2ED075B6932.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/D70AEA1061F94850A8A9E906B852D2ED075B6932.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:6c:80:52:9b:83:27:9b:45:31:a3:13:76:22:90:aa:9b:c0: 9a:37:3c:19:d1:12:c4:c3:42:59:67:ff:14:77:7e:c5:1b:24: f4:bb:ce:48:83:95:06:bd:ab:47:09:fe:42:c8:6b:b5:2f:e1: 11:d4:ee:f2:83:d7:15:39:88:4b:fc:85:fc:b3:26:6a:dd:fb: 35:ad:2a:93:38:22:18:73:93:f8:64:c3:b6:ef:3f:e0:6b:86: 89:59:b9:2e:22:fe:a3:f0:0b:cf:21:d8:7d:4b:ec:29:a4:21: da:ed:09:bc:83:ab:d9:cf:54:a1:bf:1e:1b:a4:95:a2:a1:6d: 37:28:d7:51:03:5f:53:f0:7a:6c:0e:bc:e0:37:66:bf:d1:2b: 23:9b:f4:00:d6:95:47:3c:b2:ce:f9:8c:db:94:db:34:12:f0: c8:83:b5:75:a0:6b:d4:9b:ce:2d:07:77:82:28:cf:8e:5b:c8: e8:c7:13:7b:7c:c0:df:89:f4:d9:11:97:7a:e9:7b:18:6d:94: 31:a1:52:9f:99:ae:44:5f:29:ac:1f:61:40:3b:74:51:e1:2d: da:cc:dd:f0:bb:a2:44:58:ff:e8:48:df:df:3b:8a:5b:cc:bc: c0:57:95:80:fa:fa:29:af:89:a3:f8:05:4a:d1:2b:e1:97:c0: a0:21:b1:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBrnD/vJ0H7L+oo5FuvzyCFUZr14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcwQUVBMTA2MUY5NDg1MEE4QTlFOTA2Qjg1MkQyRUQw NzVCNjkzMjAeFw0yNTExMDUxMDM0MzlaFw0yNTExMDYxMTI3MzlaMDMxMTAvBgNV BAMTKDEwRDBDODNBNDZDNkY1QUIwNTlBMzgxRTgzQzBDQkYyQzNDQTQ4OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdU8H7mxGcGtE9XxwRD9L/6vQW H6c4+8v7Mv+NoEiURM3RN1rl0zFUvwrSF2MqMUwl5s6tN4A9s5UW/neGp58s80Er i4mlE5xFkneYdV7Abl7Ykt+fLN5D+8rmWNcNOcm+X0OWvoypxTWlurtV9DTM+Z40 VH0Asc6Gqq3dCVQgVC15d5pFZjiDPmkEopzlam9ivNIcCgR+dIERD4qq3v0nYgp6 6vOX/oe6oYnIYgV8DVChrSbhH/YnwVszMnIEk2nQP31ggNUpMMN4o0fbhAx1WLLv 28U/WoMV1umJ2UGDsGGiAQ+6fZN79kKWu8rXLBCdabQX1rIklMDZEA659MvDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUENDIOkbG9asFmjgeg8DL8sPKSJIwHwYDVR0j BBgwFoAU1wrqEGH5SFCoqekGuFLS7QdbaTIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHMxazZIMm42Q3lOWlF2QVZRWEpHamU1VWFKSHQxOVhCZFJWM1BEa003 ZW0vMC9ENzBBRUExMDYxRjk0ODUwQThBOUU5MDZCODUyRDJFRDA3NUI2OTMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3MEFFQTEwNjFGOTQ4NTBB OEE5RTkwNkI4NTJEMkVEMDc1QjY5MzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHMxazZIMm42Q3lOWlF2QVZRWEpHamU1VWFKSHQxOVhCZFJWM1BEa003ZW0vMC9E NzBBRUExMDYxRjk0ODUwQThBOUU5MDZCODUyRDJFRDA3NUI2OTMyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkWyAUpuDJ5tFMaMTdiKQqpvAmjc8GdESxMNCWWf/FHd+xRsk9LvOSIOVBr2r Rwn+QshrtS/hEdTu8oPXFTmIS/yF/LMmat37Na0qkzgiGHOT+GTDtu8/4GuGiVm5 LiL+o/ALzyHYfUvsKaQh2u0JvIOr2c9Uob8eG6SVoqFtNyjXUQNfU/B6bA684Ddm v9ErI5v0ANaVRzyyzvmM25TbNBLwyIO1daBr1JvOLQd3gijPjlvI6McTe3zA34n0 2RGXeul7GG2UMaFSn5muRF8prB9hQDt0UeEt2szd8LuiRFj/6Ejf3zuKW8y8wFeV gPr6Ka+Jo/gFStEr4ZfAoCGxpw== -----END CERTIFICATE-----Generated at Wed Nov 5 20:50:51 2025 by rpki-client