$ rpki-client -vvf rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft File: DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft (raw, json) Hash identifier: iqqLmEgV56kUse1SP+pgIRNtEmrjYWrJVCcxj/+VaWc= Subject key identifier: E0:C8:32:12:5D:DF:79:76:1A:F7:EB:12:F5:14:B2:5D:B7:3F:A1:D6 Authority key identifier: DE:DF:E5:0B:85:B1:68:1B:34:DA:B1:40:9F:BD:31:C6:36:A0:47:4B Certificate issuer: /CN=DEDFE50B85B1681B34DAB1409FBD31C636A0474B Certificate serial: 10CB3FCBB105564F9DECE6404848583B8D23E5BC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.cer Subject info access: rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft Manifest number: 0133 Signing time: Tue 04 Nov 2025 11:47:21 +0000 Manifest this update: Tue 04 Nov 2025 11:42:21 +0000 Manifest next update: Wed 05 Nov 2025 13:00:21 +0000 Files and hashes: 1: 323830343a313437383a3a2f33322d3438203d3e20323633333332.roa (hash: qysovmzvgdL2y5g84WqCqWCD/W5wUzH/Lm3JWvovoeY=) 2: DEDFE50B85B1681B34DAB1409FBD31C636A0474B.crl (hash: wIN0UrleCJhcu7c9fpK3kmxkDzoB0LGPE0SQt4cDJKQ=) 3: 3139312e33362e3132382e302f32322d3234203d3e20323633333332.roa (hash: AD/gp5MkRPMYegFOn1WQUyh52T0eFPqEEOU8suKcE9U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.crl rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 13:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:cb:3f:cb:b1:05:56:4f:9d:ec:e6:40:48:48:58:3b:8d:23:e5:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEDFE50B85B1681B34DAB1409FBD31C636A0474B Validity Not Before: Nov 4 11:42:21 2025 GMT Not After : Nov 5 13:00:21 2025 GMT Subject: CN=E0C832125DDF79761AF7EB12F514B25DB73FA1D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:85:57:9b:16:72:1c:98:a7:8a:4c:3e:ba:be: fd:34:70:c3:3a:68:35:f3:9f:05:0a:83:1c:94:a5: 3c:2e:74:94:7a:72:0a:25:ef:5b:5e:c3:b8:9d:f1: 51:88:da:11:9f:13:3d:96:65:14:bd:a0:54:4d:50: 77:d6:89:5b:22:34:f3:32:47:12:6d:be:1c:9b:23: 15:8f:2f:db:2d:fa:60:0c:3c:df:6a:d9:c4:e9:21: 95:bc:d2:1a:ca:89:0c:2a:3b:d7:7e:34:14:3e:4f: 36:3a:01:4f:c4:85:95:46:18:1e:4a:a0:65:e6:1d: e7:ba:f9:c2:21:91:48:4c:62:f8:ab:41:99:bc:9d: a2:4f:3c:56:04:24:5a:1c:5a:d2:07:c9:17:c6:c9: aa:1d:ec:2a:ff:e8:34:10:08:9a:ea:5f:06:b2:a6: a1:a3:93:97:16:c0:8e:ad:60:e6:c4:2e:d2:84:5e: 2c:43:ba:66:4a:35:bd:9c:b2:28:17:b7:7f:b1:0d: f2:cc:0c:6c:c4:83:b6:9f:11:bb:8f:a5:3b:9e:64: c8:eb:2d:a2:83:fc:b7:c8:a4:17:f7:a4:b6:be:27: d2:6f:42:d8:1b:35:d0:b5:3e:e9:6a:49:15:a9:8b: d6:9a:e5:b7:b8:fe:e5:21:e2:41:d7:01:be:3b:7f: c6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C8:32:12:5D:DF:79:76:1A:F7:EB:12:F5:14:B2:5D:B7:3F:A1:D6 X509v3 Authority Key Identifier: keyid:DE:DF:E5:0B:85:B1:68:1B:34:DA:B1:40:9F:BD:31:C6:36:A0:47:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d1:f3:45:b3:ee:82:94:c7:ac:68:b5:b2:09:75:fb:85:d8: b4:54:64:88:67:c2:61:a8:03:5b:09:e8:11:02:c9:65:ae:e6: 16:23:4b:17:01:e1:93:0d:60:f0:d5:bf:59:9b:83:fe:c0:32: b6:67:9e:39:f3:f1:35:81:65:22:f4:c2:2e:d8:a8:99:74:f5: 6e:3e:6a:5a:85:a8:43:8f:f1:18:3d:8e:54:1d:45:3c:d3:ab: 43:ec:c5:7f:74:3f:0a:85:a0:43:c4:cc:65:81:25:e2:7d:8f: 8c:ce:c3:93:02:63:6c:b0:b3:96:8c:bb:df:90:cb:65:75:ef: 93:4d:fa:9a:19:a3:f3:08:16:74:bf:33:4c:e6:e1:ba:eb:d4: 3f:f3:94:a2:60:1b:a2:50:cc:e1:5d:ae:f0:a8:f8:04:67:11: a7:f8:de:42:9b:60:43:8a:d4:ed:51:2d:6f:3e:ca:4c:06:0e: 5d:fe:5b:de:25:7a:b2:d9:f8:40:5d:c7:b2:a5:d4:ed:78:83: 49:c2:81:78:83:83:64:2e:01:69:51:dc:17:42:a9:9a:b4:6a: de:f1:9e:46:d7:84:4d:85:b8:f7:e4:26:0c:2a:a4:99:36:4a: 4f:12:8b:4c:7f:e0:af:d4:98:44:cf:ac:64:3f:35:98:87:dc: bc:35:8b:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEMs/y7EFVk+d7OZASEhYO40j5bwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVERkU1MEI4NUIxNjgxQjM0REFCMTQwOUZCRDMxQzYz NkEwNDc0QjAeFw0yNTExMDQxMTQyMjFaFw0yNTExMDUxMzAwMjFaMDMxMTAvBgNV BAMTKEUwQzgzMjEyNURERjc5NzYxQUY3RUIxMkY1MTRCMjVEQjczRkExRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2hVebFnIcmKeKTD66vv00cMM6 aDXznwUKgxyUpTwudJR6cgol71tew7id8VGI2hGfEz2WZRS9oFRNUHfWiVsiNPMy RxJtvhybIxWPL9st+mAMPN9q2cTpIZW80hrKiQwqO9d+NBQ+TzY6AU/EhZVGGB5K oGXmHee6+cIhkUhMYvirQZm8naJPPFYEJFocWtIHyRfGyaod7Cr/6DQQCJrqXway pqGjk5cWwI6tYObELtKEXixDumZKNb2csigXt3+xDfLMDGzEg7afEbuPpTueZMjr LaKD/LfIpBf3pLa+J9JvQtgbNdC1PulqSRWpi9aa5be4/uUh4kHXAb47f8bTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4MgyEl3feXYa9+sS9RSyXbc/odYwHwYDVR0j BBgwFoAU3t/lC4WxaBs02rFAn70xxjagR0swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGVQb005cjhjZ0NOZkRFN1hoZjJ1dlR4RVgyTW5FR1BmaG5kWW5Oanpu UUsvMC9ERURGRTUwQjg1QjE2ODFCMzREQUIxNDA5RkJEMzFDNjM2QTA0NzRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFREZFNTBCODVCMTY4MUIz NERBQjE0MDlGQkQzMUM2MzZBMDQ3NEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGVQb005cjhjZ0NOZkRFN1hoZjJ1dlR4RVgyTW5FR1BmaG5kWW5OanpuUUsvMC9E RURGRTUwQjg1QjE2ODFCMzREQUIxNDA5RkJEMzFDNjM2QTA0NzRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQtHzRbPugpTHrGi1sgl1+4XYtFRkiGfCYagDWwnoEQLJZa7mFiNLFwHhkw1g 8NW/WZuD/sAytmeeOfPxNYFlIvTCLtiomXT1bj5qWoWoQ4/xGD2OVB1FPNOrQ+zF f3Q/CoWgQ8TMZYEl4n2PjM7DkwJjbLCzloy735DLZXXvk036mhmj8wgWdL8zTObh uuvUP/OUomAbolDM4V2u8Kj4BGcRp/jeQptgQ4rU7VEtbz7KTAYOXf5b3iV6stn4 QF3HsqXU7XiDScKBeIODZC4BaVHcF0KpmrRq3vGeRteETYW49+QmDCqkmTZKTxKL TH/gr9SYRM+sZD81mIfcvDWL5A== -----END CERTIFICATE-----Generated at Tue Nov 4 17:18:23 2025 by rpki-client