$ rpki-client -vvf rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft File: D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft (raw, json) Hash identifier: SlAcKCUPJoA1krupZ0b0gSx+2aUlvcxJ0sTUJz+TB0Y= Subject key identifier: 2F:93:7E:17:02:02:E7:6A:6D:E2:C4:C7:AC:68:F8:CD:E9:35:06:C8 Authority key identifier: D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC Certificate issuer: /CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC Certificate serial: 3BB65770F3BDD1C427D2A4EAC2E8A355AFE09C15 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft Manifest number: 0305 Signing time: Mon 03 Nov 2025 08:47:40 +0000 Manifest this update: Mon 03 Nov 2025 08:42:40 +0000 Manifest next update: Tue 04 Nov 2025 09:07:40 +0000 Files and hashes: 1: 3138372e36332e3134382e302f32322d3234203d3e20323731343535.roa (hash: IhDSHYohc0+Dr9apFyNFCQVRejVX/yjwQA2nWachXec=) 2: D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl (hash: X9CjxsUVAVoeTJWZRehv1l717WNsiat4AWnhBqClH2Q=) 3: 323830343a376263633a3a2f33322d3438203d3e20323731343535.roa (hash: XOwtVM5LyoozAIAy6kZOX07UdARTT+Ta3OmCSyAiYcM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b6:57:70:f3:bd:d1:c4:27:d2:a4:ea:c2:e8:a3:55:af:e0:9c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC Validity Not Before: Nov 3 08:42:40 2025 GMT Not After : Nov 4 09:07:40 2025 GMT Subject: CN=2F937E170202E76A6DE2C4C7AC68F8CDE93506C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:66:bd:1d:5b:51:62:94:57:02:39:6a:90:87: 9e:3e:1c:1f:d9:a3:96:3d:af:48:9f:45:56:d3:4d: 48:8a:42:f1:50:b5:4f:ed:a3:f5:e9:98:9a:f4:4a: 95:68:83:86:e9:22:89:62:51:34:b4:a1:ff:61:dd: 57:82:a0:86:c0:a0:ba:4f:46:c6:54:c8:2f:e2:24: db:13:2b:4c:f3:e5:ba:cf:2f:3c:d5:1d:39:86:43: cf:45:de:c7:7d:2a:8b:0f:a9:d2:60:24:fb:af:ca: 38:a6:67:56:37:3a:56:9f:ff:9b:df:44:27:5c:d8: 92:08:dd:f8:a6:f4:28:d6:b9:0a:e7:20:be:08:54: d1:1d:be:a4:8a:bd:dc:b9:2a:52:46:4d:a0:91:77: 9e:8d:73:ff:aa:b7:2f:47:14:1c:38:fd:3f:4d:87: 38:00:10:bf:4b:62:ad:60:30:df:0c:e7:5a:e0:56: 26:c6:c5:fd:ed:fc:81:93:13:3f:21:28:90:0d:99: 7d:c5:f8:c0:24:0f:59:54:e6:f4:e7:47:ce:81:49: bb:66:f6:f6:44:8e:15:64:46:23:82:11:62:77:f0: 55:b0:0b:bf:1b:84:9f:b4:c8:17:b6:46:ed:e8:f7: 27:00:9a:2e:f3:7b:c9:37:d2:e7:85:88:78:28:78: 31:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:93:7E:17:02:02:E7:6A:6D:E2:C4:C7:AC:68:F8:CD:E9:35:06:C8 X509v3 Authority Key Identifier: keyid:D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:be:19:d4:12:e6:9d:6d:2c:e1:9f:79:90:30:5c:ea:0d:41: ac:1f:7d:4d:bf:d3:b5:fd:dd:bf:b9:a0:15:0a:6f:62:62:40: 6a:f3:f9:ab:80:c4:37:83:e0:53:28:97:9e:de:8b:fe:e3:65: e6:40:d2:d0:c2:05:f2:81:f5:2a:02:8e:cc:e3:a6:e8:0e:40: 4d:46:e6:21:36:87:ae:65:bf:4e:90:b5:2e:e8:82:00:b2:c0: 6d:2c:53:7f:f6:b5:61:6f:0b:17:23:cd:c8:45:fd:52:cb:a1: 58:61:1c:59:86:c8:ca:24:c8:35:9b:e9:0b:e0:5e:91:fc:ac: 2e:78:63:1a:f8:fc:a9:6d:2d:dd:91:43:2e:25:5b:c2:51:a5: 01:6c:c7:dc:65:96:db:ac:3c:c8:15:42:fd:be:1f:6d:28:b8: a6:49:3b:20:8e:a7:09:fb:9b:c4:d6:d4:89:25:42:32:30:5b: 25:7a:ff:28:c4:93:f3:5b:5f:cb:08:24:a9:33:9b:5a:36:19: 61:53:1a:5a:dd:e6:43:69:28:f4:1b:a2:fb:aa:d9:2d:b9:ca: 37:b2:2c:54:31:e4:9f:45:7c:38:c0:30:4f:fd:46:e3:5a:d0: 34:91:f7:47:ff:03:e4:39:0b:c8:9a:1b:f1:d1:cb:69:1e:fc: a2:ca:a2:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO7ZXcPO90cQn0qTqwuijVa/gnBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGNzEwODcwMEY2OUFCM0M0NjBFMDE3MEU5OUU3MDUx RUNCMzFFQzAeFw0yNTExMDMwODQyNDBaFw0yNTExMDQwOTA3NDBaMDMxMTAvBgNV BAMTKDJGOTM3RTE3MDIwMkU3NkE2REUyQzRDN0FDNjhGOENERTkzNTA2QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYZr0dW1FilFcCOWqQh54+HB/Z o5Y9r0ifRVbTTUiKQvFQtU/to/XpmJr0SpVog4bpIoliUTS0of9h3VeCoIbAoLpP RsZUyC/iJNsTK0zz5brPLzzVHTmGQ89F3sd9KosPqdJgJPuvyjimZ1Y3Olaf/5vf RCdc2JII3fim9CjWuQrnIL4IVNEdvqSKvdy5KlJGTaCRd56Nc/+qty9HFBw4/T9N hzgAEL9LYq1gMN8M51rgVibGxf3t/IGTEz8hKJANmX3F+MAkD1lU5vTnR86BSbtm 9vZEjhVkRiOCEWJ38FWwC78bhJ+0yBe2Ru3o9ycAmi7ze8k30ueFiHgoeDGXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUL5N+FwIC52pt4sTHrGj4zek1BsgwHwYDVR0j BBgwFoAU0/cQhwD2mrPEYOAXDpnnBR7LMewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHpodzNSWGZkWjVUdnk2cldmU3JRUzdFZFVLc2N6QktrNnhEWVg3ZXVL MzMvMS9EM0Y3MTA4NzAwRjY5QUIzQzQ2MEUwMTcwRTk5RTcwNTFFQ0IzMUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzRjcxMDg3MDBGNjlBQjND NDYwRTAxNzBFOTlFNzA1MUVDQjMxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHpodzNSWGZkWjVUdnk2cldmU3JRUzdFZFVLc2N6QktrNnhEWVg3ZXVLMzMvMS9E M0Y3MTA4NzAwRjY5QUIzQzQ2MEUwMTcwRTk5RTcwNTFFQ0IzMUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHb4Z1BLmnW0s4Z95kDBc6g1BrB99Tb/Ttf3dv7mgFQpvYmJAavP5q4DEN4Pg UyiXnt6L/uNl5kDS0MIF8oH1KgKOzOOm6A5ATUbmITaHrmW/TpC1LuiCALLAbSxT f/a1YW8LFyPNyEX9UsuhWGEcWYbIyiTINZvpC+BekfysLnhjGvj8qW0t3ZFDLiVb wlGlAWzH3GWW26w8yBVC/b4fbSi4pkk7II6nCfubxNbUiSVCMjBbJXr/KMST81tf ywgkqTObWjYZYVMaWt3mQ2ko9Bui+6rZLbnKN7IsVDHkn0V8OMAwT/1G41rQNJH3 R/8D5DkLyJob8dHLaR78osqijw== -----END CERTIFICATE-----Generated at Tue Nov 4 00:13:44 2025 by rpki-client