$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft File: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json) Hash identifier: 4sai2B1bYuXUmupbew8samqoYl2yuQaZFv/Q/tMgOkM= Subject key identifier: 51:4F:F2:42:54:56:7A:59:09:B7:0B:53:79:35:D1:B5:78:D5:A6:09 Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF Certificate issuer: /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF Certificate serial: 5CC36E3E2C8DE6230E1B2EFC7A7CCAA86598C57D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer Subject info access: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft Manifest number: 0302 Signing time: Tue 04 Nov 2025 14:40:04 +0000 Manifest this update: Tue 04 Nov 2025 14:35:04 +0000 Manifest next update: Wed 05 Nov 2025 16:07:04 +0000 Files and hashes: 1: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: 40prK8ppN8vt4mijpoc2pjLbuuqUZaJ9Grs/fMA2kDg=) 2: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: lMncz++kvT6MHNunBcJ6oHQBvWwWSBFElu5ZGi2kkO0=) 3: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: aYmbYOpY5SShrhvh+sn3TuEngcPmnkV++Wm3IjwjkBU=) 4: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: gq23d3+kRAY4dWCEoVb03VA6J8a063C0N58YBiErots=) 5: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: d4RD2/KeG1YPHk0v9voZ54DgtjeHPBbE3WMduZTo2Tk=) 6: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: 3KJaKxQH8BfvmqPdr0f3pk4VVvf9POaN3twm4TXLa3A=) 7: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: DVRW50QGSfKkCx0M1+VA9DFoSNRjF7ldfT0pmPw8n2A=) 8: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: Em9nIZXC1XnJHHkeLO0Am9KIh2IHxIcFrayfBCdDiB4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 16:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c3:6e:3e:2c:8d:e6:23:0e:1b:2e:fc:7a:7c:ca:a8:65:98:c5:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF Validity Not Before: Nov 4 14:35:04 2025 GMT Not After : Nov 5 16:07:04 2025 GMT Subject: CN=514FF24254567A5909B70B537935D1B578D5A609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:ce:3b:77:0d:d9:ff:f9:f7:f2:12:95:df: 69:16:e8:be:6f:ac:84:47:e6:d2:5e:58:a8:4b:4a: 65:6e:a2:73:b7:74:cf:fb:b0:2d:5f:cc:1c:31:12: 58:d3:19:80:3a:d6:cb:42:45:9f:f2:e4:b5:ad:f5: db:c1:d8:f6:88:1b:82:33:cd:ac:02:43:a1:32:46: c8:16:d2:ac:b6:7b:f9:8b:26:e8:22:1b:4b:37:fc: f8:e2:74:5c:32:2f:2f:f6:ce:98:ab:85:37:9f:2d: 02:4a:3a:cd:12:a4:28:23:48:52:d7:a7:47:f3:da: 24:b5:69:c2:f8:10:c6:55:c2:32:f0:34:13:d5:ff: 9b:d7:68:52:61:ce:ad:e1:67:81:42:f9:60:2f:12: d6:af:4b:55:95:39:f6:6a:19:30:92:fa:8a:4a:2d: ec:e1:d4:a3:31:68:7c:aa:91:a9:31:29:a6:6f:7e: 76:4d:37:db:a4:4e:97:db:97:67:78:9a:18:a4:03: b2:fe:a5:b2:b4:08:a8:06:c5:97:28:0a:59:d4:61: 0e:82:bb:32:df:42:4e:31:c1:dc:70:8f:15:5a:bb: 6d:f0:8f:9f:d0:2f:38:85:68:fd:21:2b:af:b2:56: 4e:9d:5a:b8:0e:68:57:f6:20:04:41:93:59:e5:94: d0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4F:F2:42:54:56:7A:59:09:B7:0B:53:79:35:D1:B5:78:D5:A6:09 X509v3 Authority Key Identifier: keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b2:65:a2:ae:80:3a:c5:49:2a:bc:08:44:45:ca:5d:c6:dc: a6:a9:0a:48:c9:75:5b:8c:39:b2:61:bc:9d:c2:9d:c3:b2:72: 79:47:5d:09:bb:d2:f9:d9:3a:c1:1d:07:76:46:3f:17:89:b1: 74:1d:eb:09:ed:86:b7:8d:a5:65:ac:dc:97:43:55:80:c3:bd: a2:bb:18:31:90:5e:be:4f:88:34:b2:aa:c1:b2:3e:9c:e3:13: 4e:83:c7:6c:86:9f:f5:cd:55:e4:92:e6:97:d0:b3:c6:f5:93: 7e:b1:cf:91:3e:37:bb:d0:ab:86:eb:0c:28:5c:57:b7:04:ed: 9a:f0:2f:48:bc:3e:98:bd:4c:c8:64:69:81:41:cd:a2:22:22: 67:5d:34:3a:8d:57:3b:36:c6:2d:d7:e0:a0:28:dd:76:5b:d2: 00:60:26:d0:f0:ec:6c:24:33:8b:32:38:50:84:65:cc:03:95: c6:12:63:33:4c:a3:ec:ee:eb:50:d1:28:ef:4c:ee:b8:55:d2: f5:0a:1e:40:a5:5a:2a:a2:4a:fb:47:49:9e:a6:a9:0f:7d:31: 74:14:42:2f:2d:ea:bb:68:0d:14:95:0a:7e:2c:f1:67:92:df: b7:c6:7c:63:a3:5f:0d:09:ad:a4:ad:19:3e:9b:43:d1:23:8f: 10:5f:ce:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXMNuPiyN5iMOGy78enzKqGWYxX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZGRDM1NzNBQzQwNkI0RUZCMUY0NTgxNDlDRjczQzMx QTJGRjRFRjAeFw0yNTExMDQxNDM1MDRaFw0yNTExMDUxNjA3MDRaMDMxMTAvBgNV BAMTKDUxNEZGMjQyNTQ1NjdBNTkwOUI3MEI1Mzc5MzVEMUI1NzhENUE2MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyVM47dw3Z//n38hKV32kW6L5v rIRH5tJeWKhLSmVuonO3dM/7sC1fzBwxEljTGYA61stCRZ/y5LWt9dvB2PaIG4Iz zawCQ6EyRsgW0qy2e/mLJugiG0s3/PjidFwyLy/2zpirhTefLQJKOs0SpCgjSFLX p0fz2iS1acL4EMZVwjLwNBPV/5vXaFJhzq3hZ4FC+WAvEtavS1WVOfZqGTCS+opK Lezh1KMxaHyqkakxKaZvfnZNN9ukTpfbl2d4mhikA7L+pbK0CKgGxZcoClnUYQ6C uzLfQk4xwdxwjxVau23wj5/QLziFaP0hK6+yVk6dWrgOaFf2IARBk1nllNBNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUU/yQlRWelkJtwtTeTXRtXjVpgkwHwYDVR0j BBgwFoAU3/01c6xAa077H0WBSc9zwxov9O8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFZnRUpNbUdlSnZKUFJYSEhtZ0hWbTZHYzhlUlpaU2ZXa0F2aHZUUUwy a28vMS9ERkZEMzU3M0FDNDA2QjRFRkIxRjQ1ODE0OUNGNzNDMzFBMkZGNEVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGRkQzNTczQUM0MDZCNEVG QjFGNDU4MTQ5Q0Y3M0MzMUEyRkY0RUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFZnRUpNbUdlSnZKUFJYSEhtZ0hWbTZHYzhlUlpaU2ZXa0F2aHZUUUwya28vMS9E RkZEMzU3M0FDNDA2QjRFRkIxRjQ1ODE0OUNGNzNDMzFBMkZGNEVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKbJloq6AOsVJKrwIREXKXcbcpqkKSMl1W4w5smG8ncKdw7JyeUddCbvS+dk6 wR0HdkY/F4mxdB3rCe2Gt42lZazcl0NVgMO9orsYMZBevk+INLKqwbI+nOMTToPH bIaf9c1V5JLml9CzxvWTfrHPkT43u9CrhusMKFxXtwTtmvAvSLw+mL1MyGRpgUHN oiIiZ100Oo1XOzbGLdfgoCjddlvSAGAm0PDsbCQzizI4UIRlzAOVxhJjM0yj7O7r UNEo70zuuFXS9QoeQKVaKqJK+0dJnqapD30xdBRCLy3qu2gNFJUKfizxZ5Lft8Z8 Y6NfDQmtpK0ZPptD0SOPEF/OWg== -----END CERTIFICATE-----Generated at Wed Nov 5 02:46:38 2025 by rpki-client