$ rpki-client -vvf rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft File: DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft (raw, json) Hash identifier: qQgjgGzOsCzjmOpc7XpYdo+4chno4AVfrM1zEjHuPgo= Subject key identifier: 56:64:D7:CA:C9:B8:A1:BD:DF:26:EF:59:4C:80:32:5C:26:E3:1D:8D Authority key identifier: DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 Certificate issuer: /CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Certificate serial: 0693A5D03E04CC6E48136433C6815B24FC319E08 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft Manifest number: 030A Signing time: Thu 06 Nov 2025 03:30:58 +0000 Manifest this update: Thu 06 Nov 2025 03:25:58 +0000 Manifest next update: Fri 07 Nov 2025 05:59:58 +0000 Files and hashes: 1: DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl (hash: 2t4DYs67cbB3a+zBxM78HrliQJOIUGmERfFDzYLEOX0=) 2: 323830343a6561383a3a2f33322d3438203d3e20323632393636.roa (hash: k3mQQh+jFVJ+W9lI5qcYz2pIEXAoMKMazd3p9xRcR90=) 3: 3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa (hash: Z6rpwRyuxvgqZK9wg3IWbxseWkxo3KvfvA7U8nx0qtI=) 4: 3138362e3235302e32382e302f32322d3235203d3e20323632393636.roa (hash: iKC8mrbvMcLPzl1+sFNxgHBkh7HGux1xw4YCVG73YFo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 07 Nov 2025 05:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:93:a5:d0:3e:04:cc:6e:48:13:64:33:c6:81:5b:24:fc:31:9e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Validity Not Before: Nov 6 03:25:58 2025 GMT Not After : Nov 7 05:59:58 2025 GMT Subject: CN=5664D7CAC9B8A1BDDF26EF594C80325C26E31D8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:12:c5:ab:41:b6:7c:02:6c:61:0c:7e:0a:d6: 54:e3:e4:2e:0b:af:fa:ca:4b:e3:12:20:2d:96:dd: 3f:43:78:43:b3:3c:ad:8c:19:03:23:70:c5:4f:b3: 74:2c:32:54:bf:1a:fc:a3:96:23:4e:0a:83:e8:80: 21:7f:38:f4:bb:84:87:fe:18:68:86:38:b6:22:eb: 0b:df:b0:1d:0a:b0:05:44:97:b0:07:c6:e1:ba:cc: e6:60:19:ab:c4:1d:60:af:aa:68:82:45:55:05:46: 76:ae:ef:f0:3e:9c:ff:9b:1b:b9:59:b5:72:cb:b3: 72:0a:f4:5a:a2:51:4e:67:41:bc:63:38:04:3f:13: bd:9e:3b:8f:8d:3f:0b:da:6f:82:f6:72:b8:f5:d6: e3:15:ea:87:8d:9d:94:d0:bb:ed:d5:5d:af:60:a0: 96:b1:d7:c8:d0:9e:3f:ec:5c:7e:10:be:75:cf:98: 34:74:33:b6:ac:3b:7e:3b:21:97:27:be:d2:ca:8c: aa:ff:53:b8:28:17:bc:0e:58:95:f4:59:7a:2c:07: b2:6d:d3:fc:04:a2:c0:7b:e2:c7:c6:90:03:d0:87: 24:87:93:f9:7c:6d:b9:6c:78:af:2b:cc:7d:67:ec: 28:4d:d1:a7:7d:a5:90:20:c9:12:cb:bb:fe:d3:2c: fe:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:64:D7:CA:C9:B8:A1:BD:DF:26:EF:59:4C:80:32:5C:26:E3:1D:8D X509v3 Authority Key Identifier: keyid:DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:71:fc:0d:0d:fa:74:fe:09:53:66:f2:f5:5c:1d:14:87:bc: 97:d6:ad:27:e2:b1:21:9a:06:46:6b:f7:f0:3d:34:e8:35:e0: 27:30:d8:6f:3e:60:a9:b8:4c:41:57:36:ce:71:bd:cb:76:0c: 04:fc:64:da:a3:a2:b9:e7:ea:ef:f3:c5:de:69:66:d8:7a:8d: 0b:85:84:fe:b6:17:a1:b0:48:f8:47:e0:ff:c8:04:94:45:7d: a5:8a:85:44:c6:7d:51:71:16:7d:8c:f6:0c:af:64:4a:03:6b: 50:6f:4d:78:b0:fd:b5:2b:ae:b3:98:77:94:5e:e7:53:0e:bf: 49:14:f5:92:6b:50:ed:f4:25:bd:d8:7f:0e:22:82:2f:dd:61: ea:2e:4a:2e:57:9c:7b:3c:2d:47:57:f9:07:56:93:23:4e:cf: 26:76:82:f2:8f:e5:5b:a2:bd:a2:43:be:6e:a1:66:d7:64:64: 52:09:24:2d:af:f9:a8:1c:a9:67:a5:9d:1f:6d:39:42:5b:8e: 79:40:9a:df:a3:35:62:3c:84:6f:81:cd:f7:99:3e:41:a7:6b: 21:b9:5c:c8:99:14:f1:8f:69:52:9e:64:25:7e:26:a5:5d:0a: d2:70:c7:ae:aa:44:b1:69:ef:33:88:cd:27:13:05:3d:02:9e: c5:33:2d:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBpOl0D4EzG5IE2QzxoFbJPwxnggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2MDExM0RCODQ3RUU0RkRGRUNGOEU3QjMyRDhDQjBB MjhBNDIyOTAeFw0yNTExMDYwMzI1NThaFw0yNTExMDcwNTU5NThaMDMxMTAvBgNV BAMTKDU2NjREN0NBQzlCOEExQkRERjI2RUY1OTRDODAzMjVDMjZFMzFEOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhEsWrQbZ8AmxhDH4K1lTj5C4L r/rKS+MSIC2W3T9DeEOzPK2MGQMjcMVPs3QsMlS/GvyjliNOCoPogCF/OPS7hIf+ GGiGOLYi6wvfsB0KsAVEl7AHxuG6zOZgGavEHWCvqmiCRVUFRnau7/A+nP+bG7lZ tXLLs3IK9FqiUU5nQbxjOAQ/E72eO4+NPwvab4L2crj11uMV6oeNnZTQu+3VXa9g oJax18jQnj/sXH4QvnXPmDR0M7asO347IZcnvtLKjKr/U7goF7wOWJX0WXosB7Jt 0/wEosB74sfGkAPQhySHk/l8bblseK8rzH1n7ChN0ad9pZAgyRLLu/7TLP59AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVmTXysm4ob3fJu9ZTIAyXCbjHY0wHwYDVR0j BBgwFoAU22ARPbhH7k/f7Pjnsy2MsKKKQikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2szZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01z Q2ovMS9EQjYwMTEzREI4NDdFRTRGREZFQ0Y4RTdCMzJEOENCMEEyOEE0MjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCNjAxMTNEQjg0N0VFNEZE RkVDRjhFN0IzMkQ4Q0IwQTI4QTQyMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2szZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01zQ2ovMS9E QjYwMTEzREI4NDdFRTRGREZFQ0Y4RTdCMzJEOENCMEEyOEE0MjI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfHH8DQ36dP4JU2by9VwdFIe8l9atJ+KxIZoGRmv38D006DXgJzDYbz5gqbhM QVc2znG9y3YMBPxk2qOiuefq7/PF3mlm2HqNC4WE/rYXobBI+Efg/8gElEV9pYqF RMZ9UXEWfYz2DK9kSgNrUG9NeLD9tSuus5h3lF7nUw6/SRT1kmtQ7fQlvdh/DiKC L91h6i5KLlecezwtR1f5B1aTI07PJnaC8o/lW6K9okO+bqFm12RkUgkkLa/5qByp Z6WdH205QluOeUCa36M1YjyEb4HN95k+QadrIblcyJkU8Y9pUp5kJX4mpV0K0nDH rqpEsWnvM4jNJxMFPQKexTMtiA== -----END CERTIFICATE-----Generated at Thu Nov 6 06:39:43 2025 by rpki-client