$ rpki-client -vvf rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft File: D296B69B93C13271557656EE54E2511823349A12.mft (raw, json) Hash identifier: 9R+z35pAOFiQuPhpjChTKFpMCa7jeZt8pkOUR9eYStE= Subject key identifier: 76:BC:C7:46:68:D2:A0:BD:49:1D:D0:52:C5:22:28:EE:3F:3C:F9:30 Authority key identifier: D2:96:B6:9B:93:C1:32:71:55:76:56:EE:54:E2:51:18:23:34:9A:12 Certificate issuer: /CN=D296B69B93C13271557656EE54E2511823349A12 Certificate serial: 2DF07FB7C729D6384147A2C7FE2877F6717766CF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer Subject info access: rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft Manifest number: 0364 Signing time: Mon 03 Nov 2025 09:44:00 +0000 Manifest this update: Mon 03 Nov 2025 09:39:00 +0000 Manifest next update: Tue 04 Nov 2025 09:44:00 +0000 Files and hashes: 1: D296B69B93C13271557656EE54E2511823349A12.crl (hash: db+s3DQ4A7TKlqiAxaqJGt1RMrW549nS8DEqlWw50Us=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.crl rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f0:7f:b7:c7:29:d6:38:41:47:a2:c7:fe:28:77:f6:71:77:66:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D296B69B93C13271557656EE54E2511823349A12 Validity Not Before: Nov 3 09:39:00 2025 GMT Not After : Nov 10 09:44:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:18:74:ae:b6:a6:25:87:3b:8f:fc:37:ff:5b: 3d:59:3d:59:a1:7a:1a:c3:a0:d4:66:b4:98:29:9b: 5b:08:22:49:40:2a:5f:12:a0:f2:53:02:35:eb:37: 80:bd:a9:62:8f:1e:45:91:f2:96:1f:cc:ec:12:fb: 39:ad:07:20:95:05:cb:a6:6a:ce:b7:0f:b6:4b:d7: 9a:0c:a3:8b:4b:f1:34:e6:dc:d5:b9:1e:a1:4b:36: 3b:7b:99:f4:46:ce:52:9a:3b:5d:4d:c2:69:ac:cb: 24:fc:de:a1:15:20:3b:b1:30:3d:10:e2:9b:2e:a4: fb:5b:d4:4b:19:3a:f5:99:31:e5:b7:ac:e5:5a:fe: ff:ed:11:0b:20:57:29:d7:51:41:52:5c:f7:b2:b2: 99:52:8b:f7:1b:99:cc:18:45:74:23:6d:03:fa:39: 5f:2f:3f:5b:3e:4f:10:ae:4d:b8:e0:e2:4f:57:73: d3:80:37:33:b4:67:30:d0:f8:5b:c2:53:c6:75:b5: 07:35:d0:5a:d6:6a:68:7f:db:10:95:b9:72:e4:2e: 84:6c:a1:e6:c5:91:47:9e:35:b0:cb:01:26:8c:95: 1d:a1:c9:fe:7f:77:91:47:c7:12:06:ea:76:4f:07: b3:c3:51:c9:0c:c6:09:c7:a9:58:22:90:1e:41:71: 9b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BC:C7:46:68:D2:A0:BD:49:1D:D0:52:C5:22:28:EE:3F:3C:F9:30 X509v3 Authority Key Identifier: keyid:D2:96:B6:9B:93:C1:32:71:55:76:56:EE:54:E2:51:18:23:34:9A:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b1:67:94:1c:3c:f4:27:24:84:dd:f6:ab:df:d2:40:35:c6: c8:18:99:91:ef:fd:49:5b:52:c8:37:dc:cd:14:ce:a0:0d:09: 92:74:14:2d:c3:e3:6e:c6:16:04:66:81:77:ff:c0:58:b9:a6: 29:84:d6:40:ed:7e:5d:68:c6:b5:52:18:ea:2a:d1:5e:f4:07: 81:51:fc:64:09:4e:4e:75:47:70:75:05:0d:04:30:4d:fa:da: f9:56:63:a5:c9:df:9f:03:1e:28:84:23:2d:42:e6:15:fa:c5: 13:73:8d:81:33:34:e5:62:9d:89:9a:a4:10:24:76:55:ec:6b: ca:19:c9:99:d1:14:25:69:38:af:5c:f4:52:3a:5c:68:81:14: 15:27:85:6f:08:53:63:6c:b2:78:37:25:93:65:61:36:45:81: 4e:a2:99:1c:f0:f9:e8:ec:cd:b6:f1:1b:a6:68:8c:55:71:67: f4:ea:52:bf:9c:5d:3b:cc:e3:c8:79:56:65:b1:87:6b:c0:ba: b6:e2:04:fa:d2:4f:93:c6:d6:5f:23:4e:26:a2:e8:4f:1f:0e: bd:aa:d7:58:49:83:3d:12:b6:6a:3b:27:37:bd:81:e7:ef:ec: 05:b8:cc:cf:38:bd:46:c6:ba:ca:45:17:ae:e7:c8:cc:0e:55: 0e:89:e6:b5 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIULfB/t8cp1jhBR6LH/ih39nF3Zs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5NkI2OUI5M0MxMzI3MTU1NzY1NkVFNTRFMjUxMTgy MzM0OUExMjAeFw0yNTExMDMwOTM5MDBaFw0yNTExMTAwOTQ0MDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzkxODc0QUVCNkE2MjU4NzNC OEZGQzM3RkY1QjNENTkzRDU5QTE3QTFBQzNBMEQ0NjZCNDk4Mjk5QjVCMDgyMjQ5 NDAyQTVGMTJBMEYyNTMwMjM1RUIzNzgwQkRBOTYyOEYxRTQ1OTFGMjk2MUZDQ0VD MTJGQjM5QUQwNzIwOTUwNUNCQTY2QUNFQjcwRkI2NEJENzlBMENBMzhCNEJGMTM0 RTZEQ0Q1QjkxRUExNEIzNjNCN0I5OUY0NDZDRTUyOUEzQjVENERDMjY5QUNDQjI0 RkNERUExMTUyMDNCQjEzMDNEMTBFMjlCMkVBNEZCNUJENDRCMTkzQUY1OTkzMUU1 QjdBQ0U1NUFGRUZGRUQxMTBCMjA1NzI5RDc1MTQxNTI1Q0Y3QjJCMjk5NTI4QkY3 MUI5OUNDMTg0NTc0MjM2RDAzRkEzOTVGMkYzRjVCM0U0RjEwQUU0REI4RTBFMjRG NTc3M0QzODAzNzMzQjQ2NzMwRDBGODVCQzI1M0M2NzVCNTA3MzVEMDVBRDY2QTY4 N0ZEQjEwOTVCOTcyRTQyRTg0NkNBMUU2QzU5MTQ3OUUzNUIwQ0IwMTI2OEM5NTFE QTFDOUZFN0Y3NzkxNDdDNzEyMDZFQTc2NEYwN0IzQzM1MUM5MENDNjA5QzdBOTU4 MjI5MDFFNDE3MTlCMTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAyRh0rramJYc7j/w3/1s9WT1ZoXoaw6DUZrSYKZtbCCJJQCpfEqDy UwI16zeAvalijx5FkfKWH8zsEvs5rQcglQXLpmrOtw+2S9eaDKOLS/E05tzVuR6h SzY7e5n0Rs5SmjtdTcJprMsk/N6hFSA7sTA9EOKbLqT7W9RLGTr1mTHlt6zlWv7/ 7RELIFcp11FBUlz3srKZUov3G5nMGEV0I20D+jlfLz9bPk8Qrk244OJPV3PTgDcz tGcw0PhbwlPGdbUHNdBa1mpof9sQlbly5C6EbKHmxZFHnjWwywEmjJUdocn+f3eR R8cSBup2Twezw1HJDMYJx6lYIpAeQXGbEQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FHa8x0Zo0qC9SR3QUsUiKO4/PPkwMB8GA1UdIwQYMBaAFNKWtpuTwTJxVXZW7lTi URgjNJoSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FxZVhLaHh0a3VreHpO V3l0TkhjM0t4aXVVeThyaEVrWmtEM25CUGdDR1RoLzEvRDI5NkI2OUI5M0MxMzI3 MTU1NzY1NkVFNTRFMjUxMTgyMzM0OUExMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9EMjk2QjY5QjkzQzEzMjcxNTU3NjU2RUU1NEUyNTExODIzMzQ5 QTEyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FxZVhLaHh0a3VreHpOV3l0Tkhj M0t4aXVVeThyaEVrWmtEM25CUGdDR1RoLzEvRDI5NkI2OUI5M0MxMzI3MTU1NzY1 NkVFNTRFMjUxMTgyMzM0OUExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJyxZ5QcPPQnJITd9qvf0kA1 xsgYmZHv/UlbUsg33M0UzqANCZJ0FC3D427GFgRmgXf/wFi5pimE1kDtfl1oxrVS GOoq0V70B4FR/GQJTk51R3B1BQ0EME362vlWY6XJ358DHiiEIy1C5hX6xRNzjYEz NOVinYmapBAkdlXsa8oZyZnRFCVpOK9c9FI6XGiBFBUnhW8IU2Nssng3JZNlYTZF gU6imRzw+ejszbbxG6ZojFVxZ/TqUr+cXTvM48h5VmWxh2vAurbiBPrST5PG1l8j Tiai6E8fDr2q11hJgz0Stmo7Jze9gefv7AW4zM84vUbGuspFF67nyMwOVQ6J5rU= -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:57 2025 by rpki-client