$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft File: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json) Hash identifier: VV6m35B5ZzvUbIwJkLeVTcyJ3WzX6EpBUaCwoJ4r0ik= Subject key identifier: D0:EE:25:75:77:55:C0:C9:43:FA:52:DE:84:52:47:71:4F:A0:04:35 Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF Certificate issuer: /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF Certificate serial: 3B3017F51B2ABE5891A9A995EAC39D2DE6CE6DC3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer Subject info access: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft Manifest number: 0300 Signing time: Mon 03 Nov 2025 02:30:03 +0000 Manifest this update: Mon 03 Nov 2025 02:25:03 +0000 Manifest next update: Tue 04 Nov 2025 05:44:03 +0000 Files and hashes: 1: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: 3KJaKxQH8BfvmqPdr0f3pk4VVvf9POaN3twm4TXLa3A=) 2: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: /Kq2/o4REk78HBEanT9leKiQDnyM4KsNu4ieA5zzzf0=) 3: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: gq23d3+kRAY4dWCEoVb03VA6J8a063C0N58YBiErots=) 4: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: lMncz++kvT6MHNunBcJ6oHQBvWwWSBFElu5ZGi2kkO0=) 5: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: d4RD2/KeG1YPHk0v9voZ54DgtjeHPBbE3WMduZTo2Tk=) 6: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: 40prK8ppN8vt4mijpoc2pjLbuuqUZaJ9Grs/fMA2kDg=) 7: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: Em9nIZXC1XnJHHkeLO0Am9KIh2IHxIcFrayfBCdDiB4=) 8: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: DVRW50QGSfKkCx0M1+VA9DFoSNRjF7ldfT0pmPw8n2A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:30:17:f5:1b:2a:be:58:91:a9:a9:95:ea:c3:9d:2d:e6:ce:6d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF Validity Not Before: Nov 3 02:25:03 2025 GMT Not After : Nov 4 05:44:03 2025 GMT Subject: CN=D0EE25757755C0C943FA52DE845247714FA00435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:a4:26:fb:55:7e:97:ba:0a:81:a5:a9:27: c7:d2:d9:8e:66:c5:06:3d:5d:b5:dd:a9:57:96:36: 1f:65:dd:4d:ec:d7:14:68:d7:08:be:f1:d5:df:0b: 34:e2:92:ec:6c:82:77:13:4a:b3:24:04:11:3a:8c: 38:31:4f:b0:63:67:82:28:2a:9b:f9:07:d0:17:34: ec:56:62:49:ef:dd:44:01:c1:f0:33:de:7d:5a:d4: 96:4e:da:bc:2e:42:93:7b:e4:dc:42:6d:40:f4:b1: 6d:e4:17:e1:de:f7:7b:65:2b:48:4f:8a:17:85:4b: 77:fe:de:44:1b:08:9e:15:a7:7e:30:fb:de:75:e2: 8a:4c:76:db:ca:6f:2d:2b:0d:0c:60:2e:ca:cd:fb: 7b:bd:24:5d:84:0a:81:71:48:30:db:e3:8c:9e:65: f7:ba:89:8f:07:8d:4b:eb:38:c5:18:21:df:b7:fc: 3a:c9:cf:1e:59:c5:9f:56:ee:47:f4:f1:17:18:56: 57:11:af:95:fd:75:b0:e4:6e:26:fe:47:50:74:a6: 16:ef:9a:22:2a:02:56:f4:75:de:2a:de:e4:24:65: 66:85:1a:ac:dd:79:ee:79:fe:a6:06:2b:c8:52:43: c6:e0:85:ab:5b:ff:96:ff:6f:be:cb:c6:5c:fe:9c: bb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EE:25:75:77:55:C0:C9:43:FA:52:DE:84:52:47:71:4F:A0:04:35 X509v3 Authority Key Identifier: keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:9e:ae:90:50:2d:b5:37:8b:17:15:74:52:be:ec:76:c6:a1: e4:15:fa:9c:5a:8d:ad:02:80:b2:35:18:3a:3c:71:cf:cc:72: 2c:ff:45:a4:a2:d2:58:92:9b:b6:62:fb:09:12:5b:74:ba:02: 0a:de:c3:0e:4d:95:46:09:ac:c4:78:26:18:01:49:47:1b:6d: 55:fd:e2:af:23:0b:13:ed:2a:6b:58:e2:ae:8e:eb:94:99:1a: 32:6a:af:50:b4:62:2e:34:58:15:3c:d4:ad:d1:ed:39:36:5d: 8d:19:c5:7f:53:e4:63:8e:d9:f2:f6:be:99:84:6b:ca:a6:88: e2:d5:f5:27:e3:8e:ed:77:60:44:e1:76:fa:2e:ff:78:b7:f8: 2e:0e:84:41:1b:9b:2e:4c:ec:53:bc:6d:73:b1:7e:78:84:66: 90:4c:19:6e:04:3a:78:7e:54:4c:86:bf:c0:bd:e3:61:9c:e6: f2:4f:f6:47:3d:ee:e0:a0:66:64:c3:43:64:36:c6:25:2d:b5: a3:8e:c8:9b:e3:51:46:e5:25:e0:2b:b9:12:dc:f2:a6:d9:71: 42:f4:fd:8e:bc:5f:d1:b1:4b:c5:00:ed:b3:e6:6f:b4:75:2d: 70:c8:92:ca:e8:1e:3f:50:19:97:63:4f:96:6a:8c:86:e2:ba: 6c:50:d3:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOzAX9RsqvliRqamV6sOdLebObcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZGRDM1NzNBQzQwNkI0RUZCMUY0NTgxNDlDRjczQzMx QTJGRjRFRjAeFw0yNTExMDMwMjI1MDNaFw0yNTExMDQwNTQ0MDNaMDMxMTAvBgNV BAMTKEQwRUUyNTc1Nzc1NUMwQzk0M0ZBNTJERTg0NTI0NzcxNEZBMDA0MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC026Qm+1V+l7oKgaWpJ8fS2Y5m xQY9XbXdqVeWNh9l3U3s1xRo1wi+8dXfCzTikuxsgncTSrMkBBE6jDgxT7BjZ4Io Kpv5B9AXNOxWYknv3UQBwfAz3n1a1JZO2rwuQpN75NxCbUD0sW3kF+He93tlK0hP iheFS3f+3kQbCJ4Vp34w+9514opMdtvKby0rDQxgLsrN+3u9JF2ECoFxSDDb44ye Zfe6iY8HjUvrOMUYId+3/DrJzx5ZxZ9W7kf08RcYVlcRr5X9dbDkbib+R1B0phbv miIqAlb0dd4q3uQkZWaFGqzdee55/qYGK8hSQ8bghatb/5b/b77Lxlz+nLvFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0O4ldXdVwMlD+lLehFJHcU+gBDUwHwYDVR0j BBgwFoAU3/01c6xAa077H0WBSc9zwxov9O8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFZnRUpNbUdlSnZKUFJYSEhtZ0hWbTZHYzhlUlpaU2ZXa0F2aHZUUUwy a28vMS9ERkZEMzU3M0FDNDA2QjRFRkIxRjQ1ODE0OUNGNzNDMzFBMkZGNEVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGRkQzNTczQUM0MDZCNEVG QjFGNDU4MTQ5Q0Y3M0MzMUEyRkY0RUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFZnRUpNbUdlSnZKUFJYSEhtZ0hWbTZHYzhlUlpaU2ZXa0F2aHZUUUwya28vMS9E RkZEMzU3M0FDNDA2QjRFRkIxRjQ1ODE0OUNGNzNDMzFBMkZGNEVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWZ6ukFAttTeLFxV0Ur7sdsah5BX6nFqNrQKAsjUYOjxxz8xyLP9FpKLSWJKb tmL7CRJbdLoCCt7DDk2VRgmsxHgmGAFJRxttVf3iryMLE+0qa1jiro7rlJkaMmqv ULRiLjRYFTzUrdHtOTZdjRnFf1PkY47Z8va+mYRryqaI4tX1J+OO7XdgROF2+i7/ eLf4Lg6EQRubLkzsU7xtc7F+eIRmkEwZbgQ6eH5UTIa/wL3jYZzm8k/2Rz3u4KBm ZMNDZDbGJS21o47Im+NRRuUl4Cu5EtzyptlxQvT9jrxf0bFLxQDts+ZvtHUtcMiS yugeP1AZl2NPlmqMhuK6bFDTHA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:24 2025 by rpki-client