$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft File: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft (raw, json) Hash identifier: sGDA5D68sTUjl7Aus1WVYT7XPpWubK6CVBokI32HHHc= Subject key identifier: 16:21:95:59:22:96:D6:84:20:DE:E5:73:43:25:C3:CA:1D:D7:EC:2E Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA Certificate issuer: /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Certificate serial: 47949DE7CBDACF982AC0584AFF5FB4FA224B44E6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft Manifest number: 02E2 Signing time: Mon 20 Oct 2025 22:55:32 +0000 Manifest this update: Mon 20 Oct 2025 22:50:32 +0000 Manifest next update: Wed 22 Oct 2025 01:52:32 +0000 Files and hashes: 1: 3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (hash: sPenw571n896sllNaEQg92EoBX7mLS0ivDvfDaPaky8=) 2: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl (hash: dbcAWKN58hfCmeQZANd3hdkQQOmgGmXsSONxumO+GXg=) 3: 3138372e3130392e38302e302f32302d3234203d3e203533313339.roa (hash: IQvjHctOgbHfUkTO0U34ErrEutSrCbjo/UK2hA9NLGA=) 4: 323830343a333164343a3a2f33322d3438203d3e203533313339.roa (hash: Tny32eTDORgq/MtVMRE6pvmeZrpwE0nT6BNCMfyIuNM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Oct 2025 00:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:94:9d:e7:cb:da:cf:98:2a:c0:58:4a:ff:5f:b4:fa:22:4b:44:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Validity Not Before: Oct 20 22:50:32 2025 GMT Not After : Oct 22 01:52:32 2025 GMT Subject: CN=162195592296D68420DEE5734325C3CA1DD7EC2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fc:8d:2a:1f:f9:6f:f0:cd:c2:49:38:5b:6d: 1c:d0:c2:2b:75:c6:f4:71:36:7d:ce:d3:7e:4e:22: 91:51:fe:0b:68:7b:09:87:0c:e4:8c:2d:e2:fb:19: 3c:75:38:63:a1:dc:d9:99:0a:fb:05:a2:ad:6e:7e: 46:01:ac:01:12:09:8d:76:d8:2e:05:36:69:dc:b6: 33:cc:3e:5f:d1:bf:19:15:18:3a:a8:8c:69:2f:10: 7b:c4:b9:da:71:6b:12:65:92:d2:56:45:58:ba:de: 02:65:bf:94:b7:b5:b7:29:ff:4e:bb:2d:31:b0:68: 70:51:b2:80:66:bb:ce:05:54:aa:64:a9:40:d2:ae: c5:40:72:fd:c0:76:ec:1b:0a:19:94:39:6d:c7:ff: 9b:2e:46:6d:af:a6:5b:ee:37:e7:44:45:70:f9:12: af:53:75:42:10:5a:1b:39:90:60:87:38:92:f3:8d: 88:e2:e8:d7:80:40:7e:67:c8:1c:7f:5b:7a:c6:7e: 45:22:c9:91:29:6c:7a:bd:7e:38:d7:07:57:6f:9f: e4:a8:13:7e:86:c7:5a:55:ce:ea:5d:6e:be:db:99: e2:42:98:34:ff:63:c6:c5:ef:50:da:3a:5a:7d:24: fc:2d:25:d2:f2:ae:12:88:55:b8:88:c9:75:99:f1: 02:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:21:95:59:22:96:D6:84:20:DE:E5:73:43:25:C3:CA:1D:D7:EC:2E X509v3 Authority Key Identifier: keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d6:9d:d7:36:7a:84:8d:29:51:61:57:c9:c5:ed:f8:ab:49: 68:ff:f0:20:e0:32:fd:91:eb:ca:8c:37:1f:ca:52:af:01:e5: 47:ed:8b:dd:93:ba:1a:e6:40:ff:17:1e:7b:44:c9:2a:8a:09: 91:dd:5e:45:09:47:5d:2e:cb:ae:d6:bb:13:9c:b0:df:99:36: 5e:9c:26:a5:6c:a8:e3:b1:f5:a1:08:fa:8c:16:a9:08:f8:de: 98:a8:c9:cf:86:ce:51:54:99:10:f0:e9:9a:84:0d:46:c6:7d: d1:34:ad:77:49:6a:9e:3a:d0:8c:97:3d:64:5f:12:a1:64:f8: 2e:0e:1d:1d:a7:8b:67:90:75:c8:61:40:71:16:9f:69:cf:ab: 37:6f:e1:4a:18:50:80:73:b0:6a:b2:3d:2a:09:ab:e2:28:81: 3a:0f:66:0c:6a:a3:e8:e0:b5:eb:0b:02:bd:e4:07:2f:69:c8: 38:ff:1c:61:e0:80:ab:02:d3:1e:d0:e9:e7:9a:39:8f:51:fa: bd:c1:a4:4e:ad:db:97:eb:84:79:23:9d:27:55:da:44:52:3a: 2d:36:8e:8e:0c:84:06:33:0b:fd:29:c2:05:bf:3a:92:e1:17: 86:04:ef:8b:d5:50:c5:e6:0d:e4:d5:f0:b0:6a:34:e7:f9:cf: 80:c0:28:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR5Sd58vaz5gqwFhK/1+0+iJLROYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNERGRjE5ODIyQzVCMjdDN0JDQzE2QkZEOEJFMkEz ODRGODlBQTAeFw0yNTEwMjAyMjUwMzJaFw0yNTEwMjIwMTUyMzJaMDMxMTAvBgNV BAMTKDE2MjE5NTU5MjI5NkQ2ODQyMERFRTU3MzQzMjVDM0NBMUREN0VDMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCC/I0qH/lv8M3CSThbbRzQwit1 xvRxNn3O035OIpFR/gtoewmHDOSMLeL7GTx1OGOh3NmZCvsFoq1ufkYBrAESCY12 2C4FNmnctjPMPl/RvxkVGDqojGkvEHvEudpxaxJlktJWRVi63gJlv5S3tbcp/067 LTGwaHBRsoBmu84FVKpkqUDSrsVAcv3AduwbChmUOW3H/5suRm2vplvuN+dERXD5 Eq9TdUIQWhs5kGCHOJLzjYji6NeAQH5nyBx/W3rGfkUiyZEpbHq9fjjXB1dvn+So E36Gx1pVzupdbr7bmeJCmDT/Y8bF71DaOlp9JPwtJdLyrhKIVbiIyXWZ8QLrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFiGVWSKW1oQg3uVzQyXDyh3X7C4wHwYDVR0j BBgwFoAU0iTf8ZgixbJ8e8wWv9i+KjhPiaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlW QXYvMS9EMjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyMjRERkYxOTgyMkM1QjI3 QzdCQ0MxNkJGRDhCRTJBMzg0Rjg5QUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlWQXYvMS9E MjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe9ad1zZ6hI0pUWFXycXt+KtJaP/wIOAy/ZHryow3H8pSrwHlR+2L3ZO6GuZA /xcee0TJKooJkd1eRQlHXS7Lrta7E5yw35k2XpwmpWyo47H1oQj6jBapCPjemKjJ z4bOUVSZEPDpmoQNRsZ90TStd0lqnjrQjJc9ZF8SoWT4Lg4dHaeLZ5B1yGFAcRaf ac+rN2/hShhQgHOwarI9Kgmr4iiBOg9mDGqj6OC16wsCveQHL2nIOP8cYeCAqwLT HtDp55o5j1H6vcGkTq3bl+uEeSOdJ1XaRFI6LTaOjgyEBjML/SnCBb86kuEXhgTv i9VQxeYN5NXwsGo05/nPgMAoVQ== -----END CERTIFICATE-----Generated at Tue Oct 21 02:26:10 2025 by rpki-client