$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft File: DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft (raw, json) Hash identifier: Z0Bw6NHTg9W02/VGfBe6+X/GM6JUoN9u+aOGL53vh2I= Subject key identifier: D6:D7:D1:FE:51:C4:92:A3:71:87:4B:44:15:15:13:43:74:62:B8:53 Authority key identifier: DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70 Certificate issuer: /CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570 Certificate serial: 3BEFE76EEDFCDC947695D4C68928B4208586736C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer Subject info access: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft Manifest number: 02BD Signing time: Sun 19 Oct 2025 22:04:12 +0000 Manifest this update: Sun 19 Oct 2025 21:59:12 +0000 Manifest next update: Tue 21 Oct 2025 01:02:12 +0000 Files and hashes: 1: 323830343a346464343a3a2f33322d3438203d3e20323638323232.roa (hash: fv6ZnXxZ45ntnnbYQPrDO2OsehPsbW9FdZy/XuAwgL0=) 2: DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl (hash: 3hLxeD/1m42IZLZvLA7hPY2r72xLc9BRdCu2NqOHuNw=) 3: 34352e3233362e32302e302f32322d3234203d3e20323638323232.roa (hash: FG1wug4MqyLJsAReVjvXRe7puwgFUXpXXwbr9j3w0ZI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 01:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ef:e7:6e:ed:fc:dc:94:76:95:d4:c6:89:28:b4:20:85:86:73:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570 Validity Not Before: Oct 19 21:59:12 2025 GMT Not After : Oct 21 01:02:12 2025 GMT Subject: CN=D6D7D1FE51C492A371874B44151513437462B853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:71:e5:10:fa:87:5f:b9:d8:77:e6:75:06: 1e:59:98:bc:24:e3:a4:2a:ec:95:c4:33:98:e3:bb: 40:9d:d1:29:6a:79:fa:f9:37:af:45:d1:57:d9:40: dd:a0:01:9d:c6:8b:d0:86:e0:1e:55:9a:b3:a6:1a: 84:ee:a7:6e:2b:c9:40:bb:6a:de:53:7c:ec:c9:9e: bf:96:01:fd:f7:35:78:35:26:e6:47:54:eb:be:95: fa:2a:6b:3b:78:c9:95:1f:e5:be:c5:38:8c:5f:4f: 2e:55:3e:c5:f2:1f:03:6b:d7:44:e6:16:45:89:3f: ee:b6:24:9c:f3:6f:96:43:0a:1f:a9:e7:e1:13:51: b2:20:01:80:4c:39:91:7f:1b:91:f9:49:77:54:d1: 02:39:78:40:fa:4a:1f:84:44:48:1e:1d:27:d3:76: af:eb:49:f5:5d:df:8c:3e:3b:4e:b7:46:48:38:10: fa:a2:e7:98:84:b8:12:37:af:10:a0:0a:1a:04:9f: fa:8a:42:b9:f5:b6:6b:4d:61:3d:c7:dc:b6:dc:2b: ab:b6:e8:08:46:c1:46:53:eb:4d:45:71:66:98:44: e6:13:6a:bb:92:66:3a:c3:1a:d1:2b:44:ce:73:f3: 73:9c:21:c9:81:5e:a9:a9:4c:fb:7d:82:df:1e:be: d6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D7:D1:FE:51:C4:92:A3:71:87:4B:44:15:15:13:43:74:62:B8:53 X509v3 Authority Key Identifier: keyid:DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d5:ba:95:de:a0:db:ab:b5:59:73:cd:13:b7:a5:b0:10:5c: 78:68:f4:80:44:ca:83:95:74:1c:e0:b3:7e:77:d2:48:fe:7c: 10:89:03:75:d0:91:11:5d:5b:a0:97:63:91:63:2b:62:66:d8: 12:4d:68:f8:fd:e6:88:15:d2:aa:e6:72:23:94:d2:d7:99:ff: da:c6:17:6e:a7:d8:56:ef:d0:47:ab:e3:59:fc:c9:c7:82:2d: 3d:f5:54:d1:1f:25:31:fb:9b:18:5c:fe:c7:63:02:f9:d7:33: 73:29:97:c1:3f:1b:de:9b:e0:ae:8f:e1:c3:3f:ff:79:ee:68: 7a:4e:2b:06:ef:4c:eb:b8:8f:ce:47:c5:e8:bc:b7:8e:a7:ef: f3:ec:45:da:8e:56:c2:11:bd:ed:f5:a4:80:df:e2:4d:c6:12: 98:ea:c0:07:ad:9d:34:c9:48:22:60:20:ee:82:8a:63:23:9d: 23:29:f8:4e:fb:5c:7d:a0:87:15:ad:5b:72:25:7b:a3:41:50: ee:ee:a0:46:b4:73:f4:ab:70:10:ed:18:63:fa:27:20:06:14: 87:8a:6c:44:68:8e:eb:e9:d8:08:b9:8f:78:13:4f:13:b7:58: 30:21:27:0f:7c:ad:87:a1:78:67:54:89:85:56:38:a0:c6:78: 1e:47:92:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO+/nbu383JR2ldTGiSi0IIWGc2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBMUVDNEEwRTQ4QjVDMDlGQjc0NjMyN0YwNUY1MUVC NUY4RTU3MDAeFw0yNTEwMTkyMTU5MTJaFw0yNTEwMjEwMTAyMTJaMDMxMTAvBgNV BAMTKEQ2RDdEMUZFNTFDNDkyQTM3MTg3NEI0NDE1MTUxMzQzNzQ2MkI4NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuWHHlEPqHX7nYd+Z1Bh5ZmLwk 46Qq7JXEM5jju0Cd0Slqefr5N69F0VfZQN2gAZ3Gi9CG4B5VmrOmGoTup24ryUC7 at5TfOzJnr+WAf33NXg1JuZHVOu+lfoqazt4yZUf5b7FOIxfTy5VPsXyHwNr10Tm FkWJP+62JJzzb5ZDCh+p5+ETUbIgAYBMOZF/G5H5SXdU0QI5eED6Sh+EREgeHSfT dq/rSfVd34w+O063Rkg4EPqi55iEuBI3rxCgChoEn/qKQrn1tmtNYT3H3LbcK6u2 6AhGwUZT601FcWaYROYTaruSZjrDGtErRM5z83OcIcmBXqmpTPt9gt8evtavAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1tfR/lHEkqNxh0tEFRUTQ3RiuFMwHwYDVR0j BBgwFoAU3aHsSg5ItcCft0YyfwX1HrX45XAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FSZE5ZZFQ3WERq UksvMC9EREExRUM0QTBFNDhCNUMwOUZCNzQ2MzI3RjA1RjUxRUI1RjhFNTcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REQTFFQzRBMEU0OEI1QzA5 RkI3NDYzMjdGMDVGNTFFQjVGOEU1NzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FSZE5ZZFQ3WERqUksvMC9E REExRUM0QTBFNDhCNUMwOUZCNzQ2MzI3RjA1RjUxRUI1RjhFNTcwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPNW6ld6g26u1WXPNE7elsBBceGj0gETKg5V0HOCzfnfSSP58EIkDddCREV1b oJdjkWMrYmbYEk1o+P3miBXSquZyI5TS15n/2sYXbqfYVu/QR6vjWfzJx4ItPfVU 0R8lMfubGFz+x2MC+dczcymXwT8b3pvgro/hwz//ee5oek4rBu9M67iPzkfF6Ly3 jqfv8+xF2o5WwhG97fWkgN/iTcYSmOrAB62dNMlIImAg7oKKYyOdIyn4TvtcfaCH Fa1bciV7o0FQ7u6gRrRz9KtwEO0YY/onIAYUh4psRGiO6+nYCLmPeBNPE7dYMCEn D3yth6F4Z1SJhVY4oMZ4HkeSgQ== -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:11 2025 by rpki-client