$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft File: D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json) Hash identifier: /jce2CgCnI6k40yS9b/fu2WXX4WYPI4lTJ7ilHINQUY= Subject key identifier: 09:DB:54:84:F8:1E:78:1A:D0:18:AA:37:A5:C4:82:2A:80:BB:6E:E6 Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 Certificate issuer: /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Certificate serial: 7386EA33074AE57CFC4B22AEA98F98F53DA7D8C2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft Manifest number: 0307 Signing time: Mon 03 Nov 2025 05:00:42 +0000 Manifest this update: Mon 03 Nov 2025 04:55:42 +0000 Manifest next update: Tue 04 Nov 2025 07:57:42 +0000 Files and hashes: 1: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: FE+7zbwcRwFNCNZQz6JTL4PFhynEDJA2jUUaWQGOwlw=) 2: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: 01pAW4QCHBpNqYLYxhHBFF+Hirycj7LT0087UnT0sog=) 3: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: gpdCNrdY/z1lfauNWlq3TiFyFjXHDghEB0zCe3+7A04=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 07:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:86:ea:33:07:4a:e5:7c:fc:4b:22:ae:a9:8f:98:f5:3d:a7:d8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Validity Not Before: Nov 3 04:55:42 2025 GMT Not After : Nov 4 07:57:42 2025 GMT Subject: CN=09DB5484F81E781AD018AA37A5C4822A80BB6EE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3c:8f:7b:f3:10:35:66:b7:9b:61:c3:ca:61: f3:6d:11:81:e8:05:86:32:41:64:b5:c0:fa:c8:8e: 56:b8:db:c9:07:c8:5b:f3:06:55:71:36:f0:da:19: a6:b5:65:1f:6d:01:56:c4:2f:63:fc:0d:c7:05:27: 35:ca:72:39:c0:4b:f7:27:29:71:5b:58:d1:91:1e: 28:bd:22:6e:50:e3:85:5f:50:b7:a1:46:d4:3e:73: dd:28:ae:9e:c6:aa:9f:10:49:33:c4:c6:fc:d2:33: 46:f1:47:7a:c8:9c:32:bd:47:a6:29:06:1c:99:86: d2:a9:04:3d:d6:84:d2:ab:7a:79:73:8f:ac:97:b3: 87:15:17:d4:25:62:86:64:5a:78:bd:38:e0:af:1b: 96:22:36:33:78:1d:7a:b9:f1:d8:46:f1:51:4d:ee: f1:b1:94:3a:3e:29:ba:89:64:48:52:81:92:fc:f3: d6:ca:a9:62:35:c2:12:14:ce:b1:7b:f5:d3:d3:ef: 63:5d:ea:02:f2:d9:8d:87:ce:59:63:db:31:55:31: 36:85:61:2a:7b:0a:dd:a4:cc:64:ac:5b:1f:bf:fb: 32:5e:40:4c:f9:40:1c:59:45:98:b7:a8:51:89:cd: 76:60:74:c9:75:ad:2d:7a:a0:09:47:d1:67:7d:9e: d9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DB:54:84:F8:1E:78:1A:D0:18:AA:37:A5:C4:82:2A:80:BB:6E:E6 X509v3 Authority Key Identifier: keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:10:b6:f9:c6:22:69:fb:ad:23:af:ff:7a:80:a5:b5:6a:7a: 3c:85:65:34:2e:3b:ea:1f:d7:02:e5:72:d3:49:48:0a:3b:86: 4d:63:26:fd:fe:63:b9:f2:26:71:58:62:61:38:01:c3:7f:9c: 5b:f6:13:66:e3:5e:d3:bf:1b:9c:bf:7f:2c:38:bb:bc:ec:95: 5b:cb:4c:d0:d1:fe:e9:11:35:0f:9f:38:d6:2b:b0:d1:ae:83: b8:03:94:55:4d:16:e5:36:b7:0a:4f:61:31:a8:c1:62:6d:29: 4f:74:d0:b7:4c:9d:e0:62:0f:61:55:04:ec:b5:a5:57:c8:6b: a4:9f:96:9f:10:00:fd:4d:c3:a9:05:22:d1:08:22:a3:b0:76: 09:1c:d8:d2:b9:0b:e6:fc:97:25:1b:88:87:09:e5:44:05:8e: c4:17:ac:70:01:48:72:6c:1e:83:73:ad:9f:c7:d5:9a:62:ff: 83:25:a0:b1:fd:dd:1e:77:f8:19:26:6a:c4:de:36:58:9a:8a: 5e:ba:30:d2:c6:8a:38:0b:14:2f:21:61:07:55:f2:c0:e4:22: ea:c7:01:b9:c9:e4:2c:8c:bf:29:d1:09:cb:e0:62:5b:6d:05: d6:d4:a2:1c:01:44:5d:1e:91:e1:aa:c6:66:c0:27:ee:3f:0e: f6:71:6a:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc4bqMwdK5Xz8SyKuqY+Y9T2n2MIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUzOUNGOTI5QjZBNkEyQjk1OTZCOTIyRjQxN0ZBRDkx Nzc5OUVENzAeFw0yNTExMDMwNDU1NDJaFw0yNTExMDQwNzU3NDJaMDMxMTAvBgNV BAMTKDA5REI1NDg0RjgxRTc4MUFEMDE4QUEzN0E1QzQ4MjJBODBCQjZFRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZPI978xA1ZrebYcPKYfNtEYHo BYYyQWS1wPrIjla428kHyFvzBlVxNvDaGaa1ZR9tAVbEL2P8DccFJzXKcjnAS/cn KXFbWNGRHii9Im5Q44VfULehRtQ+c90orp7Gqp8QSTPExvzSM0bxR3rInDK9R6Yp BhyZhtKpBD3WhNKrenlzj6yXs4cVF9QlYoZkWni9OOCvG5YiNjN4HXq58dhG8VFN 7vGxlDo+KbqJZEhSgZL889bKqWI1whIUzrF79dPT72Nd6gLy2Y2Hzllj2zFVMTaF YSp7Ct2kzGSsWx+/+zJeQEz5QBxZRZi3qFGJzXZgdMl1rS16oAlH0Wd9ntlJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCdtUhPgeeBrQGKo3pcSCKoC7buYwHwYDVR0j BBgwFoAU1TnPkptqaiuVlrki9Bf62Rd5ntcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNT M1QvMS9ENTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MzlDRjkyOUI2QTZBMkI5 NTk2QjkyMkY0MTdGQUQ5MTc3OTlFRDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNTM1QvMS9E NTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVRC2+cYiafutI6//eoCltWp6PIVlNC476h/XAuVy00lICjuGTWMm/f5jufIm cVhiYTgBw3+cW/YTZuNe078bnL9/LDi7vOyVW8tM0NH+6RE1D5841iuw0a6DuAOU VU0W5Ta3Ck9hMajBYm0pT3TQt0yd4GIPYVUE7LWlV8hrpJ+WnxAA/U3DqQUi0Qgi o7B2CRzY0rkL5vyXJRuIhwnlRAWOxBescAFIcmweg3Otn8fVmmL/gyWgsf3dHnf4 GSZqxN42WJqKXrow0saKOAsULyFhB1XywOQi6scBucnkLIy/KdEJy+BiW20F1tSi HAFEXR6R4arGZsAn7j8O9nFqUg== -----END CERTIFICATE-----Generated at Tue Nov 4 00:10:12 2025 by rpki-client