$ rpki-client -vvf rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft File: DD0CBBA83E82BACB16521E6328443385F92099E0.mft (raw, json) Hash identifier: g5MBw4NRcMhmYbDeM57k8l1Z+SuYxjyQ1NNp8kuE+Yk= Subject key identifier: D1:E2:E6:06:2F:95:7B:12:20:B1:D4:5C:A8:D3:98:CA:A3:6E:79:76 Authority key identifier: DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0 Certificate issuer: /CN=DD0CBBA83E82BACB16521E6328443385F92099E0 Certificate serial: 47C358D2EDDE84BA0B8848DAAF6FAC624F332928 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft Manifest number: 014C Signing time: Mon 20 Oct 2025 14:09:02 +0000 Manifest this update: Mon 20 Oct 2025 14:04:02 +0000 Manifest next update: Tue 21 Oct 2025 14:30:02 +0000 Files and hashes: 1: 323830343a336264303a3a2f33322d3332203d3e20323636313732.roa (hash: ARQtTGJn8ecRrryzPLbTrDMNnVh5iFR4d/qAnKHlnZ8=) 2: DD0CBBA83E82BACB16521E6328443385F92099E0.crl (hash: VRDdQufNdaFz8O7TUABhEYD2sYYMz0godPXeMY4Qwy4=) 3: 3136302e31392e3234382e302f32322d3234203d3e20323636313732.roa (hash: Ca1pmAXz0FFwQDKx4al/0Enxv3kwvor9qxc1ErXA0kU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.crl rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c3:58:d2:ed:de:84:ba:0b:88:48:da:af:6f:ac:62:4f:33:29:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD0CBBA83E82BACB16521E6328443385F92099E0 Validity Not Before: Oct 20 14:04:02 2025 GMT Not After : Oct 21 14:30:02 2025 GMT Subject: CN=D1E2E6062F957B1220B1D45CA8D398CAA36E7976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d6:f1:90:91:78:bf:d9:20:c8:11:88:67:33: 5f:6c:24:cf:8c:9b:84:c6:61:e8:e3:72:f0:9f:73: f9:75:7e:14:49:fc:17:c6:83:91:dd:1e:66:ec:6c: cd:89:41:c3:e2:da:12:b4:d9:00:cb:5b:a8:3a:b4: b7:70:05:ed:e5:bd:fb:9a:dd:e0:9a:52:85:dd:1f: 2d:5f:16:f6:fc:87:8c:07:5f:94:3e:f1:9f:47:c4: 0a:64:14:43:af:d2:eb:2f:aa:28:de:ba:a1:a4:2e: 25:66:57:b3:77:65:68:0b:46:5d:9b:74:42:3f:70: ec:9b:21:2c:b2:dc:d5:a3:28:fb:f0:0e:5e:3b:06: c5:03:fc:58:19:e7:82:11:bb:85:29:2c:e0:d4:6a: 99:75:7a:a1:63:d0:54:8b:7a:61:78:d3:ad:1e:44: 3a:2e:7a:b9:b6:21:7a:74:40:ba:1e:10:9a:32:de: 93:1d:92:b1:a8:32:76:48:f6:9c:28:99:cb:a4:46: eb:39:de:e6:04:0c:fd:fb:00:a0:1f:78:6d:1e:c7: 31:e9:b5:f6:4c:7e:47:81:ca:b3:9a:c2:5b:04:9b: e4:60:63:56:17:48:f4:f9:87:e1:e8:1d:13:5f:49: 5a:16:16:38:ff:1b:24:e8:f7:7a:5c:95:f6:0b:aa: 9e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E2:E6:06:2F:95:7B:12:20:B1:D4:5C:A8:D3:98:CA:A3:6E:79:76 X509v3 Authority Key Identifier: keyid:DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8c:f1:5c:be:5c:e1:df:1d:f4:0a:17:30:14:a9:1c:f6:92: 68:f0:59:0b:57:1e:bb:6a:b4:ac:e3:3d:8d:50:91:73:d9:c2: a7:ca:61:2f:f8:83:36:17:15:a2:f1:83:12:5d:3f:d6:1f:b7: 3c:f2:13:ec:e6:86:c1:53:c4:5f:03:59:b8:e8:c2:67:7c:d0: 2d:d1:8d:0c:73:08:db:91:63:52:47:4d:57:cc:75:23:96:df: e6:63:bb:74:75:73:fb:e0:27:d8:13:ab:16:25:ef:6d:2b:71: 21:4e:b5:0f:76:48:1c:9c:17:31:8e:6d:be:57:35:84:0f:dd: 4f:a8:c4:ec:7a:76:a6:93:58:00:bc:58:75:43:63:c9:19:56: 79:1f:bf:60:32:e2:cd:be:01:0b:73:cf:ba:fd:16:77:26:05: ab:d1:f9:7c:05:aa:6f:9f:5c:83:bc:7d:55:9b:0e:55:44:c1: 83:0f:f4:82:4d:90:27:86:65:27:d5:4c:10:fa:60:45:0d:43: bd:4d:a8:4f:82:16:4f:8c:f7:8b:74:80:84:f5:96:74:a9:92: ea:0b:4b:4a:eb:3e:3d:52:3f:2e:76:9b:34:2d:bd:c2:63:2e: 70:d6:35:7f:78:11:49:dc:7e:61:2b:b4:b6:ed:0a:ab:24:4f: 4c:fc:ff:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR8NY0u3ehLoLiEjar2+sYk8zKSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQwQ0JCQTgzRTgyQkFDQjE2NTIxRTYzMjg0NDMzODVG OTIwOTlFMDAeFw0yNTEwMjAxNDA0MDJaFw0yNTEwMjExNDMwMDJaMDMxMTAvBgNV BAMTKEQxRTJFNjA2MkY5NTdCMTIyMEIxRDQ1Q0E4RDM5OENBQTM2RTc5NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy1vGQkXi/2SDIEYhnM19sJM+M m4TGYejjcvCfc/l1fhRJ/BfGg5HdHmbsbM2JQcPi2hK02QDLW6g6tLdwBe3lvfua 3eCaUoXdHy1fFvb8h4wHX5Q+8Z9HxApkFEOv0usvqijeuqGkLiVmV7N3ZWgLRl2b dEI/cOybISyy3NWjKPvwDl47BsUD/FgZ54IRu4UpLODUapl1eqFj0FSLemF4060e RDouerm2IXp0QLoeEJoy3pMdkrGoMnZI9pwomcukRus53uYEDP37AKAfeG0exzHp tfZMfkeByrOawlsEm+RgY1YXSPT5h+HoHRNfSVoWFjj/GyTo93pclfYLqp5NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0eLmBi+VexIgsdRcqNOYyqNueXYwHwYDVR0j BBgwFoAU3Qy7qD6CussWUh5jKEQzhfkgmeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM05MS3ZVY1J4Z1NHNWl1alVSd1hndGJnUHdpcmY1OTNmeERqOHl4eXM4 cDcvMC9ERDBDQkJBODNFODJCQUNCMTY1MjFFNjMyODQ0MzM4NUY5MjA5OUUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMENCQkE4M0U4MkJBQ0Ix NjUyMUU2MzI4NDQzMzg1RjkyMDk5RTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M05MS3ZVY1J4Z1NHNWl1alVSd1hndGJnUHdpcmY1OTNmeERqOHl4eXM4cDcvMC9E RDBDQkJBODNFODJCQUNCMTY1MjFFNjMyODQ0MzM4NUY5MjA5OUUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiozxXL5c4d8d9AoXMBSpHPaSaPBZC1ceu2q0rOM9jVCRc9nCp8phL/iDNhcV ovGDEl0/1h+3PPIT7OaGwVPEXwNZuOjCZ3zQLdGNDHMI25FjUkdNV8x1I5bf5mO7 dHVz++An2BOrFiXvbStxIU61D3ZIHJwXMY5tvlc1hA/dT6jE7Hp2ppNYALxYdUNj yRlWeR+/YDLizb4BC3PPuv0WdyYFq9H5fAWqb59cg7x9VZsOVUTBgw/0gk2QJ4Zl J9VMEPpgRQ1DvU2oT4IWT4z3i3SAhPWWdKmS6gtLSus+PVI/LnabNC29wmMucNY1 f3gRSdx+YSu0tu0KqyRPTPz/ZQ== -----END CERTIFICATE-----Generated at Tue Oct 21 02:37:08 2025 by rpki-client