$ rpki-client -vvf rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft File: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft (raw, json) Hash identifier: iF5UqwnpM0UXOe9UlSlMRTEI33BNtms+WpFMCveE2Ro= Subject key identifier: 8D:1E:29:0E:62:FC:6C:B9:39:A6:E3:10:64:2B:8E:58:34:E1:2F:05 Authority key identifier: D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 Certificate issuer: /CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Certificate serial: 0B16508F23EF3D8849E1DE099DE4FCF5D700E6B0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject info access: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft Manifest number: 0282 Signing time: Sun 02 Nov 2025 18:49:20 +0000 Manifest this update: Sun 02 Nov 2025 18:44:20 +0000 Manifest next update: Mon 03 Nov 2025 21:28:20 +0000 Files and hashes: 1: 3139302e3132332e3139322e302f32322d3234203d3e20323636323533.roa (hash: lEGRwhg9phXl2q/TNnF7j2kv/C2pVxAJLq4sIptatEQ=) 2: 323830343a336431383a3a2f33322d3438203d3e20323636323533.roa (hash: q5JF9UY+MTB4Mlfj2lWL8AvBvbFDkXWD3ksggtStp3k=) 3: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl (hash: HnawFkBEunvllB5CyXEQgMQfar6Dart1uibEe7QK0c4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 21:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:16:50:8f:23:ef:3d:88:49:e1:de:09:9d:e4:fc:f5:d7:00:e6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Validity Not Before: Nov 2 18:44:20 2025 GMT Not After : Nov 3 21:28:20 2025 GMT Subject: CN=8D1E290E62FC6CB939A6E310642B8E5834E12F05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:f8:47:e9:da:20:08:80:67:ff:c5:b7:fc: 48:55:9c:b5:7d:c3:6f:2a:c1:77:73:82:46:13:e0: db:51:95:a9:45:5b:db:b3:46:74:fc:5e:dc:a7:dc: 1e:78:57:3c:00:20:dd:4b:24:ac:09:45:8d:d5:40: a9:63:e6:dc:ed:a0:92:81:e6:c4:5a:e2:c7:0e:af: f4:9d:c8:c0:5f:83:26:05:2d:5c:8b:7d:68:53:6c: 72:99:0c:fd:3a:12:2d:66:fd:26:74:76:8f:38:37: 01:a2:66:65:d9:4e:dd:c1:7e:a8:fe:8a:32:39:48: 48:4f:05:0e:18:ce:82:07:e5:50:9a:6a:5b:ae:a0: 3a:0e:4a:ad:31:20:1a:7d:15:2d:4b:cb:ae:cb:e3: 3f:ca:b0:7e:2b:70:14:ab:f0:d9:6e:a9:11:1a:2d: 49:6f:08:0e:71:db:57:93:3e:df:3e:68:17:64:28: a7:21:24:70:c3:dc:60:da:14:4a:4b:78:aa:d3:61: 00:56:c6:94:2b:bd:b1:f2:e8:f3:c6:26:f7:da:20: f5:cb:3e:23:89:2c:49:aa:9a:f2:a2:e4:dd:c5:a3: 1e:d3:e2:c9:f9:33:ab:84:d1:86:03:f9:9d:e7:88: e8:ca:b2:88:b7:c8:88:90:27:d9:b3:ac:b0:bf:48: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1E:29:0E:62:FC:6C:B9:39:A6:E3:10:64:2B:8E:58:34:E1:2F:05 X509v3 Authority Key Identifier: keyid:D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:63:bb:97:70:e2:88:31:51:1c:c4:04:8e:52:77:2d:7f:2a: f8:ad:7b:b8:98:04:25:f6:59:fa:ec:b4:83:e0:dd:d8:ec:ff: 1e:3b:4d:40:35:c3:21:97:97:52:ee:3d:f7:6f:f0:7d:b2:ea: 72:0e:f5:b9:89:e1:db:8a:f8:fc:95:58:4b:f5:6f:c5:8c:fe: 0f:a5:9c:45:d1:0d:fc:10:fe:e5:48:f2:7c:79:c5:56:91:6f: 0d:63:b3:89:93:ff:5d:c5:9c:45:c1:f6:0a:d3:da:b2:44:e2: 40:a1:65:97:86:e3:3a:98:bb:bf:42:a8:b2:91:93:de:de:0e: 22:3e:b3:d9:88:c2:bc:6f:1a:ca:9b:65:c9:79:98:f7:b8:e4: 4d:ba:87:b6:08:ac:c6:7f:af:a0:79:ba:98:64:f2:f9:33:7a: 50:a3:b9:07:45:87:d0:4b:1a:69:41:c7:8f:65:46:c8:d1:50: 15:88:a9:60:33:f7:30:86:6b:1b:45:d6:eb:df:da:da:72:71: 82:83:89:49:bf:3d:0b:d2:6b:58:50:4e:38:35:1a:5b:aa:f1: 49:8b:49:15:73:6a:47:17:92:f1:a8:91:19:52:4c:20:91:38: 0d:2e:57:1b:19:02:fd:8b:5b:bb:cd:40:77:6c:3c:2b:c5:3d: d6:13:d6:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCxZQjyPvPYhJ4d4JneT89dcA5rAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJCRTQwQzY2QTBCMEVGOTc0N0FDQzlEMkMzQTBGNDVC Q0JEODhEMDAeFw0yNTExMDIxODQ0MjBaFw0yNTExMDMyMTI4MjBaMDMxMTAvBgNV BAMTKDhEMUUyOTBFNjJGQzZDQjkzOUE2RTMxMDY0MkI4RTU4MzRFMTJGMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3KvhH6dogCIBn/8W3/EhVnLV9 w28qwXdzgkYT4NtRlalFW9uzRnT8Xtyn3B54VzwAIN1LJKwJRY3VQKlj5tztoJKB 5sRa4scOr/SdyMBfgyYFLVyLfWhTbHKZDP06Ei1m/SZ0do84NwGiZmXZTt3Bfqj+ ijI5SEhPBQ4YzoIH5VCaaluuoDoOSq0xIBp9FS1Ly67L4z/KsH4rcBSr8NluqREa LUlvCA5x21eTPt8+aBdkKKchJHDD3GDaFEpLeKrTYQBWxpQrvbHy6PPGJvfaIPXL PiOJLEmqmvKi5N3Fox7T4sn5M6uE0YYD+Z3niOjKsoi3yIiQJ9mzrLC/SDVPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjR4pDmL8bLk5puMQZCuOWDThLwUwHwYDVR0j BBgwFoAU0r5AxmoLDvl0esydLDoPRby9iNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5l NnIvMC9EMkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyQkU0MEM2NkEwQjBFRjk3 NDdBQ0M5RDJDM0EwRjQ1QkNCRDg4RDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5lNnIvMC9E MkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANWO7l3DiiDFRHMQEjlJ3LX8q+K17uJgEJfZZ+uy0g+Dd2Oz/HjtNQDXDIZeX Uu4992/wfbLqcg71uYnh24r4/JVYS/VvxYz+D6WcRdEN/BD+5UjyfHnFVpFvDWOz iZP/XcWcRcH2CtPaskTiQKFll4bjOpi7v0KospGT3t4OIj6z2YjCvG8ayptlyXmY 97jkTbqHtgisxn+voHm6mGTy+TN6UKO5B0WH0EsaaUHHj2VGyNFQFYipYDP3MIZr G0XW69/a2nJxgoOJSb89C9JrWFBOODUaW6rxSYtJFXNqRxeS8aiRGVJMIJE4DS5X GxkC/Ytbu81Ad2w8K8U91hPW6Q== -----END CERTIFICATE-----Generated at Mon Nov 3 05:44:10 2025 by rpki-client