$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft File: D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json) Hash identifier: 600C/HB5n93vWWtYxiyg56DX+PBtktSyRJXP91vmS9o= Subject key identifier: A3:65:E7:15:B0:90:3C:F9:94:43:B6:85:C8:A9:20:46:71:AE:C8:AA Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 Certificate issuer: /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Certificate serial: 74A62C0DCB6D9EB2B351070E7A0FFDA39D6D1D31 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft Manifest number: 0309 Signing time: Tue 04 Nov 2025 18:08:35 +0000 Manifest this update: Tue 04 Nov 2025 18:03:35 +0000 Manifest next update: Wed 05 Nov 2025 18:24:35 +0000 Files and hashes: 1: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: 01pAW4QCHBpNqYLYxhHBFF+Hirycj7LT0087UnT0sog=) 2: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: FE+7zbwcRwFNCNZQz6JTL4PFhynEDJA2jUUaWQGOwlw=) 3: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: HfTDu4DN9uXZzMunKItrn7ODD/IPZE8lSlEH4CGuBCQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 18:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a6:2c:0d:cb:6d:9e:b2:b3:51:07:0e:7a:0f:fd:a3:9d:6d:1d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Validity Not Before: Nov 4 18:03:35 2025 GMT Not After : Nov 5 18:24:35 2025 GMT Subject: CN=A365E715B0903CF99443B685C8A9204671AEC8AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:60:86:82:d8:7b:47:4c:f1:b1:ec:4f:87:21: 1d:9c:2a:4f:d1:92:66:70:75:9d:2b:dd:15:06:90: 0e:19:ff:2e:e2:17:67:9f:37:b0:4d:33:cd:f4:74: 34:ae:12:1c:ac:38:41:6f:de:0e:cc:d9:f2:b2:bf: 8a:95:3a:9e:0a:4e:f5:39:76:6f:5a:9b:c1:eb:b7: 91:97:fa:9e:bf:c5:06:3f:0d:16:0e:b5:9d:91:b9: 31:14:8d:10:c8:84:0f:73:17:87:14:d8:0a:79:ad: 09:f2:cf:4a:48:41:d2:14:fd:1e:48:bf:79:02:8b: d8:6c:52:6d:10:43:5d:60:ab:5c:56:5c:07:9e:2f: 60:2b:0c:29:ce:9d:1c:53:16:22:9e:d3:67:00:5e: 85:38:69:f7:15:fd:8b:81:f8:ac:b6:b9:2b:3b:22: e9:b3:18:88:4e:04:5a:fb:09:3d:b9:ab:30:9f:f5: f4:a4:af:be:67:60:45:d0:90:4e:bb:f0:2c:6c:78: 72:78:a0:25:0b:92:14:09:4b:2e:43:28:33:23:a9: 68:cd:46:eb:f9:37:f6:2f:c6:67:97:51:48:7f:cd: 55:63:6d:cf:69:c5:25:cb:4e:d3:61:06:16:34:5b: 3d:ec:8c:58:a1:ca:12:e8:98:26:40:d3:4d:5e:27: cd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:65:E7:15:B0:90:3C:F9:94:43:B6:85:C8:A9:20:46:71:AE:C8:AA X509v3 Authority Key Identifier: keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7a:b5:90:24:9a:b2:f5:a8:0e:14:ee:9f:45:fa:09:1d:fe: 1b:ee:d8:90:55:fa:cd:f7:07:1f:fb:7e:4a:3b:ca:a8:b8:14: 99:f2:44:ee:33:5c:5b:a7:38:75:8f:1a:2f:2c:18:cb:f6:b5: 32:b9:8b:f8:44:1e:f0:81:b5:d5:dd:41:27:02:08:db:e8:14: d4:1d:b7:0b:87:aa:e4:8e:62:ec:18:74:0b:a7:43:d9:05:9b: a1:3f:ae:73:91:13:e5:41:84:ff:b5:f5:af:13:aa:66:af:18: 95:4a:22:fe:98:78:f7:72:df:91:db:77:35:cd:48:af:ea:36: 0e:fc:e2:2c:cf:ee:34:78:d6:09:2e:6b:ac:79:95:3f:b2:b4: cd:5c:8a:fd:dc:b0:80:5f:6c:65:ba:af:86:eb:04:5e:70:ff: d3:22:64:e6:ae:09:79:32:3c:cb:e3:6e:c3:b3:93:62:df:fd: 60:e8:55:e1:0a:4b:3f:a3:50:ec:86:fb:66:dc:49:68:66:c1: 96:b8:47:b3:be:06:99:a8:e5:e6:32:79:4f:38:21:60:52:78: 77:10:13:7e:ae:80:8e:2a:24:31:db:6b:da:3f:a0:e6:1a:cb: cd:f9:ee:56:c8:64:9b:16:8a:07:9a:cf:a2:7d:05:7c:da:b7: 48:8a:17:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdKYsDcttnrKzUQcOeg/9o51tHTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUzOUNGOTI5QjZBNkEyQjk1OTZCOTIyRjQxN0ZBRDkx Nzc5OUVENzAeFw0yNTExMDQxODAzMzVaFw0yNTExMDUxODI0MzVaMDMxMTAvBgNV BAMTKEEzNjVFNzE1QjA5MDNDRjk5NDQzQjY4NUM4QTkyMDQ2NzFBRUM4QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRYIaC2HtHTPGx7E+HIR2cKk/R kmZwdZ0r3RUGkA4Z/y7iF2efN7BNM830dDSuEhysOEFv3g7M2fKyv4qVOp4KTvU5 dm9am8Hrt5GX+p6/xQY/DRYOtZ2RuTEUjRDIhA9zF4cU2Ap5rQnyz0pIQdIU/R5I v3kCi9hsUm0QQ11gq1xWXAeeL2ArDCnOnRxTFiKe02cAXoU4afcV/YuB+Ky2uSs7 IumzGIhOBFr7CT25qzCf9fSkr75nYEXQkE678CxseHJ4oCULkhQJSy5DKDMjqWjN Ruv5N/YvxmeXUUh/zVVjbc9pxSXLTtNhBhY0Wz3sjFihyhLomCZA001eJ81hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUo2XnFbCQPPmUQ7aFyKkgRnGuyKowHwYDVR0j BBgwFoAU1TnPkptqaiuVlrki9Bf62Rd5ntcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNT M1QvMS9ENTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MzlDRjkyOUI2QTZBMkI5 NTk2QjkyMkY0MTdGQUQ5MTc3OTlFRDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNTM1QvMS9E NTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfnq1kCSasvWoDhTun0X6CR3+G+7YkFX6zfcHH/t+SjvKqLgUmfJE7jNcW6c4 dY8aLywYy/a1MrmL+EQe8IG11d1BJwII2+gU1B23C4eq5I5i7Bh0C6dD2QWboT+u c5ET5UGE/7X1rxOqZq8YlUoi/ph493Lfkdt3Nc1Ir+o2DvziLM/uNHjWCS5rrHmV P7K0zVyK/dywgF9sZbqvhusEXnD/0yJk5q4JeTI8y+Nuw7OTYt/9YOhV4QpLP6NQ 7Ib7ZtxJaGbBlrhHs74Gmajl5jJ5TzghYFJ4dxATfq6AjiokMdtr2j+g5hrLzfnu VshkmxaKB5rPon0FfNq3SIoXFg== -----END CERTIFICATE-----Generated at Wed Nov 5 10:03:10 2025 by rpki-client