$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft File: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft (raw, json) Hash identifier: c3Z1l992gtyPCX17RBzycqylS0Q9W+DfzUtsmJZvI/g= Subject key identifier: CE:41:02:E3:85:70:AB:B2:F9:18:F1:DD:7F:E2:4E:CD:85:03:73:64 Authority key identifier: DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3 Certificate issuer: /CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3 Certificate serial: 3A5D5768353565CA25E7327DE4FF9BCC7FC83ACD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer Subject info access: rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft Manifest number: 0301 Signing time: Mon 03 Nov 2025 07:49:53 +0000 Manifest this update: Mon 03 Nov 2025 07:44:53 +0000 Manifest next update: Tue 04 Nov 2025 11:05:53 +0000 Files and hashes: 1: 323830343a363065303a3a2f33322d3336203d3e20323639313937.roa (hash: D5Kh1u0vUQX58zC8K3kTptsTZXCjTHtVrMtIC/ORziw=) 2: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl (hash: lsvnCIyuHwOefy4a3ueaC1y1GknL2dISux5r/6QfzfU=) 3: 34352e3138312e3139362e302f32322d3234203d3e20323639313937.roa (hash: Col+LRGc/1lk9nvkTe3TytJA4agsIFfCWd9IIiNQBxI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5d:57:68:35:35:65:ca:25:e7:32:7d:e4:ff:9b:cc:7f:c8:3a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3 Validity Not Before: Nov 3 07:44:53 2025 GMT Not After : Nov 4 11:05:53 2025 GMT Subject: CN=CE4102E38570ABB2F918F1DD7FE24ECD85037364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:58:09:53:a8:44:18:cd:6d:1b:d8:5d:b9:1d: 0d:c2:11:77:24:fd:a7:c1:f2:f9:b8:36:bf:96:87: 3d:63:2d:a4:c4:43:8b:9e:63:57:ea:04:3d:d3:d9: 91:06:21:ee:8b:01:77:16:b0:7f:fd:07:7e:65:e6: 8e:dd:73:59:af:d9:64:8b:f4:9b:2c:af:d6:11:ce: 41:06:d8:f5:93:1f:d4:7f:f3:ae:0f:0b:20:2d:f1: 2e:01:4c:ab:c7:d4:be:4b:6c:68:23:d1:1f:da:80: 63:53:52:67:e3:b1:d3:94:b2:98:0d:1b:ad:33:a5: cf:11:c6:b2:a7:12:6e:9d:49:8a:17:c4:73:df:4e: 5c:a3:1d:16:02:37:a7:65:1b:a0:c3:00:72:77:ba: fd:63:66:37:fb:5b:cf:61:ee:9e:eb:74:46:95:92: 11:15:2c:f5:39:c9:d8:e9:d2:19:d5:aa:5d:0c:c5: aa:e4:92:81:8a:c8:55:35:9b:3f:75:aa:4f:15:c0: d0:2d:f3:38:8a:06:32:ca:fc:b0:01:5d:c9:8d:57: 62:21:e3:7b:00:10:5e:55:52:e2:fe:6e:6e:5e:be: b9:6e:32:d8:05:7f:77:f2:66:0e:b0:0f:54:40:08: ac:f5:cf:08:b8:5d:08:16:66:60:ac:36:ce:ec:ad: 55:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:41:02:E3:85:70:AB:B2:F9:18:F1:DD:7F:E2:4E:CD:85:03:73:64 X509v3 Authority Key Identifier: keyid:DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:6b:17:9a:a7:44:51:23:2e:5d:bb:a3:a6:0b:0b:43:90:ab: 0c:f5:0d:c1:5f:18:44:6b:a1:17:b0:76:22:e6:a8:de:8e:3b: 91:4b:4f:32:87:42:4a:28:31:17:15:80:ee:93:90:e3:05:fa: 1b:56:d3:aa:0e:83:3d:fc:d5:fc:3a:5b:2b:72:c0:9b:5a:14: 36:0f:86:01:1d:30:6a:4c:78:2c:86:a7:a9:58:9e:5c:9f:e5: b2:04:22:0d:4c:c1:5a:95:38:3d:a4:7f:78:35:72:5f:49:53: ba:91:62:11:82:23:c9:ce:99:dd:2d:2d:b7:47:42:cb:0a:78: 8a:73:0d:09:ef:7a:51:c1:45:31:d5:b3:92:cd:06:97:5f:8b: e0:37:fe:a6:f4:91:83:76:13:17:b1:35:98:3a:06:77:ef:9a: 78:ed:7b:4f:de:08:1c:e4:c5:26:b1:67:8e:50:0f:42:bc:82: 6e:3e:e3:36:ad:43:49:b8:67:92:ce:3c:2f:ec:8e:bd:46:59: c2:27:ca:36:09:15:32:21:cf:be:3d:7a:b8:1c:fc:c4:60:25: c8:c5:f6:a9:ff:ee:2b:4a:d6:0a:c7:03:5c:74:54:15:a7:3e: 4e:86:8a:af:c5:eb:0c:b9:f4:11:08:46:7f:8f:da:90:a6:ce: 06:62:c4:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOl1XaDU1Zcol5zJ95P+bzH/IOs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY1MkNDOTBGQ0QyQzM4MzI4NDA2NDNBOUU1NTdERTg1 QjBGNTlEMzAeFw0yNTExMDMwNzQ0NTNaFw0yNTExMDQxMTA1NTNaMDMxMTAvBgNV BAMTKENFNDEwMkUzODU3MEFCQjJGOTE4RjFERDdGRTI0RUNEODUwMzczNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8WAlTqEQYzW0b2F25HQ3CEXck /afB8vm4Nr+Whz1jLaTEQ4ueY1fqBD3T2ZEGIe6LAXcWsH/9B35l5o7dc1mv2WSL 9Jssr9YRzkEG2PWTH9R/864PCyAt8S4BTKvH1L5LbGgj0R/agGNTUmfjsdOUspgN G60zpc8RxrKnEm6dSYoXxHPfTlyjHRYCN6dlG6DDAHJ3uv1jZjf7W89h7p7rdEaV khEVLPU5ydjp0hnVql0MxarkkoGKyFU1mz91qk8VwNAt8ziKBjLK/LABXcmNV2Ih 43sAEF5VUuL+bm5evrluMtgFf3fyZg6wD1RACKz1zwi4XQgWZmCsNs7srVX1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzkEC44Vwq7L5GPHdf+JOzYUDc2QwHwYDVR0j BBgwFoAU31LMkPzSw4MoQGQ6nlV96FsPWdMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlZLa1RaZktpTEZvclVNaFlSSnlHYm5ZcEV4RjRrRDVBUVpoaTh1N1Na dUQvMS9ERjUyQ0M5MEZDRDJDMzgzMjg0MDY0M0E5RTU1N0RFODVCMEY1OUQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGNTJDQzkwRkNEMkMzODMy ODQwNjQzQTlFNTU3REU4NUIwRjU5RDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlZLa1RaZktpTEZvclVNaFlSSnlHYm5ZcEV4RjRrRDVBUVpoaTh1N1NadUQvMS9E RjUyQ0M5MEZDRDJDMzgzMjg0MDY0M0E5RTU1N0RFODVCMEY1OUQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhWsXmqdEUSMuXbujpgsLQ5CrDPUNwV8YRGuhF7B2Iuao3o47kUtPModCSigx FxWA7pOQ4wX6G1bTqg6DPfzV/DpbK3LAm1oUNg+GAR0wakx4LIanqVieXJ/lsgQi DUzBWpU4PaR/eDVyX0lTupFiEYIjyc6Z3S0tt0dCywp4inMNCe96UcFFMdWzks0G l1+L4Df+pvSRg3YTF7E1mDoGd++aeO17T94IHOTFJrFnjlAPQryCbj7jNq1DSbhn ks48L+yOvUZZwifKNgkVMiHPvj16uBz8xGAlyMX2qf/uK0rWCscDXHRUFac+ToaK r8XrDLn0EQhGf4/akKbOBmLEJw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:39:08 2025 by rpki-client