$ rpki-client -vvf rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft File: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft (raw, json) Hash identifier: fYjEIJDH4qYuC4ARjBJ6eq75IAysqV0OGCZY/aIKKjs= Subject key identifier: 73:EA:03:B6:62:B9:EA:89:62:A5:68:B7:F1:02:CA:BF:D1:B8:A5:5B Authority key identifier: DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7 Certificate issuer: /CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7 Certificate serial: 0EEA3E22BB4F076D288E7C14544A8DCA9A8DD290 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer Subject info access: rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft Manifest number: 8D Signing time: Mon 20 Oct 2025 10:00:00 +0000 Manifest this update: Mon 20 Oct 2025 09:55:00 +0000 Manifest next update: Tue 21 Oct 2025 10:36:00 +0000 Files and hashes: 1: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl (hash: /3mYYaCIJgO+GojNy5k1hnbLp8QenLt/OJtu7Ab3Who=) 2: 323830343a386532303a3a2f33322d313238203d3e20323733343034.roa (hash: +rQtNxAInELK5ARSncrEa6aoX0jAyBJS0K9vEo2MC/M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ea:3e:22:bb:4f:07:6d:28:8e:7c:14:54:4a:8d:ca:9a:8d:d2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7 Validity Not Before: Oct 20 09:55:00 2025 GMT Not After : Oct 21 10:36:00 2025 GMT Subject: CN=73EA03B662B9EA8962A568B7F102CABFD1B8A55B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9c:f5:36:91:92:4b:19:0a:52:06:35:7a:3e: 30:47:26:d2:4a:94:aa:6b:0a:73:46:c9:3b:aa:80: 8b:81:38:e6:1f:cc:23:66:b5:30:c6:c9:58:d0:c2: 09:2d:36:16:b1:c7:ed:fb:19:e7:3e:cf:64:a3:eb: 11:d5:a3:2d:51:56:e2:5f:97:3e:7c:4d:1f:61:c7: f7:ee:23:2c:7f:9a:39:14:91:fc:65:ea:86:6b:7c: 8b:3e:e0:c0:54:40:85:9d:cf:ac:3f:4f:34:b6:e2: 1a:0f:05:b6:ed:69:89:86:5e:bb:7b:d6:b5:f6:45: 2e:f8:72:4f:b7:73:95:f4:64:67:74:98:69:c4:11: f5:27:69:b6:ed:b6:37:92:3d:78:a7:24:39:ea:18: 84:92:fc:f3:83:e9:7a:49:c4:12:cc:2a:87:69:62: a3:f8:15:34:e8:07:4e:75:76:4f:19:46:e1:b4:e2: 2e:93:09:37:05:d3:61:b1:7b:c4:ed:94:47:38:ff: 0a:74:e0:8f:59:34:99:54:4c:39:70:3f:44:4a:07: d0:5d:95:ed:88:5a:86:65:d3:26:a9:7c:b3:6d:f4: ae:cb:2d:93:0c:e1:5b:8d:9d:9e:b1:1e:7c:39:fa: 00:b6:2d:33:12:44:b1:c1:07:79:07:c3:5f:56:c7: 35:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EA:03:B6:62:B9:EA:89:62:A5:68:B7:F1:02:CA:BF:D1:B8:A5:5B X509v3 Authority Key Identifier: keyid:DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:7f:48:50:01:e0:8c:f8:72:b7:cd:68:88:aa:47:75:27:35: a8:13:7c:8e:e8:af:31:c1:4c:11:92:cf:ba:dc:19:16:b0:11: 10:14:36:1b:40:53:c3:37:b0:d8:17:34:dd:9f:4b:4f:47:08: 53:1e:2b:74:1d:4b:90:0a:b6:9c:2f:84:12:7c:cc:c6:1b:59: 34:2c:30:f8:4e:42:dc:48:8b:b7:0d:e4:d8:65:fa:70:0e:bc: 0d:f7:02:52:9f:eb:ce:e5:f4:c7:c9:83:eb:ad:5f:d8:63:61: f5:70:c4:d9:74:8a:4d:b8:2a:2e:b1:b6:6e:e3:ec:ea:e0:c4: aa:48:e4:e1:29:18:94:6a:8f:25:ca:0b:c3:b3:2e:23:33:57: f7:23:35:a2:ed:2c:03:34:a1:ed:a5:55:41:80:43:d9:da:36: db:d7:71:00:f2:66:27:13:b7:73:ce:a7:c3:37:02:cc:24:a4: 25:8f:29:e5:b9:e3:a3:f3:b3:01:16:de:48:e9:89:57:e1:e3: ba:09:81:18:46:2e:c5:47:f4:84:98:91:c1:d9:a0:ba:b7:a2: 9e:de:19:74:46:12:c2:04:97:b9:00:74:d1:d2:46:cf:88:bc: 6e:43:e7:fd:fc:a1:85:e7:62:61:82:a4:fc:85:d4:93:08:94: 77:1b:9b:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDuo+IrtPB20ojnwUVEqNypqN0pAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNEFGRTRDMzUyNTlFQTBFMEFCOTNBMzQwREYxMzlF ODZCOERCNzAeFw0yNTEwMjAwOTU1MDBaFw0yNTEwMjExMDM2MDBaMDMxMTAvBgNV BAMTKDczRUEwM0I2NjJCOUVBODk2MkE1NjhCN0YxMDJDQUJGRDFCOEE1NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHnPU2kZJLGQpSBjV6PjBHJtJK lKprCnNGyTuqgIuBOOYfzCNmtTDGyVjQwgktNhaxx+37Gec+z2Sj6xHVoy1RVuJf lz58TR9hx/fuIyx/mjkUkfxl6oZrfIs+4MBUQIWdz6w/TzS24hoPBbbtaYmGXrt7 1rX2RS74ck+3c5X0ZGd0mGnEEfUnabbttjeSPXinJDnqGISS/POD6XpJxBLMKodp YqP4FTToB051dk8ZRuG04i6TCTcF02Gxe8TtlEc4/wp04I9ZNJlUTDlwP0RKB9Bd le2IWoZl0yapfLNt9K7LLZMM4VuNnZ6xHnw5+gC2LTMSRLHBB3kHw19WxzVpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUc+oDtmK56olipWi38QLKv9G4pVswHwYDVR0j BBgwFoAU3zSv5MNSWeoOCrk6NA3xOehrjbcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1R0VWJvMmVxcDhjR2F1VmtRQ1RpZkhRdWFlRTVWZlNpWXA0VHdYZVgx SjkvMC9ERjM0QUZFNEMzNTI1OUVBMEUwQUI5M0EzNDBERjEzOUU4NkI4REI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGMzRBRkU0QzM1MjU5RUEw RTBBQjkzQTM0MERGMTM5RTg2QjhEQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1R0VWJvMmVxcDhjR2F1VmtRQ1RpZkhRdWFlRTVWZlNpWXA0VHdYZVgxSjkvMC9E RjM0QUZFNEMzNTI1OUVBMEUwQUI5M0EzNDBERjEzOUU4NkI4REI3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhH9IUAHgjPhyt81oiKpHdSc1qBN8juivMcFMEZLPutwZFrAREBQ2G0BTwzew 2Bc03Z9LT0cIUx4rdB1LkAq2nC+EEnzMxhtZNCww+E5C3EiLtw3k2GX6cA68DfcC Up/rzuX0x8mD661f2GNh9XDE2XSKTbgqLrG2buPs6uDEqkjk4SkYlGqPJcoLw7Mu IzNX9yM1ou0sAzSh7aVVQYBD2do229dxAPJmJxO3c86nwzcCzCSkJY8p5bnjo/Oz ARbeSOmJV+HjugmBGEYuxUf0hJiRwdmgureint4ZdEYSwgSXuQB00dJGz4i8bkPn /fyhhediYYKk/IXUkwiUdxubFg== -----END CERTIFICATE-----Generated at Mon Oct 20 21:37:05 2025 by rpki-client