$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft File: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft (raw, json) Hash identifier: dVbog6ofyesV3TCnQ2ZmaiCGHOgTj3EUWOTOteIDwr8= Subject key identifier: BD:AC:14:20:52:1F:DE:37:D3:AE:E2:80:06:17:E2:FB:9B:EB:ED:BA Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA Certificate issuer: /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Certificate serial: 3141F55C23C73CADDD1142BC4A13B789201C4878 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft Manifest number: 02F4 Signing time: Mon 03 Nov 2025 10:33:53 +0000 Manifest this update: Mon 03 Nov 2025 10:28:53 +0000 Manifest next update: Tue 04 Nov 2025 11:52:53 +0000 Files and hashes: 1: 323830343a333164343a3a2f33322d3438203d3e203533313339.roa (hash: Tny32eTDORgq/MtVMRE6pvmeZrpwE0nT6BNCMfyIuNM=) 2: 3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (hash: sPenw571n896sllNaEQg92EoBX7mLS0ivDvfDaPaky8=) 3: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl (hash: RdK2F8rgVYWJWKNv8F0UydXfceCUGqa7sBHP/xqWGxA=) 4: 3138372e3130392e38302e302f32302d3234203d3e203533313339.roa (hash: IQvjHctOgbHfUkTO0U34ErrEutSrCbjo/UK2hA9NLGA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:41:f5:5c:23:c7:3c:ad:dd:11:42:bc:4a:13:b7:89:20:1c:48:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Validity Not Before: Nov 3 10:28:53 2025 GMT Not After : Nov 4 11:52:53 2025 GMT Subject: CN=BDAC1420521FDE37D3AEE2800617E2FB9BEBEDBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:91:04:66:5d:25:ea:20:83:91:51:26:f4: 7d:e9:8c:3f:a0:e0:95:51:ee:9f:4e:7a:1b:82:56: ad:76:7a:22:dd:57:ad:d3:27:7a:e4:30:75:9b:50: 03:f1:ba:d5:fa:ef:37:61:1b:fc:da:a4:73:f7:dc: 00:b2:2d:68:64:64:dc:0d:9d:08:ca:c2:a0:1b:78: 54:2a:f1:24:91:8d:43:a9:e3:5f:50:87:28:8e:c8: a8:a4:d3:0c:ac:c2:07:66:21:c4:ff:20:5e:74:cd: 7a:5d:40:11:c6:ce:f6:a6:10:3a:5a:7d:0f:2f:f2: a5:58:69:39:b7:3b:27:30:a0:e8:0d:ea:bf:65:70: 21:80:1f:c4:02:95:14:20:f6:19:35:68:8c:53:98: 9b:98:7a:fe:00:35:64:69:6c:07:93:fd:7b:d5:92: 77:74:71:cf:9c:8c:22:75:f1:5e:03:fc:c8:c0:14: a9:b0:36:aa:27:cf:28:b4:2b:06:0f:54:b7:5a:31: 55:ed:3e:50:60:0e:57:3f:80:39:92:d3:87:92:f8: 80:28:ab:a8:9b:8c:4e:30:86:da:ab:a7:ff:5e:82: 99:ef:42:35:13:9e:e8:97:b8:6d:7d:62:37:cd:1c: f3:d2:b1:4d:9a:97:6b:d6:4d:9a:20:ea:a3:b4:a4: c1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AC:14:20:52:1F:DE:37:D3:AE:E2:80:06:17:E2:FB:9B:EB:ED:BA X509v3 Authority Key Identifier: keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6a:4b:17:80:f7:fe:31:65:b7:9c:85:53:b7:19:53:23:a8: ae:83:d0:f7:09:3c:59:be:32:b0:d4:0d:b3:d8:46:8d:74:33: 7a:2b:e6:c9:02:fd:f4:c6:15:9e:69:fe:81:8b:11:f3:15:d9: 75:ef:65:b8:af:f2:c0:14:ac:f8:ba:7d:5d:e6:83:e2:dc:45: 02:40:6f:c3:e3:1c:cb:c7:43:6e:85:98:c5:23:11:c5:7f:e9: 43:75:82:95:dc:63:cc:20:3e:77:80:2d:12:bc:c1:59:27:d8: d6:22:ed:d7:0a:ac:3f:2c:58:52:8f:c9:ab:ef:54:e5:66:91: ea:c1:cb:11:8b:45:ac:bc:ef:e5:89:0c:9e:13:9c:80:64:58: 99:e0:0a:4d:fc:4e:19:3a:09:dc:43:7c:e4:9c:63:29:76:3b: f9:e0:0f:ce:bd:fe:76:c3:9d:73:8a:42:b7:20:cf:05:c0:76: 97:af:d7:c3:26:4a:07:f9:63:d5:f9:5a:fb:62:cd:64:ea:4c: fa:ec:b9:ef:ca:9e:01:a3:b3:f5:3c:27:33:3a:6a:e1:87:b3: 04:1b:16:8a:65:b6:05:46:49:32:9d:e8:a4:95:9f:52:73:5a: b1:f4:7f:60:16:be:8a:2e:65:a7:a0:b5:71:ff:a8:3e:50:30: d0:57:1a:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMUH1XCPHPK3dEUK8ShO3iSAcSHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNERGRjE5ODIyQzVCMjdDN0JDQzE2QkZEOEJFMkEz ODRGODlBQTAeFw0yNTExMDMxMDI4NTNaFw0yNTExMDQxMTUyNTNaMDMxMTAvBgNV BAMTKEJEQUMxNDIwNTIxRkRFMzdEM0FFRTI4MDA2MTdFMkZCOUJFQkVEQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxZEEZl0l6iCDkVEm9H3pjD+g 4JVR7p9OehuCVq12eiLdV63TJ3rkMHWbUAPxutX67zdhG/zapHP33ACyLWhkZNwN nQjKwqAbeFQq8SSRjUOp419QhyiOyKik0wyswgdmIcT/IF50zXpdQBHGzvamEDpa fQ8v8qVYaTm3OycwoOgN6r9lcCGAH8QClRQg9hk1aIxTmJuYev4ANWRpbAeT/XvV knd0cc+cjCJ18V4D/MjAFKmwNqonzyi0KwYPVLdaMVXtPlBgDlc/gDmS04eS+IAo q6ibjE4whtqrp/9egpnvQjUTnuiXuG19YjfNHPPSsU2al2vWTZog6qO0pMEXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvawUIFIf3jfTruKABhfi+5vr7bowHwYDVR0j BBgwFoAU0iTf8ZgixbJ8e8wWv9i+KjhPiaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlW QXYvMS9EMjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyMjRERkYxOTgyMkM1QjI3 QzdCQ0MxNkJGRDhCRTJBMzg0Rjg5QUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlWQXYvMS9E MjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbWpLF4D3/jFlt5yFU7cZUyOoroPQ9wk8Wb4ysNQNs9hGjXQzeivmyQL99MYV nmn+gYsR8xXZde9luK/ywBSs+Lp9XeaD4txFAkBvw+Mcy8dDboWYxSMRxX/pQ3WC ldxjzCA+d4AtErzBWSfY1iLt1wqsPyxYUo/Jq+9U5WaR6sHLEYtFrLzv5YkMnhOc gGRYmeAKTfxOGToJ3EN85JxjKXY7+eAPzr3+dsOdc4pCtyDPBcB2l6/XwyZKB/lj 1fla+2LNZOpM+uy578qeAaOz9TwnMzpq4YezBBsWimW2BUZJMp3opJWfUnNasfR/ YBa+ii5lp6C1cf+oPlAw0FcaFA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:03 2025 by rpki-client