$ rpki-client -vvf rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft File: DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft (raw, json) Hash identifier: CMND3WyL3hgRsCPMSCmDw2gdwInzaoj0VVL7s1/xa+w= Subject key identifier: B9:83:49:C1:F8:E9:25:77:0C:1C:1F:A5:CD:F9:FF:C2:D3:58:E6:38 Authority key identifier: DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E Certificate issuer: /CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E Certificate serial: 49925CD38B8F3E7BBF4C4711F8C5F06427C43CCC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer Subject info access: rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft Manifest number: E9 Signing time: Tue 04 Nov 2025 14:48:09 +0000 Manifest this update: Tue 04 Nov 2025 14:43:09 +0000 Manifest next update: Wed 05 Nov 2025 15:03:09 +0000 Files and hashes: 1: 3133312e3232312e3138302e302f32322d3234203d3e203532373436.roa (hash: 3PsUICllrnsF07Zi7kmN3vDa9q1Ef/q577Ua+T+jmVg=) 2: DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl (hash: f1ZaGjVybZav+lxswyUjr1An0dweUrbNOYpBx68OLyY=) 3: 3137372e38352e3137322e302f32322d3234203d3e203532373436.roa (hash: KCrFqTQzO17kQlL8SOLSVWkU5WyJdtvB7e1wLs8BQYA=) 4: 323830343a316535343a3a2f33322d3536203d3e203532373436.roa (hash: ADTcvk7C0x33Y2RYKuM0CdXcsQC2etHZuMH6cQfkxbQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 15:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:92:5c:d3:8b:8f:3e:7b:bf:4c:47:11:f8:c5:f0:64:27:c4:3c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E Validity Not Before: Nov 4 14:43:09 2025 GMT Not After : Nov 5 15:03:09 2025 GMT Subject: CN=B98349C1F8E925770C1C1FA5CDF9FFC2D358E638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:73:8f:e4:89:fb:36:13:df:aa:48:59:de: d6:50:d0:d9:3c:a3:8e:0c:cd:af:bd:3e:83:a2:59: d9:fd:68:9d:9e:7a:f0:4b:f1:bf:f1:8b:47:0a:ba: a8:dd:a0:22:ff:ae:7e:6d:95:d9:e8:10:ab:d4:03: 06:2a:29:1e:d5:0a:29:cd:ce:3c:35:ef:d2:ce:66: 73:42:a7:33:be:c5:c9:f9:77:91:07:a5:76:30:0b: 8d:a3:01:48:14:22:ef:79:c3:ef:0f:4e:71:51:42: f8:da:9d:77:95:b7:93:68:1c:23:70:a0:4d:e3:43: e9:f4:2b:9b:7b:4b:6a:61:60:93:13:78:c2:c9:8d: e2:ec:e9:a7:65:c8:1e:65:cc:ae:42:47:c0:23:bf: 5f:bb:cb:50:ed:8c:86:67:33:0f:98:52:31:9d:92: ed:35:4f:b0:35:38:94:f9:cc:57:aa:e4:3e:a7:72: ba:ff:ea:6c:fd:33:bc:3b:70:6c:7a:14:2c:0f:e4: f2:79:08:ac:43:99:4a:b3:b9:86:16:89:d2:4c:75: ba:cc:e6:39:ea:a2:51:8d:15:ea:b8:c5:b5:a4:1e: f1:6d:6f:12:82:8e:46:fa:60:41:0f:11:19:5b:29: 10:c9:e5:09:3d:2b:0b:91:bc:80:7c:bb:56:5e:09: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:83:49:C1:F8:E9:25:77:0C:1C:1F:A5:CD:F9:FF:C2:D3:58:E6:38 X509v3 Authority Key Identifier: keyid:DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e9:41:44:1d:32:27:45:82:c1:79:51:74:60:87:ce:f7:56: 97:3e:4e:52:00:13:0f:ec:da:91:85:5f:04:bd:1e:ed:7a:99: 1f:be:1b:4b:12:a2:89:02:b0:c2:4f:c9:a0:23:47:0c:f9:42: fa:d9:95:20:c9:a2:ed:6f:6f:83:3a:ca:67:ff:11:39:a2:15: 71:34:ab:e6:c3:8c:65:05:89:6b:01:9f:4d:00:1f:4e:20:68: 19:5c:1d:60:6c:78:8f:ee:5e:23:be:c5:ce:3e:81:63:5e:02: 7f:74:ef:86:2c:16:98:03:cb:de:3f:fe:ed:5f:79:24:e5:6f: b7:a0:2d:d2:96:29:93:c5:65:39:3b:bf:4e:e2:c5:c0:29:bc: 75:61:08:01:a3:01:4d:b7:f4:e7:0d:8a:76:9c:86:72:9b:f7: f5:1d:dd:6b:7d:fc:7a:c2:bf:9a:21:6e:6e:c7:3f:9b:45:40: 2e:8f:c2:5f:ac:7e:48:ee:6f:c0:e6:3c:8d:6e:c3:6a:11:34: 34:a0:ee:f7:c2:de:4e:09:0d:64:c3:4d:66:02:c1:d7:ae:9b: b3:5b:b2:e6:37:04:9b:9d:45:91:aa:de:1c:56:1a:1b:2c:0c: 71:ce:4f:81:2b:e3:b7:18:3d:db:ce:7e:b5:2f:a8:87:05:5a: cf:16:0d:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSZJc04uPPnu/TEcR+MXwZCfEPMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCMUYzRkE2RjQyMERGMDE5MDU1MkZDMDk3Mjg1OUFG NDVGMzY4RTAeFw0yNTExMDQxNDQzMDlaFw0yNTExMDUxNTAzMDlaMDMxMTAvBgNV BAMTKEI5ODM0OUMxRjhFOTI1NzcwQzFDMUZBNUNERjlGRkMyRDM1OEU2MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DXOP5In7NhPfqkhZ3tZQ0Nk8 o44Mza+9PoOiWdn9aJ2eevBL8b/xi0cKuqjdoCL/rn5tldnoEKvUAwYqKR7VCinN zjw179LOZnNCpzO+xcn5d5EHpXYwC42jAUgUIu95w+8PTnFRQvjanXeVt5NoHCNw oE3jQ+n0K5t7S2phYJMTeMLJjeLs6adlyB5lzK5CR8Ajv1+7y1DtjIZnMw+YUjGd ku01T7A1OJT5zFeq5D6ncrr/6mz9M7w7cGx6FCwP5PJ5CKxDmUqzuYYWidJMdbrM 5jnqolGNFeq4xbWkHvFtbxKCjkb6YEEPERlbKRDJ5Qk9KwuRvIB8u1ZeCY+/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuYNJwfjpJXcMHB+lzfn/wtNY5jgwHwYDVR0j BBgwFoAU37Hz+m9CDfAZBVL8CXKFmvRfNo4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRW55ZGhwQlZta2E0V05DZFF3aGtmbVJudXFFNk1GbTV4MnFZM3Zwb3Nv algvMC9ERkIxRjNGQTZGNDIwREYwMTkwNTUyRkMwOTcyODU5QUY0NUYzNjhFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQjFGM0ZBNkY0MjBERjAx OTA1NTJGQzA5NzI4NTlBRjQ1RjM2OEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RW55ZGhwQlZta2E0V05DZFF3aGtmbVJudXFFNk1GbTV4MnFZM3Zwb3NvalgvMC9E RkIxRjNGQTZGNDIwREYwMTkwNTUyRkMwOTcyODU5QUY0NUYzNjhFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZulBRB0yJ0WCwXlRdGCHzvdWlz5OUgATD+zakYVfBL0e7XqZH74bSxKiiQKw wk/JoCNHDPlC+tmVIMmi7W9vgzrKZ/8ROaIVcTSr5sOMZQWJawGfTQAfTiBoGVwd YGx4j+5eI77Fzj6BY14Cf3TvhiwWmAPL3j/+7V95JOVvt6At0pYpk8VlOTu/TuLF wCm8dWEIAaMBTbf05w2KdpyGcpv39R3da338esK/miFubsc/m0VALo/CX6x+SO5v wOY8jW7DahE0NKDu98LeTgkNZMNNZgLB166bs1uy5jcEm51FkareHFYaGywMcc5P gSvjtxg9285+tS+ohwVazxYNkQ== -----END CERTIFICATE-----Generated at Wed Nov 5 05:11:26 2025 by rpki-client