$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft File: D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json) Hash identifier: Dp1PoIb6rc6sUWORiJhpkZO9SOrxHcmSfRsevYYX+kY= Subject key identifier: 70:38:7E:A1:BB:0A:00:3E:76:9C:6F:A1:70:B4:19:F2:84:0A:A2:A8 Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 Certificate issuer: /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Certificate serial: 54463BBB957D94794B67DE095CFA0008C96BC90E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft Manifest number: 02F4 Signing time: Sun 19 Oct 2025 20:39:07 +0000 Manifest this update: Sun 19 Oct 2025 20:34:07 +0000 Manifest next update: Mon 20 Oct 2025 22:41:07 +0000 Files and hashes: 1: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: ho48ISuPR0uEAOaHy02thdOx5YBk6wW5Dj0NocQ9+s4=) 2: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: FE+7zbwcRwFNCNZQz6JTL4PFhynEDJA2jUUaWQGOwlw=) 3: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: 01pAW4QCHBpNqYLYxhHBFF+Hirycj7LT0087UnT0sog=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 22:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:46:3b:bb:95:7d:94:79:4b:67:de:09:5c:fa:00:08:c9:6b:c9:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Validity Not Before: Oct 19 20:34:07 2025 GMT Not After : Oct 20 22:41:07 2025 GMT Subject: CN=70387EA1BB0A003E769C6FA170B419F2840AA2A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b8:18:78:38:f4:17:ce:cc:69:dc:3d:51:1d: 72:e8:bd:2e:7d:ac:bf:5a:f5:16:7e:5a:de:2e:34: df:88:d9:e1:d7:77:25:c9:bf:6e:e0:24:b1:2c:ba: 3b:19:fa:b2:e5:7b:96:f7:f4:db:95:29:b5:f7:52: cb:f1:77:fa:7e:bb:31:ff:c9:33:d6:50:aa:74:98: 94:63:e0:1a:e1:4e:a2:43:b2:15:25:29:c0:4a:12: 43:b6:6e:dd:a1:1a:7a:c0:ec:01:f2:99:12:e7:9f: 45:a8:7c:d9:84:ce:58:8d:98:82:5b:a1:e6:42:05: 04:1c:c2:59:8b:57:f7:52:df:6e:51:5e:d8:0a:bf: 0d:cb:b4:fa:aa:5e:b1:ec:db:8f:f0:f6:54:f1:63: 73:62:49:25:38:5d:81:2e:cf:a9:25:63:f1:2a:56: 2a:30:9c:d7:6c:7f:9f:93:c3:9e:5f:fb:ba:1b:2e: 68:90:cb:f0:6b:51:70:86:ea:39:17:8e:63:2b:50: 8b:c7:b1:fc:26:5a:01:dd:74:94:2a:a2:b8:65:31: 55:11:01:53:24:6c:3e:5c:c0:aa:6d:3a:28:05:c7: 0d:70:a5:64:40:9e:0b:f6:e7:38:d2:59:ef:17:d1: 9f:9b:b8:0c:93:24:7b:0d:11:65:fd:d2:37:06:f1: 85:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:38:7E:A1:BB:0A:00:3E:76:9C:6F:A1:70:B4:19:F2:84:0A:A2:A8 X509v3 Authority Key Identifier: keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:3a:d0:fe:14:82:53:80:06:be:d1:1c:de:b3:86:58:89:15: 49:fd:ab:ac:4b:ff:93:ea:7d:f0:66:0f:fd:85:82:7a:96:73: 03:ae:52:6b:aa:e1:82:a7:53:a3:ff:94:c6:62:0c:a9:b4:9f: 1c:dd:ff:42:7e:7e:c6:65:f5:7b:a7:f3:0f:ee:9f:b3:44:45: ce:04:21:6e:18:54:41:a6:62:6d:1a:10:c1:44:4d:87:ca:34: 95:4e:8a:81:91:27:3d:c5:54:6c:45:f9:df:41:63:ad:1d:5b: 8b:51:81:58:f5:10:cb:81:36:08:82:27:33:85:04:06:c5:c8: a9:c8:2c:fd:9d:ce:86:44:cb:3f:e2:65:13:a6:15:56:ea:ed: d7:1c:00:96:6a:6b:f5:ae:1e:3e:e2:fd:2e:f1:d2:97:f6:79: e9:35:ca:a5:e4:c3:32:6c:6c:b9:7d:e9:c8:b7:c4:a2:8a:73: e5:e5:f3:3c:74:41:c7:4f:be:0e:81:4e:e7:57:b5:3d:8f:0c: 47:e4:a6:ec:f2:23:b9:79:31:74:92:c0:e7:4e:e6:ed:33:e4: ef:d6:a5:47:a6:02:dd:e6:a6:e3:d9:04:c3:12:15:b9:fc:05: ed:21:37:49:1a:46:fd:d7:1d:3f:e9:ed:12:8d:12:ae:50:77: ec:70:01:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVEY7u5V9lHlLZ94JXPoACMlryQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUzOUNGOTI5QjZBNkEyQjk1OTZCOTIyRjQxN0ZBRDkx Nzc5OUVENzAeFw0yNTEwMTkyMDM0MDdaFw0yNTEwMjAyMjQxMDdaMDMxMTAvBgNV BAMTKDcwMzg3RUExQkIwQTAwM0U3NjlDNkZBMTcwQjQxOUYyODQwQUEyQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwuBh4OPQXzsxp3D1RHXLovS59 rL9a9RZ+Wt4uNN+I2eHXdyXJv27gJLEsujsZ+rLle5b39NuVKbX3Usvxd/p+uzH/ yTPWUKp0mJRj4BrhTqJDshUlKcBKEkO2bt2hGnrA7AHymRLnn0WofNmEzliNmIJb oeZCBQQcwlmLV/dS325RXtgKvw3LtPqqXrHs24/w9lTxY3NiSSU4XYEuz6klY/Eq ViownNdsf5+Tw55f+7obLmiQy/BrUXCG6jkXjmMrUIvHsfwmWgHddJQqorhlMVUR AVMkbD5cwKptOigFxw1wpWRAngv25zjSWe8X0Z+buAyTJHsNEWX90jcG8YWjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcDh+obsKAD52nG+hcLQZ8oQKoqgwHwYDVR0j BBgwFoAU1TnPkptqaiuVlrki9Bf62Rd5ntcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNT M1QvMS9ENTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MzlDRjkyOUI2QTZBMkI5 NTk2QjkyMkY0MTdGQUQ5MTc3OTlFRDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNTM1QvMS9E NTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAzrQ/hSCU4AGvtEc3rOGWIkVSf2rrEv/k+p98GYP/YWCepZzA65Sa6rhgqdT o/+UxmIMqbSfHN3/Qn5+xmX1e6fzD+6fs0RFzgQhbhhUQaZibRoQwURNh8o0lU6K gZEnPcVUbEX530FjrR1bi1GBWPUQy4E2CIInM4UEBsXIqcgs/Z3OhkTLP+JlE6YV Vurt1xwAlmpr9a4ePuL9LvHSl/Z56TXKpeTDMmxsuX3pyLfEoopz5eXzPHRBx0++ DoFO51e1PY8MR+Sm7PIjuXkxdJLA507m7TPk79alR6YC3eam49kEwxIVufwF7SE3 SRpG/dcdP+ntEo0SrlB37HABaQ== -----END CERTIFICATE-----Generated at Mon Oct 20 12:45:06 2025 by rpki-client