$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft File: 2D59905C3FCA5BDA34D7101B088D80451D026C47.mft (raw, json) Hash identifier: V8kMl6aBQIWS8b1gYjYqrcD3IptzA3qT9ov7DE9sO+s= Subject key identifier: DC:67:74:A3:AA:76:06:D9:0C:DB:A8:C8:96:E5:BF:27:8B:92:E0:17 Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 Certificate issuer: /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Certificate serial: 45E97C2153B84A0F151D651A21ED483A00EB5D69 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject info access: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft Manifest number: 0301 Signing time: Mon 03 Nov 2025 06:26:37 +0000 Manifest this update: Mon 03 Nov 2025 06:21:37 +0000 Manifest next update: Tue 04 Nov 2025 08:15:37 +0000 Files and hashes: 1: 3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (hash: zTSSMFG/lgVqOaFeXf9pCktuzCsj0jIoIIi1uaEYa0I=) 2: 2D59905C3FCA5BDA34D7101B088D80451D026C47.crl (hash: LMguW9e7mqf4kvdVzQYHejyXLPFAeD/7ggmcDpiBP1U=) 3: 3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa (hash: GZELRNfuplahvPNzTKoCXKCGe7m/TvcDFJFlJBobK9k=) 4: 323830343a323439633a3a2f33322d3438203d3e20323634323333.roa (hash: NawnnPEHbMCtTiXRZuqs51ycbe695zSEZpiIfj2SEO8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 08:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e9:7c:21:53:b8:4a:0f:15:1d:65:1a:21:ed:48:3a:00:eb:5d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Validity Not Before: Nov 3 06:21:37 2025 GMT Not After : Nov 4 08:15:37 2025 GMT Subject: CN=DC6774A3AA7606D90CDBA8C896E5BF278B92E017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:61:8b:d2:68:00:13:ae:21:1a:39:40:f9:e8: f0:af:84:93:a9:36:d8:8b:e9:fa:c9:76:a3:24:25: d0:70:9a:6a:81:b0:78:fc:9c:e7:e3:f2:fd:63:fa: 80:27:3a:43:1f:59:09:83:fb:3a:57:10:83:4f:9f: 5a:60:4c:30:64:da:1a:61:a5:60:67:49:d4:71:00: 18:99:c2:5c:74:45:77:29:63:9d:25:02:de:cd:2d: c4:c2:08:90:f0:5a:b2:47:5c:23:9b:76:7b:0c:40: 3d:ca:c3:f5:b4:c7:e7:cd:15:18:5e:b4:10:ca:6d: 23:f7:78:42:88:94:57:00:34:c0:18:9b:88:6f:67: ad:56:9a:3e:20:64:a0:4d:6b:6a:e2:fb:4c:32:35: 25:63:14:51:35:cf:53:61:2f:60:65:e1:38:d7:7c: 65:99:70:db:2a:35:a4:e7:15:5d:97:f8:32:87:05: b1:b3:1c:75:ce:7f:e9:71:96:b4:0a:68:3d:08:10: 2a:5c:9b:b9:b0:36:4d:19:2b:c2:b3:48:18:d2:0e: 27:5d:74:28:68:52:6d:39:33:3a:f7:d0:55:63:b0: 28:c2:94:68:54:ce:cd:8e:ba:bb:09:d1:bc:6b:e3: 79:32:48:6d:05:ea:95:ce:f9:24:0e:34:14:20:b2: fe:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:67:74:A3:AA:76:06:D9:0C:DB:A8:C8:96:E5:BF:27:8B:92:E0:17 X509v3 Authority Key Identifier: keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d4:0e:f5:5a:5d:bf:12:0a:db:39:0e:f1:4c:b6:bd:53:20: 74:74:dc:c4:8c:99:a6:4e:fd:45:08:52:c9:53:4c:b0:60:ac: 33:9f:dc:c2:6b:88:55:de:ae:11:88:99:7a:ae:b8:2d:da:0c: c4:e3:95:6b:56:fa:f4:fa:b3:d5:1e:e2:c4:58:38:86:d7:8b: 12:c6:fd:bf:44:00:28:2a:e8:97:5c:2f:8e:d1:d3:19:94:3c: 97:1c:e9:97:9e:d1:7e:6a:2b:73:cd:b0:e0:e1:38:bb:67:cd: d2:ab:42:7d:07:d1:60:28:97:a1:c9:cb:5e:c2:c7:75:7d:6b: 80:80:2b:07:49:f0:38:83:fe:2a:02:6f:8f:0a:96:82:d0:64: a1:db:6d:35:18:79:41:36:c1:87:d0:6c:cc:8c:5f:0c:a5:ee: 80:c4:be:95:22:3f:69:9a:90:fc:83:16:67:85:be:19:f8:93: eb:91:78:d0:a3:5d:7d:ce:eb:51:09:bd:61:5c:7f:43:09:9a: 07:99:2c:14:bd:bb:2f:31:38:56:ef:64:03:d0:c4:aa:a0:41: 6b:69:7d:5c:50:31:4f:5b:a1:05:bb:0a:66:e3:14:6f:5d:66: 11:26:cd:08:a2:1a:90:e3:ae:af:19:1f:fa:28:0b:75:4e:22: e2:4d:49:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURel8IVO4Sg8VHWUaIe1IOgDrXWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1OTkwNUMzRkNBNUJEQTM0RDcxMDFCMDg4RDgwNDUx RDAyNkM0NzAeFw0yNTExMDMwNjIxMzdaFw0yNTExMDQwODE1MzdaMDMxMTAvBgNV BAMTKERDNjc3NEEzQUE3NjA2RDkwQ0RCQThDODk2RTVCRjI3OEI5MkUwMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUYYvSaAATriEaOUD56PCvhJOp NtiL6frJdqMkJdBwmmqBsHj8nOfj8v1j+oAnOkMfWQmD+zpXEINPn1pgTDBk2hph pWBnSdRxABiZwlx0RXcpY50lAt7NLcTCCJDwWrJHXCObdnsMQD3Kw/W0x+fNFRhe tBDKbSP3eEKIlFcANMAYm4hvZ61Wmj4gZKBNa2ri+0wyNSVjFFE1z1NhL2Bl4TjX fGWZcNsqNaTnFV2X+DKHBbGzHHXOf+lxlrQKaD0IECpcm7mwNk0ZK8KzSBjSDidd dChoUm05Mzr30FVjsCjClGhUzs2OursJ0bxr43kySG0F6pXO+SQONBQgsv4tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3Gd0o6p2BtkM26jIluW/J4uS4BcwHwYDVR0j BBgwFoAULVmQXD/KW9o01xAbCI2ARR0CbEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5 QUgvMS8yRDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENTk5MDVDM0ZDQTVCREEz NEQ3MTAxQjA4OEQ4MDQ1MUQwMjZDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5QUgvMS8y RDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP9QO9VpdvxIK2zkO8Uy2vVMgdHTcxIyZpk79RQhSyVNMsGCsM5/cwmuIVd6u EYiZeq64LdoMxOOVa1b69Pqz1R7ixFg4hteLEsb9v0QAKCrol1wvjtHTGZQ8lxzp l57Rfmorc82w4OE4u2fN0qtCfQfRYCiXocnLXsLHdX1rgIArB0nwOIP+KgJvjwqW gtBkodttNRh5QTbBh9BszIxfDKXugMS+lSI/aZqQ/IMWZ4W+GfiT65F40KNdfc7r UQm9YVx/QwmaB5ksFL27LzE4Vu9kA9DEqqBBa2l9XFAxT1uhBbsKZuMUb11mESbN CKIakOOurxkf+igLdU4i4k1JSg== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:20 2025 by rpki-client