$ rpki-client -vvf rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft File: DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft (raw, json) Hash identifier: 4RkcPRQ1NN6WbRnI7WwLow2I/mkw6RSEVPI9Cjv4LdM= Subject key identifier: 3B:F4:D0:E3:F3:27:F5:75:80:1A:6D:46:F5:E1:9C:C5:2C:5D:11:D2 Authority key identifier: DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7 Certificate issuer: /CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7 Certificate serial: 0FA7C891B3740C77BD03195D4584801D249C1156 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer Subject info access: rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft Manifest number: 02DE Signing time: Sun 19 Oct 2025 20:00:17 +0000 Manifest this update: Sun 19 Oct 2025 19:55:17 +0000 Manifest next update: Mon 20 Oct 2025 22:12:17 +0000 Files and hashes: 1: 3139312e3234332e34382e302f32322d3234203d3e20323633343935.roa (hash: 9SsdRo7F/WQKm+zUuXydKWyuBOs8eQuYsJD3wiY7ifQ=) 2: 3137302e3233332e37362e302f32322d3234203d3e20323633343935.roa (hash: Gwy9zblG706ghCX5/JVGDiaxPqAmIwnXEqUmjq1gI0c=) 3: DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl (hash: pFs4c1Og10wI2rGV1vcn4mtcu7ruhyY544CUcdeUndk=) 4: 323830343a313262633a3a2f33322d3438203d3e20323633343935.roa (hash: lJamWfGsgdftwb6MoUAW/t7o12xx87lvoGqpZkx6hgI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 22:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a7:c8:91:b3:74:0c:77:bd:03:19:5d:45:84:80:1d:24:9c:11:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7 Validity Not Before: Oct 19 19:55:17 2025 GMT Not After : Oct 20 22:12:17 2025 GMT Subject: CN=3BF4D0E3F327F575801A6D46F5E19CC52C5D11D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:32:87:09:72:e2:7f:dd:e7:ef:56:19:fb:07: ae:2c:e7:ca:34:d8:2f:db:bb:a2:f8:c2:e8:87:ce: 4d:1c:23:cd:20:2e:a7:85:8d:33:61:38:c0:c0:5a: 50:b8:53:05:3f:55:7d:0c:3b:9a:03:eb:9d:68:b8: d2:e1:69:9a:67:c6:0f:69:13:03:e7:b9:c1:79:6e: 42:84:8f:90:17:90:33:13:4c:c1:5b:8c:4e:92:e5: 2a:75:2a:fb:ee:aa:00:1c:44:55:8a:ea:a0:a5:2e: eb:56:79:ab:b1:95:77:ae:f7:c2:3d:ac:fc:65:3b: b2:3b:d8:e6:eb:5e:83:3a:a5:52:59:94:c5:d1:7d: 9f:a0:94:03:f9:c4:d2:01:1f:1e:b9:f4:ae:0e:5b: 63:f9:b3:60:b1:9c:4f:d0:97:b7:04:f0:b5:e1:9e: 3b:04:46:80:a8:cf:32:62:18:e6:ad:cb:9a:a6:bd: bf:bb:9a:60:00:48:b6:13:87:db:93:50:cd:e8:35: 47:e8:24:22:e8:eb:88:f2:13:93:a7:4d:ad:ca:e3: 22:93:d0:13:37:fa:e6:82:d2:51:b2:e1:cd:d2:ae: 61:cd:f8:f5:5e:62:4f:68:44:ae:c1:eb:9f:da:0a: cf:88:33:28:49:21:a9:4b:9e:e5:15:b6:99:3b:41: c3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F4:D0:E3:F3:27:F5:75:80:1A:6D:46:F5:E1:9C:C5:2C:5D:11:D2 X509v3 Authority Key Identifier: keyid:DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:8f:e8:d5:d8:cd:df:c9:d1:a5:2a:e9:56:dc:f9:0b:c2:27: a5:8d:fa:bf:5d:6f:c5:df:f4:46:27:e1:15:4d:ef:83:e4:85: aa:ae:24:4c:18:1f:19:a4:65:f2:42:02:a0:9c:56:f2:bd:c2: 45:6c:7f:d9:80:98:8c:d7:be:0e:5f:e0:c5:2b:a3:e5:2e:92: 83:49:11:40:45:72:5e:dc:fb:f3:1d:f6:fa:b9:eb:b9:a0:d2: 55:04:c5:13:2a:9b:a2:0a:05:ef:5e:d1:4c:9a:a0:89:23:13: 28:77:d9:0d:36:84:99:f2:77:27:f0:ad:35:95:b2:8a:04:a1: ca:91:22:37:84:6d:4e:74:08:cf:db:4b:89:5d:be:01:08:3e: 2e:97:e5:8b:ba:41:69:72:55:51:ee:55:4f:5a:1a:1b:7c:8c: c7:bc:73:9d:85:78:30:2b:7f:aa:99:26:f9:a9:e3:24:76:54: 14:74:80:97:60:f2:43:2d:5d:0f:12:08:dc:da:ee:8d:31:0b: fc:9d:fe:bd:c0:bc:7b:48:29:18:1b:70:6e:8e:d1:4e:a4:8d: ae:ab:d5:b1:f2:70:41:b8:f1:a7:3a:86:e0:8a:86:84:4a:30: 1f:31:36:e9:40:76:a9:81:8f:90:5b:35:cc:06:6a:42:cf:39: 6f:70:75:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD6fIkbN0DHe9AxldRYSAHSScEVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RkM1NjgwNUM3NjY3RTE4MDE4NTRCM0M3N0FEQ0I2 NEE2M0RENzAeFw0yNTEwMTkxOTU1MTdaFw0yNTEwMjAyMjEyMTdaMDMxMTAvBgNV BAMTKDNCRjREMEUzRjMyN0Y1NzU4MDFBNkQ0NkY1RTE5Q0M1MkM1RDExRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYMocJcuJ/3efvVhn7B64s58o0 2C/bu6L4wuiHzk0cI80gLqeFjTNhOMDAWlC4UwU/VX0MO5oD651ouNLhaZpnxg9p EwPnucF5bkKEj5AXkDMTTMFbjE6S5Sp1KvvuqgAcRFWK6qClLutWeauxlXeu98I9 rPxlO7I72ObrXoM6pVJZlMXRfZ+glAP5xNIBHx659K4OW2P5s2CxnE/Ql7cE8LXh njsERoCozzJiGOaty5qmvb+7mmAASLYTh9uTUM3oNUfoJCLo64jyE5OnTa3K4yKT 0BM3+uaC0lGy4c3SrmHN+PVeYk9oRK7B65/aCs+IMyhJIalLnuUVtpk7QcMNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUO/TQ4/Mn9XWAGm1G9eGcxSxdEdIwHwYDVR0j BBgwFoAU3k/FaAXHZn4YAYVLPHety2SmPdcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3VpeUJYV3BQVUhKenpQWjFCRWJTazZZQzJ1dEhOQWlTNXJFb1Vtb2Zp U1kvMC9ERTRGQzU2ODA1Qzc2NjdFMTgwMTg1NEIzQzc3QURDQjY0QTYzREQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFNEZDNTY4MDVDNzY2N0Ux ODAxODU0QjNDNzdBRENCNjRBNjNERDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3VpeUJYV3BQVUhKenpQWjFCRWJTazZZQzJ1dEhOQWlTNXJFb1Vtb2ZpU1kvMC9E RTRGQzU2ODA1Qzc2NjdFMTgwMTg1NEIzQzc3QURDQjY0QTYzREQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkY/o1djN38nRpSrpVtz5C8InpY36v11vxd/0RifhFU3vg+SFqq4kTBgfGaRl 8kICoJxW8r3CRWx/2YCYjNe+Dl/gxSuj5S6Sg0kRQEVyXtz78x32+rnruaDSVQTF EyqbogoF717RTJqgiSMTKHfZDTaEmfJ3J/CtNZWyigShypEiN4RtTnQIz9tLiV2+ AQg+Lpfli7pBaXJVUe5VT1oaG3yMx7xznYV4MCt/qpkm+anjJHZUFHSAl2DyQy1d DxII3NrujTEL/J3+vcC8e0gpGBtwbo7RTqSNrqvVsfJwQbjxpzqG4IqGhEowHzE2 6UB2qYGPkFs1zAZqQs85b3B1Uw== -----END CERTIFICATE-----Generated at Mon Oct 20 16:18:15 2025 by rpki-client