$ rpki-client -vvf rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft File: DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft (raw, json) Hash identifier: 4sDz8brHCQ5M6KTsyMQST06oBFzHfX4cQUI2DbqH1mY= Subject key identifier: 30:B5:CA:5E:5C:39:D8:08:31:A9:D2:88:73:9D:53:9B:8B:E6:86:91 Authority key identifier: DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7 Certificate issuer: /CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7 Certificate serial: 63AA7153E8466780DF14E8E6EB8153A64B210EDB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer Subject info access: rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft Manifest number: 02F9 Signing time: Mon 03 Nov 2025 14:40:43 +0000 Manifest this update: Mon 03 Nov 2025 14:35:43 +0000 Manifest next update: Tue 04 Nov 2025 14:46:43 +0000 Files and hashes: 1: 34352e3138372e3133362e302f32322d3332203d3e20323633343935.roa (hash: 5+XifBwmtLaxgxPNk24Mw53jD9cQeXM5iNuXn7nfl3g=) 2: 3137302e3233332e37362e302f32322d3332203d3e20323633343935.roa (hash: N7Dzja+ewCZ5bktfECX/TB1ef5794l68at3qxiGJ+kc=) 3: 3139312e3234332e34382e302f32322d3332203d3e20323633343935.roa (hash: EzDggyZ4XLjy7mULZWNklaOx8oHxxU8b7aLW5cC/W/k=) 4: DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl (hash: 1q6+PG5bb+cS6b9F4Jp21KFrSJI70GbrbmCYI77OCVk=) 5: 323830343a313262633a3a2f33322d313238203d3e20323633343935.roa (hash: PsO0rBlFL87VDdP7wq/L8V7MJOH689SxXWrb76Ynk5w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 14:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:aa:71:53:e8:46:67:80:df:14:e8:e6:eb:81:53:a6:4b:21:0e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7 Validity Not Before: Nov 3 14:35:43 2025 GMT Not After : Nov 4 14:46:43 2025 GMT Subject: CN=30B5CA5E5C39D80831A9D288739D539B8BE68691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:cd:07:e5:d8:c3:f1:c8:2b:4a:4b:27:75: 8c:da:58:b7:5f:7f:5d:0c:34:bb:94:b0:6f:94:71: 92:3d:33:4c:3a:ee:62:05:a8:e8:7d:ae:f3:35:e3: d6:da:d5:e2:3a:a9:46:e7:2d:30:6e:57:24:3d:0e: 58:9e:8d:0f:29:15:e9:43:70:b9:29:cd:03:05:14: fa:e6:84:6b:c5:65:e1:ec:56:06:26:17:66:70:69: 15:c8:d1:11:ba:7f:96:4c:89:d9:d3:84:dd:52:ca: 62:cc:de:93:e2:7b:36:eb:34:45:ab:a6:60:e8:01: 2e:b5:85:59:0d:5b:28:02:98:dc:d4:1e:a9:52:9c: 34:1c:4a:01:49:97:dd:10:9c:3c:5a:5d:e4:53:ed: 43:eb:3b:8e:06:8f:b9:7f:73:2c:9a:95:3b:4f:77: 98:e4:f6:b9:c9:c5:2d:6b:53:08:a6:16:ad:61:ca: ca:63:2c:a3:0d:67:8e:78:76:6d:46:e0:9d:2c:6b: 9b:3c:96:e5:cb:19:40:48:90:d4:6b:a8:db:e8:49: 11:13:00:f7:10:45:24:49:4e:12:05:38:54:a9:a3: 2b:18:17:9c:c1:fe:11:6a:99:40:9e:43:53:e0:0f: 32:88:21:fb:70:fe:c4:b8:8c:26:68:6f:17:b2:fb: ce:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B5:CA:5E:5C:39:D8:08:31:A9:D2:88:73:9D:53:9B:8B:E6:86:91 X509v3 Authority Key Identifier: keyid:DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:62:96:4a:63:6f:0e:d0:80:3d:9f:82:f9:e0:4c:db:4d:eb: b6:35:81:ae:df:62:76:fd:40:32:51:ea:44:1d:42:39:ef:68: e2:e0:54:5d:97:72:2a:82:29:87:fb:fa:ef:1e:b2:4b:49:a5: 5a:cb:67:df:6e:68:cf:15:cc:fa:48:86:d1:14:2e:88:0e:50: 75:d2:93:82:7d:3a:9f:6e:9b:ff:c1:20:4d:71:ed:d5:c3:3c: c0:e5:bd:54:56:a7:36:95:75:55:f6:ac:b1:08:12:bb:cb:5f: 5e:09:87:c4:37:83:b8:af:f7:41:79:1d:a5:26:87:79:e8:0f: 76:6c:35:29:48:61:00:c1:7e:54:3d:c5:e3:f5:f7:f9:73:94: 29:1c:31:61:c2:db:b5:77:14:ba:df:f9:74:47:55:86:d3:6b: 3f:76:1a:69:73:2b:26:67:53:69:35:a3:95:d1:74:8d:7f:6d: 72:f6:a7:29:0d:0d:36:1f:44:01:d8:89:77:ee:29:ad:30:c1: c8:a3:34:af:b1:09:8a:96:41:b4:8c:28:3a:b4:81:17:2b:87: 6c:a1:c3:df:3e:3b:71:cb:2d:6d:a4:a5:34:e9:71:d7:13:98: 1b:dd:a2:d7:fd:f2:c4:8b:8f:81:59:e2:bc:ce:38:30:ce:1f: 11:0a:99:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY6pxU+hGZ4DfFOjm64FTpkshDtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RkM1NjgwNUM3NjY3RTE4MDE4NTRCM0M3N0FEQ0I2 NEE2M0RENzAeFw0yNTExMDMxNDM1NDNaFw0yNTExMDQxNDQ2NDNaMDMxMTAvBgNV BAMTKDMwQjVDQTVFNUMzOUQ4MDgzMUE5RDI4ODczOUQ1MzlCOEJFNjg2OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGFs0H5djD8cgrSksndYzaWLdf f10MNLuUsG+UcZI9M0w67mIFqOh9rvM149ba1eI6qUbnLTBuVyQ9DliejQ8pFelD cLkpzQMFFPrmhGvFZeHsVgYmF2ZwaRXI0RG6f5ZMidnThN1SymLM3pPiezbrNEWr pmDoAS61hVkNWygCmNzUHqlSnDQcSgFJl90QnDxaXeRT7UPrO44Gj7l/cyyalTtP d5jk9rnJxS1rUwimFq1hyspjLKMNZ454dm1G4J0sa5s8luXLGUBIkNRrqNvoSRET APcQRSRJThIFOFSpoysYF5zB/hFqmUCeQ1PgDzKIIftw/sS4jCZobxey+87ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMLXKXlw52AgxqdKIc51Tm4vmhpEwHwYDVR0j BBgwFoAU3k/FaAXHZn4YAYVLPHety2SmPdcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3VpeUJYV3BQVUhKenpQWjFCRWJTazZZQzJ1dEhOQWlTNXJFb1Vtb2Zp U1kvMC9ERTRGQzU2ODA1Qzc2NjdFMTgwMTg1NEIzQzc3QURDQjY0QTYzREQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFNEZDNTY4MDVDNzY2N0Ux ODAxODU0QjNDNzdBRENCNjRBNjNERDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3VpeUJYV3BQVUhKenpQWjFCRWJTazZZQzJ1dEhOQWlTNXJFb1Vtb2ZpU1kvMC9E RTRGQzU2ODA1Qzc2NjdFMTgwMTg1NEIzQzc3QURDQjY0QTYzREQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAemKWSmNvDtCAPZ+C+eBM203rtjWBrt9idv1AMlHqRB1COe9o4uBUXZdyKoIp h/v67x6yS0mlWstn325ozxXM+kiG0RQuiA5QddKTgn06n26b/8EgTXHt1cM8wOW9 VFanNpV1VfassQgSu8tfXgmHxDeDuK/3QXkdpSaHeegPdmw1KUhhAMF+VD3F4/X3 +XOUKRwxYcLbtXcUut/5dEdVhtNrP3YaaXMrJmdTaTWjldF0jX9tcvanKQ0NNh9E AdiJd+4prTDByKM0r7EJipZBtIwoOrSBFyuHbKHD3z47ccstbaSlNOlx1xOYG92i 1/3yxIuPgVnivM44MM4fEQqZFw== -----END CERTIFICATE-----Generated at Tue Nov 4 00:27:03 2025 by rpki-client