$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft File: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft (raw, json) Hash identifier: Sx55vjjn1s6F0fvhWroIMsH/94LWt6TvgZT8tkDHO7w= Subject key identifier: A2:4A:02:99:D8:3B:47:64:0E:B4:55:F7:A8:8B:97:60:3E:D1:CA:32 Authority key identifier: DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3 Certificate issuer: /CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3 Certificate serial: 7B2728EA900ECA4D4F499F7A453C516EF072AF6B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer Subject info access: rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft Manifest number: 02EE Signing time: Mon 20 Oct 2025 05:28:11 +0000 Manifest this update: Mon 20 Oct 2025 05:23:11 +0000 Manifest next update: Tue 21 Oct 2025 08:19:11 +0000 Files and hashes: 1: 34352e3138312e3139362e302f32322d3234203d3e20323639313937.roa (hash: Col+LRGc/1lk9nvkTe3TytJA4agsIFfCWd9IIiNQBxI=) 2: 323830343a363065303a3a2f33322d3336203d3e20323639313937.roa (hash: D5Kh1u0vUQX58zC8K3kTptsTZXCjTHtVrMtIC/ORziw=) 3: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl (hash: 9gDdXeBA9l9h/Y6jRfu5vdG9YLNpyvZLKKZcr5VUwbQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:27:28:ea:90:0e:ca:4d:4f:49:9f:7a:45:3c:51:6e:f0:72:af:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3 Validity Not Before: Oct 20 05:23:11 2025 GMT Not After : Oct 21 08:19:11 2025 GMT Subject: CN=A24A0299D83B47640EB455F7A88B97603ED1CA32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3b:f4:ac:07:50:09:16:99:ad:b3:77:bb:b3: 44:91:c0:a3:af:65:df:9a:0d:12:b4:c4:46:f7:66: 6a:47:9d:dd:47:df:bc:21:01:3c:41:92:91:2a:6c: 38:26:95:d3:f2:f2:ed:3c:08:04:2a:62:e4:37:19: 5c:e3:02:06:f4:ae:e7:e6:d0:3c:7c:7c:6b:0a:fe: a4:65:0e:e5:a5:cf:33:55:37:c3:be:ed:a3:ba:09: bc:df:a7:51:1a:bc:77:54:92:6b:46:b7:0d:8f:e9: f4:8e:ae:a1:1e:5e:76:73:54:93:03:50:26:a5:63: 16:4a:e0:e6:e2:b6:75:2f:51:cc:c0:bf:34:04:68: e5:40:05:b7:05:4d:8e:bb:34:f1:c5:1a:d1:5e:4e: e3:10:28:03:e8:13:7d:b7:16:43:bd:a6:e7:64:a6: cd:9d:e7:43:f6:8c:1d:14:07:ec:c8:21:b6:8d:66: 58:d6:05:dd:44:af:90:df:b8:36:f7:f2:73:bc:d2: 14:64:95:5b:2c:77:07:52:84:48:dc:aa:b6:69:8d: ad:34:d2:ba:9f:aa:1d:d2:7a:18:ae:ce:55:c1:84: 32:7b:f6:08:16:ec:45:5a:00:c3:3b:2c:b5:ec:db: 4a:2a:82:13:c4:37:7a:41:e8:91:7d:69:be:57:69: b2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4A:02:99:D8:3B:47:64:0E:B4:55:F7:A8:8B:97:60:3E:D1:CA:32 X509v3 Authority Key Identifier: keyid:DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:87:84:6c:c0:f4:c9:c0:75:69:44:4c:e8:4a:88:d7:55:cf: 61:a3:d8:95:af:d1:c5:ac:62:c7:42:5e:fe:e8:2a:60:a0:b2: f9:ea:ca:b2:bc:2d:ad:02:f7:19:46:45:2a:08:a6:fe:5f:3f: eb:d0:5a:ce:5e:b0:47:bd:55:5e:02:03:63:13:aa:28:95:81: ec:be:14:0b:e6:02:54:fa:f5:6a:f5:f0:6c:45:98:c0:18:77: 2f:ba:31:9a:d5:8a:ee:d4:53:39:f3:14:68:a0:60:64:82:b9: e5:4d:87:28:39:75:9f:07:91:fa:ab:1f:00:f0:e4:4a:2e:b2: 79:a6:13:01:16:95:60:3a:8a:db:63:b9:c5:16:e4:6c:fb:90: a0:f9:10:c7:3c:6b:e7:bb:4c:91:16:a6:79:83:9c:ba:20:76: 43:64:ad:74:ee:6e:6f:92:4f:9e:6c:b2:c7:97:76:04:e2:d9: 59:57:c4:89:98:28:86:0f:08:b2:1d:02:f9:1e:79:59:8c:c9: f4:b0:8f:58:4e:3c:38:40:10:31:2f:e5:b8:89:69:17:a4:70: e8:15:da:19:bf:b4:f4:6b:56:5d:7a:3a:75:d6:9a:34:69:08: 7c:0d:ce:1e:08:4f:98:d3:65:c8:5e:50:3f:cd:0d:a7:80:b7: 0a:70:57:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeyco6pAOyk1PSZ96RTxRbvByr2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY1MkNDOTBGQ0QyQzM4MzI4NDA2NDNBOUU1NTdERTg1 QjBGNTlEMzAeFw0yNTEwMjAwNTIzMTFaFw0yNTEwMjEwODE5MTFaMDMxMTAvBgNV BAMTKEEyNEEwMjk5RDgzQjQ3NjQwRUI0NTVGN0E4OEI5NzYwM0VEMUNBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoO/SsB1AJFpmts3e7s0SRwKOv Zd+aDRK0xEb3ZmpHnd1H37whATxBkpEqbDgmldPy8u08CAQqYuQ3GVzjAgb0rufm 0Dx8fGsK/qRlDuWlzzNVN8O+7aO6Cbzfp1EavHdUkmtGtw2P6fSOrqEeXnZzVJMD UCalYxZK4ObitnUvUczAvzQEaOVABbcFTY67NPHFGtFeTuMQKAPoE323FkO9pudk ps2d50P2jB0UB+zIIbaNZljWBd1Er5DfuDb38nO80hRklVssdwdShEjcqrZpja00 0rqfqh3SehiuzlXBhDJ79ggW7EVaAMM7LLXs20oqghPEN3pB6JF9ab5XabKVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUokoCmdg7R2QOtFX3qIuXYD7RyjIwHwYDVR0j BBgwFoAU31LMkPzSw4MoQGQ6nlV96FsPWdMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlZLa1RaZktpTEZvclVNaFlSSnlHYm5ZcEV4RjRrRDVBUVpoaTh1N1Na dUQvMS9ERjUyQ0M5MEZDRDJDMzgzMjg0MDY0M0E5RTU1N0RFODVCMEY1OUQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGNTJDQzkwRkNEMkMzODMy ODQwNjQzQTlFNTU3REU4NUIwRjU5RDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlZLa1RaZktpTEZvclVNaFlSSnlHYm5ZcEV4RjRrRDVBUVpoaTh1N1NadUQvMS9E RjUyQ0M5MEZDRDJDMzgzMjg0MDY0M0E5RTU1N0RFODVCMEY1OUQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnYeEbMD0ycB1aURM6EqI11XPYaPYla/Rxaxix0Je/ugqYKCy+erKsrwtrQL3 GUZFKgim/l8/69Bazl6wR71VXgIDYxOqKJWB7L4UC+YCVPr1avXwbEWYwBh3L7ox mtWK7tRTOfMUaKBgZIK55U2HKDl1nweR+qsfAPDkSi6yeaYTARaVYDqK22O5xRbk bPuQoPkQxzxr57tMkRameYOcuiB2Q2StdO5ub5JPnmyyx5d2BOLZWVfEiZgohg8I sh0C+R55WYzJ9LCPWE48OEAQMS/luIlpF6Rw6BXaGb+09GtWXXo6ddaaNGkIfA3O HghPmNNlyF5QP80Np4C3CnBXbw== -----END CERTIFICATE-----Generated at Mon Oct 20 19:29:25 2025 by rpki-client