$ rpki-client -vvf rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft File: D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft (raw, json) Hash identifier: ihm4l1vzryncwvpqrDwHuCqs7760mT35eqDeFrZbKu8= Subject key identifier: 4D:0C:C5:A4:F9:61:32:F3:32:01:3E:AD:AA:FF:34:0B:07:11:28:5B Authority key identifier: D2:3F:9B:F7:7C:C1:B3:2D:E1:FE:EA:20:8F:14:CD:34:38:A4:DC:BE Certificate issuer: /CN=D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE Certificate serial: 1E77D9416911682717772262E3FEB77137DDAD44 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer Subject info access: rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft Manifest number: E1 Signing time: Mon 03 Nov 2025 21:45:20 +0000 Manifest this update: Mon 03 Nov 2025 21:40:20 +0000 Manifest next update: Tue 04 Nov 2025 22:50:20 +0000 Files and hashes: 1: 3133382e302e3230342e302f32322d3234203d3e20323634353536.roa (hash: Bp/MXpC4FvWK4Yo9ZUl+rpN/2KDLvDApID7I3LrdZiw=) 2: 3136382e3232372e38382e302f32322d3234203d3e20323634353536.roa (hash: am5A4bo+CeX/idLnSOVp8k4cvl+rRIWfZDIw8duCyYA=) 3: 323830343a323137383a3a2f33322d3438203d3e20323634353536.roa (hash: GksSVdLS7K0cl550vTDzKqmAY2+LTjqW45XiI8cG9xk=) 4: D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl (hash: VKuQN7vZW9xJ6UXc3rgkwX+iJUphpvPJRZNLxeq3qSE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 22:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:77:d9:41:69:11:68:27:17:77:22:62:e3:fe:b7:71:37:dd:ad:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE Validity Not Before: Nov 3 21:40:20 2025 GMT Not After : Nov 4 22:50:20 2025 GMT Subject: CN=4D0CC5A4F96132F332013EADAAFF340B0711285B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1e:24:f1:e2:84:6a:36:01:08:a7:43:6e:3d: 5d:6d:d6:94:9b:fb:b0:01:1d:06:b3:cb:67:53:22: e8:24:5d:32:9d:7a:00:9c:94:e0:68:b2:63:08:04: 65:47:05:ba:8f:90:46:cc:d7:cc:f0:40:27:91:72: 98:86:c6:28:a9:0a:b1:4f:41:bc:b9:8b:77:06:a0: b5:83:b8:61:9b:b2:d3:ca:8c:9f:cd:2e:d6:7f:dc: 4e:9d:f8:fe:c8:5d:78:65:7b:8a:4c:bb:89:4a:d6: cf:e0:76:36:56:50:1c:b3:74:7d:9a:4f:3d:51:8f: 94:6c:08:65:e5:80:37:6b:04:ef:02:b2:35:b0:3b: de:40:76:71:a0:84:a8:c5:8e:07:2b:a8:d1:bc:bc: 82:27:24:ab:09:43:e3:a4:7e:19:79:ac:78:22:0e: b6:02:d6:63:29:c2:b2:d3:8a:d4:b1:77:61:c0:c6: f8:79:bb:73:58:c1:51:7c:92:cc:bf:36:fb:e3:9e: 02:c2:72:d2:8c:60:f9:ff:98:1d:a8:4c:e8:02:81: 76:cf:bc:c9:93:66:2e:c9:e4:c2:c7:0b:53:c0:ac: ab:89:56:18:98:23:40:21:7b:59:8a:02:e3:3c:59: 1c:e0:55:05:b5:51:bf:21:d9:55:b0:ce:5b:cb:ae: 70:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0C:C5:A4:F9:61:32:F3:32:01:3E:AD:AA:FF:34:0B:07:11:28:5B X509v3 Authority Key Identifier: keyid:D2:3F:9B:F7:7C:C1:B3:2D:E1:FE:EA:20:8F:14:CD:34:38:A4:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:dd:c4:5d:f4:1c:d3:47:55:ab:10:72:0f:be:55:a8:61:42: 5c:fa:0f:75:c7:e7:8e:7e:ab:27:26:6b:e8:96:7e:c3:1b:78: eb:b3:19:aa:4a:4e:01:6c:46:ee:da:4e:49:fb:7d:c5:f8:32: 58:50:95:4a:27:b0:98:2e:b0:3f:a7:38:10:a6:22:99:5c:cb: f7:7c:1d:85:cf:27:eb:4e:7a:71:64:55:6d:f3:18:89:89:cf: 56:0a:0b:be:2e:ed:eb:8d:03:a4:bc:6f:13:9b:9d:68:f2:d7: e6:f8:36:f2:cf:82:3f:e1:1c:1a:45:1a:81:d8:00:45:c3:06: a5:bf:de:34:b6:ef:71:bf:5e:00:b2:a1:78:8a:ac:4b:37:db: 15:e8:d7:7b:54:3a:6a:42:ec:89:03:3b:7d:d7:b5:3d:45:df: 16:78:8d:2d:c7:7f:39:54:5b:2b:cd:69:4a:a3:fb:8c:81:fb: bf:c8:46:f5:80:ab:ec:a2:ef:03:b3:20:41:ca:90:5f:62:47: 5c:54:75:18:02:e8:19:bb:9f:79:22:80:fe:f4:9e:12:71:8e: 20:52:13:51:da:45:ea:61:db:7e:7a:26:54:c7:75:b7:0b:90: fc:71:d4:cd:0c:9c:8e:7e:92:de:11:16:16:40:e7:20:73:0f: 85:4e:20:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHnfZQWkRaCcXdyJi4/63cTfdrUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIzRjlCRjc3Q0MxQjMyREUxRkVFQTIwOEYxNENEMzQz OEE0RENCRTAeFw0yNTExMDMyMTQwMjBaFw0yNTExMDQyMjUwMjBaMDMxMTAvBgNV BAMTKDREMENDNUE0Rjk2MTMyRjMzMjAxM0VBREFBRkYzNDBCMDcxMTI4NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGHiTx4oRqNgEIp0NuPV1t1pSb +7ABHQazy2dTIugkXTKdegCclOBosmMIBGVHBbqPkEbM18zwQCeRcpiGxiipCrFP Qby5i3cGoLWDuGGbstPKjJ/NLtZ/3E6d+P7IXXhle4pMu4lK1s/gdjZWUByzdH2a Tz1Rj5RsCGXlgDdrBO8CsjWwO95AdnGghKjFjgcrqNG8vIInJKsJQ+Okfhl5rHgi DrYC1mMpwrLTitSxd2HAxvh5u3NYwVF8ksy/NvvjngLCctKMYPn/mB2oTOgCgXbP vMmTZi7J5MLHC1PArKuJVhiYI0Ahe1mKAuM8WRzgVQW1Ub8h2VWwzlvLrnCFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTQzFpPlhMvMyAT6tqv80CwcRKFswHwYDVR0j BBgwFoAU0j+b93zBsy3h/uogjxTNNDik3L4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHhuWGlSQjN6c0NMQkdjc1pnYVJzS0xiN3Mzc3dIeDN2b1Z4NHlUa0px cnMvMC9EMjNGOUJGNzdDQzFCMzJERTFGRUVBMjA4RjE0Q0QzNDM4QTREQ0JFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyM0Y5QkY3N0NDMUIzMkRF MUZFRUEyMDhGMTRDRDM0MzhBNERDQkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHhuWGlSQjN6c0NMQkdjc1pnYVJzS0xiN3Mzc3dIeDN2b1Z4NHlUa0pxcnMvMC9E MjNGOUJGNzdDQzFCMzJERTFGRUVBMjA4RjE0Q0QzNDM4QTREQ0JFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAid3EXfQc00dVqxByD75VqGFCXPoPdcfnjn6rJyZr6JZ+wxt467MZqkpOAWxG 7tpOSft9xfgyWFCVSiewmC6wP6c4EKYimVzL93wdhc8n6056cWRVbfMYiYnPVgoL vi7t640DpLxvE5udaPLX5vg28s+CP+EcGkUagdgARcMGpb/eNLbvcb9eALKheIqs SzfbFejXe1Q6akLsiQM7fde1PUXfFniNLcd/OVRbK81pSqP7jIH7v8hG9YCr7KLv A7MgQcqQX2JHXFR1GALoGbufeSKA/vSeEnGOIFITUdpF6mHbfnomVMd1twuQ/HHU zQycjn6S3hEWFkDnIHMPhU4gVg== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:00 2025 by rpki-client