$ rpki-client -vvf rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft File: DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft (raw, json) Hash identifier: MNbeProwHGNzlya05tcdtSrzxgr1JPF0g4PfVPUsIx0= Subject key identifier: 53:00:22:E1:70:2C:83:70:97:72:E0:83:B4:0E:20:91:E0:F5:AB:09 Authority key identifier: DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17 Certificate issuer: /CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117 Certificate serial: 33AB103CC46827C8CEB03ED012B9276124D3314C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer Subject info access: rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft Manifest number: 02FF Signing time: Mon 03 Nov 2025 08:37:25 +0000 Manifest this update: Mon 03 Nov 2025 08:32:25 +0000 Manifest next update: Tue 04 Nov 2025 10:42:25 +0000 Files and hashes: 1: 323830343a353436383a3a2f33322d3335203d3e20323638363438.roa (hash: /GemfBvArZtukG4Y6RFLcXF3f1tLbIJXVDgtbWncR/o=) 2: DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl (hash: D+3gnzBOEVfbz4Z/fiLifaEIg5espr4tskxwUoIIa1U=) 3: 34352e3136342e3234342e302f32322d3234203d3e20323638363438.roa (hash: c0ivNdsbn1PNL+sK8V9iDiQA1Mt4huXCPkc/G0mHMQ0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ab:10:3c:c4:68:27:c8:ce:b0:3e:d0:12:b9:27:61:24:d3:31:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117 Validity Not Before: Nov 3 08:32:25 2025 GMT Not After : Nov 4 10:42:25 2025 GMT Subject: CN=530022E1702C83709772E083B40E2091E0F5AB09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:0d:a4:25:74:bb:cf:ca:f0:91:3c:a5:60: ec:8f:91:0e:cd:26:c4:ad:c8:f2:81:39:51:0f:8b: 60:48:f2:94:1f:a3:ee:e0:c5:ad:6c:54:08:a2:0c: b1:6c:1c:8a:8c:7d:16:61:64:6b:43:5d:69:0c:a0: af:01:61:d0:ca:9e:e8:ee:03:f9:ca:5d:89:7c:e9: 31:f3:a5:2c:4f:1d:ec:c7:bc:9c:a7:1a:21:d3:37: 35:7c:d4:ee:24:4e:13:2a:f9:1f:75:53:e9:a6:5a: 56:27:4e:71:5f:bd:f7:ef:71:8c:76:2f:5c:5c:ed: 5f:af:0a:31:3d:20:44:3d:c4:1a:8f:51:5d:43:94: 97:12:cf:dd:62:8b:00:1b:c6:a6:c0:d1:36:e0:7e: 21:18:69:43:9e:a5:e6:0f:1c:32:a4:0e:e1:4c:4e: 9e:38:0e:8c:30:38:52:0c:f2:27:b2:ef:d6:4d:d6: e2:8c:ab:41:d5:29:d0:5f:f2:57:b7:46:60:5e:5d: 53:a9:1a:14:dd:c2:30:d2:a2:97:16:85:fa:d9:0c: 74:c6:3e:7b:e3:3a:78:a4:60:d0:30:bf:d5:b1:db: 45:c6:3e:8c:de:58:9f:63:ea:f2:c9:76:df:a3:69: 23:fd:94:b0:c5:ec:e0:09:56:96:3d:e9:a0:17:95: fe:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:00:22:E1:70:2C:83:70:97:72:E0:83:B4:0E:20:91:E0:F5:AB:09 X509v3 Authority Key Identifier: keyid:DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b0:db:02:e6:d1:5b:12:f2:77:36:bd:03:dd:ad:b4:7c:f2: 56:c6:c4:35:74:6c:8d:60:04:3f:18:22:dd:eb:5b:79:2c:ac: fb:72:a3:c7:ae:68:b8:a4:16:48:63:69:b8:1d:64:4a:28:8c: 1f:11:1e:97:3f:50:ec:56:52:9c:93:6d:1f:72:d8:40:e2:10: 38:2d:7d:4e:75:ad:1b:c1:61:97:43:4d:e6:5d:51:fa:0d:ef: 53:40:cb:5f:c5:6f:3b:32:9b:f7:97:13:3f:49:2a:8e:a4:75: 56:c2:84:ca:41:a8:06:25:94:d7:99:20:9c:d5:9a:53:0e:b7: 1f:4f:c1:ef:a5:a6:8c:20:d8:2a:66:ba:21:47:d5:ce:1e:80: a8:78:df:e8:c1:b0:e8:e5:27:5d:f1:d3:83:47:14:d6:2c:47: 4c:02:0c:fb:fa:ee:eb:95:e1:70:0b:3c:bc:86:9d:82:9a:39: ee:eb:59:da:26:8b:4e:82:14:b5:98:de:ba:3f:37:3b:35:69: 05:ae:4b:81:35:01:d9:fe:c9:e5:0a:c1:2f:2f:04:4c:18:d9: 4c:c5:e5:7a:c7:77:2f:3b:08:fb:22:6c:61:ab:be:92:e5:38: dd:42:e6:aa:fe:39:d1:b3:54:57:42:aa:bc:f1:03:4e:1f:84: bf:5f:de:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM6sQPMRoJ8jOsD7QErknYSTTMUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENFMjRENEU5RDRERTE3OUE5MzIzOUU1OTcyQTBBNDhD QkUyNDExNzAeFw0yNTExMDMwODMyMjVaFw0yNTExMDQxMDQyMjVaMDMxMTAvBgNV BAMTKDUzMDAyMkUxNzAyQzgzNzA5NzcyRTA4M0I0MEUyMDkxRTBGNUFCMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vw2kJXS7z8rwkTylYOyPkQ7N JsStyPKBOVEPi2BI8pQfo+7gxa1sVAiiDLFsHIqMfRZhZGtDXWkMoK8BYdDKnuju A/nKXYl86THzpSxPHezHvJynGiHTNzV81O4kThMq+R91U+mmWlYnTnFfvffvcYx2 L1xc7V+vCjE9IEQ9xBqPUV1DlJcSz91iiwAbxqbA0TbgfiEYaUOepeYPHDKkDuFM Tp44DowwOFIM8iey79ZN1uKMq0HVKdBf8le3RmBeXVOpGhTdwjDSopcWhfrZDHTG PnvjOnikYNAwv9Wx20XGPozeWJ9j6vLJdt+jaSP9lLDF7OAJVpY96aAXlf4RAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUwAi4XAsg3CXcuCDtA4gkeD1qwkwHwYDVR0j BBgwFoAU3OJNTp1N4XmpMjnllyoKSMviQRcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFFDZzVxeTZpMVk5S2EzZjRGUVFreEFWZ2Rpczk0d1JzV0hqd21FM1N0 akIvMS9EQ0UyNEQ0RTlENERFMTc5QTkzMjM5RTU5NzJBMEE0OENCRTI0MTE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRTI0RDRFOUQ0REUxNzlB OTMyMzlFNTk3MkEwQTQ4Q0JFMjQxMTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFFDZzVxeTZpMVk5S2EzZjRGUVFreEFWZ2Rpczk0d1JzV0hqd21FM1N0akIvMS9E Q0UyNEQ0RTlENERFMTc5QTkzMjM5RTU5NzJBMEE0OENCRTI0MTE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcLDbAubRWxLydza9A92ttHzyVsbENXRsjWAEPxgi3etbeSys+3Kjx65ouKQW SGNpuB1kSiiMHxEelz9Q7FZSnJNtH3LYQOIQOC19TnWtG8Fhl0NN5l1R+g3vU0DL X8VvOzKb95cTP0kqjqR1VsKEykGoBiWU15kgnNWaUw63H0/B76WmjCDYKma6IUfV zh6AqHjf6MGw6OUnXfHTg0cU1ixHTAIM+/ru65XhcAs8vIadgpo57utZ2iaLToIU tZjeuj83OzVpBa5LgTUB2f7J5QrBLy8ETBjZTMXlesd3LzsI+yJsYau+kuU43ULm qv450bNUV0KqvPEDTh+Ev1/eCw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:45 2025 by rpki-client