$ rpki-client -vvf rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft File: DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft (raw, json) Hash identifier: S8butSgfpi6OHYYavcqxS/ztBrXanO9tMoY7aDyLoAs= Subject key identifier: 6A:2E:3B:E5:27:5F:1B:F9:52:5A:8B:03:C9:E5:02:F4:11:64:6F:52 Authority key identifier: DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 Certificate issuer: /CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Certificate serial: 02BA2E009502166B57A86F040B799059DDE82970 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft Manifest number: 0308 Signing time: Tue 04 Nov 2025 15:13:44 +0000 Manifest this update: Tue 04 Nov 2025 15:08:44 +0000 Manifest next update: Wed 05 Nov 2025 16:05:44 +0000 Files and hashes: 1: 323830343a6561383a3a2f33322d3438203d3e20323632393636.roa (hash: k3mQQh+jFVJ+W9lI5qcYz2pIEXAoMKMazd3p9xRcR90=) 2: DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl (hash: k5VX35qrSnL56y3ZceHuzxjDyc3MIvV9P4Kn0Fhn7Ok=) 3: 3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa (hash: Z6rpwRyuxvgqZK9wg3IWbxseWkxo3KvfvA7U8nx0qtI=) 4: 3138362e3235302e32382e302f32322d3235203d3e20323632393636.roa (hash: iKC8mrbvMcLPzl1+sFNxgHBkh7HGux1xw4YCVG73YFo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 16:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ba:2e:00:95:02:16:6b:57:a8:6f:04:0b:79:90:59:dd:e8:29:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Validity Not Before: Nov 4 15:08:44 2025 GMT Not After : Nov 5 16:05:44 2025 GMT Subject: CN=6A2E3BE5275F1BF9525A8B03C9E502F411646F52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:66:5e:7e:d5:25:49:a5:25:39:5e:59:99:4f: 77:76:c2:b4:19:d1:3d:ac:5d:58:8b:ae:ae:b1:6f: eb:0a:3c:11:51:00:5c:5e:0f:4d:c3:42:98:65:06: 43:f6:e3:df:af:0e:5e:8f:24:66:aa:16:8e:17:77: 50:e5:32:a0:ae:2b:94:55:90:3e:a2:04:39:0e:b3: 4e:7a:b7:14:e9:61:08:cb:33:f5:1c:92:98:45:45: e5:e4:a9:4a:6b:68:12:0b:50:3d:7d:80:ac:55:7a: 54:e6:bd:f8:ea:09:c4:60:d7:99:b8:89:86:85:25: 2d:cf:60:37:46:dd:9a:f7:d6:bc:24:be:89:ec:ab: eb:03:2b:ca:f4:07:78:27:9a:e8:3a:32:6b:08:2b: 71:9b:56:6f:6e:d6:dd:03:58:a6:af:da:0a:e2:bc: b2:16:a8:54:98:e8:37:1d:84:e4:38:83:28:06:c4: 40:d1:3e:34:83:8c:48:bc:0a:c7:29:0a:be:f3:83: bc:a4:d1:a0:06:4e:40:be:b6:9a:c9:e2:7d:e0:a1: 72:b9:04:12:bd:29:5c:8b:f8:1b:d9:c8:85:89:1a: 7d:c0:30:1c:4e:7b:5a:79:98:7e:a1:e5:ff:bc:18: 74:d5:e3:eb:ee:e0:f5:35:ee:b9:0f:96:61:de:40: 20:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2E:3B:E5:27:5F:1B:F9:52:5A:8B:03:C9:E5:02:F4:11:64:6F:52 X509v3 Authority Key Identifier: keyid:DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0b:5e:28:1b:2f:41:bc:89:85:7c:cf:ef:62:fa:55:c9:ea: 59:51:72:45:65:51:7b:24:38:31:3c:86:97:42:78:da:cb:c9: 9e:4d:57:a2:49:6f:ee:a0:b4:9e:48:7e:0c:6e:20:39:18:fe: a8:ac:a9:5d:12:40:30:b4:e7:2e:1e:b5:a7:bd:e1:93:c5:06: 37:84:4d:26:e8:3a:56:d7:73:6a:4b:6e:74:55:6e:58:b4:15: 69:61:3c:2d:67:ba:30:e2:26:ae:a1:5a:b1:64:bb:aa:4a:f3: 4d:34:77:a0:87:f9:a2:81:c8:e2:76:86:32:ae:b3:ee:7f:09: 5b:91:3a:06:41:37:bd:94:7e:9a:b3:32:82:1c:53:d6:1b:80: 09:b7:ce:17:5f:f4:d1:80:d4:f1:26:9e:2d:81:a5:dd:1e:98: 26:81:9f:41:7a:e0:fc:b0:e6:1d:49:d4:46:4c:fb:aa:2c:71: 02:cd:d4:fa:76:9c:91:ee:8a:c2:ad:28:de:3f:4b:47:77:64: fc:b0:19:d9:9f:d3:0e:cb:51:02:66:9d:6b:04:9e:79:48:57: 09:83:a6:96:e9:d9:92:24:2e:02:44:f4:f7:9b:24:7c:89:52: 0d:e4:d3:4f:f8:23:c7:c0:c4:40:e1:ef:7c:ea:41:b4:54:b7: 03:e6:a7:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUArouAJUCFmtXqG8EC3mQWd3oKXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2MDExM0RCODQ3RUU0RkRGRUNGOEU3QjMyRDhDQjBB MjhBNDIyOTAeFw0yNTExMDQxNTA4NDRaFw0yNTExMDUxNjA1NDRaMDMxMTAvBgNV BAMTKDZBMkUzQkU1Mjc1RjFCRjk1MjVBOEIwM0M5RTUwMkY0MTE2NDZGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Zl5+1SVJpSU5XlmZT3d2wrQZ 0T2sXViLrq6xb+sKPBFRAFxeD03DQphlBkP249+vDl6PJGaqFo4Xd1DlMqCuK5RV kD6iBDkOs056txTpYQjLM/UckphFReXkqUpraBILUD19gKxVelTmvfjqCcRg15m4 iYaFJS3PYDdG3Zr31rwkvonsq+sDK8r0B3gnmug6MmsIK3GbVm9u1t0DWKav2gri vLIWqFSY6DcdhOQ4gygGxEDRPjSDjEi8CscpCr7zg7yk0aAGTkC+tprJ4n3goXK5 BBK9KVyL+BvZyIWJGn3AMBxOe1p5mH6h5f+8GHTV4+vu4PU17rkPlmHeQCA1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUai475SdfG/lSWosDyeUC9BFkb1IwHwYDVR0j BBgwFoAU22ARPbhH7k/f7Pjnsy2MsKKKQikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2szZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01z Q2ovMS9EQjYwMTEzREI4NDdFRTRGREZFQ0Y4RTdCMzJEOENCMEEyOEE0MjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCNjAxMTNEQjg0N0VFNEZE RkVDRjhFN0IzMkQ4Q0IwQTI4QTQyMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2szZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01zQ2ovMS9E QjYwMTEzREI4NDdFRTRGREZFQ0Y4RTdCMzJEOENCMEEyOEE0MjI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPgteKBsvQbyJhXzP72L6VcnqWVFyRWVReyQ4MTyGl0J42svJnk1Xoklv7qC0 nkh+DG4gORj+qKypXRJAMLTnLh61p73hk8UGN4RNJug6VtdzaktudFVuWLQVaWE8 LWe6MOImrqFasWS7qkrzTTR3oIf5ooHI4naGMq6z7n8JW5E6BkE3vZR+mrMyghxT 1huACbfOF1/00YDU8SaeLYGl3R6YJoGfQXrg/LDmHUnURkz7qixxAs3U+nacke6K wq0o3j9LR3dk/LAZ2Z/TDstRAmadawSeeUhXCYOmlunZkiQuAkT095skfIlSDeTT T/gjx8DEQOHvfOpBtFS3A+anqQ== -----END CERTIFICATE-----Generated at Wed Nov 5 09:03:06 2025 by rpki-client