$ rpki-client -vvf rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft File: DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft (raw, json) Hash identifier: Nt85XLlxm/7wuEfPRYSLgjzf3Q9X3ypy9zvAmaFAHMw= Subject key identifier: 41:B5:D9:1B:CC:73:B7:A8:75:97:E1:D8:FF:D7:FD:25:16:49:83:FD Authority key identifier: DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E Certificate issuer: /CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E Certificate serial: 73554B3294C1A7DEAA8AC393142BB6DA4F0D341D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer Subject info access: rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft Manifest number: D5 Signing time: Mon 20 Oct 2025 09:48:09 +0000 Manifest this update: Mon 20 Oct 2025 09:43:09 +0000 Manifest next update: Tue 21 Oct 2025 11:54:09 +0000 Files and hashes: 1: DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl (hash: y5F3VMEJcGZQJ9LULI11hyKIOh/O1gcoGhXbIXwRZMo=) 2: 3137372e38352e3137322e302f32322d3234203d3e203532373436.roa (hash: KCrFqTQzO17kQlL8SOLSVWkU5WyJdtvB7e1wLs8BQYA=) 3: 323830343a316535343a3a2f33322d3536203d3e203532373436.roa (hash: ADTcvk7C0x33Y2RYKuM0CdXcsQC2etHZuMH6cQfkxbQ=) 4: 3133312e3232312e3138302e302f32322d3234203d3e203532373436.roa (hash: 3PsUICllrnsF07Zi7kmN3vDa9q1Ef/q577Ua+T+jmVg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:55:4b:32:94:c1:a7:de:aa:8a:c3:93:14:2b:b6:da:4f:0d:34:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E Validity Not Before: Oct 20 09:43:09 2025 GMT Not After : Oct 21 11:54:09 2025 GMT Subject: CN=41B5D91BCC73B7A87597E1D8FFD7FD25164983FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:6f:0a:a2:e0:7e:46:58:30:50:50:a4:42: ab:40:16:4d:cc:e0:e4:d7:d9:72:49:a1:5d:91:34: d7:59:a0:53:9b:eb:24:85:15:ee:93:8e:bb:9f:f6: a7:a3:52:bf:77:2e:5d:c0:60:1b:9d:66:39:61:8a: f5:2e:ff:21:5a:14:fd:b0:bc:39:bf:92:56:37:24: 43:60:4d:59:b1:fe:39:3c:5d:15:a8:e1:b5:f7:ea: 5f:b4:d1:a1:0e:a8:40:50:c6:fe:74:a2:bd:79:d1: 46:d1:cc:a3:9d:35:1f:a8:68:4d:f4:7f:e4:1b:76: 45:e9:d1:c0:8c:44:e9:6b:19:50:98:7f:99:6d:9d: 29:ab:a1:5a:cb:38:3a:63:80:64:34:c6:28:7b:2d: d6:7f:1d:a4:9a:91:0a:4b:8f:69:6c:db:5f:47:e5: 53:cc:54:55:5c:85:3c:80:58:34:72:7b:18:2d:2d: a5:19:45:dc:09:6b:0d:3a:cc:9d:cd:60:d1:c3:95: c5:95:7c:a3:73:4e:d6:d2:d6:98:1f:10:e1:ef:6c: a7:ad:d0:b1:3b:ac:2d:6f:c6:bd:98:44:dd:1e:60: 72:08:f8:e9:e1:c9:4b:4d:c1:0c:81:b0:e0:d0:1a: 99:eb:02:3e:49:85:d7:81:bc:db:c8:06:38:6f:78: 76:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B5:D9:1B:CC:73:B7:A8:75:97:E1:D8:FF:D7:FD:25:16:49:83:FD X509v3 Authority Key Identifier: keyid:DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b9:c6:f2:81:1d:57:4a:73:0f:8e:ce:a1:03:b5:f7:fb:f2: bb:ba:95:e0:57:2e:85:24:17:94:cd:94:0a:f3:53:63:d3:99: bc:86:b0:da:7e:7b:09:8c:31:e7:35:2c:da:a1:df:59:cc:3b: 56:7d:9f:ff:3e:55:4a:ee:e4:3d:56:50:49:1b:05:bc:b1:5c: fd:16:a8:d2:6d:1b:97:f9:5f:ed:51:74:4d:e8:77:33:41:c0: 90:37:61:d1:1e:2f:d1:0f:23:39:96:0f:5a:9e:19:f6:51:a4: f9:d8:fd:d7:38:3e:17:92:1b:0d:79:8a:0e:94:dd:94:07:db: de:09:4a:45:70:34:24:f8:59:32:fb:66:22:34:f4:b6:13:f5: c5:c1:c7:c7:1e:af:51:c4:de:dc:02:cc:17:fd:c7:2d:68:51: 9f:fd:74:63:1d:18:d5:ee:ae:3f:4e:4e:d9:c1:8a:74:68:bc: 40:74:12:04:53:1a:28:83:07:65:92:72:0b:6e:0e:c5:0a:9a: e0:4b:86:9f:a0:72:65:72:bf:b8:44:a3:c7:80:6e:5e:0b:9e: 67:67:1a:52:26:b8:7c:83:21:c1:1c:1a:25:69:e5:94:2c:0b: 1c:31:45:db:8f:f2:3e:ff:0e:0e:c7:a0:17:fd:52:4d:53:df: 9c:e2:ce:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc1VLMpTBp96qisOTFCu22k8NNB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCMUYzRkE2RjQyMERGMDE5MDU1MkZDMDk3Mjg1OUFG NDVGMzY4RTAeFw0yNTEwMjAwOTQzMDlaFw0yNTEwMjExMTU0MDlaMDMxMTAvBgNV BAMTKDQxQjVEOTFCQ0M3M0I3QTg3NTk3RTFEOEZGRDdGRDI1MTY0OTgzRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15G8KouB+RlgwUFCkQqtAFk3M 4OTX2XJJoV2RNNdZoFOb6ySFFe6Tjruf9qejUr93Ll3AYBudZjlhivUu/yFaFP2w vDm/klY3JENgTVmx/jk8XRWo4bX36l+00aEOqEBQxv50or150UbRzKOdNR+oaE30 f+QbdkXp0cCMROlrGVCYf5ltnSmroVrLODpjgGQ0xih7LdZ/HaSakQpLj2ls219H 5VPMVFVchTyAWDRyexgtLaUZRdwJaw06zJ3NYNHDlcWVfKNzTtbS1pgfEOHvbKet 0LE7rC1vxr2YRN0eYHII+OnhyUtNwQyBsODQGpnrAj5JhdeBvNvIBjhveHZbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQbXZG8xzt6h1l+HY/9f9JRZJg/0wHwYDVR0j BBgwFoAU37Hz+m9CDfAZBVL8CXKFmvRfNo4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRW55ZGhwQlZta2E0V05DZFF3aGtmbVJudXFFNk1GbTV4MnFZM3Zwb3Nv algvMC9ERkIxRjNGQTZGNDIwREYwMTkwNTUyRkMwOTcyODU5QUY0NUYzNjhFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQjFGM0ZBNkY0MjBERjAx OTA1NTJGQzA5NzI4NTlBRjQ1RjM2OEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RW55ZGhwQlZta2E0V05DZFF3aGtmbVJudXFFNk1GbTV4MnFZM3Zwb3NvalgvMC9E RkIxRjNGQTZGNDIwREYwMTkwNTUyRkMwOTcyODU5QUY0NUYzNjhFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYbnG8oEdV0pzD47OoQO19/vyu7qV4FcuhSQXlM2UCvNTY9OZvIaw2n57CYwx 5zUs2qHfWcw7Vn2f/z5VSu7kPVZQSRsFvLFc/Rao0m0bl/lf7VF0Teh3M0HAkDdh 0R4v0Q8jOZYPWp4Z9lGk+dj91zg+F5IbDXmKDpTdlAfb3glKRXA0JPhZMvtmIjT0 thP1xcHHxx6vUcTe3ALMF/3HLWhRn/10Yx0Y1e6uP05O2cGKdGi8QHQSBFMaKIMH ZZJyC24OxQqa4EuGn6ByZXK/uESjx4BuXgueZ2caUia4fIMhwRwaJWnllCwLHDFF 24/yPv8ODsegF/1STVPfnOLOhA== -----END CERTIFICATE-----Generated at Mon Oct 20 12:44:56 2025 by rpki-client