$ rpki-client -vvf rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft File: DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft (raw, json) Hash identifier: 8AsCsvcaaP2Ti85OEbw4vnxvQdyO9COT56JesjSIn9k= Subject key identifier: A2:00:DF:0E:7A:20:5F:D4:1F:42:B1:9D:0E:71:BA:EB:97:0D:6E:F6 Authority key identifier: DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE Certificate issuer: /CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE Certificate serial: 78968132CAA2E0F8D8EA9BD6B6A06099D26A6205 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer Subject info access: rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft Manifest number: 0111 Signing time: Mon 03 Nov 2025 14:30:41 +0000 Manifest this update: Mon 03 Nov 2025 14:25:41 +0000 Manifest next update: Tue 04 Nov 2025 17:48:41 +0000 Files and hashes: 1: 3137372e3132352e37322e302f32342d3234203d3e203532373636.roa (hash: 8l8sj6Lhn0LhQN9ND1pd5nXSQ+34FWL+b1PnT0OphM8=) 2: 3137372e3132352e37372e302f32342d3234203d3e203532373636.roa (hash: hMV0PmP1bIkVe5jy7BgKW2ObEfuIM/VAOkdwThtzkN0=) 3: DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl (hash: mIU/ICjo9eJxS8gCe+4kIwRQ+K3wWcGQyE4SZ29rnjE=) 4: 3137372e3132352e37332e302f32342d3234203d3e203532373636.roa (hash: yHmJCMANwgyJZi7RpIORKezVofQsOnGYoQYEeBdFCP0=) 5: 3137372e3132352e37322e302f32332d3233203d3e203532373636.roa (hash: RUgWQbSbfKqm4Hfu18+LGJPAqutuS6ikmtMKvWzJroY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 17:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:96:81:32:ca:a2:e0:f8:d8:ea:9b:d6:b6:a0:60:99:d2:6a:62:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE Validity Not Before: Nov 3 14:25:41 2025 GMT Not After : Nov 4 17:48:41 2025 GMT Subject: CN=A200DF0E7A205FD41F42B19D0E71BAEB970D6EF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cb:bd:9d:4d:40:ef:81:cc:cc:8c:4d:c6:3d: 1a:49:11:6e:32:74:0d:30:90:d8:2c:4a:eb:bd:00: 3c:f4:e3:cd:9e:27:4a:3e:57:3f:51:b4:09:e9:b1: 28:a8:33:d1:07:a5:62:06:25:7b:da:83:92:ca:bd: 9a:d5:4e:2b:20:43:9b:ff:65:93:a9:5a:c9:32:59: d7:fe:09:a9:d6:5b:da:e3:25:95:fb:6c:04:b6:64: 2a:97:f4:d6:d8:b4:5d:d9:8a:ff:e4:51:05:fe:ec: 50:93:78:01:e2:fe:dc:28:ea:19:50:a6:81:c8:18: 7a:42:14:77:94:0b:05:a1:9f:16:f5:56:69:f2:5a: 56:85:5e:91:05:84:e0:c0:68:e4:55:9c:ee:9b:31: 50:bc:0b:4d:f0:47:af:b6:cc:21:76:b5:4d:63:46: 05:23:b5:c8:63:71:66:34:4b:35:f2:dc:a5:a8:d0: 24:35:b2:7c:c0:e1:02:44:2b:a3:6d:c1:4c:c2:8f: 2f:6e:c0:bd:9f:1b:1b:80:6d:5a:99:b0:29:01:33: 4a:3e:c7:09:74:39:6d:ff:32:c1:45:f2:51:d1:f1: eb:ad:3d:1a:bd:f7:52:f1:c8:8d:98:92:fe:43:61: e9:dc:d0:2b:e2:3f:0d:a6:67:dd:d0:af:60:7f:6e: ce:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:00:DF:0E:7A:20:5F:D4:1F:42:B1:9D:0E:71:BA:EB:97:0D:6E:F6 X509v3 Authority Key Identifier: keyid:DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:41:32:b2:41:3a:d8:35:36:76:8b:90:e3:d8:45:7c:b7:32: a6:20:bb:cd:b5:ea:f6:fa:60:f0:0e:d4:2d:38:00:73:5e:e3: 76:8c:04:00:11:b0:06:00:46:01:22:74:e6:93:cf:2f:e2:79: ec:94:98:bf:76:fd:df:cc:83:3a:b2:66:db:2e:fe:48:09:0b: 92:18:d2:b5:2c:1c:d4:d4:a9:19:4a:e7:bd:39:11:3f:45:61: b2:da:8b:2a:20:14:f9:d9:5e:6a:a1:13:cd:9c:21:c0:77:a1: 36:a3:59:72:f1:40:bf:f2:25:29:31:25:69:44:ce:fb:59:5a: dd:03:c3:ae:61:5f:e6:b3:9b:06:d6:c8:a8:75:96:92:ab:69: 35:3f:05:ef:f8:b3:a5:b6:c7:b7:f2:91:9b:94:fb:86:aa:e8: 19:73:b1:f5:72:b3:a2:aa:34:b5:1f:26:d7:27:3b:3e:2a:c7: 13:29:b9:32:68:a3:5b:8a:36:26:dc:ba:13:b0:5b:21:89:70: e9:29:d0:e6:32:dd:5c:0e:b1:60:c0:04:dd:b0:27:ab:05:cf: 59:62:c6:7f:33:8f:16:e5:af:cf:b7:9c:c8:96:f7:ed:73:d1: b6:37:ac:49:f5:a5:d4:a1:f3:b3:b6:4b:8d:67:79:5f:3a:1b: 6e:0f:02:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeJaBMsqi4PjY6pvWtqBgmdJqYgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJBOUJCNkZENTY3QTUwODNCN0JBMEJCMDdDRDMxMjEw RjNDOEJFRTAeFw0yNTExMDMxNDI1NDFaFw0yNTExMDQxNzQ4NDFaMDMxMTAvBgNV BAMTKEEyMDBERjBFN0EyMDVGRDQxRjQyQjE5RDBFNzFCQUVCOTcwRDZFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjy72dTUDvgczMjE3GPRpJEW4y dA0wkNgsSuu9ADz0482eJ0o+Vz9RtAnpsSioM9EHpWIGJXvag5LKvZrVTisgQ5v/ ZZOpWskyWdf+CanWW9rjJZX7bAS2ZCqX9NbYtF3Ziv/kUQX+7FCTeAHi/two6hlQ poHIGHpCFHeUCwWhnxb1VmnyWlaFXpEFhODAaORVnO6bMVC8C03wR6+2zCF2tU1j RgUjtchjcWY0SzXy3KWo0CQ1snzA4QJEK6NtwUzCjy9uwL2fGxuAbVqZsCkBM0o+ xwl0OW3/MsFF8lHR8eutPRq991LxyI2Ykv5DYenc0CviPw2mZ93Qr2B/bs6hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUogDfDnogX9QfQrGdDnG665cNbvYwHwYDVR0j BBgwFoAU26m7b9VnpQg7e6C7B80xIQ88i+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0NQUFp1UGppdVFCWWt2M0JhS1ZOcXFLNXQyN3ppcXA5ZmhCV1NTZUVv ZlYvMC9EQkE5QkI2RkQ1NjdBNTA4M0I3QkEwQkIwN0NEMzEyMTBGM0M4QkVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQTlCQjZGRDU2N0E1MDgz QjdCQTBCQjA3Q0QzMTIxMEYzQzhCRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0NQUFp1UGppdVFCWWt2M0JhS1ZOcXFLNXQyN3ppcXA5ZmhCV1NTZUVvZlYvMC9E QkE5QkI2RkQ1NjdBNTA4M0I3QkEwQkIwN0NEMzEyMTBGM0M4QkVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABUEyskE62DU2douQ49hFfLcypiC7zbXq9vpg8A7ULTgAc17jdowEABGwBgBG ASJ05pPPL+J57JSYv3b938yDOrJm2y7+SAkLkhjStSwc1NSpGUrnvTkRP0VhstqL KiAU+dleaqETzZwhwHehNqNZcvFAv/IlKTElaUTO+1la3QPDrmFf5rObBtbIqHWW kqtpNT8F7/izpbbHt/KRm5T7hqroGXOx9XKzoqo0tR8m1yc7PirHEym5MmijW4o2 Jty6E7BbIYlw6SnQ5jLdXA6xYMAE3bAnqwXPWWLGfzOPFuWvz7ecyJb37XPRtjes SfWl1KHzs7ZLjWd5Xzobbg8CtA== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:27 2025 by rpki-client