$ rpki-client -vvf rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft File: 0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft (raw, json) Hash identifier: TpFOmEH5cmGH+d8bdDVAzZ/Wj8YtB1ib/MG385Q4yKw= Subject key identifier: 29:0B:F1:36:A9:F9:AE:28:1D:20:7B:1D:4B:5E:B6:F3:2A:3D:F2:7D Authority key identifier: 0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15 Certificate issuer: /CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15 Certificate serial: 319CDA0FE484BC54EDD2682BD9ECCE07578E4888 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer Subject info access: rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft Manifest number: 014D Signing time: Sun 19 Oct 2025 18:15:59 +0000 Manifest this update: Sun 19 Oct 2025 18:10:59 +0000 Manifest next update: Mon 20 Oct 2025 22:06:59 +0000 Files and hashes: 1: 323830343a316161303a3a2f33322d3438203d3e203631383732.roa (hash: zSptNN8DkmF10Nv+nlCLUTysqOi1fB0W3pY01wsysuw=) 2: 0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl (hash: q6YDSCYx8lKunz4PyKY2h3OS6D1EKvE/C9o4dQigpZg=) 3: 3137302e38312e34342e302f32322d3234203d3e203631383732.roa (hash: 3uUj0R6DlPY399C9yzaH3KMwAJiuFg6IDEJm6Flo7/I=) 4: 3137372e32322e3230382e302f32302d3234203d3e203631383732.roa (hash: Ff7NxA9f2NFen6Fa/2ff2j5YwONNZaeQShwc44r8Cz8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 22:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9c:da:0f:e4:84:bc:54:ed:d2:68:2b:d9:ec:ce:07:57:8e:48:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15 Validity Not Before: Oct 19 18:10:59 2025 GMT Not After : Oct 20 22:06:59 2025 GMT Subject: CN=290BF136A9F9AE281D207B1D4B5EB6F32A3DF27D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a5:bd:d4:6f:bf:47:c0:38:5c:28:a8:b8:e8: 44:47:c1:64:f5:c5:ed:36:86:17:52:b9:cd:bf:28: 93:89:72:4a:43:3a:35:67:2c:7f:95:4a:e4:fd:8b: 38:b4:0a:5f:6c:b0:51:1c:91:e6:c5:08:2c:82:b5: cd:2a:1f:04:9c:5c:1c:35:d4:2b:40:e7:23:f5:9c: c9:10:c1:1f:56:fb:fc:ee:28:5a:09:1e:58:9e:f4: dc:ad:04:04:2c:55:f1:bf:38:76:e6:9e:e9:3d:72: 17:ae:13:0f:d4:78:9a:80:a7:1d:8b:cb:f1:f5:fb: 39:7a:f8:ea:e6:95:f4:b7:ec:54:f1:0d:09:25:08: b6:f8:bf:58:d9:ad:9d:cc:48:00:f2:d6:c3:5d:31: 53:1d:9d:27:bb:a4:7a:93:0e:3e:48:95:89:1a:4e: 73:30:2c:39:4d:e2:15:58:3d:b6:b8:26:5a:02:88: 0f:3d:01:39:05:66:7d:25:73:7f:86:12:e9:cb:50: 39:0a:ba:b2:5c:01:bb:4f:16:68:4d:2f:9d:2c:f7: ad:0c:cf:8c:3e:b4:d9:23:66:2b:22:bd:a7:02:8b: 8e:41:40:58:54:20:07:e3:37:92:0b:47:34:0d:4a: f5:72:42:99:9d:23:51:8d:68:16:76:42:69:b3:be: 2a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0B:F1:36:A9:F9:AE:28:1D:20:7B:1D:4B:5E:B6:F3:2A:3D:F2:7D X509v3 Authority Key Identifier: keyid:0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:52:4a:0b:1d:15:48:46:33:4d:92:9b:ae:c6:9c:7a:e2:6a: 57:3f:22:a6:7d:e1:8b:77:3e:a9:cd:32:df:59:1e:46:56:8e: 48:22:4e:64:8c:93:94:b2:3f:1d:d4:c4:b9:fd:56:54:ac:84: 07:b5:ee:da:6c:de:5a:45:49:5e:ff:37:b6:56:15:fd:96:ff: 1c:6e:c9:f5:25:3f:3e:2f:4e:d3:75:ad:4a:92:02:d6:db:24: 9d:fc:d6:e9:6f:5c:e2:78:b3:e2:bf:56:2f:57:ac:ef:23:a5: c5:69:49:ac:62:38:6b:83:86:4d:3e:cf:66:fa:33:d3:c1:fe: 19:93:bd:c5:22:f8:00:99:56:cf:3d:8f:05:bc:8e:a1:68:dd: 4d:2d:b8:19:76:ab:24:1d:1d:fd:6d:93:52:71:0c:a7:38:61: 90:af:27:3e:a6:9d:c9:4a:11:19:69:c8:bb:2e:86:f8:99:ed: 59:86:94:79:ed:c4:a7:43:9b:7f:9e:1c:b3:bf:7b:3e:0c:a0: 0e:7e:8b:e2:75:3a:ec:b7:59:67:f7:5c:17:de:78:5a:e4:a1: bc:34:f9:76:1b:09:4b:2c:d7:5c:6d:d0:74:b1:c7:38:4a:8b: 17:3e:f4:e1:e1:c9:bd:25:c9:b1:4c:90:c1:8a:70:ca:6c:d8: 58:ce:ee:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMZzaD+SEvFTt0mgr2ezOB1eOSIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEREMTFENEZGOERBRDlBNTY0OUM4RjEzNTNENDE0QkJF RkI3QkMxNTAeFw0yNTEwMTkxODEwNTlaFw0yNTEwMjAyMjA2NTlaMDMxMTAvBgNV BAMTKDI5MEJGMTM2QTlGOUFFMjgxRDIwN0IxRDRCNUVCNkYzMkEzREYyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6pb3Ub79HwDhcKKi46ERHwWT1 xe02hhdSuc2/KJOJckpDOjVnLH+VSuT9izi0Cl9ssFEckebFCCyCtc0qHwScXBw1 1CtA5yP1nMkQwR9W+/zuKFoJHlie9NytBAQsVfG/OHbmnuk9cheuEw/UeJqApx2L y/H1+zl6+OrmlfS37FTxDQklCLb4v1jZrZ3MSADy1sNdMVMdnSe7pHqTDj5IlYka TnMwLDlN4hVYPba4JloCiA89ATkFZn0lc3+GEunLUDkKurJcAbtPFmhNL50s960M z4w+tNkjZisivacCi45BQFhUIAfjN5ILRzQNSvVyQpmdI1GNaBZ2Qmmzviq1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKQvxNqn5rigdIHsdS1628yo98n0wHwYDVR0j BBgwFoAUDdEdT/ja2aVknI8TU9QUu++3vBUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2pXWmVTNXJta0dyN211bUNtcmtXTDZBQkVZYXQ1c1A1TjhzS0VEV0ND cUYvMC8wREQxMUQ0RkY4REFEOUE1NjQ5QzhGMTM1M0Q0MTRCQkVGQjdCQzE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBERDExRDRGRjhEQUQ5QTU2 NDlDOEYxMzUzRDQxNEJCRUZCN0JDMTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2pXWmVTNXJta0dyN211bUNtcmtXTDZBQkVZYXQ1c1A1TjhzS0VEV0NDcUYvMC8w REQxMUQ0RkY4REFEOUE1NjQ5QzhGMTM1M0Q0MTRCQkVGQjdCQzE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW1JKCx0VSEYzTZKbrsaceuJqVz8ipn3hi3c+qc0y31keRlaOSCJOZIyTlLI/ HdTEuf1WVKyEB7Xu2mzeWkVJXv83tlYV/Zb/HG7J9SU/Pi9O03WtSpIC1tsknfzW 6W9c4niz4r9WL1es7yOlxWlJrGI4a4OGTT7PZvoz08H+GZO9xSL4AJlWzz2PBbyO oWjdTS24GXarJB0d/W2TUnEMpzhhkK8nPqadyUoRGWnIuy6G+JntWYaUee3Ep0Ob f54cs797PgygDn6L4nU67LdZZ/dcF954WuShvDT5dhsJSyzXXG3QdLHHOEqLFz70 4eHJvSXJsUyQwYpwymzYWM7uBA== -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:42 2025 by rpki-client