$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft File: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft (raw, json) Hash identifier: iK5A9uTtRYH3+7mGtMhO8L7f4hePobFXnNyRUg+kjNY= Subject key identifier: F5:16:C0:91:76:FE:F6:E9:87:70:94:6F:58:86:48:20:1E:CD:8D:4E Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3 Certificate issuer: /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3 Certificate serial: 5E87135AB7C9D46178B209CD5822376200D377 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft Manifest number: 0128 Signing time: Mon 03 Nov 2025 11:27:00 +0000 Manifest this update: Mon 03 Nov 2025 11:22:00 +0000 Manifest next update: Tue 04 Nov 2025 13:05:00 +0000 Files and hashes: 1: 323830343a313238383a3a2f33322d313238203d3e20323633343832.roa (hash: hw5+VUcxGrU/e1Wu8H1AwOj1HjLcJDx9TuqRoRLdwuM=) 2: 3138392e38342e34342e302f32322d3332203d3e20323633343832.roa (hash: O4kifbSkitu5/3Knp4MgghSalt5nO6zrru13mWlDmc4=) 3: 3137302e38332e3231322e302f32322d3332203d3e20323633343832.roa (hash: VRf7c1AilMDa5MAED8IvmErGMZeCvn1CKEsBPS+2gS8=) 4: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl (hash: KKs9/BbWN84TMG/G+FZal5Kwvvc4rXe5pB7BHL7TWXo=) 5: 3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa (hash: EO9/XY1ow03W8t7vGcP2Wy5W1TvFO2XAT86ZvjriNVc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 13:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:87:13:5a:b7:c9:d4:61:78:b2:09:cd:58:22:37:62:00:d3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3 Validity Not Before: Nov 3 11:22:00 2025 GMT Not After : Nov 4 13:05:00 2025 GMT Subject: CN=F516C09176FEF6E98770946F588648201ECD8D4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:49:99:90:39:fd:a7:aa:c3:68:97:d1:3f:2e: 2a:c8:76:00:8c:4a:71:12:15:a9:da:43:65:0d:b0: a2:af:dc:1f:7e:c3:2f:04:22:b3:66:48:88:f9:29: 2b:fc:af:33:e2:a3:ff:55:9e:e8:4b:b3:59:ae:3b: 6e:f4:09:b2:da:79:fd:b9:08:a7:0f:8d:eb:e1:ee: 31:20:f7:92:cd:1c:e8:81:d2:ab:2e:97:22:c6:6d: 8c:44:bc:d5:75:02:22:33:a4:c4:1c:d8:af:eb:7d: 32:20:8b:3b:d3:52:31:d0:78:e9:8f:7a:5d:09:83: 66:c1:1b:c0:fa:87:4b:76:ad:16:49:62:34:20:40: 9f:30:eb:01:a8:f8:ff:09:84:c8:f7:18:76:46:c2: ed:50:12:66:88:11:69:ee:b7:99:1b:63:5f:8c:3d: 10:fa:cc:36:39:db:86:37:f0:af:c8:0c:94:04:d2: f9:e6:e2:f7:d2:2f:fa:46:ef:3e:bd:c6:a7:73:82: b3:4f:f4:db:e1:6a:5e:df:4c:da:56:14:e7:8b:a1: 94:7e:87:cb:86:4b:c2:cf:db:bf:ce:b9:4b:de:68: 2d:a7:46:82:6e:36:92:1d:bf:d2:fa:10:d2:73:d5: 2a:6d:cd:0e:ac:ef:23:5a:16:e3:2f:f1:36:8a:67: 51:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:16:C0:91:76:FE:F6:E9:87:70:94:6F:58:86:48:20:1E:CD:8D:4E X509v3 Authority Key Identifier: keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:3d:59:1f:89:cb:79:a4:33:73:84:e4:7b:f9:ba:77:29:4f: 02:4d:03:22:51:3f:b5:f2:cc:d4:95:00:7f:27:69:00:03:aa: 31:e2:a3:08:97:fc:0b:f6:f9:4b:6d:c4:4e:f4:52:3e:89:13: 23:1e:36:b2:79:e5:3e:e9:ec:77:9d:30:af:07:9c:88:a3:5b: 36:60:39:f3:46:8e:0c:50:79:b0:ce:f4:82:3c:c7:ab:4e:b3: 09:df:b1:ef:54:58:4a:24:6a:ad:0d:90:46:a8:da:dd:43:8d: f9:1a:1a:17:a5:b9:20:ef:a1:f0:b9:f0:de:86:cf:c7:33:ed: 22:68:14:95:81:b1:be:ef:c3:49:f3:e4:b2:15:58:07:ad:9f: a7:6d:a7:ef:e3:fa:60:63:cd:8b:36:6c:5e:78:74:8e:a8:86: d2:0f:8a:c1:45:7d:a4:3c:b6:5b:7c:ed:53:d0:7f:18:50:07: a3:10:d9:84:d1:ff:49:8f:79:c9:c0:4d:c7:43:bf:79:df:78: af:f8:a7:53:df:4a:c6:a5:07:f1:73:7c:39:05:bb:97:8f:0e: 94:3c:76:33:c3:10:da:d5:82:de:e5:9b:99:eb:c4:b1:06:fa: 43:e3:2a:d9:2d:5a:8a:9f:a8:d7:99:7d:bf:7f:74:b1:85:b9: 0e:35:d5:a4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgITXocTWrfJ1GF4sgnNWCI3YgDTdzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygyMERCRDNBMEI1NEQxOUUxMzVCQTUzQjMxQzQ1ODg0MkM4 OUQ0OUYzMB4XDTI1MTEwMzExMjIwMFoXDTI1MTEwNDEzMDUwMFowMzExMC8GA1UE AxMoRjUxNkMwOTE3NkZFRjZFOTg3NzA5NDZGNTg4NjQ4MjAxRUNEOEQ0RTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL9JmZA5/aeqw2iX0T8uKsh2AIxK cRIVqdpDZQ2woq/cH37DLwQis2ZIiPkpK/yvM+Kj/1We6EuzWa47bvQJstp5/bkI pw+N6+HuMSD3ks0c6IHSqy6XIsZtjES81XUCIjOkxBzYr+t9MiCLO9NSMdB46Y96 XQmDZsEbwPqHS3atFkliNCBAnzDrAaj4/wmEyPcYdkbC7VASZogRae63mRtjX4w9 EPrMNjnbhjfwr8gMlATS+ebi99Iv+kbvPr3Gp3OCs0/02+FqXt9M2lYU54uhlH6H y4ZLws/bv865S95oLadGgm42kh2/0voQ0nPVKm3NDqzvI1oW4y/xNopnUTcCAwEA AaOCAlkwggJVMB0GA1UdDgQWBBT1FsCRdv726YdwlG9YhkggHs2NTjAfBgNVHSME GDAWgBQg29OgtU0Z4TW6U7McRYhCyJ1J8zAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9ESE1RUEI3S0ZURDNSV25RTVFEemtYU3AyZkNRaGtFRlpTSzNOWW81UURW cy8wLzIwREJEM0EwQjU0RDE5RTEzNUJBNTNCMzFDNDU4ODQyQzg5RDQ5RjMuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvMjBEQkQzQTBCNTREMTlFMTM1 QkE1M0IzMUM0NTg4NDJDODlENDlGMy5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9E SE1RUEI3S0ZURDNSV25RTVFEemtYU3AyZkNRaGtFRlpTSzNOWW81UURWcy8wLzIw REJEM0EwQjU0RDE5RTEzNUJBNTNCMzFDNDU4ODQyQzg5RDQ5RjMubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQARPVkfict5pDNzhOR7+bp3KU8CTQMiUT+18szUlQB/J2kAA6ox4qMIl/wL9vlL bcRO9FI+iRMjHjayeeU+6ex3nTCvB5yIo1s2YDnzRo4MUHmwzvSCPMerTrMJ37Hv VFhKJGqtDZBGqNrdQ435GhoXpbkg76HwufDehs/HM+0iaBSVgbG+78NJ8+SyFVgH rZ+nbafv4/pgY82LNmxeeHSOqIbSD4rBRX2kPLZbfO1T0H8YUAejENmE0f9Jj3nJ wE3HQ79533iv+KdT30rGpQfxc3w5BbuXjw6UPHYzwxDa1YLe5ZuZ68SxBvpD4yrZ LVqKn6jXmX2/f3SxhbkONdWk -----END CERTIFICATE-----Generated at Mon Nov 3 19:08:22 2025 by rpki-client