$ rpki-client -vvf rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.mft File: DF9F0E9D70A2EBC37F949FBDB3E7097997581127.mft (raw, json) Hash identifier: 3E+vXev1njkdIcoHrFzZHMGovB18i6U2ILKc4I90hAc= Subject key identifier: 42:B4:10:DE:6E:BF:E9:68:52:F4:95:E5:CE:D4:BC:0F:8D:79:86:9D Authority key identifier: DF:9F:0E:9D:70:A2:EB:C3:7F:94:9F:BD:B3:E7:09:79:97:58:11:27 Certificate issuer: /CN=DF9F0E9D70A2EBC37F949FBDB3E7097997581127 Certificate serial: 6C86A37C821D90C8A83072D81C8344FA225B2038 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.cer Subject info access: rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.mft Manifest number: 02F3 Signing time: Mon 03 Nov 2025 10:03:07 +0000 Manifest this update: Mon 03 Nov 2025 09:58:07 +0000 Manifest next update: Tue 04 Nov 2025 13:09:07 +0000 Files and hashes: 1: 34352e362e3139322e302f32322d3234203d3e20323636353435.roa (hash: LAcAFhsi9sMCFXBDdvSUGBePjYXiFUWf0jWEd4ccmvE=) 2: DF9F0E9D70A2EBC37F949FBDB3E7097997581127.crl (hash: 8FI4BrssANfQrof0uSzCgHmoBNy/SmMN6MnGwzPsCkE=) 3: 323830343a336461383a3a2f33322d3333203d3e20323636353435.roa (hash: DtT7dNMOrrV8RsrX4VQiiMaReM0fD/X2s3U41M13SoA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.crl rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:86:a3:7c:82:1d:90:c8:a8:30:72:d8:1c:83:44:fa:22:5b:20:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF9F0E9D70A2EBC37F949FBDB3E7097997581127 Validity Not Before: Nov 3 09:58:07 2025 GMT Not After : Nov 4 13:09:07 2025 GMT Subject: CN=42B410DE6EBFE96852F495E5CED4BC0F8D79869D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bc:bb:98:28:4e:b3:1e:c6:7c:a2:a2:4c:35: c9:b1:d7:3b:8e:b8:90:5d:26:eb:98:ee:74:bc:d9: 7c:2b:d0:7d:c4:40:e9:2a:77:97:dc:7d:ac:34:be: 15:1f:19:13:c9:19:2e:70:6c:f7:d6:5a:72:dd:fa: c4:a8:ee:2e:52:51:99:18:3a:ff:96:32:c6:d1:93: 6c:54:c1:cb:37:03:e9:e2:82:0e:f3:0b:48:eb:82: de:72:45:37:dc:6b:f3:5f:d4:78:2a:e1:d5:53:62: b9:45:76:d4:ee:70:37:95:ac:a3:89:ba:23:86:b5: de:2f:b5:f7:ed:64:47:ce:b1:fc:d0:f2:6c:45:b9: e9:5c:e6:3f:96:bc:03:32:39:c6:85:07:2f:ce:c7: 2e:ef:ab:8c:06:9a:17:69:b4:e3:23:a0:73:94:b2: ae:73:8e:66:02:f8:e7:88:41:83:e1:b8:b6:97:4f: 9c:2c:b5:bd:0c:ff:f7:8c:f4:e6:93:cc:8d:ab:94: c4:3f:e7:51:30:52:de:ea:a0:89:66:8b:b4:a4:3d: e4:d1:9d:21:47:a5:f0:c4:8b:f0:fa:7c:99:c6:8b: 46:69:c9:a4:0d:f0:a7:46:b6:61:16:b7:26:3d:72: d0:7e:46:94:42:34:84:75:ef:c8:02:e8:1b:50:a1: ff:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B4:10:DE:6E:BF:E9:68:52:F4:95:E5:CE:D4:BC:0F:8D:79:86:9D X509v3 Authority Key Identifier: keyid:DF:9F:0E:9D:70:A2:EB:C3:7F:94:9F:BD:B3:E7:09:79:97:58:11:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:28:9c:18:f2:c4:f1:b6:50:2b:d2:3f:28:1e:a5:e5:59:56: 2e:b0:3a:2e:a4:70:aa:b8:ec:94:f9:12:08:70:77:70:b4:ab: ff:18:f1:30:b7:22:c1:a6:7f:73:3c:d3:f4:0f:77:2b:10:5c: 8f:d2:1f:7e:7c:d9:33:c6:7c:5b:c3:84:28:8f:3c:30:ba:7c: 5e:a4:da:99:90:72:89:ba:c2:d8:bf:c6:af:3f:bf:a2:6b:c3: 6b:bc:bf:13:db:44:2f:6b:dc:65:95:a2:9e:d1:a7:74:46:01: e1:ae:32:38:f0:71:83:c5:c0:7e:a2:86:46:6f:e0:80:21:30: f1:0c:d5:63:a2:bc:78:d5:f0:9a:d3:09:bc:f6:02:e9:5a:5b: 86:59:32:94:75:2d:38:ca:15:96:38:4a:be:47:8e:12:a9:96: ca:8d:a4:9f:33:1b:7e:d6:f9:df:62:5f:1f:14:48:21:a3:c6: b5:be:0f:a8:bc:74:d8:16:57:9b:32:d8:7a:f7:0f:7a:4c:e4: f4:cc:04:3f:51:57:9c:9c:ea:ac:9d:76:9a:e4:c8:87:9b:00: c5:a5:49:3a:ae:d3:5b:2b:0f:7c:32:d9:e1:16:2a:d4:bd:fb: 15:9b:a3:e2:24:40:aa:02:4c:ad:7b:c2:1b:28:26:21:fc:22: 3e:71:a7:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbIajfIIdkMioMHLYHINE+iJbIDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY5RjBFOUQ3MEEyRUJDMzdGOTQ5RkJEQjNFNzA5Nzk5 NzU4MTEyNzAeFw0yNTExMDMwOTU4MDdaFw0yNTExMDQxMzA5MDdaMDMxMTAvBgNV BAMTKDQyQjQxMERFNkVCRkU5Njg1MkY0OTVFNUNFRDRCQzBGOEQ3OTg2OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIvLuYKE6zHsZ8oqJMNcmx1zuO uJBdJuuY7nS82Xwr0H3EQOkqd5fcfaw0vhUfGRPJGS5wbPfWWnLd+sSo7i5SUZkY Ov+WMsbRk2xUwcs3A+nigg7zC0jrgt5yRTfca/Nf1Hgq4dVTYrlFdtTucDeVrKOJ uiOGtd4vtfftZEfOsfzQ8mxFuelc5j+WvAMyOcaFBy/Oxy7vq4wGmhdptOMjoHOU sq5zjmYC+OeIQYPhuLaXT5wstb0M//eM9OaTzI2rlMQ/51EwUt7qoIlmi7SkPeTR nSFHpfDEi/D6fJnGi0ZpyaQN8KdGtmEWtyY9ctB+RpRCNIR178gC6BtQof/zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQrQQ3m6/6WhS9JXlztS8D415hp0wHwYDVR0j BBgwFoAU358OnXCi68N/lJ+9s+cJeZdYEScwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFcyM05laTVEdnpYWGJ4d3I1NXd3c3RWc1MxdGVWbWZKQ3RwSEhSWEJh TTYvMS9ERjlGMEU5RDcwQTJFQkMzN0Y5NDlGQkRCM0U3MDk3OTk3NTgxMTI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGOUYwRTlENzBBMkVCQzM3 Rjk0OUZCREIzRTcwOTc5OTc1ODExMjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFcyM05laTVEdnpYWGJ4d3I1NXd3c3RWc1MxdGVWbWZKQ3RwSEhSWEJhTTYvMS9E RjlGMEU5RDcwQTJFQkMzN0Y5NDlGQkRCM0U3MDk3OTk3NTgxMTI3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQiicGPLE8bZQK9I/KB6l5VlWLrA6LqRwqrjslPkSCHB3cLSr/xjxMLciwaZ/ czzT9A93KxBcj9IffnzZM8Z8W8OEKI88MLp8XqTamZByibrC2L/Grz+/omvDa7y/ E9tEL2vcZZWintGndEYB4a4yOPBxg8XAfqKGRm/ggCEw8QzVY6K8eNXwmtMJvPYC 6VpbhlkylHUtOMoVljhKvkeOEqmWyo2knzMbftb532JfHxRIIaPGtb4PqLx02BZX mzLYevcPekzk9MwEP1FXnJzqrJ12muTIh5sAxaVJOq7TWysPfDLZ4RYq1L37FZuj 4iRAqgJMrXvCGygmIfwiPnGnaQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:26:11 2025 by rpki-client