$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft File: DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft (raw, json) Hash identifier: 1borXHm2MPpcLaslD8URnIw2MVRMnLgVfekbGU+CW40= Subject key identifier: 41:B4:E6:DF:A0:84:7F:5C:E5:3A:35:4F:43:50:46:2A:29:55:CB:F8 Authority key identifier: DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D Certificate issuer: /CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D Certificate serial: 4154EF12B70F510DDA8A2DFF97A3F3B2DA94F20E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer Subject info access: rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft Manifest number: 011E Signing time: Sun 02 Nov 2025 21:37:08 +0000 Manifest this update: Sun 02 Nov 2025 21:32:08 +0000 Manifest next update: Mon 03 Nov 2025 23:30:08 +0000 Files and hashes: 1: 34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa (hash: EBy3rQwQ+8YvV1n0NbcOpSkf6ZX3JhodQDIQP6f8oCY=) 2: 323830343a353764303a3a2f33322d3332203d3e20323638303838.roa (hash: V86kNco5ZHxMjKrWgLTi/qoHVEZvpbWtFOyczBdYZAU=) 3: DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl (hash: XcB+tSXMAEEPLDrZFmerk+TKz/8eB1isqju3/jdeMKE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 23:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:54:ef:12:b7:0f:51:0d:da:8a:2d:ff:97:a3:f3:b2:da:94:f2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D Validity Not Before: Nov 2 21:32:08 2025 GMT Not After : Nov 3 23:30:08 2025 GMT Subject: CN=41B4E6DFA0847F5CE53A354F4350462A2955CBF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5b:6c:cd:ba:2a:7e:15:b2:dc:4b:f0:12:75: 97:b7:6b:14:03:50:d7:43:ac:b4:31:7f:59:40:bf: 7f:ab:d1:2e:28:4a:b8:04:9a:c6:15:bc:ae:c1:01: b8:31:06:13:4d:d4:65:18:ff:bb:c1:2b:d7:12:fd: b4:e5:25:34:81:88:ca:ff:ad:62:14:6d:7a:2a:ed: 4c:cb:43:f1:a4:32:6f:11:ca:c6:e1:9a:bf:be:af: cc:55:18:0f:09:ca:c5:59:09:9d:2c:08:14:3a:dc: 81:8b:c1:09:48:fb:9e:26:8d:ab:cb:c9:73:80:0b: 1d:3d:85:f3:19:ed:a9:aa:d8:74:e6:dc:28:2f:96: ee:ad:75:eb:3f:80:75:f4:f1:8e:01:53:05:a0:4f: 32:4e:6a:b6:a0:4d:b7:e6:2a:44:2c:7e:95:91:7e: 1c:56:07:2d:02:d8:25:94:86:0c:3b:01:bb:e6:c2: 96:e5:b4:e8:f2:df:aa:ff:29:33:9d:9a:49:f4:74: b4:4f:00:86:58:5e:05:88:94:b6:86:3d:0b:fa:d3: 6e:6f:12:d4:6a:db:56:8e:0a:69:ed:e2:83:26:c8: 7e:87:fa:5f:ed:79:1f:64:44:b1:f7:bf:e6:1d:75: d9:bf:23:c7:5e:88:8a:db:e2:72:c2:d6:66:a7:7a: e1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B4:E6:DF:A0:84:7F:5C:E5:3A:35:4F:43:50:46:2A:29:55:CB:F8 X509v3 Authority Key Identifier: keyid:DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:da:51:a5:f3:23:a8:b1:a7:3b:11:6f:03:91:a5:26:b0:e9: b0:d4:3e:e8:d5:b2:98:32:15:55:6b:4c:6a:68:93:0a:6e:b6: f8:b3:97:69:f3:3e:47:93:85:3c:e9:d6:04:54:ba:7d:0b:18: e1:1f:8b:18:8a:c3:7a:66:2a:25:95:eb:41:6d:a8:27:4f:a2: ae:d5:d4:8a:c6:1a:51:b2:d7:fd:f2:0f:98:2f:ff:03:5b:ec: b1:12:46:0c:55:b4:8c:6a:cb:b5:40:72:45:67:3f:b8:df:fd: f0:e0:bf:e5:a4:4a:56:7c:06:a8:79:a9:27:e5:cf:cd:ea:fd: 56:d8:13:51:35:5c:cd:b6:a5:a6:4f:62:d8:61:36:43:41:5e: c4:7f:fe:ee:02:a0:d4:5f:ec:20:df:59:e4:69:1e:f8:ec:d5: f6:ef:d4:7a:d0:c6:f9:d3:bf:77:75:fa:e2:f6:33:24:91:b6: 91:27:8c:e7:b7:64:18:42:67:14:9d:ad:94:7f:87:c9:33:fa: 6b:06:15:09:04:18:4d:29:af:ba:f4:70:92:0d:01:6c:88:a4: 77:c7:4c:44:37:9c:75:15:d6:f6:b4:2e:6a:d7:3a:eb:27:5b: 1b:a9:f5:7a:34:c4:6d:b5:91:e2:92:54:15:8e:be:4d:e4:fc: db:3a:55:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQVTvErcPUQ3aii3/l6PzstqU8g4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQzOTk3RUE2MjRCMjc0N0YwNkU3N0Q5MTQxMjJFQURF QzREMEI3RDAeFw0yNTExMDIyMTMyMDhaFw0yNTExMDMyMzMwMDhaMDMxMTAvBgNV BAMTKDQxQjRFNkRGQTA4NDdGNUNFNTNBMzU0RjQzNTA0NjJBMjk1NUNCRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUW2zNuip+FbLcS/ASdZe3axQD UNdDrLQxf1lAv3+r0S4oSrgEmsYVvK7BAbgxBhNN1GUY/7vBK9cS/bTlJTSBiMr/ rWIUbXoq7UzLQ/GkMm8Rysbhmr++r8xVGA8JysVZCZ0sCBQ63IGLwQlI+54mjavL yXOACx09hfMZ7amq2HTm3Cgvlu6tdes/gHX08Y4BUwWgTzJOaragTbfmKkQsfpWR fhxWBy0C2CWUhgw7AbvmwpbltOjy36r/KTOdmkn0dLRPAIZYXgWIlLaGPQv6025v EtRq21aOCmnt4oMmyH6H+l/teR9kRLH3v+Ydddm/I8deiIrb4nLC1maneuF3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQbTm36CEf1zlOjVPQ1BGKilVy/gwHwYDVR0j BBgwFoAU3TmX6mJLJ0fwbnfZFBIurexNC30wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhy dUUvMC9ERDM5OTdFQTYyNEIyNzQ3RjA2RTc3RDkxNDEyMkVBREVDNEQwQjdELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMzk5N0VBNjI0QjI3NDdG MDZFNzdEOTE0MTIyRUFERUM0RDBCN0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhydUUvMC9E RDM5OTdFQTYyNEIyNzQ3RjA2RTc3RDkxNDEyMkVBREVDNEQwQjdELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQNpRpfMjqLGnOxFvA5GlJrDpsNQ+6NWymDIVVWtMamiTCm62+LOXafM+R5OF POnWBFS6fQsY4R+LGIrDemYqJZXrQW2oJ0+irtXUisYaUbLX/fIPmC//A1vssRJG DFW0jGrLtUByRWc/uN/98OC/5aRKVnwGqHmpJ+XPzer9VtgTUTVczbalpk9i2GE2 Q0FexH/+7gKg1F/sIN9Z5Gke+OzV9u/UetDG+dO/d3X64vYzJJG2kSeM57dkGEJn FJ2tlH+HyTP6awYVCQQYTSmvuvRwkg0BbIikd8dMRDecdRXW9rQuatc66ydbG6n1 ejTEbbWR4pJUFY6+TeT82zpVMw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:35:57 2025 by rpki-client