$ rpki-client -vvf rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft File: DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft (raw, json) Hash identifier: OeeYrZQcVTs+v8P+kL2eCJgrVoffO0oUzYSj/mwKOsw= Subject key identifier: 82:5C:7F:D5:1E:6B:98:F5:01:14:66:4C:EB:63:D9:B6:F0:DB:03:F4 Authority key identifier: DC:43:2D:E2:BD:64:EF:97:50:DB:F1:DF:60:3D:30:0C:11:35:1D:88 Certificate issuer: /CN=DC432DE2BD64EF9750DBF1DF603D300C11351D88 Certificate serial: 25DE3EE76E294043E3279B40ED7E17040D08AE33 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC432DE2BD64EF9750DBF1DF603D300C11351D88.cer Subject info access: rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft Manifest number: 011C Signing time: Thu 06 Nov 2025 01:57:11 +0000 Manifest this update: Thu 06 Nov 2025 01:52:11 +0000 Manifest next update: Fri 07 Nov 2025 02:54:11 +0000 Files and hashes: 1: 323830343a366264343a3a2f33322d3438203d3e20323730343238.roa (hash: HcbDBo5vEhZDz22x2e4nDgT/2l3+LdsNneneCzQ9yYo=) 2: DC432DE2BD64EF9750DBF1DF603D300C11351D88.crl (hash: 5JEGIKoguI+bxackAez99pG9vOi7T9Y60OGpruci43Q=) 3: 3139302e3131312e3138342e302f32322d3234203d3e20323730343238.roa (hash: gEKEaIZuFtCa2m15vfxLEmbSM0J0ycpP6AHITuG0TkU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.crl rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC432DE2BD64EF9750DBF1DF603D300C11351D88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 07 Nov 2025 02:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:de:3e:e7:6e:29:40:43:e3:27:9b:40:ed:7e:17:04:0d:08:ae:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC432DE2BD64EF9750DBF1DF603D300C11351D88 Validity Not Before: Nov 6 01:52:11 2025 GMT Not After : Nov 7 02:54:11 2025 GMT Subject: CN=825C7FD51E6B98F50114664CEB63D9B6F0DB03F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c9:73:16:4b:87:49:32:68:a0:6a:c8:f2:b7: f8:f8:b2:4d:44:1e:ee:98:c4:3d:98:40:c3:96:d1: 5d:91:2d:34:28:3f:7a:1e:01:40:b2:79:27:9d:53: 30:f8:cd:6f:d5:82:7b:bd:4e:82:65:c3:9f:77:17: ce:92:73:0a:5f:09:3e:e7:2d:06:11:44:7d:3d:7c: 8b:be:65:e6:b3:5d:97:e2:cc:25:9e:7d:fa:41:03: a9:70:9d:e8:47:45:03:86:f0:5b:87:58:3b:0b:2d: 07:a9:fa:ee:26:07:6f:41:39:af:8a:37:85:9f:40: 45:04:88:67:dd:23:d2:08:31:f5:45:81:b9:95:e3: ad:1c:01:00:c7:36:90:89:eb:26:48:85:ce:9f:54: a1:f1:61:10:f2:05:0f:94:de:49:15:18:ea:54:88: f6:13:d1:ed:99:0d:47:85:3b:a6:51:8c:1e:6e:df: 99:9b:df:d1:e9:9d:45:81:13:22:4a:d5:bb:49:fa: 1e:a9:50:56:d8:4b:32:98:e4:2f:a6:9a:cd:6d:da: a6:13:52:40:4f:56:b4:b1:2e:06:c2:13:d5:dc:81: b5:f5:be:8e:08:3b:b7:08:be:69:df:ac:2b:2a:d1: be:e6:0b:79:69:00:17:5a:dc:e8:79:e8:8e:d7:cf: 64:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5C:7F:D5:1E:6B:98:F5:01:14:66:4C:EB:63:D9:B6:F0:DB:03:F4 X509v3 Authority Key Identifier: keyid:DC:43:2D:E2:BD:64:EF:97:50:DB:F1:DF:60:3D:30:0C:11:35:1D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC432DE2BD64EF9750DBF1DF603D300C11351D88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:1c:3f:ce:a6:17:ec:38:79:e2:a6:0d:d1:5f:c6:8d:dd:d5: 04:74:b4:90:df:26:37:03:1e:b0:2e:21:75:44:a2:c1:b8:ba: 7f:76:b3:ac:77:e2:22:33:11:c0:8f:b3:04:ca:9f:3b:c3:03: f3:01:c6:bc:9a:91:a1:1b:4c:d2:5c:97:4d:88:80:37:ea:bf: 21:96:a9:0f:e5:b8:f6:87:17:c2:20:f3:7c:ec:1f:1f:11:81: 98:52:98:74:f5:93:04:e7:1a:73:c2:eb:da:7b:03:91:76:7d: b2:a1:b8:2e:d8:fb:18:48:99:8b:d6:4a:47:d0:ec:26:f7:c7: fd:4c:c5:ca:23:b7:95:d3:99:41:6c:ee:b7:0e:6a:1c:03:dd: 40:c5:5e:3a:d8:4e:ad:10:83:01:67:e0:af:2f:3f:4b:d3:b5: f5:e0:51:c8:69:30:69:9f:62:4e:c9:3e:7f:f3:d0:c5:ec:81: b2:df:fb:90:26:e4:ab:76:e1:58:65:cd:f7:5f:f5:38:5c:12: aa:c7:4a:f6:8b:5c:df:a4:bb:3d:cc:26:13:3a:0b:da:be:80: 3d:b1:db:0b:7d:46:d4:e6:7c:23:6c:db:c6:7d:6f:61:e0:42: ca:e9:ae:d5:a5:53:d8:04:1d:b3:fa:58:7f:da:d9:19:3d:79: 75:46:a4:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJd4+524pQEPjJ5tA7X4XBA0IrjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM0MzJERTJCRDY0RUY5NzUwREJGMURGNjAzRDMwMEMx MTM1MUQ4ODAeFw0yNTExMDYwMTUyMTFaFw0yNTExMDcwMjU0MTFaMDMxMTAvBgNV BAMTKDgyNUM3RkQ1MUU2Qjk4RjUwMTE0NjY0Q0VCNjNEOUI2RjBEQjAzRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzyXMWS4dJMmigasjyt/j4sk1E Hu6YxD2YQMOW0V2RLTQoP3oeAUCyeSedUzD4zW/Vgnu9ToJlw593F86ScwpfCT7n LQYRRH09fIu+ZeazXZfizCWeffpBA6lwnehHRQOG8FuHWDsLLQep+u4mB29BOa+K N4WfQEUEiGfdI9IIMfVFgbmV460cAQDHNpCJ6yZIhc6fVKHxYRDyBQ+U3kkVGOpU iPYT0e2ZDUeFO6ZRjB5u35mb39HpnUWBEyJK1btJ+h6pUFbYSzKY5C+mms1t2qYT UkBPVrSxLgbCE9XcgbX1vo4IO7cIvmnfrCsq0b7mC3lpABda3Oh56I7Xz2TNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUglx/1R5rmPUBFGZM62PZtvDbA/QwHwYDVR0j BBgwFoAU3EMt4r1k75dQ2/HfYD0wDBE1HYgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3F3NUtzYkZRYnB1YzVTbU14MjJoMkU3MVNnYXZGaURNYVAxRHgzcFpz dTcvMC9EQzQzMkRFMkJENjRFRjk3NTBEQkYxREY2MDNEMzAwQzExMzUxRDg4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDNDMyREUyQkQ2NEVGOTc1 MERCRjFERjYwM0QzMDBDMTEzNTFEODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3F3NUtzYkZRYnB1YzVTbU14MjJoMkU3MVNnYXZGaURNYVAxRHgzcFpzdTcvMC9E QzQzMkRFMkJENjRFRjk3NTBEQkYxREY2MDNEMzAwQzExMzUxRDg4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAURw/zqYX7Dh54qYN0V/Gjd3VBHS0kN8mNwMesC4hdUSiwbi6f3azrHfiIjMR wI+zBMqfO8MD8wHGvJqRoRtM0lyXTYiAN+q/IZapD+W49ocXwiDzfOwfHxGBmFKY dPWTBOcac8Lr2nsDkXZ9sqG4Ltj7GEiZi9ZKR9DsJvfH/UzFyiO3ldOZQWzutw5q HAPdQMVeOthOrRCDAWfgry8/S9O19eBRyGkwaZ9iTsk+f/PQxeyBst/7kCbkq3bh WGXN91/1OFwSqsdK9otc36S7PcwmEzoL2r6APbHbC31G1OZ8I2zbxn1vYeBCyumu 1aVT2AQds/pYf9rZGT15dUak1A== -----END CERTIFICATE-----Generated at Thu Nov 6 06:19:21 2025 by rpki-client