$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft File: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft (raw, json) Hash identifier: hRvBSkLZVCM44Qrb2+jyCv3g80xeRapT8qKtrFJO4vE= Subject key identifier: E3:2B:00:1F:F3:6C:B5:E1:C4:F6:9C:F7:A8:3B:E5:1A:3E:78:3F:A3 Authority key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69 Certificate issuer: /CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69 Certificate serial: 09C796C6724A8DE67817C1E60FDE0E5A4BB668E8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer Subject info access: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft Manifest number: 02F6 Signing time: Mon 03 Nov 2025 07:45:43 +0000 Manifest this update: Mon 03 Nov 2025 07:40:43 +0000 Manifest next update: Tue 04 Nov 2025 09:19:43 +0000 Files and hashes: 1: 323830343a346537343a3a2f33322d3438203d3e20323638323632.roa (hash: /VCzucGfHlqNTkfJXTq1xxcOLzuuIwZ1U/QtbROwaEI=) 2: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl (hash: l0MCEB4Y0qw6ew+/aPuAxn1+6WL7551/w/oF4yb5Dqo=) 3: 34352e3233372e32342e302f32322d3234203d3e20323638323632.roa (hash: rINL47d16XXmhij2neYqgRCOetMGqa2cVuGeKHBY2Ww=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c7:96:c6:72:4a:8d:e6:78:17:c1:e6:0f:de:0e:5a:4b:b6:68:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69 Validity Not Before: Nov 3 07:40:43 2025 GMT Not After : Nov 4 09:19:43 2025 GMT Subject: CN=E32B001FF36CB5E1C4F69CF7A83BE51A3E783FA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:58:79:7c:86:ee:83:94:aa:ca:d0:a5:8c:9e: b2:64:c0:5d:4b:9c:e1:20:e8:5d:9d:8b:15:b0:12: 93:5d:f0:ad:ad:2f:8c:56:6b:b2:34:df:33:9c:c7: 1e:91:04:92:e6:05:8d:16:84:71:0c:91:3e:7d:d6: 2d:a1:fc:29:94:d7:e8:db:98:12:cc:b6:c2:0b:f1: ff:6a:37:ea:b8:17:cc:b4:fb:da:77:b4:d1:ea:f9: 58:0c:f9:98:df:07:03:68:99:b6:78:c8:84:3f:a0: d9:3e:00:28:df:72:49:68:1c:ac:35:78:dd:bd:0e: 16:f7:39:c2:01:40:9a:4a:fa:80:be:2a:c1:0d:17: 12:fb:c8:8a:83:fb:02:86:30:1b:ae:b1:aa:68:0c: 96:7f:b4:9e:64:02:a0:61:9f:c1:0a:1a:56:46:b0: f6:03:03:20:c1:69:ba:28:05:6e:43:30:a1:c8:92: c4:4e:9c:0a:38:3e:55:b3:ca:34:87:7e:fc:bb:5a: 82:9b:83:76:9f:bb:ae:75:d9:b2:42:78:3d:82:86: 8a:6d:ee:e4:0f:1a:e5:f8:db:6d:f3:5b:d1:be:56: 34:b3:f5:be:a8:5d:07:a3:c9:d3:80:71:05:47:12: f0:23:b3:23:29:00:a9:6d:31:70:6c:1d:69:c1:81: 9a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2B:00:1F:F3:6C:B5:E1:C4:F6:9C:F7:A8:3B:E5:1A:3E:78:3F:A3 X509v3 Authority Key Identifier: keyid:DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:89:d4:fc:b1:1c:a4:3b:42:fe:49:d7:47:88:b7:d5:d1:1c: cd:46:7f:d2:39:35:9b:ba:0c:34:0f:7b:14:d5:79:b7:8b:79: d9:e4:91:a9:24:47:6f:5a:20:39:96:93:aa:16:9d:ec:3e:85: 3c:7a:fe:ab:c2:49:c7:43:76:4c:7b:03:bb:a2:d0:b5:54:69: 4d:64:0a:3b:d2:e7:39:6e:f2:35:a6:51:57:bb:2e:30:ba:f7: f1:a9:4a:e2:34:6c:49:9e:d1:ae:08:9b:1f:45:9b:6c:44:ab: 1e:a2:b5:95:67:15:3c:0d:ca:0e:77:5f:55:6c:21:e1:f7:19: 66:2a:ad:01:ce:e6:b7:0e:e2:b3:d5:20:be:77:93:79:8e:ef: f5:bc:b4:e4:36:8c:16:9c:4f:1b:52:8c:c1:1c:56:3b:7a:57: 08:a6:38:86:c0:f6:fe:75:12:82:6d:8d:99:f7:75:ce:b9:43: 33:7e:e3:1a:93:2d:bb:f7:00:59:e7:c3:51:23:b7:a2:df:8c: a4:a6:a6:ef:2f:cd:d1:c1:17:63:50:d9:6a:2e:b9:9e:05:a3: bc:e3:19:f3:b6:c5:c2:8a:01:9c:62:05:2c:5c:b8:cd:08:65: bf:de:60:d9:14:de:8b:35:7b:a2:80:31:51:58:27:c1:b6:34: 7e:e9:87:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCceWxnJKjeZ4F8HmD94OWku2aOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCQkU1M0FBNDBBQ0I0NUVENzZEQUMwRTZGODMzQjI4 QkVEOEE2OTAeFw0yNTExMDMwNzQwNDNaFw0yNTExMDQwOTE5NDNaMDMxMTAvBgNV BAMTKEUzMkIwMDFGRjM2Q0I1RTFDNEY2OUNGN0E4M0JFNTFBM0U3ODNGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhWHl8hu6DlKrK0KWMnrJkwF1L nOEg6F2dixWwEpNd8K2tL4xWa7I03zOcxx6RBJLmBY0WhHEMkT591i2h/CmU1+jb mBLMtsIL8f9qN+q4F8y0+9p3tNHq+VgM+ZjfBwNombZ4yIQ/oNk+ACjfckloHKw1 eN29Dhb3OcIBQJpK+oC+KsENFxL7yIqD+wKGMBuusapoDJZ/tJ5kAqBhn8EKGlZG sPYDAyDBabooBW5DMKHIksROnAo4PlWzyjSHfvy7WoKbg3afu6512bJCeD2Chopt 7uQPGuX4223zW9G+VjSz9b6oXQejydOAcQVHEvAjsyMpAKltMXBsHWnBgZrFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4ysAH/NsteHE9pz3qDvlGj54P6MwHwYDVR0j BBgwFoAU37vlOqQKy0XtdtrA5vgzsovtimkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1Rl VmovMC9ERkJCRTUzQUE0MEFDQjQ1RUQ3NkRBQzBFNkY4MzNCMjhCRUQ4QTY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQkJFNTNBQTQwQUNCNDVF RDc2REFDMEU2RjgzM0IyOEJFRDhBNjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1RlVmovMC9E RkJCRTUzQUE0MEFDQjQ1RUQ3NkRBQzBFNkY4MzNCMjhCRUQ4QTY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAionU/LEcpDtC/knXR4i31dEczUZ/0jk1m7oMNA97FNV5t4t52eSRqSRHb1og OZaTqhad7D6FPHr+q8JJx0N2THsDu6LQtVRpTWQKO9LnOW7yNaZRV7suMLr38alK 4jRsSZ7RrgibH0WbbESrHqK1lWcVPA3KDndfVWwh4fcZZiqtAc7mtw7is9UgvneT eY7v9by05DaMFpxPG1KMwRxWO3pXCKY4hsD2/nUSgm2Nmfd1zrlDM37jGpMtu/cA WefDUSO3ot+MpKam7y/N0cEXY1DZai65ngWjvOMZ87bFwooBnGIFLFy4zQhlv95g 2RTeizV7ooAxUVgnwbY0fumHzA== -----END CERTIFICATE-----Generated at Tue Nov 4 00:27:03 2025 by rpki-client