$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft File: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json) Hash identifier: AefqVe6DM139eMqwThXE//zDLWWjU8f9NiQj+0kw9rc= Subject key identifier: 86:38:2E:A9:A8:9E:CD:90:C6:E4:7C:B1:5A:EB:9D:7A:E3:2B:4B:21 Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF Certificate issuer: /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF Certificate serial: 693F832052D1C45130495DD474E5C0315DE5E42F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer Subject info access: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft Manifest number: 027A Signing time: Thu 24 Jul 2025 21:40:03 +0000 Manifest this update: Thu 24 Jul 2025 21:35:03 +0000 Manifest next update: Fri 25 Jul 2025 21:58:03 +0000 Files and hashes: 1: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: P9rP0lhjBAivCvnyKPyE14XskJgD/IF+xneUsHhjSzI=) 2: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: DVRW50QGSfKkCx0M1+VA9DFoSNRjF7ldfT0pmPw8n2A=) 3: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: Em9nIZXC1XnJHHkeLO0Am9KIh2IHxIcFrayfBCdDiB4=) 4: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: 3KJaKxQH8BfvmqPdr0f3pk4VVvf9POaN3twm4TXLa3A=) 5: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: gq23d3+kRAY4dWCEoVb03VA6J8a063C0N58YBiErots=) 6: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: 40prK8ppN8vt4mijpoc2pjLbuuqUZaJ9Grs/fMA2kDg=) 7: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: lMncz++kvT6MHNunBcJ6oHQBvWwWSBFElu5ZGi2kkO0=) 8: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: d4RD2/KeG1YPHk0v9voZ54DgtjeHPBbE3WMduZTo2Tk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 21:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:3f:83:20:52:d1:c4:51:30:49:5d:d4:74:e5:c0:31:5d:e5:e4:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF Validity Not Before: Jul 24 21:35:03 2025 GMT Not After : Jul 25 21:58:03 2025 GMT Subject: CN=86382EA9A89ECD90C6E47CB15AEB9D7AE32B4B21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:18:30:ee:80:5f:3f:07:e0:59:95:87:4d:b9: 47:79:36:a1:b2:d0:21:cd:78:0c:45:40:c3:90:84: d1:aa:82:77:79:43:52:e5:80:77:34:95:b9:b2:c0: ba:7a:98:0f:1f:54:43:3c:f2:eb:8c:96:68:0d:2c: 61:b3:75:fd:77:50:8d:23:ca:ea:0e:1c:fc:fe:a6: cb:5e:34:77:74:7b:98:98:91:43:e9:25:c4:8a:ce: 27:bc:4f:59:75:38:61:3d:16:8b:69:9e:01:d9:16: cf:dd:55:e6:65:7e:b5:a8:50:55:0b:d1:45:06:c2: 74:00:02:3d:de:35:39:71:49:0b:a0:41:79:ec:9f: f8:50:52:99:e5:b7:2b:d3:4c:06:18:ff:be:ac:43: a8:2f:6a:b2:41:34:41:fe:89:29:33:09:04:50:bf: 96:3b:1d:4a:e4:f6:27:c0:0c:d8:f5:f4:b2:e6:90: 06:ab:df:57:3f:d4:4f:f9:7e:8b:2c:b2:24:d0:b5: 5f:cb:8d:ad:d7:eb:68:b8:24:21:34:75:01:54:f8: 05:11:cb:3b:08:5b:03:a3:a1:a7:12:08:09:12:57: 83:bd:03:67:6f:e7:52:f0:3e:6c:51:c6:64:52:02: 3b:bb:5b:99:87:ba:89:ac:bd:cb:33:28:bd:f3:c6: 56:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:38:2E:A9:A8:9E:CD:90:C6:E4:7C:B1:5A:EB:9D:7A:E3:2B:4B:21 X509v3 Authority Key Identifier: keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e9:37:f7:9f:18:1a:ea:65:1f:41:a3:18:46:c0:f1:11:ef: 11:04:78:1f:99:95:56:d8:f8:33:75:03:48:10:20:e1:82:6a: c9:34:f1:36:27:95:be:5a:6e:2f:99:fc:6e:0f:8b:24:9e:5e: d3:ec:e1:06:b3:8c:e2:97:13:c3:e7:55:99:0f:6f:ed:88:e4: cf:be:a7:9d:57:50:8f:8f:bf:2a:bc:e7:52:87:b2:70:ca:9b: d5:50:99:72:10:46:8e:db:73:f9:93:02:3a:9e:98:c1:1f:81: f9:54:1e:8e:33:79:02:a3:6a:46:6a:55:c5:04:f2:50:4a:3e: 42:f3:2d:de:49:b4:7c:d3:f8:5b:b3:9c:34:d0:45:14:34:6c: 0f:89:66:0f:f5:3f:e0:03:39:35:06:b4:07:28:34:09:e0:d2: 5b:0c:26:5d:43:f7:a0:22:bc:c9:9e:85:79:c9:54:77:3c:f0: 30:08:8c:28:30:21:6e:c1:83:74:ee:97:34:c5:e1:46:c8:c7: f7:04:39:e5:80:af:fc:c5:09:26:b8:a5:8b:55:b5:9b:f1:dd: 35:d2:91:91:fe:ce:79:b1:52:96:dd:62:06:2b:a6:76:1a:0e: 60:08:c7:0b:87:e8:65:56:8b:f1:98:71:80:49:54:d2:15:ca: 89:13:42:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaT+DIFLRxFEwSV3UdOXAMV3l5C8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZGRDM1NzNBQzQwNkI0RUZCMUY0NTgxNDlDRjczQzMx QTJGRjRFRjAeFw0yNTA3MjQyMTM1MDNaFw0yNTA3MjUyMTU4MDNaMDMxMTAvBgNV BAMTKDg2MzgyRUE5QTg5RUNEOTBDNkU0N0NCMTVBRUI5RDdBRTMyQjRCMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GDDugF8/B+BZlYdNuUd5NqGy 0CHNeAxFQMOQhNGqgnd5Q1LlgHc0lbmywLp6mA8fVEM88uuMlmgNLGGzdf13UI0j yuoOHPz+psteNHd0e5iYkUPpJcSKzie8T1l1OGE9FotpngHZFs/dVeZlfrWoUFUL 0UUGwnQAAj3eNTlxSQugQXnsn/hQUpnltyvTTAYY/76sQ6gvarJBNEH+iSkzCQRQ v5Y7HUrk9ifADNj19LLmkAar31c/1E/5fosssiTQtV/Lja3X62i4JCE0dQFU+AUR yzsIWwOjoacSCAkSV4O9A2dv51LwPmxRxmRSAju7W5mHuomsvcszKL3zxlapAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhjguqaiezZDG5HyxWuudeuMrSyEwHwYDVR0j BBgwFoAU3/01c6xAa077H0WBSc9zwxov9O8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFZnRUpNbUdlSnZKUFJYSEhtZ0hWbTZHYzhlUlpaU2ZXa0F2aHZUUUwy a28vMS9ERkZEMzU3M0FDNDA2QjRFRkIxRjQ1ODE0OUNGNzNDMzFBMkZGNEVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGRkQzNTczQUM0MDZCNEVG QjFGNDU4MTQ5Q0Y3M0MzMUEyRkY0RUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFZnRUpNbUdlSnZKUFJYSEhtZ0hWbTZHYzhlUlpaU2ZXa0F2aHZUUUwya28vMS9E RkZEMzU3M0FDNDA2QjRFRkIxRjQ1ODE0OUNGNzNDMzFBMkZGNEVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALuk3958YGuplH0GjGEbA8RHvEQR4H5mVVtj4M3UDSBAg4YJqyTTxNieVvlpu L5n8bg+LJJ5e0+zhBrOM4pcTw+dVmQ9v7Yjkz76nnVdQj4+/KrznUoeycMqb1VCZ chBGjttz+ZMCOp6YwR+B+VQejjN5AqNqRmpVxQTyUEo+QvMt3km0fNP4W7OcNNBF FDRsD4lmD/U/4AM5NQa0Byg0CeDSWwwmXUP3oCK8yZ6FeclUdzzwMAiMKDAhbsGD dO6XNMXhRsjH9wQ55YCv/MUJJrili1W1m/HdNdKRkf7OebFSlt1iBiumdhoOYAjH C4foZVaL8ZhxgElU0hXKiRNC/w== -----END CERTIFICATE-----Generated at Thu Jul 24 23:29:59 2025 by rpki-client