$ rpki-client -vvf rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft File: D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft (raw, json) Hash identifier: Vuraa8qMl1Xj3+0OZkkiZkyvjTGbOt2zICoocFlTPDU= Subject key identifier: C6:60:03:C4:A3:7F:A7:C5:5E:E4:37:98:AA:C4:D9:AB:0C:9F:D1:02 Authority key identifier: D2:3F:9B:F7:7C:C1:B3:2D:E1:FE:EA:20:8F:14:CD:34:38:A4:DC:BE Certificate issuer: /CN=D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE Certificate serial: 05652470A9DAFA49A854601D3B35C9C447DB4E3C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer Subject info access: rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft Manifest number: E2 Signing time: Tue 04 Nov 2025 14:50:36 +0000 Manifest this update: Tue 04 Nov 2025 14:45:36 +0000 Manifest next update: Wed 05 Nov 2025 15:54:36 +0000 Files and hashes: 1: 3136382e3232372e38382e302f32322d3234203d3e20323634353536.roa (hash: am5A4bo+CeX/idLnSOVp8k4cvl+rRIWfZDIw8duCyYA=) 2: 323830343a323137383a3a2f33322d3438203d3e20323634353536.roa (hash: GksSVdLS7K0cl550vTDzKqmAY2+LTjqW45XiI8cG9xk=) 3: 3133382e302e3230342e302f32322d3234203d3e20323634353536.roa (hash: Bp/MXpC4FvWK4Yo9ZUl+rpN/2KDLvDApID7I3LrdZiw=) 4: D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl (hash: p6RPtBGhlbQulf4zCSoBMWCDXWTwbKjLdqDl3R+7Ubs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 15:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:65:24:70:a9:da:fa:49:a8:54:60:1d:3b:35:c9:c4:47:db:4e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE Validity Not Before: Nov 4 14:45:36 2025 GMT Not After : Nov 5 15:54:36 2025 GMT Subject: CN=C66003C4A37FA7C55EE43798AAC4D9AB0C9FD102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:88:42:c6:6f:f6:b5:14:6e:77:5e:d5:c6:f7: e1:c7:6c:bb:f8:0e:31:8e:de:57:7c:50:1a:27:c6: 38:22:f9:42:b5:fa:ae:a9:6e:4d:64:93:27:ef:2e: a5:99:f8:c3:19:56:46:bc:0c:c1:90:49:55:e8:b6: cc:2d:d5:e2:e0:e3:be:b5:33:f6:be:57:38:0c:89: 6f:23:7b:75:ef:14:c2:2d:b7:92:66:19:84:37:31: 62:aa:3d:04:fb:12:8f:59:bd:10:f7:54:06:ad:75: 26:a4:78:55:cb:08:15:11:37:d5:c3:08:c0:2a:d5: de:4d:e8:ed:bb:91:0c:44:36:88:ce:29:4d:23:15: cb:cf:10:f1:9f:f9:fd:3e:06:eb:02:af:be:4c:15: b0:b1:37:45:f8:65:3a:71:c2:1f:fa:60:47:d8:dd: c4:15:7d:82:16:c4:77:f3:cf:55:df:77:1a:82:20: e7:09:90:b0:78:b2:e4:84:36:30:7b:d4:96:39:52: ea:f1:98:75:1b:72:3b:aa:c7:9f:42:75:f8:6c:29: 2e:79:b0:0c:d2:88:45:2d:dd:59:6a:78:1b:67:bb: 8e:2f:c0:8e:b1:17:01:58:1d:0f:3e:a5:b6:7f:87: e3:ba:00:d6:0e:c5:e5:90:96:39:02:70:ac:1e:79: 16:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:60:03:C4:A3:7F:A7:C5:5E:E4:37:98:AA:C4:D9:AB:0C:9F:D1:02 X509v3 Authority Key Identifier: keyid:D2:3F:9B:F7:7C:C1:B3:2D:E1:FE:EA:20:8F:14:CD:34:38:A4:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:38:9f:9e:6a:47:ce:ab:9e:79:50:c8:dc:84:7f:da:94:8e: d8:ac:a9:ef:52:63:05:8e:52:a6:8c:77:83:24:db:b2:69:b5: a1:49:80:fd:a5:ca:28:e2:30:46:03:d6:d4:95:9e:df:47:b3: 1f:a6:24:5c:ef:7e:7d:a2:1a:87:46:3e:f1:70:2c:8e:a5:6f: cf:85:b7:e9:1a:09:83:d3:8b:50:56:a5:e3:b9:d2:7d:fe:c2: f8:13:b0:ed:2e:85:6e:0d:01:79:43:96:3f:5f:8a:4a:67:81: 95:b7:bd:1c:1e:a3:eb:92:a6:43:1d:02:0b:0f:55:6f:2e:f9: 26:b1:b1:c7:b0:77:e4:6b:fa:25:d4:96:23:8a:ea:68:ba:99: 17:d6:5b:4d:40:f5:07:b0:2e:1c:22:e3:e6:0b:89:b8:6a:21: 89:42:e9:ff:77:c9:a2:5d:1a:54:f0:c6:30:c0:47:ed:6c:59: b2:87:28:0f:3d:7a:03:9d:42:68:90:51:80:11:90:1d:b8:18: 95:8c:a0:f0:f0:49:91:c4:6c:f0:1e:26:38:21:4e:0e:48:67: 49:13:f7:db:f7:01:62:5e:81:2a:ae:c4:6a:d6:b2:5a:70:fe: f6:d2:bb:8f:23:ef:14:ab:5f:32:bc:10:4c:e1:0b:7a:d1:ed: 97:ee:11:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBWUkcKna+kmoVGAdOzXJxEfbTjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIzRjlCRjc3Q0MxQjMyREUxRkVFQTIwOEYxNENEMzQz OEE0RENCRTAeFw0yNTExMDQxNDQ1MzZaFw0yNTExMDUxNTU0MzZaMDMxMTAvBgNV BAMTKEM2NjAwM0M0QTM3RkE3QzU1RUU0Mzc5OEFBQzREOUFCMEM5RkQxMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+iELGb/a1FG53XtXG9+HHbLv4 DjGO3ld8UBonxjgi+UK1+q6pbk1kkyfvLqWZ+MMZVka8DMGQSVXotswt1eLg4761 M/a+VzgMiW8je3XvFMItt5JmGYQ3MWKqPQT7Eo9ZvRD3VAatdSakeFXLCBURN9XD CMAq1d5N6O27kQxENojOKU0jFcvPEPGf+f0+BusCr75MFbCxN0X4ZTpxwh/6YEfY 3cQVfYIWxHfzz1XfdxqCIOcJkLB4suSENjB71JY5UurxmHUbcjuqx59CdfhsKS55 sAzSiEUt3VlqeBtnu44vwI6xFwFYHQ8+pbZ/h+O6ANYOxeWQljkCcKweeRYFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxmADxKN/p8Ve5DeYqsTZqwyf0QIwHwYDVR0j BBgwFoAU0j+b93zBsy3h/uogjxTNNDik3L4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHhuWGlSQjN6c0NMQkdjc1pnYVJzS0xiN3Mzc3dIeDN2b1Z4NHlUa0px cnMvMC9EMjNGOUJGNzdDQzFCMzJERTFGRUVBMjA4RjE0Q0QzNDM4QTREQ0JFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyM0Y5QkY3N0NDMUIzMkRF MUZFRUEyMDhGMTRDRDM0MzhBNERDQkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHhuWGlSQjN6c0NMQkdjc1pnYVJzS0xiN3Mzc3dIeDN2b1Z4NHlUa0pxcnMvMC9E MjNGOUJGNzdDQzFCMzJERTFGRUVBMjA4RjE0Q0QzNDM4QTREQ0JFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqzifnmpHzqueeVDI3IR/2pSO2Kyp71JjBY5Spox3gyTbsmm1oUmA/aXKKOIw RgPW1JWe30ezH6YkXO9+faIah0Y+8XAsjqVvz4W36RoJg9OLUFal47nSff7C+BOw 7S6Fbg0BeUOWP1+KSmeBlbe9HB6j65KmQx0CCw9Vby75JrGxx7B35Gv6JdSWI4rq aLqZF9ZbTUD1B7AuHCLj5guJuGohiULp/3fJol0aVPDGMMBH7WxZsocoDz16A51C aJBRgBGQHbgYlYyg8PBJkcRs8B4mOCFODkhnSRP32/cBYl6BKq7EatayWnD+9tK7 jyPvFKtfMrwQTOELetHtl+4RWw== -----END CERTIFICATE-----Generated at Wed Nov 5 01:57:24 2025 by rpki-client