$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft File: 2D59905C3FCA5BDA34D7101B088D80451D026C47.mft (raw, json) Hash identifier: V+DmfKHNClcKQa4UnkYZJYz9UPrGEixBFTjhT0muJuY= Subject key identifier: 3D:80:86:24:E1:DE:FF:B2:D6:E6:DA:01:3E:A9:86:0A:76:8F:8D:00 Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 Certificate issuer: /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Certificate serial: 2EA7DAC22223AAB4E6055CCA6DDE4DD1FCA29040 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject info access: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft Manifest number: 02EE Signing time: Sun 19 Oct 2025 16:20:21 +0000 Manifest this update: Sun 19 Oct 2025 16:15:21 +0000 Manifest next update: Mon 20 Oct 2025 18:37:21 +0000 Files and hashes: 1: 3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa (hash: GZELRNfuplahvPNzTKoCXKCGe7m/TvcDFJFlJBobK9k=) 2: 3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (hash: zTSSMFG/lgVqOaFeXf9pCktuzCsj0jIoIIi1uaEYa0I=) 3: 2D59905C3FCA5BDA34D7101B088D80451D026C47.crl (hash: t9epmykq9RQ+jjxecAwzHrUZaueMxFh7aWpPVfE3SEM=) 4: 323830343a323439633a3a2f33322d3438203d3e20323634323333.roa (hash: NawnnPEHbMCtTiXRZuqs51ycbe695zSEZpiIfj2SEO8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 18:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a7:da:c2:22:23:aa:b4:e6:05:5c:ca:6d:de:4d:d1:fc:a2:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Validity Not Before: Oct 19 16:15:21 2025 GMT Not After : Oct 20 18:37:21 2025 GMT Subject: CN=3D808624E1DEFFB2D6E6DA013EA9860A768F8D00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:81:66:d1:11:01:2c:72:7c:e3:17:59:0d:6e: a2:73:c2:11:e1:72:ee:cd:82:34:9b:ce:d3:c5:93: 93:79:d9:f1:69:70:ee:60:1d:3c:35:8c:93:59:32: a6:a3:43:80:06:76:65:ff:a6:fb:b6:4d:e3:da:81: 84:c3:99:6a:df:e4:6e:13:16:52:37:7e:3c:90:34: b7:86:a2:cf:1c:ba:c1:9c:05:6c:99:81:56:44:9e: 0d:69:4e:e2:26:c7:b9:47:fa:32:87:6e:82:21:84: 52:4e:fc:ea:73:3f:5c:7c:4c:52:86:7e:cb:40:ed: 79:91:b3:b7:ee:b4:d8:63:62:47:13:e1:52:e8:ad: 64:ac:e9:18:77:88:a1:2d:fd:e3:01:53:79:0c:d7: 23:c9:7a:6d:8c:fe:0b:5b:1e:fa:e0:07:8a:0f:71: 21:fc:d8:e9:4f:9e:5d:40:0b:88:ce:ab:4f:74:da: a4:a4:f2:3b:e1:2d:ed:07:a5:8d:9b:f7:8c:c4:d0: 6c:b5:28:27:37:82:9f:f8:61:4f:03:c0:cd:87:0e: bd:87:53:2b:bc:4a:08:f2:1d:f4:e1:84:f2:ab:0a: c4:bd:ac:84:68:b2:bd:1a:93:ba:3c:af:e8:23:54: fe:61:e4:11:54:34:2a:23:d2:31:cd:a2:d0:da:b6: 2c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:80:86:24:E1:DE:FF:B2:D6:E6:DA:01:3E:A9:86:0A:76:8F:8D:00 X509v3 Authority Key Identifier: keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:50:a6:f6:71:8e:cb:bc:f9:01:64:44:d1:e7:c5:8b:7b:a3: 2d:e4:56:df:00:58:a6:ab:4e:0b:00:22:de:1c:d6:fe:23:e1: 14:3d:e7:f0:60:21:f5:b1:f0:e2:f7:db:7d:cc:42:32:4c:3f: c9:40:ae:b9:7a:b8:bc:f0:13:15:4c:63:bb:24:a9:6c:90:04: 44:e5:5b:df:d0:8c:fc:84:ca:b2:ea:5c:ef:f3:48:1f:36:7e: 98:3a:e0:c5:64:83:77:14:c9:1e:40:1b:ea:0c:10:a4:6c:57: b0:1e:f1:70:18:d1:76:29:0b:3b:e6:2b:58:85:28:6c:d9:3b: 0a:d9:90:2b:c3:76:bd:19:27:ee:98:80:b8:ed:90:8c:2a:83: af:6c:fc:34:32:10:9b:a2:2c:fb:18:b0:da:40:5d:59:bb:b7: c2:6a:3b:45:c5:41:a6:9f:3e:f1:bd:b7:c8:41:74:5f:56:ef: 75:3d:1a:72:ad:01:49:a7:15:4d:ce:b7:6e:92:16:55:0b:b2: 03:28:ea:5e:ac:eb:00:3e:53:f1:cb:77:e7:c5:a3:9b:f4:f7: 97:3b:fd:31:84:c4:90:6e:ec:1e:4d:b3:4b:46:9f:a7:f0:6c: 1d:3f:45:1a:0a:f0:b9:07:f7:ea:59:ea:d1:83:a3:ad:85:7d: d3:e9:be:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULqfawiIjqrTmBVzKbd5N0fyikEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1OTkwNUMzRkNBNUJEQTM0RDcxMDFCMDg4RDgwNDUx RDAyNkM0NzAeFw0yNTEwMTkxNjE1MjFaFw0yNTEwMjAxODM3MjFaMDMxMTAvBgNV BAMTKDNEODA4NjI0RTFERUZGQjJENkU2REEwMTNFQTk4NjBBNzY4RjhEMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRgWbREQEscnzjF1kNbqJzwhHh cu7NgjSbztPFk5N52fFpcO5gHTw1jJNZMqajQ4AGdmX/pvu2TePagYTDmWrf5G4T FlI3fjyQNLeGos8cusGcBWyZgVZEng1pTuImx7lH+jKHboIhhFJO/OpzP1x8TFKG fstA7XmRs7futNhjYkcT4VLorWSs6Rh3iKEt/eMBU3kM1yPJem2M/gtbHvrgB4oP cSH82OlPnl1AC4jOq0902qSk8jvhLe0HpY2b94zE0Gy1KCc3gp/4YU8DwM2HDr2H Uyu8SgjyHfThhPKrCsS9rIRosr0ak7o8r+gjVP5h5BFUNCoj0jHNotDatizlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPYCGJOHe/7LW5toBPqmGCnaPjQAwHwYDVR0j BBgwFoAULVmQXD/KW9o01xAbCI2ARR0CbEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5 QUgvMS8yRDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENTk5MDVDM0ZDQTVCREEz NEQ3MTAxQjA4OEQ4MDQ1MUQwMjZDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5QUgvMS8y RDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS1Cm9nGOy7z5AWRE0efFi3ujLeRW3wBYpqtOCwAi3hzW/iPhFD3n8GAh9bHw 4vfbfcxCMkw/yUCuuXq4vPATFUxjuySpbJAEROVb39CM/ITKsupc7/NIHzZ+mDrg xWSDdxTJHkAb6gwQpGxXsB7xcBjRdikLO+YrWIUobNk7CtmQK8N2vRkn7piAuO2Q jCqDr2z8NDIQm6Is+xiw2kBdWbu3wmo7RcVBpp8+8b23yEF0X1bvdT0acq0BSacV Tc63bpIWVQuyAyjqXqzrAD5T8ct358Wjm/T3lzv9MYTEkG7sHk2zS0afp/BsHT9F GgrwuQf36lnq0YOjrYV90+m+GA== -----END CERTIFICATE-----Generated at Mon Oct 20 12:06:31 2025 by rpki-client