$ rpki-client -vvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft File: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft (raw, json) Hash identifier: g81PdQGL0OCqR5lPXAghTowKvGeT/L1qe1ju0ajLfpA= Subject key identifier: B9:70:DD:13:AD:2B:D9:EE:BE:51:14:DE:61:AD:3F:A6:81:44:BF:66 Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7 Certificate issuer: /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7 Certificate serial: 3E94E245FD422A4C4D4F637EADE908C88E57AD7B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer Subject info access: rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft Manifest number: 01DE Signing time: Tue 04 Nov 2025 01:21:01 +0000 Manifest this update: Tue 04 Nov 2025 01:16:01 +0000 Manifest next update: Wed 05 Nov 2025 04:08:01 +0000 Files and hashes: 1: 3137392e34382e3133372e302f32342d3234203d3e20323734363430.roa (hash: 61gejsX0uk9zhGJ4ZJfQ9xiAiQ66ltBn9knZR4l/mpI=) 2: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl (hash: 5/Qpwt8IQR4VBw5wy7zTrDrSB5QiICfTfK1m5Kgsuy4=) 3: 323830343a393136633a3a2f33322d3335203d3e20323734363430.roa (hash: WI9HCs6eGX9p1jo/mhyWY838lgd+KptHbbco/K1Lluw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 04:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:94:e2:45:fd:42:2a:4c:4d:4f:63:7e:ad:e9:08:c8:8e:57:ad:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7 Validity Not Before: Nov 4 01:16:01 2025 GMT Not After : Nov 5 04:08:01 2025 GMT Subject: CN=B970DD13AD2BD9EEBE5114DE61AD3FA68144BF66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6b:2c:ad:b1:a9:31:84:cf:a0:12:87:36:f3: c9:22:89:7b:99:97:4b:58:b5:7c:29:95:48:99:31: e7:b7:94:22:df:07:80:82:fd:eb:04:13:70:9d:06: 7f:7f:b2:02:31:9e:f6:00:ab:10:27:64:bb:03:0a: 0b:26:1e:f3:2a:ee:f7:4c:76:a9:23:12:c2:29:6e: cc:1f:68:ee:65:35:ee:61:54:ee:f8:79:b6:c7:b8: 8c:2f:30:2d:05:e2:69:2d:a5:3c:bd:7c:d7:58:89: 73:d9:5b:35:e6:c6:f9:8d:e0:27:02:13:d6:83:f3: 0a:b8:1b:18:75:59:25:76:f2:7e:d9:ec:6b:1c:43: 42:9f:84:b5:47:bf:f3:b6:bd:90:7e:5c:fc:09:80: 5c:da:70:4b:82:b3:d1:8f:d2:ad:88:ed:4d:1b:98: 16:fd:0e:c6:5f:23:71:fc:a3:74:5b:dd:2e:3b:e6: 16:fc:90:5b:24:c7:a4:d7:73:cb:2d:b2:6b:21:f0: 21:18:fc:db:eb:b0:b3:4b:e4:7b:79:5c:a6:a6:ab: 5d:aa:96:94:4e:25:14:fa:a8:6e:d6:31:20:b2:48: d0:a1:0d:c0:b0:90:f2:3e:8b:48:28:c1:30:05:af: 4e:e3:7a:c4:88:5a:d6:35:dd:67:01:5f:ac:b2:13: 7e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:70:DD:13:AD:2B:D9:EE:BE:51:14:DE:61:AD:3F:A6:81:44:BF:66 X509v3 Authority Key Identifier: keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a4:e5:85:e4:13:aa:2b:a9:7c:f5:3b:23:fb:0a:20:bd:83: 00:20:88:41:da:b2:a0:a7:f0:d7:26:83:21:9c:9e:d5:d1:14: f5:b1:49:28:02:6e:4b:db:14:1a:5b:b4:30:e5:8a:87:c3:2f: 68:a7:cf:e6:a5:f3:58:99:bc:e7:b1:04:42:24:f6:6f:4f:ca: 5b:b9:c7:49:b0:d8:0f:82:3d:5f:c6:ca:51:8c:87:5f:91:35: a0:20:a9:0a:3f:1a:a7:bc:d2:96:2f:83:5f:cd:59:2f:ac:5d: 35:4f:48:71:90:d8:ed:53:9d:a4:81:72:d2:92:61:a9:5a:09: d9:fb:42:19:28:e5:e3:c8:1a:c0:c0:55:2e:b5:ca:d5:fe:b1: df:ef:be:28:a3:d9:65:a0:6a:b1:14:9b:1e:66:e9:1b:7f:e1: 8c:8b:80:77:3d:84:cc:2d:5e:e3:51:96:9a:94:d6:8d:a9:ed: e3:a8:2e:60:68:4a:65:31:1f:22:22:98:89:0c:7e:4d:22:b0: 01:35:40:f8:5a:19:a4:9d:d4:86:8d:56:60:19:64:16:9b:a4: 45:28:fa:66:e2:2e:d0:9a:c1:b2:ba:5d:3c:3f:c4:dd:d6:b3: 76:ea:7b:08:87:80:74:42:bd:08:f4:c7:1b:56:69:f3:69:28: 9c:53:36:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPpTiRf1CKkxNT2N+rekIyI5XrXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGNTU0OUNBOTBCNDdEOEZBNTIxNzgwMEYwMDVDN0VD MEQ5NjZFNzAeFw0yNTExMDQwMTE2MDFaFw0yNTExMDUwNDA4MDFaMDMxMTAvBgNV BAMTKEI5NzBERDEzQUQyQkQ5RUVCRTUxMTRERTYxQUQzRkE2ODE0NEJGNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOayytsakxhM+gEoc288kiiXuZ l0tYtXwplUiZMee3lCLfB4CC/esEE3CdBn9/sgIxnvYAqxAnZLsDCgsmHvMq7vdM dqkjEsIpbswfaO5lNe5hVO74ebbHuIwvMC0F4mktpTy9fNdYiXPZWzXmxvmN4CcC E9aD8wq4Gxh1WSV28n7Z7GscQ0KfhLVHv/O2vZB+XPwJgFzacEuCs9GP0q2I7U0b mBb9DsZfI3H8o3Rb3S475hb8kFskx6TXc8stsmsh8CEY/NvrsLNL5Ht5XKamq12q lpROJRT6qG7WMSCySNChDcCwkPI+i0gowTAFr07jesSIWtY13WcBX6yyE34DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuXDdE60r2e6+URTeYa0/poFEv2YwHwYDVR0j BBgwFoAULfVUnKkLR9j6UheADwBcfsDZZucwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRENuN29VMzI2aEJYZkhtM1FReEV0c2JFdE5IV1ZqN01oV1dwYWRLR1dR Y1QvMC8yREY1NTQ5Q0E5MEI0N0Q4RkE1MjE3ODAwRjAwNUM3RUMwRDk2NkU3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERjU1NDlDQTkwQjQ3RDhG QTUyMTc4MDBGMDA1QzdFQzBEOTY2RTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RENuN29VMzI2aEJYZkhtM1FReEV0c2JFdE5IV1ZqN01oV1dwYWRLR1dRY1QvMC8y REY1NTQ5Q0E5MEI0N0Q4RkE1MjE3ODAwRjAwNUM3RUMwRDk2NkU3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFKTlheQTqiupfPU7I/sKIL2DACCIQdqyoKfw1yaDIZye1dEU9bFJKAJuS9sU Glu0MOWKh8MvaKfP5qXzWJm857EEQiT2b0/KW7nHSbDYD4I9X8bKUYyHX5E1oCCp Cj8ap7zSli+DX81ZL6xdNU9IcZDY7VOdpIFy0pJhqVoJ2ftCGSjl48gawMBVLrXK 1f6x3+++KKPZZaBqsRSbHmbpG3/hjIuAdz2EzC1e41GWmpTWjant46guYGhKZTEf IiKYiQx+TSKwATVA+FoZpJ3Uho1WYBlkFpukRSj6ZuIu0JrBsrpdPD/E3dazdup7 CIeAdEK9CPTHG1Zp82konFM2DQ== -----END CERTIFICATE-----Generated at Tue Nov 4 10:26:55 2025 by rpki-client