$ rpki-client -vvf rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft File: DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft (raw, json) Hash identifier: kHqz9YdPwbA+QSPuGMFNidNSZJARdDwnV8hZmHvRgps= Subject key identifier: C3:BB:7C:86:D7:EA:F1:54:2B:2A:6A:D1:50:4A:72:A1:3C:70:3E:31 Authority key identifier: DD:96:C2:2D:A7:91:57:38:4B:8F:68:AB:18:45:AA:F1:E7:94:A8:6D Certificate issuer: /CN=DD96C22DA79157384B8F68AB1845AAF1E794A86D Certificate serial: 7292B1227C24DDDB1BCFD79C5C4A5ABFD9BF72CA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft Manifest number: 0223 Signing time: Mon 03 Nov 2025 10:50:51 +0000 Manifest this update: Mon 03 Nov 2025 10:45:51 +0000 Manifest next update: Tue 04 Nov 2025 12:53:51 +0000 Files and hashes: 1: 323830343a363162343a3a2f33322d313238203d3e20323639323531.roa (hash: vTMSQ0NcGNW7SwsUL0mwA0ATgC9+9p6vx7LJ6LWK5rc=) 2: DD96C22DA79157384B8F68AB1845AAF1E794A86D.crl (hash: 4UC4AC3aloIJ7quOhiBrCg872cXY4urdPpUty1jWFZ4=) 3: 34352e3138322e3231322e302f32322d3332203d3e20323639323531.roa (hash: xSMmFAAWq1u+fIRT1VfC0jFrGbToGjtqVCKo6TuGZ48=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.crl rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:92:b1:22:7c:24:dd:db:1b:cf:d7:9c:5c:4a:5a:bf:d9:bf:72:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD96C22DA79157384B8F68AB1845AAF1E794A86D Validity Not Before: Nov 3 10:45:51 2025 GMT Not After : Nov 4 12:53:51 2025 GMT Subject: CN=C3BB7C86D7EAF1542B2A6AD1504A72A13C703E31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0a:d8:b9:50:f6:12:55:69:ea:67:18:cf:1c: 76:0b:91:0c:6b:43:52:ae:fb:07:2e:83:11:97:49: 20:ba:76:7f:a8:f1:f9:7e:a5:1e:21:f5:39:18:f2: 9e:12:0a:45:fe:ee:c8:31:e2:44:ec:08:ff:7f:50: 78:15:3b:7f:37:b2:60:b2:cd:e5:aa:77:84:91:27: 1f:f7:cc:1f:ac:ef:a1:5e:16:2e:1c:91:b2:c6:30: 69:b4:0c:31:9c:3c:cf:46:49:ff:ba:df:00:4e:68: 31:a4:68:8c:82:9f:7c:7a:39:4a:38:40:65:59:64: 35:48:dc:c9:24:d1:0b:80:23:32:39:a1:76:4c:75: 23:71:f2:06:5e:4e:55:60:8f:a4:14:73:18:6f:f0: d0:46:02:67:0a:6c:45:d9:90:ba:62:75:97:68:38: 4a:fe:35:33:9f:95:83:85:75:f1:98:1b:6d:87:50: a2:3d:b2:83:55:02:21:9b:e4:19:05:44:5b:cd:cf: 26:73:61:17:a8:d6:55:43:93:23:dc:28:e0:57:3c: 16:3e:5e:cd:eb:2e:3a:58:32:ac:97:a5:2b:33:7c: 71:e2:72:8d:db:c9:3d:d2:f0:40:45:b3:ad:18:78: 19:52:6d:81:1b:16:ec:83:2b:ed:f7:5d:a8:3e:6b: e6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BB:7C:86:D7:EA:F1:54:2B:2A:6A:D1:50:4A:72:A1:3C:70:3E:31 X509v3 Authority Key Identifier: keyid:DD:96:C2:2D:A7:91:57:38:4B:8F:68:AB:18:45:AA:F1:E7:94:A8:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:3f:40:7b:16:c9:7f:3a:7b:76:56:55:db:92:2c:39:17:a0: e7:f6:48:66:8e:01:29:56:32:04:54:ba:59:31:33:89:cb:6a: be:99:54:02:bc:45:67:c7:2c:70:9c:b1:ec:26:69:d0:bb:a9: a7:6a:84:1a:aa:ae:70:b7:1e:b7:b3:f9:9b:21:a6:99:37:09: 36:43:d7:b1:69:2d:23:57:06:64:76:65:23:ef:53:3d:0e:4e: e6:0c:a5:8a:e7:79:6c:5b:e5:c2:0d:7a:83:a7:3d:fd:59:49: 38:c0:74:2d:f5:2d:c5:26:2e:3e:34:e5:e8:7d:e6:47:7f:91: b6:91:22:07:f1:15:14:a6:19:a3:22:22:dc:01:6a:38:a9:71: d2:e8:fa:c2:3d:68:ab:9b:28:f6:28:36:04:bb:0f:b2:00:26: d8:e6:35:14:d8:94:7e:54:ac:3a:d5:85:bc:6e:c7:c1:db:ff: 19:24:01:2b:4c:61:48:21:3a:b9:1b:bb:af:d6:a8:21:2e:87: 91:80:57:44:b7:30:6d:7d:8c:0a:79:3e:cb:5a:7c:7c:87:95: 78:e6:8c:62:5d:47:cc:50:74:7d:10:58:ff:d2:2e:47:f7:e6: 33:56:88:bd:70:0d:e5:d8:4d:3e:1c:82:e3:b4:86:33:b8:cf: a6:cc:fb:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcpKxInwk3dsbz9ecXEpav9m/csowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ5NkMyMkRBNzkxNTczODRCOEY2OEFCMTg0NUFBRjFF Nzk0QTg2RDAeFw0yNTExMDMxMDQ1NTFaFw0yNTExMDQxMjUzNTFaMDMxMTAvBgNV BAMTKEMzQkI3Qzg2RDdFQUYxNTQyQjJBNkFEMTUwNEE3MkExM0M3MDNFMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXCti5UPYSVWnqZxjPHHYLkQxr Q1Ku+wcugxGXSSC6dn+o8fl+pR4h9TkY8p4SCkX+7sgx4kTsCP9/UHgVO383smCy zeWqd4SRJx/3zB+s76FeFi4ckbLGMGm0DDGcPM9GSf+63wBOaDGkaIyCn3x6OUo4 QGVZZDVI3Mkk0QuAIzI5oXZMdSNx8gZeTlVgj6QUcxhv8NBGAmcKbEXZkLpidZdo OEr+NTOflYOFdfGYG22HUKI9soNVAiGb5BkFRFvNzyZzYReo1lVDkyPcKOBXPBY+ Xs3rLjpYMqyXpSszfHHico3byT3S8EBFs60YeBlSbYEbFuyDK+33Xag+a+aLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUw7t8htfq8VQrKmrRUEpyoTxwPjEwHwYDVR0j BBgwFoAU3ZbCLaeRVzhLj2irGEWq8eeUqG0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVN2YkNiUzJrbW80cUNGUEcyZ3pHNlVKYVllV1dzWkNaM0dvb2RINUxB aDYvMC9ERDk2QzIyREE3OTE1NzM4NEI4RjY4QUIxODQ1QUFGMUU3OTRBODZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REOTZDMjJEQTc5MTU3Mzg0 QjhGNjhBQjE4NDVBQUYxRTc5NEE4NkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVN2YkNiUzJrbW80cUNGUEcyZ3pHNlVKYVllV1dzWkNaM0dvb2RINUxBaDYvMC9E RDk2QzIyREE3OTE1NzM4NEI4RjY4QUIxODQ1QUFGMUU3OTRBODZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABD9AexbJfzp7dlZV25IsOReg5/ZIZo4BKVYyBFS6WTEzictqvplUArxFZ8cs cJyx7CZp0Lupp2qEGqqucLcet7P5myGmmTcJNkPXsWktI1cGZHZlI+9TPQ5O5gyl iud5bFvlwg16g6c9/VlJOMB0LfUtxSYuPjTl6H3mR3+RtpEiB/EVFKYZoyIi3AFq OKlx0uj6wj1oq5so9ig2BLsPsgAm2OY1FNiUflSsOtWFvG7Hwdv/GSQBK0xhSCE6 uRu7r9aoIS6HkYBXRLcwbX2MCnk+y1p8fIeVeOaMYl1HzFB0fRBY/9IuR/fmM1aI vXAN5dhNPhyC47SGM7jPpsz7IQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:23:07 2025 by rpki-client