$ rpki-client -vvf rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft File: DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft (raw, json) Hash identifier: WKndL9d0oc7QuFKSWcM7IGj78fm6oYDU7H+ilbnmvM0= Subject key identifier: B6:F7:02:EC:7F:50:D2:CD:A0:57:CB:D8:72:91:B9:93:0F:8C:3C:AE Authority key identifier: DA:A9:0F:AC:A0:DF:71:D2:7E:A4:00:93:7B:94:23:A3:BD:8F:05:BF Certificate issuer: /CN=DAA90FACA0DF71D27EA400937B9423A3BD8F05BF Certificate serial: 2D79775ABE88BDC60190D1906EF137D341F7BA16 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer Subject info access: rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft Manifest number: 01E3 Signing time: Mon 20 Oct 2025 05:14:54 +0000 Manifest this update: Mon 20 Oct 2025 05:09:54 +0000 Manifest next update: Tue 21 Oct 2025 05:43:54 +0000 Files and hashes: 1: 323830343a336463633a3a2f33322d3438203d3e20323636353534.roa (hash: DW5oS1R955VazVvFo2R1EAEemFMcMD7OxbUjMQkgwCM=) 2: DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl (hash: WMi5hsv+0W5UOkIoCHF6/rw/My4SST6SjrPE5pu2il8=) 3: 3136302e3233382e3137322e302f32322d3234203d3e20323636353534.roa (hash: tuN+EyMbBuM+4QcgMreh6GUCrLuRnxQ1/cjBpJyn3Bc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 05:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:79:77:5a:be:88:bd:c6:01:90:d1:90:6e:f1:37:d3:41:f7:ba:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DAA90FACA0DF71D27EA400937B9423A3BD8F05BF Validity Not Before: Oct 20 05:09:54 2025 GMT Not After : Oct 21 05:43:54 2025 GMT Subject: CN=B6F702EC7F50D2CDA057CBD87291B9930F8C3CAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:64:f5:b4:96:09:9d:9a:22:0e:23:10:e5:6b: 64:b6:9d:07:5a:98:df:ab:de:56:d4:8b:b2:92:72: 95:67:0a:8f:8d:4b:3a:11:61:5a:80:fa:d8:a8:a3: 12:83:58:8f:c0:59:8a:40:19:92:00:0b:f0:e3:b6: 27:05:f1:31:ec:a4:f7:02:f3:66:1c:fc:15:d9:52: 36:06:15:e4:54:3c:c6:8e:06:ab:55:82:12:ca:53: 0e:4e:fd:72:56:ee:eb:bd:5b:f6:95:bb:8a:d5:73: a1:6d:e0:37:3c:0d:de:69:7e:bc:e9:ee:e2:7c:e5: 70:da:f7:ec:f6:1c:de:65:76:b4:9c:8a:86:9e:2b: 9d:c8:af:ef:c9:9c:e9:cb:a9:57:e1:e0:5a:2e:76: 56:05:9d:62:93:ef:fc:91:20:da:b0:0e:82:6a:07: 24:f1:7c:d4:a3:d5:55:05:4f:6d:30:8b:ca:21:37: 96:b4:3a:4f:34:cc:85:e2:4d:57:e4:c3:b4:39:31: ce:e3:2c:0f:48:d4:d7:1b:e9:da:b1:f5:88:ad:59: 4a:e6:55:9f:3e:d2:74:5e:ca:64:a1:c3:e7:c2:66: 7c:2e:73:3e:ba:64:5f:44:e9:0b:84:b8:aa:5c:c0: 9a:4b:54:86:0c:49:ac:65:b4:52:6e:80:9c:5a:14: af:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F7:02:EC:7F:50:D2:CD:A0:57:CB:D8:72:91:B9:93:0F:8C:3C:AE X509v3 Authority Key Identifier: keyid:DA:A9:0F:AC:A0:DF:71:D2:7E:A4:00:93:7B:94:23:A3:BD:8F:05:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:a9:f3:58:5d:89:3a:4d:bc:28:a5:e9:1e:18:5e:f9:7a:df: df:9f:f8:08:f7:9f:08:cb:9a:ed:87:cb:c4:bc:7b:be:6b:e8: 4a:67:f5:5b:3f:9c:ba:b3:b9:05:92:0b:57:4a:04:dc:1e:8e: 78:bf:71:24:83:4a:e5:f8:c5:a1:c2:59:14:1b:1b:0c:bf:75: cd:a7:3f:e6:3c:33:c0:38:9e:48:9d:bf:bf:79:34:0e:83:3b: d3:d8:6b:03:da:66:46:89:2d:89:e4:49:d0:4c:99:a0:b6:73: c0:50:62:b3:16:eb:70:1f:99:27:f2:de:97:4a:92:cb:d9:3e: ee:cd:c3:32:ef:1d:54:2b:0c:bd:c4:05:62:19:ba:8d:c4:e3: ad:d2:9d:07:87:2c:9a:d1:50:f3:48:01:f8:14:c5:50:a4:04: 7f:6b:c2:89:91:f3:4b:da:56:23:27:ec:e5:b4:54:80:74:c3: 80:c7:d2:24:78:c1:ab:e3:13:00:8b:ed:b9:3d:29:b4:b8:34: 09:a7:78:2d:43:be:0e:7f:a3:e8:f8:47:45:a9:b0:2a:08:ea: b3:65:08:66:33:e8:44:5a:d2:e9:e2:71:9d:e6:ee:5d:93:77: e0:64:b8:40:9a:f5:70:73:05:70:f9:0e:86:a5:ba:4b:5e:18: ac:17:94:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULXl3Wr6IvcYBkNGQbvE300H3uhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREFBOTBGQUNBMERGNzFEMjdFQTQwMDkzN0I5NDIzQTNC RDhGMDVCRjAeFw0yNTEwMjAwNTA5NTRaFw0yNTEwMjEwNTQzNTRaMDMxMTAvBgNV BAMTKEI2RjcwMkVDN0Y1MEQyQ0RBMDU3Q0JEODcyOTFCOTkzMEY4QzNDQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjZPW0lgmdmiIOIxDla2S2nQda mN+r3lbUi7KScpVnCo+NSzoRYVqA+tiooxKDWI/AWYpAGZIAC/DjticF8THspPcC 82Yc/BXZUjYGFeRUPMaOBqtVghLKUw5O/XJW7uu9W/aVu4rVc6Ft4Dc8Dd5pfrzp 7uJ85XDa9+z2HN5ldrScioaeK53Ir+/JnOnLqVfh4FoudlYFnWKT7/yRINqwDoJq ByTxfNSj1VUFT20wi8ohN5a0Ok80zIXiTVfkw7Q5Mc7jLA9I1Ncb6dqx9YitWUrm VZ8+0nReymShw+fCZnwucz66ZF9E6QuEuKpcwJpLVIYMSaxltFJugJxaFK97AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtvcC7H9Q0s2gV8vYcpG5kw+MPK4wHwYDVR0j BBgwFoAU2qkPrKDfcdJ+pACTe5Qjo72PBb8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk5kdUQxdWlYd29Nd2lzc2tBblBIRWpYOFJaMVFaZEJjQjVQM2JyaUF5 cWUvMC9EQUE5MEZBQ0EwREY3MUQyN0VBNDAwOTM3Qjk0MjNBM0JEOEYwNUJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBQTkwRkFDQTBERjcxRDI3 RUE0MDA5MzdCOTQyM0EzQkQ4RjA1QkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mk5kdUQxdWlYd29Nd2lzc2tBblBIRWpYOFJaMVFaZEJjQjVQM2JyaUF5cWUvMC9E QUE5MEZBQ0EwREY3MUQyN0VBNDAwOTM3Qjk0MjNBM0JEOEYwNUJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVqnzWF2JOk28KKXpHhhe+Xrf35/4CPefCMua7YfLxLx7vmvoSmf1Wz+curO5 BZILV0oE3B6OeL9xJINK5fjFocJZFBsbDL91zac/5jwzwDieSJ2/v3k0DoM709hr A9pmRoktieRJ0EyZoLZzwFBisxbrcB+ZJ/Lel0qSy9k+7s3DMu8dVCsMvcQFYhm6 jcTjrdKdB4csmtFQ80gB+BTFUKQEf2vCiZHzS9pWIyfs5bRUgHTDgMfSJHjBq+MT AIvtuT0ptLg0Cad4LUO+Dn+j6PhHRamwKgjqs2UIZjPoRFrS6eJxnebuXZN34GS4 QJr1cHMFcPkOhqW6S14YrBeU1Q== -----END CERTIFICATE-----Generated at Mon Oct 20 09:33:03 2025 by rpki-client