$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json) Hash identifier: TSP9d+81iGBnYIwwLFC7kWjnRcl8YjvH1hsOqIrfAxU= Subject key identifier: 05:A7:B0:E4:11:B1:5E:2F:F6:8A:9A:8F:AC:46:0F:07:7F:A4:D7:7C Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201 Certificate serial: 66F9CA2AA952271CC3914D2E3943FE544F709BE7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft Manifest number: 01DB Signing time: Tue 04 Nov 2025 00:16:21 +0000 Manifest this update: Tue 04 Nov 2025 00:11:21 +0000 Manifest next update: Wed 05 Nov 2025 01:33:21 +0000 Files and hashes: 1: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: C0u1aT3LDMhL5SLNpfi4dKOK4v/xmo0BwWf2GUw/OvQ=) 2: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: 2y/wuQp12J/6V+DYVkS6+F5QXMRGCK0eIOlGJZNbHBY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 01:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f9:ca:2a:a9:52:27:1c:c3:91:4d:2e:39:43:fe:54:4f:70:9b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201 Validity Not Before: Nov 4 00:11:21 2025 GMT Not After : Nov 5 01:33:21 2025 GMT Subject: CN=05A7B0E411B15E2FF68A9A8FAC460F077FA4D77C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:37:de:9c:e9:90:ca:73:c6:e1:86:f1:b2:fc: 13:69:9e:74:80:b8:a8:eb:3b:70:c1:2a:ea:b5:35: 02:a7:b1:61:63:e3:1c:0c:02:a6:f9:dd:0d:c7:b1: 09:0b:6d:5c:18:45:09:8e:dc:35:e0:a4:8f:1f:92: dd:30:45:3d:57:1b:11:84:e4:d3:1d:67:79:b6:18: d9:16:15:78:0c:fb:a8:5e:e4:f4:15:47:90:0d:c5: 35:22:0e:26:b4:5d:6a:fe:5a:54:fe:0e:82:1c:51: d0:f4:23:a4:3d:2f:e0:48:df:94:f4:64:1d:6a:96: 1b:c0:19:f6:5f:7c:43:62:cc:b3:e5:44:71:f8:89: ad:34:9a:51:96:d6:70:24:9f:96:dc:3a:74:da:36: f3:a7:28:76:1b:44:ec:03:fd:a5:01:a4:bb:13:67: 1c:39:cf:82:ae:c4:b1:1a:cf:3d:e5:df:3a:3b:98: 54:5b:bd:e7:87:c3:07:cc:c4:a1:ae:9c:a8:7d:56: 92:a8:ad:3c:6d:d3:3a:26:51:64:1b:f4:f1:f2:3f: 55:31:5d:28:69:44:07:de:17:dd:c5:c3:6e:e9:c4: e8:1e:a7:19:35:1d:d3:1a:f9:5c:54:ea:5b:a0:76: ae:8d:9f:97:64:b8:05:fa:57:e3:3a:74:59:58:38: 9f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A7:B0:E4:11:B1:5E:2F:F6:8A:9A:8F:AC:46:0F:07:7F:A4:D7:7C X509v3 Authority Key Identifier: keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b2:aa:0d:76:86:44:35:e5:94:a4:2d:b0:d5:ab:28:99:8e: 53:28:24:06:43:d3:1c:ab:80:ad:f3:90:a3:b3:88:d4:c1:77: ed:58:3a:10:f1:68:b3:e6:57:1c:5a:92:db:c5:7f:05:64:a8: ce:78:e2:e2:94:01:f4:5f:90:eb:d5:3a:18:b4:de:d2:d3:6a: b6:a2:79:4e:5a:d1:b3:3e:ba:f8:d0:1f:f1:f4:8c:d7:b0:6a: 20:e3:c3:fd:e5:91:13:87:d0:15:98:4d:a8:2a:4d:ac:fb:4f: 94:0a:bb:41:a7:51:bc:20:3f:95:13:7f:98:df:64:48:f3:cb: e5:81:9b:5f:5e:c8:eb:58:d7:aa:d5:7d:09:da:da:65:e2:ae: 70:10:5d:92:45:6d:4b:e8:53:fe:3a:b1:c0:cc:71:e0:03:77: 25:a9:67:bb:bc:ae:c7:8d:e2:63:61:ad:6c:7b:66:50:e8:3d: 74:89:50:7e:b5:3d:2d:b0:9b:53:90:1c:82:c6:19:ad:d9:74: a7:e1:ab:8d:e1:18:9a:f4:b7:b7:f0:d3:84:b0:9e:64:2b:35: 8b:82:df:cc:5e:b7:03:6c:44:bc:d1:1a:5a:15:a2:da:a6:a0: a2:58:0d:6f:c0:e0:78:ed:bc:b2:60:a7:70:83:b3:7d:7f:ab: 91:aa:ad:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZvnKKqlSJxzDkU0uOUP+VE9wm+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy NzBBOTIwMTAeFw0yNTExMDQwMDExMjFaFw0yNTExMDUwMTMzMjFaMDMxMTAvBgNV BAMTKDA1QTdCMEU0MTFCMTVFMkZGNjhBOUE4RkFDNDYwRjA3N0ZBNEQ3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHN96c6ZDKc8bhhvGy/BNpnnSA uKjrO3DBKuq1NQKnsWFj4xwMAqb53Q3HsQkLbVwYRQmO3DXgpI8fkt0wRT1XGxGE 5NMdZ3m2GNkWFXgM+6he5PQVR5ANxTUiDia0XWr+WlT+DoIcUdD0I6Q9L+BI35T0 ZB1qlhvAGfZffENizLPlRHH4ia00mlGW1nAkn5bcOnTaNvOnKHYbROwD/aUBpLsT Zxw5z4KuxLEazz3l3zo7mFRbveeHwwfMxKGunKh9VpKorTxt0zomUWQb9PHyP1Ux XShpRAfeF93Fw27pxOgepxk1HdMa+VxU6lugdq6Nn5dkuAX6V+M6dFlYOJ+VAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBaew5BGxXi/2ipqPrEYPB3+k13wwHwYDVR0j BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1 OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ7KqDXaGRDXllKQtsNWrKJmOUygkBkPTHKuArfOQo7OI1MF37Vg6EPFos+ZX HFqS28V/BWSoznji4pQB9F+Q69U6GLTe0tNqtqJ5TlrRsz66+NAf8fSM17BqIOPD /eWRE4fQFZhNqCpNrPtPlAq7QadRvCA/lRN/mN9kSPPL5YGbX17I61jXqtV9Cdra ZeKucBBdkkVtS+hT/jqxwMxx4AN3Jalnu7yux43iY2GtbHtmUOg9dIlQfrU9LbCb U5AcgsYZrdl0p+GrjeEYmvS3t/DThLCeZCs1i4LfzF63A2xEvNEaWhWi2qagolgN b8DgeO28smCncIOzfX+rkaqtuQ== -----END CERTIFICATE-----Generated at Tue Nov 4 05:06:00 2025 by rpki-client