$ rpki-client -vvf rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.mft File: DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.mft (raw, json) Hash identifier: R35tAlxCRxDquBdTzEzTLzBDl2NMv1ZeH+vudl0k55k= Subject key identifier: 96:6E:AB:54:2E:90:6A:D6:34:9D:4B:FD:2F:0F:C4:08:02:40:70:26 Authority key identifier: DF:9D:1F:F1:4B:D6:D4:20:9A:F1:97:A1:E8:76:8E:8A:7A:93:C5:E7 Certificate issuer: /CN=DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7 Certificate serial: 28B45B201136C6AA571482302CBF28AFAAEA0336 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.cer Subject info access: rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.mft Manifest number: 33 Signing time: Mon 03 Nov 2025 16:10:05 +0000 Manifest this update: Mon 03 Nov 2025 16:05:05 +0000 Manifest next update: Tue 04 Nov 2025 19:50:05 +0000 Files and hashes: 1: 323830343a343837383a3a2f33322d3438203d3e20323637313233.roa (hash: oMvEM5HdlBE/2P1OWBPGBn5Q5f+CYXEGkA5YRY0DoGw=) 2: 34352e3232392e382e302f32322d3234203d3e20323637313233.roa (hash: j9/yXjbHLeFdWjNt/+UbsU5bwMHLs49sOwHxrb3oU9U=) 3: DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.crl (hash: bXHLPTk9plF4enI1xyLL2EYe87GEU6E/wduh9btUqdM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.crl rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 19:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b4:5b:20:11:36:c6:aa:57:14:82:30:2c:bf:28:af:aa:ea:03:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7 Validity Not Before: Nov 3 16:05:05 2025 GMT Not After : Nov 4 19:50:05 2025 GMT Subject: CN=966EAB542E906AD6349D4BFD2F0FC40802407026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:71:82:1e:51:18:21:e7:11:06:fb:8a:9e:f7: 29:4a:a6:4d:25:30:67:bc:96:7b:36:3c:31:1c:b2: c2:fa:38:f9:a8:97:05:be:9a:4b:c7:e0:60:dd:44: a6:53:01:a3:7f:2a:14:2c:66:89:8b:f5:b5:ef:07: a3:f8:52:2a:f9:fb:9a:79:dc:57:5b:02:2c:56:e7: 21:e3:43:f4:db:b6:84:16:79:cd:93:9f:dd:46:25: 18:2c:70:35:0f:16:63:87:f7:a7:68:b9:32:e2:77: 02:80:fe:dc:40:60:a5:be:6d:af:43:2c:7b:54:56: 99:ea:a6:23:4d:c9:5a:36:f4:16:ae:a5:aa:04:37: 5f:1f:9d:c7:fb:41:17:e0:8d:42:1f:ad:bc:13:dd: cf:a6:67:4e:ca:69:6e:f7:15:46:51:32:71:3f:df: 61:ed:3f:cb:df:57:ca:46:bf:fc:c4:53:b4:2c:06: 55:e2:45:53:38:20:60:95:d1:4a:dc:92:c4:a4:26: 04:8f:25:d4:f8:eb:6b:4a:70:15:b0:4f:00:5d:10: 7c:24:3c:5e:f2:e3:f3:90:cd:6c:e4:05:01:cb:63: 8e:30:a5:9b:37:54:06:84:0a:28:3f:e2:97:e4:9b: 32:d0:07:df:5c:a8:81:6b:1f:bf:19:55:87:da:cc: f5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6E:AB:54:2E:90:6A:D6:34:9D:4B:FD:2F:0F:C4:08:02:40:70:26 X509v3 Authority Key Identifier: keyid:DF:9D:1F:F1:4B:D6:D4:20:9A:F1:97:A1:E8:76:8E:8A:7A:93:C5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d9:c0:1c:32:e8:c0:63:60:34:4f:69:42:ad:c7:f2:92:1c: 48:eb:31:58:0a:9b:0d:cf:0d:24:7f:6b:7d:36:47:18:1b:d3: ef:62:22:f1:1a:b1:e4:74:dd:f6:b0:b1:0d:33:c3:1b:98:95: e9:a1:fe:09:b5:3e:a7:a3:5a:f4:c7:55:c1:39:82:ae:b5:54: 1f:9a:b8:92:f7:7c:0d:97:43:f0:dd:a1:86:f4:e6:03:ef:9c: 7e:f4:64:55:c0:f2:1f:8f:9c:32:60:a2:71:12:7a:9d:95:b9: 83:2b:8c:8a:42:3e:f3:24:ea:41:1a:e3:f3:5f:5e:32:fb:ad: 37:f6:98:21:04:a1:71:4c:cb:3e:20:bf:3e:99:43:1c:63:5a: 0e:f3:78:20:04:32:77:b0:44:47:f3:61:85:48:b1:1c:13:f4: 8d:39:a2:d2:81:f4:a4:dd:19:61:cd:fb:8c:46:eb:20:da:5d: 56:9a:45:9b:25:86:45:90:6f:e5:18:1d:eb:d7:7c:c8:8a:da: c7:e0:10:af:8a:9f:77:fe:04:17:15:5a:bc:11:60:b6:2a:55: ae:02:f6:0d:32:4b:82:f7:01:c0:8f:e1:e3:30:ba:46:6e:68: 20:f9:2a:6c:a7:4a:8a:01:a1:b6:47:c1:af:23:74:a4:e4:2c: 3e:92:e6:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKLRbIBE2xqpXFIIwLL8or6rqAzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY5RDFGRjE0QkQ2RDQyMDlBRjE5N0ExRTg3NjhFOEE3 QTkzQzVFNzAeFw0yNTExMDMxNjA1MDVaFw0yNTExMDQxOTUwMDVaMDMxMTAvBgNV BAMTKDk2NkVBQjU0MkU5MDZBRDYzNDlENEJGRDJGMEZDNDA4MDI0MDcwMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDacYIeURgh5xEG+4qe9ylKpk0l MGe8lns2PDEcssL6OPmolwW+mkvH4GDdRKZTAaN/KhQsZomL9bXvB6P4Uir5+5p5 3FdbAixW5yHjQ/TbtoQWec2Tn91GJRgscDUPFmOH96douTLidwKA/txAYKW+ba9D LHtUVpnqpiNNyVo29BaupaoEN18fncf7QRfgjUIfrbwT3c+mZ07KaW73FUZRMnE/ 32HtP8vfV8pGv/zEU7QsBlXiRVM4IGCV0UrcksSkJgSPJdT462tKcBWwTwBdEHwk PF7y4/OQzWzkBQHLY44wpZs3VAaECig/4pfkmzLQB99cqIFrH78ZVYfazPW9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlm6rVC6QatY0nUv9Lw/ECAJAcCYwHwYDVR0j BBgwFoAU350f8UvW1CCa8Zeh6HaOinqTxecwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUFFVWVpcFFrZnhnYzhwS0FlcnRVR0xtTUU0NUtSYnR1QkFZNDZYeTh6 M2UvMC9ERjlEMUZGMTRCRDZENDIwOUFGMTk3QTFFODc2OEU4QTdBOTNDNUU3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGOUQxRkYxNEJENkQ0MjA5 QUYxOTdBMUU4NzY4RThBN0E5M0M1RTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUFFVWVpcFFrZnhnYzhwS0FlcnRVR0xtTUU0NUtSYnR1QkFZNDZYeTh6M2UvMC9E RjlEMUZGMTRCRDZENDIwOUFGMTk3QTFFODc2OEU4QTdBOTNDNUU3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGtnAHDLowGNgNE9pQq3H8pIcSOsxWAqbDc8NJH9rfTZHGBvT72Ii8Rqx5HTd 9rCxDTPDG5iV6aH+CbU+p6Na9MdVwTmCrrVUH5q4kvd8DZdD8N2hhvTmA++cfvRk VcDyH4+cMmCicRJ6nZW5gyuMikI+8yTqQRrj819eMvutN/aYIQShcUzLPiC/PplD HGNaDvN4IAQyd7BER/NhhUixHBP0jTmi0oH0pN0ZYc37jEbrINpdVppFmyWGRZBv 5Rgd69d8yIrax+AQr4qfd/4EFxVavBFgtipVrgL2DTJLgvcBwI/h4zC6Rm5oIPkq bKdKigGhtkfBryN0pOQsPpLmOw== -----END CERTIFICATE-----Generated at Mon Nov 3 18:55:14 2025 by rpki-client