$ rpki-client -vvf rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/90D897367D5DE58ECE8970417E1DB2813E209B45.mft File: 90D897367D5DE58ECE8970417E1DB2813E209B45.mft (raw, json) Hash identifier: cLgxkqqJLMtoENcsRsbInhGKrLYx1iXxiOz0plwOmwA= Subject key identifier: D7:82:9C:61:E7:3C:A3:8F:A9:0A:47:E6:75:A2:51:2C:37:AF:70:36 Authority key identifier: 90:D8:97:36:7D:5D:E5:8E:CE:89:70:41:7E:1D:B2:81:3E:20:9B:45 Certificate issuer: /CN=90D897367D5DE58ECE8970417E1DB2813E209B45 Certificate serial: 45E806BAC0B767E500542FF29524B2E0BFE4B79D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90D897367D5DE58ECE8970417E1DB2813E209B45.cer Subject info access: rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/90D897367D5DE58ECE8970417E1DB2813E209B45.mft Manifest number: 0104 Signing time: Mon 20 Oct 2025 10:03:50 +0000 Manifest this update: Mon 20 Oct 2025 09:58:50 +0000 Manifest next update: Tue 21 Oct 2025 11:20:50 +0000 Files and hashes: 1: 34352e3137382e37362e302f32322d3234203d3e20323639303930.roa (hash: qss5m/UDKfw6xsVm2Fln6/J9VhNXByfK+8stgT5NVqs=) 2: 323830343a356634633a3a2f33322d313238203d3e20323639303930.roa (hash: GgwdtJpD8t4VY46myne5SO9LwH50jPDYquiNmgz1Imw=) 3: 90D897367D5DE58ECE8970417E1DB2813E209B45.crl (hash: Xg1IopYgTGvGjawXhh94PxAxycnBGgV/rZqMqlDj6Zs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/90D897367D5DE58ECE8970417E1DB2813E209B45.crl rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/90D897367D5DE58ECE8970417E1DB2813E209B45.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90D897367D5DE58ECE8970417E1DB2813E209B45.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e8:06:ba:c0:b7:67:e5:00:54:2f:f2:95:24:b2:e0:bf:e4:b7:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90D897367D5DE58ECE8970417E1DB2813E209B45 Validity Not Before: Oct 20 09:58:50 2025 GMT Not After : Oct 21 11:20:50 2025 GMT Subject: CN=D7829C61E73CA38FA90A47E675A2512C37AF7036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:73:81:b0:fd:9d:7e:c1:ec:23:2f:f4:8e:7e: f0:36:d1:f4:9c:fb:e4:7b:9c:4a:8a:a7:f0:27:53: 32:b1:53:50:d6:37:64:93:b6:4f:86:5b:ee:3b:b3: 8f:23:b7:3f:55:5d:57:0d:92:c7:1c:2f:65:5c:a7: 27:9d:7c:96:11:1b:64:96:f7:32:f2:28:4e:f2:49: d2:ec:df:de:9b:41:d8:a9:1d:6b:4f:3a:de:58:f7: 58:b0:a0:ab:7d:6d:05:e7:2d:26:74:fa:6c:a9:92: fd:70:58:b3:f2:38:2b:a8:b2:1d:d3:60:6d:2c:1f: 0a:51:a2:b5:b8:34:b7:e9:60:cd:55:04:28:77:44: fb:25:f6:b9:46:05:f0:2e:5a:f5:f6:9a:f1:72:7d: 25:6c:e1:7a:97:df:09:69:a6:4c:50:25:33:8f:41: 94:7a:fa:8f:f5:69:ca:3d:b6:f3:cd:58:3c:44:9d: da:69:1d:f8:2f:ed:99:6b:b8:8e:db:71:df:f3:05: 85:fa:f0:eb:6a:8f:e9:cb:93:0c:cf:df:55:bc:cb: 29:2b:34:ea:e1:74:9b:a3:7a:a3:b4:b2:83:15:8c: 5c:0a:d3:c3:2a:bc:6b:31:c1:20:1a:a0:47:15:89: 38:de:2b:f4:4d:17:64:28:20:cb:81:2c:e1:ab:9c: eb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:82:9C:61:E7:3C:A3:8F:A9:0A:47:E6:75:A2:51:2C:37:AF:70:36 X509v3 Authority Key Identifier: keyid:90:D8:97:36:7D:5D:E5:8E:CE:89:70:41:7E:1D:B2:81:3E:20:9B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/90D897367D5DE58ECE8970417E1DB2813E209B45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90D897367D5DE58ECE8970417E1DB2813E209B45.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/90D897367D5DE58ECE8970417E1DB2813E209B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:98:c8:4d:65:44:34:5c:08:f8:43:ae:09:52:0b:32:da:5b: 9c:ad:86:26:56:64:20:69:2e:f1:a1:06:3b:b9:1e:75:bd:49: cc:df:d7:2a:84:ca:11:e6:6a:38:dd:f5:ea:c9:52:4d:14:7c: 71:19:8b:8e:b2:24:6a:ce:60:20:28:ee:21:3b:99:4d:05:6b: 2a:bf:fe:96:c6:0a:00:d4:5d:95:00:10:3d:00:92:5e:36:ca: b3:73:cf:2c:bd:ce:3e:41:34:b0:2e:b0:6c:d5:62:0b:ed:e0: ab:d1:19:d4:ae:f4:d5:3e:a1:c7:fc:23:d5:2c:7f:a3:db:05: ca:da:5b:3c:fb:76:2d:1a:a8:3b:8d:83:9b:69:17:d1:a0:04: 3f:7a:ef:75:51:8d:36:0a:b7:4a:3d:06:73:cc:0c:4a:42:70: db:d3:3a:f2:0d:f1:10:d7:39:54:91:af:a6:2f:35:bf:cc:c6: 4a:73:af:71:26:54:80:88:e6:da:0d:9c:b1:03:96:71:b5:03: 34:26:50:29:a6:76:39:d6:b6:06:ac:ec:0f:8f:35:23:51:59: a9:12:ca:43:bf:b1:e8:05:ab:ab:37:0f:d2:e2:01:47:71:69: 8f:da:68:2e:5e:7e:1b:2e:74:b5:ba:a0:2d:24:80:40:ec:ce: 16:3b:06:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURegGusC3Z+UAVC/ylSSy4L/kt50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBEODk3MzY3RDVERTU4RUNFODk3MDQxN0UxREIyODEz RTIwOUI0NTAeFw0yNTEwMjAwOTU4NTBaFw0yNTEwMjExMTIwNTBaMDMxMTAvBgNV BAMTKEQ3ODI5QzYxRTczQ0EzOEZBOTBBNDdFNjc1QTI1MTJDMzdBRjcwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfc4Gw/Z1+wewjL/SOfvA20fSc ++R7nEqKp/AnUzKxU1DWN2STtk+GW+47s48jtz9VXVcNksccL2VcpyedfJYRG2SW 9zLyKE7ySdLs396bQdipHWtPOt5Y91iwoKt9bQXnLSZ0+mypkv1wWLPyOCuosh3T YG0sHwpRorW4NLfpYM1VBCh3RPsl9rlGBfAuWvX2mvFyfSVs4XqX3wlppkxQJTOP QZR6+o/1aco9tvPNWDxEndppHfgv7ZlruI7bcd/zBYX68Otqj+nLkwzP31W8yykr NOrhdJujeqO0soMVjFwK08MqvGsxwSAaoEcViTjeK/RNF2QoIMuBLOGrnOszAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU14KcYec8o4+pCkfmdaJRLDevcDYwHwYDVR0j BBgwFoAUkNiXNn1d5Y7OiXBBfh2ygT4gm0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFRLODNyVDcxcmZYak44RHpUN0FLdDhxRlh1dnU1SGVLS2h0emczOVFv a2UvMC85MEQ4OTczNjdENURFNThFQ0U4OTcwNDE3RTFEQjI4MTNFMjA5QjQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwRDg5NzM2N0Q1REU1OEVD RTg5NzA0MTdFMURCMjgxM0UyMDlCNDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFRLODNyVDcxcmZYak44RHpUN0FLdDhxRlh1dnU1SGVLS2h0emczOVFva2UvMC85 MEQ4OTczNjdENURFNThFQ0U4OTcwNDE3RTFEQjI4MTNFMjA5QjQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASZjITWVENFwI+EOuCVILMtpbnK2GJlZkIGku8aEGO7kedb1JzN/XKoTKEeZq ON316slSTRR8cRmLjrIkas5gICjuITuZTQVrKr/+lsYKANRdlQAQPQCSXjbKs3PP LL3OPkE0sC6wbNViC+3gq9EZ1K701T6hx/wj1Sx/o9sFytpbPPt2LRqoO42Dm2kX 0aAEP3rvdVGNNgq3Sj0Gc8wMSkJw29M68g3xENc5VJGvpi81v8zGSnOvcSZUgIjm 2g2csQOWcbUDNCZQKaZ2Oda2BqzsD481I1FZqRLKQ7+x6AWrqzcP0uIBR3Fpj9po Ll5+Gy50tbqgLSSAQOzOFjsGUA== -----END CERTIFICATE-----Generated at Mon Oct 20 16:18:49 2025 by rpki-client