$ rpki-client -vvf rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft File: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft (raw, json) Hash identifier: d5jXH83qps+PIq38XTfzhehB9iKHmd9rIE1csHVjIIY= Subject key identifier: FD:92:48:C7:DF:DD:10:88:AA:B3:C6:AD:A7:3F:EA:14:F0:C5:BD:C7 Authority key identifier: DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7 Certificate issuer: /CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7 Certificate serial: 75B9FCABB3FCDE5430F5CEF0B92F2C8201CDB3FA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer Subject info access: rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft Manifest number: A0 Signing time: Mon 03 Nov 2025 13:40:02 +0000 Manifest this update: Mon 03 Nov 2025 13:35:02 +0000 Manifest next update: Tue 04 Nov 2025 15:03:02 +0000 Files and hashes: 1: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl (hash: 4sR5ii30ZVqShX4jHULhOtMEPWICyRyFyx7oqcicaXE=) 2: 323830343a386532303a3a2f33322d313238203d3e20323733343034.roa (hash: +rQtNxAInELK5ARSncrEa6aoX0jAyBJS0K9vEo2MC/M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 15:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b9:fc:ab:b3:fc:de:54:30:f5:ce:f0:b9:2f:2c:82:01:cd:b3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7 Validity Not Before: Nov 3 13:35:02 2025 GMT Not After : Nov 4 15:03:02 2025 GMT Subject: CN=FD9248C7DFDD1088AAB3C6ADA73FEA14F0C5BDC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:b5:84:40:2a:a2:8c:48:11:cc:8d:19:9f: 1a:c0:1c:06:6f:79:23:3b:33:e5:d1:89:e9:a7:12: 58:b8:e4:36:60:af:12:84:a3:18:38:cf:f7:2f:06: 7f:ca:db:25:45:7f:70:bd:b9:04:f8:02:a4:ab:e2: a1:c9:d0:70:32:2b:c1:7c:19:45:00:2a:92:ba:62: f3:93:00:89:a7:82:f3:2d:18:cb:92:e3:e5:28:ef: a2:0f:3f:cb:b3:32:d9:1b:d4:b2:d3:7b:91:46:74: 3e:af:0f:07:19:32:32:b6:13:7c:14:fe:76:73:a4: 96:5b:1b:40:16:30:be:55:58:98:d6:42:1e:bd:08: cf:73:cc:c4:35:22:a3:7c:00:e9:63:13:ad:3f:fe: 2a:aa:1f:b9:a0:65:5e:4c:a6:be:49:fe:58:c3:c6: 25:3f:61:cd:46:ad:d1:fb:fb:1a:a1:c7:05:19:d7: 8d:bd:31:1d:66:6f:f6:93:84:d3:9b:91:85:c0:e7: 8b:a7:94:d3:79:a2:cb:f7:b0:c1:53:20:b5:04:02: 9b:0e:5d:63:3c:eb:e8:d7:f3:13:7b:d5:54:18:85: 62:04:03:0c:cb:98:03:61:8f:7b:e7:d4:e8:42:3d: 74:e3:2a:b8:7d:e0:5c:0b:bb:d7:3f:81:fc:10:34: 1f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:92:48:C7:DF:DD:10:88:AA:B3:C6:AD:A7:3F:EA:14:F0:C5:BD:C7 X509v3 Authority Key Identifier: keyid:DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:20:4b:17:93:df:77:be:98:d6:91:8d:59:f8:53:fd:38:84: 0a:ba:cf:9e:c3:b1:30:18:df:c7:f4:77:c8:7f:73:79:bb:c4: d5:f3:63:f0:b8:fd:4e:b4:0d:76:13:c2:0e:85:6f:fd:ef:d0: 68:01:2b:23:f9:79:73:76:f2:c4:fe:e6:cf:42:2f:fe:aa:ac: d9:52:49:81:90:2f:cb:0b:5f:1f:50:9a:8e:b1:9b:14:b7:4e: 5a:66:09:67:9c:42:7e:5f:55:45:48:b7:15:b0:02:0a:06:0c: 7e:cc:cd:a7:7b:86:5a:80:a9:cb:35:a3:e7:ba:f3:d3:27:06: cb:d3:2a:d5:ef:a3:79:5b:11:e2:c6:37:89:b4:42:1a:6f:02: dc:6d:bf:d6:27:55:5f:57:56:9a:b4:9a:ba:53:17:75:60:13: 08:f1:e7:47:ce:b5:5e:b7:23:e4:4f:67:55:64:1e:fb:bf:3e: 38:c1:5a:8f:ae:8a:82:8e:86:ab:2a:06:f1:09:ba:4c:79:d4: 45:72:97:b7:55:0f:15:38:0d:30:8a:bd:df:fe:e1:a9:a6:4c: 39:5c:3e:7d:02:e6:f6:f1:4d:5f:9d:1f:5b:aa:50:28:de:a5: 8d:6b:b0:fd:dc:0c:a1:42:90:77:e9:52:81:6d:c7:84:36:99: 13:c6:c7:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdbn8q7P83lQw9c7wuS8sggHNs/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNEFGRTRDMzUyNTlFQTBFMEFCOTNBMzQwREYxMzlF ODZCOERCNzAeFw0yNTExMDMxMzM1MDJaFw0yNTExMDQxNTAzMDJaMDMxMTAvBgNV BAMTKEZEOTI0OEM3REZERDEwODhBQUIzQzZBREE3M0ZFQTE0RjBDNUJEQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQbWEQCqijEgRzI0ZnxrAHAZv eSM7M+XRiemnEli45DZgrxKEoxg4z/cvBn/K2yVFf3C9uQT4AqSr4qHJ0HAyK8F8 GUUAKpK6YvOTAImngvMtGMuS4+Uo76IPP8uzMtkb1LLTe5FGdD6vDwcZMjK2E3wU /nZzpJZbG0AWML5VWJjWQh69CM9zzMQ1IqN8AOljE60//iqqH7mgZV5Mpr5J/ljD xiU/Yc1GrdH7+xqhxwUZ1429MR1mb/aThNObkYXA54unlNN5osv3sMFTILUEApsO XWM86+jX8xN71VQYhWIEAwzLmANhj3vn1OhCPXTjKrh94FwLu9c/gfwQNB+pAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/ZJIx9/dEIiqs8atpz/qFPDFvccwHwYDVR0j BBgwFoAU3zSv5MNSWeoOCrk6NA3xOehrjbcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1R0VWJvMmVxcDhjR2F1VmtRQ1RpZkhRdWFlRTVWZlNpWXA0VHdYZVgx SjkvMC9ERjM0QUZFNEMzNTI1OUVBMEUwQUI5M0EzNDBERjEzOUU4NkI4REI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGMzRBRkU0QzM1MjU5RUEw RTBBQjkzQTM0MERGMTM5RTg2QjhEQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1R0VWJvMmVxcDhjR2F1VmtRQ1RpZkhRdWFlRTVWZlNpWXA0VHdYZVgxSjkvMC9E RjM0QUZFNEMzNTI1OUVBMEUwQUI5M0EzNDBERjEzOUU4NkI4REI3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAECBLF5Pfd76Y1pGNWfhT/TiECrrPnsOxMBjfx/R3yH9zebvE1fNj8Lj9TrQN dhPCDoVv/e/QaAErI/l5c3byxP7mz0Iv/qqs2VJJgZAvywtfH1CajrGbFLdOWmYJ Z5xCfl9VRUi3FbACCgYMfszNp3uGWoCpyzWj57rz0ycGy9Mq1e+jeVsR4sY3ibRC Gm8C3G2/1idVX1dWmrSaulMXdWATCPHnR861Xrcj5E9nVWQe+78+OMFaj66Kgo6G qyoG8Qm6THnURXKXt1UPFTgNMIq93/7hqaZMOVw+fQLm9vFNX50fW6pQKN6ljWuw /dwMoUKQd+lSgW3HhDaZE8bH8g== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:50 2025 by rpki-client