$ rpki-client -vvf rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft File: 653D1900116E7E41CE869340B5477E400370D802.mft (raw, json) Hash identifier: MlfJi44/g4ztpsvLkYhBQ1X2OR8rQREUZOtTRH1byJs= Subject key identifier: 52:C7:B9:C4:35:FF:62:50:6F:7F:E2:A1:07:1B:B5:22:13:A9:03:1D Authority key identifier: 65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02 Certificate issuer: /CN=653D1900116E7E41CE869340B5477E400370D802 Certificate serial: 49B1992EF44011DA6640268AA47F9A22DC20C88F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer Subject info access: rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft Manifest number: 0242 Signing time: Mon 03 Nov 2025 20:00:05 +0000 Manifest this update: Mon 03 Nov 2025 19:55:05 +0000 Manifest next update: Tue 04 Nov 2025 22:11:05 +0000 Files and hashes: 1: 3137372e35322e34342e302f32342d3234203d3e203532373936.roa (hash: 6vdFQfA5lnE387AQBaz7OJcadPg4QswmmQbDioW4CWM=) 2: 3137372e35322e34372e302f32342d3234203d3e203532373936.roa (hash: Xp2u2qJYCff1ip3P87quhanzUqnA0SBeflwFfEp8iH4=) 3: 3137372e35322e34352e302f32342d3234203d3e203532373936.roa (hash: ZGDiMWxSAnPCfpSuSRrivc6SnVVYs0c2VksGanOWt2Y=) 4: 323830343a6239343a3a2f33322d3332203d3e203532373936.roa (hash: UHOAMnyQuDaDlnL1JvlwIpjEGx/YCz4LZEw70WSU75Q=) 5: 3137372e35322e34342e302f32322d3232203d3e203532373936.roa (hash: soLAkjXBPK2bz7dUuYvwF+iMaf4v+T4PtGggdZjRSO0=) 6: 653D1900116E7E41CE869340B5477E400370D802.crl (hash: r7kCwI46GwoDxptJFit/m2/jgZHZh3gTVJvBFKgb8tY=) 7: 3137372e35322e34362e302f32342d3234203d3e203532373936.roa (hash: pI9tTYU30K+di3HL9t6xuL+sKaArxMKOT4n971nvxAo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 22:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b1:99:2e:f4:40:11:da:66:40:26:8a:a4:7f:9a:22:dc:20:c8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653D1900116E7E41CE869340B5477E400370D802 Validity Not Before: Nov 3 19:55:05 2025 GMT Not After : Nov 4 22:11:05 2025 GMT Subject: CN=52C7B9C435FF62506F7FE2A1071BB52213A9031D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:e0:98:4a:ac:68:e9:1d:6b:ef:a9:c7:07: 10:29:df:ce:92:59:3b:88:ed:4b:a5:0a:60:cd:55: 91:7c:e6:d7:e4:8e:e8:2f:2a:e0:6e:38:9b:b6:bf: ca:73:c6:6a:dc:ef:02:8c:13:94:07:94:a6:08:eb: 44:45:bc:39:03:27:c6:cf:e1:83:e7:ee:27:89:56: f4:ba:d7:4f:c7:ce:d0:8b:c8:66:f6:a2:34:bd:a9: 7c:f1:fb:f7:03:60:d2:44:c8:ca:60:4d:70:19:6d: 4a:bf:ef:c6:db:05:89:36:9a:9b:c0:99:9a:11:9f: 8b:b6:53:90:7e:47:c0:e8:a6:68:c5:79:67:57:12: b8:78:25:c6:c4:ba:e1:c2:89:6f:73:09:08:31:98: 5f:75:73:97:60:a2:ba:80:e7:bc:c6:e2:79:19:56: 67:5d:a5:48:9b:b4:21:d9:3d:19:47:9a:86:ca:7f: ab:06:bc:83:41:d7:ab:32:f1:9c:f2:42:e4:68:59: a1:30:7d:63:a3:76:fc:f1:2f:d0:84:32:ad:e4:27: 2e:7b:5f:80:5f:69:97:e9:25:ee:da:7e:86:5c:45: 43:d9:03:2d:b1:af:5c:c5:94:76:ea:af:cb:82:ef: d7:9c:c7:7e:ce:2b:80:90:21:0c:92:7e:cd:45:24: e7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C7:B9:C4:35:FF:62:50:6F:7F:E2:A1:07:1B:B5:22:13:A9:03:1D X509v3 Authority Key Identifier: keyid:65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:2e:db:0f:99:f3:b9:32:f7:73:83:81:29:b1:06:e7:7e:d3: ce:04:e0:66:b5:fb:c1:14:e3:5f:59:af:c9:dd:0d:43:40:f8: c4:bc:73:38:d9:56:da:76:32:1c:d6:28:3c:b2:61:bf:95:1d: 26:dc:e1:62:4b:1e:b1:0d:c7:c4:9a:39:84:87:1b:97:f1:60: d4:08:27:69:ad:79:d7:ca:79:7b:34:76:ed:6f:b5:82:f7:00: d1:eb:92:5b:b6:11:5b:38:d5:36:ff:61:05:8f:dd:cf:6c:c2: fc:91:45:44:a8:f5:41:c5:a7:11:e2:d3:ea:3c:b8:c8:2b:5a: 84:bc:f8:b2:9d:84:c2:1a:0c:30:fa:93:48:f9:f9:50:6d:bb: 8b:42:1b:47:21:c8:8a:c2:b6:3a:ce:04:dc:0c:8b:2c:e6:41: c2:95:9d:f9:47:ff:95:86:9b:99:0d:23:eb:22:d3:d2:bd:b2: 20:6b:4c:31:eb:2e:4e:04:02:40:a3:2c:a3:77:8d:48:78:42: 42:c8:ed:3f:2f:e0:ac:b3:5b:a5:c9:a3:83:ed:b4:d3:01:a5: e4:f7:65:7f:8e:a6:6c:ef:5a:14:35:5c:91:ef:87:9c:1e:c4: fe:f0:d8:92:e8:de:7c:23:9d:00:d9:95:9d:dd:f2:2e:d5:1f: 36:5c:b5:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSbGZLvRAEdpmQCaKpH+aItwgyI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzRDE5MDAxMTZFN0U0MUNFODY5MzQwQjU0NzdFNDAw MzcwRDgwMjAeFw0yNTExMDMxOTU1MDVaFw0yNTExMDQyMjExMDVaMDMxMTAvBgNV BAMTKDUyQzdCOUM0MzVGRjYyNTA2RjdGRTJBMTA3MUJCNTIyMTNBOTAzMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLOOCYSqxo6R1r76nHBxAp386S WTuI7UulCmDNVZF85tfkjugvKuBuOJu2v8pzxmrc7wKME5QHlKYI60RFvDkDJ8bP 4YPn7ieJVvS610/HztCLyGb2ojS9qXzx+/cDYNJEyMpgTXAZbUq/78bbBYk2mpvA mZoRn4u2U5B+R8DopmjFeWdXErh4JcbEuuHCiW9zCQgxmF91c5dgorqA57zG4nkZ VmddpUibtCHZPRlHmobKf6sGvINB16sy8ZzyQuRoWaEwfWOjdvzxL9CEMq3kJy57 X4BfaZfpJe7afoZcRUPZAy2xr1zFlHbqr8uC79ecx37OK4CQIQySfs1FJOfZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUse5xDX/YlBvf+KhBxu1IhOpAx0wHwYDVR0j BBgwFoAUZT0ZABFufkHOhpNAtUd+QANw2AIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHJvZExwZGRuWlQ4b1FCSlkyb2lLd2JDSjI5ZVBVa3lFOVF3UU5TNWZu TWcvMC82NTNEMTkwMDExNkU3RTQxQ0U4NjkzNDBCNTQ3N0U0MDAzNzBEODAyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1M0QxOTAwMTE2RTdFNDFD RTg2OTM0MEI1NDc3RTQwMDM3MEQ4MDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHJvZExwZGRuWlQ4b1FCSlkyb2lLd2JDSjI5ZVBVa3lFOVF3UU5TNWZuTWcvMC82 NTNEMTkwMDExNkU3RTQxQ0U4NjkzNDBCNTQ3N0U0MDAzNzBEODAyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlS7bD5nzuTL3c4OBKbEG537TzgTgZrX7wRTjX1mvyd0NQ0D4xLxzONlW2nYy HNYoPLJhv5UdJtzhYksesQ3HxJo5hIcbl/Fg1Agnaa1518p5ezR27W+1gvcA0euS W7YRWzjVNv9hBY/dz2zC/JFFRKj1QcWnEeLT6jy4yCtahLz4sp2EwhoMMPqTSPn5 UG27i0IbRyHIisK2Os4E3AyLLOZBwpWd+Uf/lYabmQ0j6yLT0r2yIGtMMesuTgQC QKMso3eNSHhCQsjtPy/grLNbpcmjg+200wGl5Pdlf46mbO9aFDVcke+HnB7E/vDY kujefCOdANmVnd3yLtUfNly12w== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:01 2025 by rpki-client