$ rpki-client -vvf rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft File: DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft (raw, json) Hash identifier: HBO6yu4gvktlRO0sp9JNaab5CUL/0aHlsWq6uWfTR20= Subject key identifier: 59:2F:D6:4A:7B:10:A5:18:58:4E:47:8A:BC:8D:87:CF:A4:FB:15:17 Authority key identifier: DB:26:88:67:1E:BD:A3:40:92:0F:7F:27:4E:D0:C3:C3:DF:E3:80:26 Certificate issuer: /CN=DB2688671EBDA340920F7F274ED0C3C3DFE38026 Certificate serial: 37F27B55C8E6BCCBD6F991C7EFF59B06DC762AF8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer Subject info access: rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft Manifest number: 1C Signing time: Mon 03 Nov 2025 06:04:37 +0000 Manifest this update: Mon 03 Nov 2025 05:59:37 +0000 Manifest next update: Tue 04 Nov 2025 06:21:37 +0000 Files and hashes: 1: 34352e3232342e3136382e302f32322d3332203d3e20323636393139.roa (hash: JrUEQFjfe4G5l/Qyw/wlPVbLvelmbWX+UdfuCtyaabI=) 2: 323830343a343535343a3a2f33322d313238203d3e20323636393139.roa (hash: 4tAaveoCXdDcpHp2LFl8RU4V7u4EaA1z6K9jhZ1hLbU=) 3: DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl (hash: e5gpoEVwgi1J1D/IF3JVIBO6N66uL8lOCwsaKlMl50o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 06:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:f2:7b:55:c8:e6:bc:cb:d6:f9:91:c7:ef:f5:9b:06:dc:76:2a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB2688671EBDA340920F7F274ED0C3C3DFE38026 Validity Not Before: Nov 3 05:59:37 2025 GMT Not After : Nov 4 06:21:37 2025 GMT Subject: CN=592FD64A7B10A518584E478ABC8D87CFA4FB1517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:51:3f:dd:0b:84:91:b4:96:45:8a:a5:48:2c: 7a:ba:47:1f:b2:c7:5a:ed:44:d2:35:5b:a6:f4:1e: a5:62:00:bb:a9:cb:c0:bf:f7:99:d7:2d:7c:d6:b5: 70:9d:cd:f6:48:0c:c4:a4:ef:fa:54:7a:af:64:35: 56:8a:39:12:84:b3:0b:5c:3b:a5:f2:6a:33:31:e4: 5d:0d:8c:23:0a:b4:7a:e7:b6:aa:8c:c3:b7:dc:d5: e2:03:7e:27:8e:61:a2:61:b5:fb:ce:85:95:f7:76: fd:6b:3b:38:35:b8:20:25:c2:9f:d4:cc:f4:81:b7: 17:38:cb:86:89:16:cf:07:92:27:6b:70:2d:21:35: 72:ab:ba:81:a0:f0:04:43:70:a5:5f:70:b5:11:c9: f1:32:da:3c:cc:3a:89:26:a4:1c:be:d4:e0:85:36: 6b:73:08:26:36:b1:42:ed:5f:3d:39:4a:bf:68:d1: d7:f9:04:98:00:08:ec:7a:56:29:25:d8:25:4d:6e: e1:23:25:5f:c0:ca:3f:91:06:2a:ad:ab:4f:8c:7c: a5:bd:c6:02:ad:2d:23:fd:94:ec:0a:64:07:1d:83: 9b:b7:e6:ad:e1:fe:ea:4f:5b:11:ae:ea:3a:4a:f2: 7b:d4:77:bc:92:4c:a7:b4:f0:4b:f0:1a:87:3b:84: 84:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2F:D6:4A:7B:10:A5:18:58:4E:47:8A:BC:8D:87:CF:A4:FB:15:17 X509v3 Authority Key Identifier: keyid:DB:26:88:67:1E:BD:A3:40:92:0F:7F:27:4E:D0:C3:C3:DF:E3:80:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:42:f7:5b:43:6d:61:94:f9:c8:b8:96:31:46:9e:84:e5:b0: af:ba:72:26:96:aa:56:42:c8:66:89:df:a5:b7:2f:8b:0c:2f: 5b:f0:42:71:e4:0c:5e:95:2e:55:eb:c5:75:f8:3e:3f:77:09: f5:c6:7b:22:35:af:36:6e:a7:a1:08:f6:bd:9e:81:05:3d:87: 32:22:f0:4c:1c:eb:c9:27:6b:8b:30:35:0d:d6:b4:14:2e:bf: db:3a:f7:54:34:05:f6:33:fc:c4:e6:f5:84:26:85:16:5a:77: a7:0d:4c:ac:a2:de:5e:ce:c2:1c:76:b3:81:a3:79:88:84:8f: ac:ca:a9:6d:e5:cc:5b:2a:6f:47:e4:7f:3d:ef:11:71:80:d1: 69:60:0e:e0:61:cd:9d:25:c4:ab:95:a4:fb:ca:7f:5d:b2:74: 67:90:48:ba:2f:19:3e:42:7e:65:96:5b:3b:bf:73:4e:01:5a: ef:de:dc:a1:31:72:65:cb:ee:6c:65:f5:77:6d:9c:33:a1:f2: 73:52:ae:00:5b:7d:47:8d:9c:d3:f6:3d:e7:cc:e7:17:d4:4a: d4:57:0d:57:5d:2b:e3:00:1a:08:fa:5c:30:99:a5:02:d9:10: a2:65:ba:fe:76:fb:a9:eb:47:6a:76:e9:a9:2f:21:47:08:37: 41:3c:5f:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN/J7VcjmvMvW+ZHH7/WbBtx2KvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIyNjg4NjcxRUJEQTM0MDkyMEY3RjI3NEVEMEMzQzNE RkUzODAyNjAeFw0yNTExMDMwNTU5MzdaFw0yNTExMDQwNjIxMzdaMDMxMTAvBgNV BAMTKDU5MkZENjRBN0IxMEE1MTg1ODRFNDc4QUJDOEQ4N0NGQTRGQjE1MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzUT/dC4SRtJZFiqVILHq6Rx+y x1rtRNI1W6b0HqViALupy8C/95nXLXzWtXCdzfZIDMSk7/pUeq9kNVaKORKEswtc O6XyajMx5F0NjCMKtHrntqqMw7fc1eIDfieOYaJhtfvOhZX3dv1rOzg1uCAlwp/U zPSBtxc4y4aJFs8HkidrcC0hNXKruoGg8ARDcKVfcLURyfEy2jzMOokmpBy+1OCF NmtzCCY2sULtXz05Sr9o0df5BJgACOx6Vikl2CVNbuEjJV/Ayj+RBiqtq0+MfKW9 xgKtLSP9lOwKZAcdg5u35q3h/upPWxGu6jpK8nvUd7ySTKe08EvwGoc7hIQzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWS/WSnsQpRhYTkeKvI2Hz6T7FRcwHwYDVR0j BBgwFoAU2yaIZx69o0CSD38nTtDDw9/jgCYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1dXOHp1ckJpSmttM0tVcVhISFdzczhKcTdRcU1KN05qN2dvYjEyVjNY MTcvMC9EQjI2ODg2NzFFQkRBMzQwOTIwRjdGMjc0RUQwQzNDM0RGRTM4MDI2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCMjY4ODY3MUVCREEzNDA5 MjBGN0YyNzRFRDBDM0MzREZFMzgwMjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1dXOHp1ckJpSmttM0tVcVhISFdzczhKcTdRcU1KN05qN2dvYjEyVjNYMTcvMC9E QjI2ODg2NzFFQkRBMzQwOTIwRjdGMjc0RUQwQzNDM0RGRTM4MDI2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALEL3W0NtYZT5yLiWMUaehOWwr7pyJpaqVkLIZonfpbcviwwvW/BCceQMXpUu VevFdfg+P3cJ9cZ7IjWvNm6noQj2vZ6BBT2HMiLwTBzrySdrizA1Dda0FC6/2zr3 VDQF9jP8xOb1hCaFFlp3pw1MrKLeXs7CHHazgaN5iISPrMqpbeXMWypvR+R/Pe8R cYDRaWAO4GHNnSXEq5Wk+8p/XbJ0Z5BIui8ZPkJ+ZZZbO79zTgFa797coTFyZcvu bGX1d22cM6Hyc1KuAFt9R42c0/Y958znF9RK1FcNV10r4wAaCPpcMJmlAtkQomW6 /nb7qetHanbpqS8hRwg3QTxfFQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:15:36 2025 by rpki-client